last executing test programs: 21.837920906s ago: executing program 0 (id=1): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000300)="2e34503849e04b72e0cc4514aadc0b92c1f50e15c9c1367bc376a367690b2481ef4dd0bc04f290387ee716fa9c71b96694515089efd0e19691", 0x39}], 0x1) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r1, 0x28, 0x6, &(0x7f0000000080)={0x0, 0xea60}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket(0x2c, 0x3, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9c1288ee7b80141, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$isdn(0x22, 0x2, 0x10) close(r3) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xb, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) socket$inet6_tcp(0xa, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) listen(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x3, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_stream(r1, 0x0, 0x0) connect$vsock_stream(r1, 0x0, 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @host}, 0x10) socket(0x11, 0x800000003, 0x0) 21.588370645s ago: executing program 0 (id=6): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="5606598260648024b529e95af750dfdcc32d601a4aad5a4c866fa59b4cf6e7bbe55e701cf6d1041d18ec74f00407e499f4e04450cf12d4079b7ed451e042945679161b401e559f9425d39e196b924b0b0805f17415678157795f23399cb5d3927b79770c0dd0eb44c26fd40ac0ec8f51f9b6d132fee4eb82bc31f763", @ANYBLOB="c222ea9987e20cf9982a69db"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000300)=0x1a) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000000240)=0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 20.609357434s ago: executing program 3 (id=4): syz_open_dev$vim2m(0x0, 0x7, 0x2) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = memfd_create(&(0x7f0000002840)='\x1aj~\x97\xc1\x00\x00\x00\xff\x00\x00\x00\x7f\xef_\xd3\xdc=f.z=\x80=8\x1f\x14\xa2&\xbam\v\xa9\f\xf5\x17t\xc9\x80\xf4\xa1\xeb\x907L\x7f \xe3\x19\xcb\xbf\xfc\x00\x00\x00\x00\x15\x00\x00\x00\x00\x00\x00\x00\x00h}\x00\x135V\xd9\xe0\xb0\x17\x01g\xff?\xc8\xfb3\x93\xbc\xcf\xf2\x95\xbeYd,\xb3\x17\xb0L\xe841(\"\xc2K\x11\x81\xef.m\xf7@\xb1\xf9\xee\xce\\\xd9\x03\nHNzF``\xa0\xc4}P\xb3\b\x0e\xcd\x86\'qb\x9a\xce\"\xfb\xd6\x91\'\x9b~\xcd\xfd\xaa\n\xea\x8dC\x9aQ\n\xce\"\x9cN\xed0\xf0\xc2x\x93h\xe8\\\x18\xd26\xe7\x8d4\x06\xf0\xe3M\xe5\x91\x0f\x85\x97gla\x06\xe1\xba\x1a\x1d \n\fr\xae\x12M\xcb6\xe0\x15\xd5d\x16\xc3\xdf\xa2\x04wB\xd0\x18\xa4\x17|\vH\xf5\xb0\xb5\xc7\x9f`Fz\xa3x\x99\xe17\xd2vAW\xe5\x18)9\xba\xa68A\xf8y\xe6\xac\xda\xc7u\xa9\x00{:\x01\xee,\a:\x06\xad{\x80\xfd\xc7\"\x95\x0f\xe3\x86\x19\xc3\xd2\xf7\x18\xf8\xed\x8b\"\xd8\x8f\xde`\xb0D\xfd\x84\xa3\xd7\xf3R\x8d\x88\xdaJ\xb0\xf8^\xd4>\xc7e\xab\x8f+\xda\x9b\xae\xf2\xca\xb9\xde\xb5\x8f\xdb\xba}\x7f\xf8\xe5i,m\b\xf0\xc7\xe9R\x9cY$\xcb\x00/!Z\xeb\x9bE\xf2\xb9\xcc\xf0\x9c\x02\xfc\x9c\x91q\xba|\x80n\x1f\xffG\xc3\x13\xe7v\xa7\x95md\x0f\xa5\x06\v^n\x84d5o\x02\xb3.\x8dc\x18\xe0\xc2\x9b\xe1D\x0fB] \xdfJGr\xdbc,\xef82%\x97\xe4;u\xa9\xe5\xef*n\xf613\x17\x80[\x90]\xef\xc1\x8e\rD\xd2\xe0\x8c\xf2\x00\x00\x00\x00\x00\x00\x00Gs\xab\x1e\xa13\x93\x8d\x04U\xf5\xb8Th9s3\xc9\xbf\xe5My$\x99.\xf0\xd5\xc8\xb1\xfc4\xe7\x83z\x11a\xb7\xebY\x1d\xcd\x81N\xed\xbd\xa5\xce\xa0f\xe5q2\xbc#w\xe4_\x8a-\xad\xc2/_\xe6\nE\xeb\x9c\x96\xf4`\xa2\x06\xe0^\xfb\x99\xbb}\xfb\x052_\x83*B\xf1\xf0\x95\xd2K\xd6\xe5\xb1\x1a\x02,\xbe\xf5\xd0\xd4\xa1A\xf3!\n\xc6b\xeb\x92\xea\xd8\xe1$\xbbUO\x1fS\x02\x9e\xa7|i:\xb1\xf60\xf6M\xe6,\x81=F\xa1\xca\x06\x0e\x14\x89/\xa7\"\x17-h9\x176\x9d\x04\x1el\xdcp\x89\x1b \x93f\x9a\x10\xd9\xa2Y\b\xfalA\xe1\x1bI\xb9\xf8\xa0\xb0\xc2\x04\xedO\n\vj&\xb5\x04\xc3{Yt\xf4rS^\x0e$\xe9\x05\xcd\x9b\x84\x14`\xed\x9e\xbbh\x81h\xf2\xe7\xe2DO\x1a\xe9\xc1\x1cu\xa5\xbd\x90\xbb\x03\xd5\x00\xf2\x83T\xe4\x0eF\x7f\x85\xb5\xe9CJ0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)={0x64, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @random, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x10, 0x4c, [0x0, 0xfac13, 0xfac11]}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x3}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000101010100000000"], 0x44}}, 0x0) 19.878043744s ago: executing program 1 (id=2): sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = getpgrp(0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000f40)=ANY=[@ANYBLOB="7c03f5070000d347f52432a7f16d", @ANYRES16=r3, @ANYBLOB="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"], 0x37c}, 0x1, 0x0, 0x0, 0x40}, 0x40) ptrace(0x8, r2) sendmmsg$inet6(r1, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)="af", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}], 0x1}}], 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 19.828498381s ago: executing program 3 (id=8): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$CEC_DQEVENT(r3, 0x40046109, &(0x7f0000000240)) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = accept$alg(r5, 0x0, 0x0) accept4(r6, &(0x7f0000000640)=@qipcrtr, 0x0, 0x0) bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @multicast1}}, 0x24) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x23, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r10, @ANYBLOB="080026008f0900000800b70000000000"], 0x2c}}, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x140, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, {0x0, 0x6}, {0x7120, 0x7}, {}, {}, 0x0, 0x100, 0x6, 0x0, 0x0, 0x40, 0xfffffffc, 0x0, 0x2, 0x20, 0x0, 0x32f, 0x1, 0x0, 0x2, 0x3}) 19.426250982s ago: executing program 3 (id=10): r0 = syz_open_dev$vivid(&(0x7f0000000100), 0x1, 0x2) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) syz_usb_connect(0x0, 0x24, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8983, &(0x7f00000000c0)={0x7, 'ipvlan1\x00', {0xc}, 0x5}) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1001}, 0x4) sendmmsg(r2, &(0x7f0000007fc0), 0x2d, 0x0) r4 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) clock_gettime(0xa00, 0x0) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000080)={0xf0f03c, 0x4}) ioctl$VIDIOC_TRY_ENCODER_CMD(r6, 0xc028564e, &(0x7f0000000180)={0x1, 0x1, [0x0, 0x8, 0x9, 0x6, 0x1000, 0x5, 0xc, 0xfffffff8]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000017c0)=@newtfilter={0x70, 0x2c, 0xd27, 0x1000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x44, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_ACT={0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x4, 0x2}}}}]}]}}]}, 0x70}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) sendto$packet(r8, &(0x7f00000002c0)="05030500d3fc030000004788031c09101128", 0x12, 0x4, &(0x7f0000000140)={0x11, 0x6558, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}}, 0x0) 19.352697788s ago: executing program 1 (id=11): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, r1, 0x1, 0x0, 0x0, {0x7}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 18.987621604s ago: executing program 1 (id=12): r0 = openat$tcp_congestion(0xffffff9c, 0x0, 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000100)='reno\x00', 0x5) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup=r2, r1, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000000)=0xa, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000007000000000000009500000000000000c5ae7db0570afb0f9ff6befec3a38ef508c95029e9cf6b3957200ce013625ce978597ef87aec1fcff0bce4aceaff0124ac7f6c4a6fc267022276f1c190996b6bbfe3"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r4, &(0x7f0000001240)=[{&(0x7f0000000040)=""/18, 0x12}], 0x1, 0x0, 0x0) write$tcp_congestion(r0, &(0x7f0000000300)='reno\x00', 0x5) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b", @ANYRES8], 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x101, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r6, &(0x7f0000000500)=""/4096, 0x1000) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="00000800010000000000140000004500401600000000000190780a010100ac1414883b00907800000000450000180079a3e678a800000000000000ac1414aa7f000001"], 0xfdef) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup=r2, r1, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) eventfd(0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) sendto$packet(r9, &(0x7f00000023c0)="1c396bf298df67493a8ce0c27e42c5b14ed8e2261448826e38ed974953e7c4180e", 0x21, 0x0, 0x0, 0x0) write$tcp_congestion(r0, &(0x7f0000000380)='reno\x00', 0x5) bpf$PROG_BIND_MAP(0x23, &(0x7f0000001540)={r3}, 0xc) 18.17967297s ago: executing program 3 (id=14): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r1, 0x0) ioctl$VHOST_VDPA_GET_VQS_COUNT(r1, 0x8004af80, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800eff942b9a3fb533747ab015c910000150000012abd7000fcdbdf250a8084fe", @ANYRES32=0x0], 0x18}}, 0x40800) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000000000090", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000c80)=@newqdisc={0x30, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x68142, 0x0) r9 = open(&(0x7f0000007f80)='./bus\x00', 0x145142, 0x0) ftruncate(r9, 0x2007ffb) read$FUSE(r8, &(0x7f00000007c0)={0x2020}, 0x2020) ftruncate(r9, 0x8) sendfile(r8, r9, 0x0, 0x1000000201005) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x49c89db0, '\x00', r6, 0xffffffffffffffff, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x3, 0xc, &(0x7f0000000dc0)=@framed={{0x18, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {0x7, 0x0, 0x2, 0x3, 0x0, 0x0, 0x90ffffff}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) io_setup(0x2, &(0x7f0000000640)=0x0) io_submit(r11, 0x39, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x7, 0x1, 0x0, r2, &(0x7f0000000180), 0xfd8a}, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)="577c0db4302ad396a90a571acd8b176eef818983c7229dc07388819ec1d5580a061b62634a3afa04121ae69813bef26f33de5e85d8f7737aa5356452d86a592d0e21af8bc62c55e427fc9b4bc101aafb154d2373555ef156d4d049", 0x5b, 0xa, 0x0, 0x1}]) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000340)={0x0, 0x1}, 0x8) memfd_secret(0x0) r12 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r12, 0xc0505350, &(0x7f0000000040)={{0xf6, 0x3c}, {0x7, 0xfd}, 0x8}) 17.314801048s ago: executing program 0 (id=16): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028005002e000000000005002500e3ffffff"], 0x44}}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 15.953976662s ago: executing program 0 (id=18): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x251, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x5, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0xfd}}}}}]}}]}}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000) preadv(r2, &(0x7f0000000600)=[{&(0x7f0000000280)=""/117, 0x75}], 0x1, 0x0, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 15.452218469s ago: executing program 1 (id=20): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1, 0x600b}) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='source', &(0x7f0000000000)=':.%=\x00', 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000600)={0xd7, 0x1ff, 0xb}) r4 = socket(0x18, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000001080)={{0xa, 0x4e21, 0x2, @loopback, 0x1}, {0xa, 0x4e22, 0x0, @mcast1, 0x5}, 0x1, {[0x40, 0x0, 0x7cbf3004, 0xbd, 0x54b, 0xf8000000, 0x7fffffff, 0x3]}}, 0x5c) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000640)={0x0, 0x1, 0x8}, 0xc) setsockopt$MRT6_DONE(r4, 0x29, 0xc9, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r6, 0x5421, &(0x7f00000000c0)=0x10000) connect$inet(r6, &(0x7f0000001fc0)={0x2, 0x3, @loopback}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f000000bf00)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001a00010000000000ffcbdf250a800000", @ANYRES32=0x0, @ANYBLOB="14000100fe8000000000000000000000000000aa"], 0x2c}}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000007840)={'filter\x00', 0x7, 0x4, 0x408, 0x100, 0x100, 0x320, 0x320, 0x320, 0x320, 0x4, 0x0, {[{{@arp={@dev, @multicast1, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'macvlan0\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f96767825389ec2c7fedc1226880016bed2f83008a03eb33b4d12916032c"}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @broadcast, @loopback}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458) socket$inet(0x2, 0x2000000000003, 0x5) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) close(0x3) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000340)=""/194, 0xc2}, {&(0x7f0000000440)=""/159, 0x9f}, {&(0x7f0000000500)=""/233, 0xe9}], 0x3, 0xffffffff, 0x7) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000680)={0xa, 0x4e22, 0x6, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000a80), 0x0, &(0x7f00000006c0)=[@hopopts_2292={{0x38, 0x29, 0x36, {0x8, 0x3, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x4}, @enc_lim={0x4, 0x1, 0x5e}, @enc_lim={0x4, 0x1, 0x2}, @ra={0x5, 0x2, 0x7}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}, @dstopts_2292={{0x38, 0x29, 0x4, {0x67, 0x3, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @loopback}, @enc_lim={0x4, 0x1, 0xfd}, @enc_lim={0x4, 0x1, 0xc3}]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x32, 0x2, 0x5, 0x3, 0x0, [@empty]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7f}}, @dontfrag={{0x14, 0x29, 0x3e, 0xdb0c}}, @flowinfo={{0x14, 0x29, 0xb, 0x4}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @flowinfo={{0x14, 0x29, 0xb, 0x6}}, @flowinfo={{0x14, 0x29, 0xb, 0x8a0}}], 0x140}, 0x4000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0xb6a, 0x133, 0x2}) close_range(r0, 0xffffffffffffffff, 0x0) 14.598728221s ago: executing program 1 (id=21): socket$nl_netfilter(0x10, 0x3, 0xc) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x2a, 0x2, 0x0) socket(0x10, 0x3, 0x0) fsopen(&(0x7f0000000000)='v7\x00', 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.current\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050000015", @ANYRES8=r0], 0x3c}}, 0x0) 13.994063987s ago: executing program 1 (id=23): syz_open_procfs(0x0, &(0x7f00000001c0)='coredump_filter\x00') r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000404c05d50310000200000109022400010000000009041200010300000009210000000122010009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000080)={0xff, 0x0, 0x21, 0x0, "01800000cd91582af51d010000000000004000"}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r3, 0x28, 0x1, 0x0, &(0x7f0000000000)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000180)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000080)=r4) r5 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f0000000080)={0x0, 0x6}) ioctl$MON_IOCX_GETX(r5, 0x80089203, 0x0) r6 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000400)={0xf0f003, 0x4}) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e000018000280040012000800040067"], 0x48}}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004e826d4094225a4241d10102030109022b0001040000000904000002e964c200090504060000000000070556"], 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r12, 0x4018aee1, &(0x7f0000000040)=ANY=[]) 13.734672985s ago: executing program 2 (id=24): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x202, 0x0) write$binfmt_script(r2, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f00000007c0), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r5, 0xc10c5541, &(0x7f0000000000)=0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000980), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000f00000005002e000000000005002d000000000008002c000000000008000300", @ANYRES32=r9], 0x34}}, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000000)=0x4547, 0x4) bind$inet(r4, &(0x7f0000000640)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1, 0x600b}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000001c0)={0x15, 0x1, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x6, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000240)={0xb6a, 0x133, 0x2}) ioctl$BTRFS_IOC_SET_FEATURES(r7, 0x40309439, &(0x7f00000002c0)={0x0, 0x0, 0x6}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000280)) close_range(r0, 0xffffffffffffffff, 0x0) 13.213418098s ago: executing program 2 (id=25): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'veth1_to_bond\x00', &(0x7f00000004c0)=@ethtool_per_queue_op={0x23}}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040), &(0x7f0000000140)=0x8) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x40, 0x0) r1 = dup(0xffffffffffffffff) write$UHID_INPUT(r1, &(0x7f0000001040)={0x7, {"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", 0xffffffffffffff60}}, 0x1006) 12.795375646s ago: executing program 2 (id=26): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x4, 0x4, 0xbf25, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f00000000c0), 0x20000000}, 0x20) (async, rerun: 64) close(r0) (async, rerun: 64) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000040)={'bond0\x00', 0xff}) 12.147428252s ago: executing program 2 (id=28): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028005002e000000000005002500e3ffffff"], 0x44}}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 11.547914041s ago: executing program 4 (id=29): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001600)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000600)="ef", 0x1}, 0x68) openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x10000) 11.349814639s ago: executing program 2 (id=30): syz_usb_connect$uac1(0x4, 0x83, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0x9, 0x24, 0x7, 0x0, 0x0, 0x0, "bed1"}, @output_terminal={0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bond0\x00', 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfef2) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x4001, 0x3, 0x1318, 0x1158, 0x0, 0x148, 0x1158, 0x148, 0x1280, 0x240, 0x240, 0x1280, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @remote, 0x0, 0x0, 'ip6gretap0\x00', 'bridge0\x00'}, 0x0, 0x10f8, 0x1158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x0, './cgroup/syz0\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@uncond, 0x0, 0xc0, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1378) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000a40)={'vxcan1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000000010000110000100000475000000000000", @ANYRES32=r4, @ANYRESOCT], 0x20}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r4, 0x22a0b}}, 0x20}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x34, r7, 0x6a9354ab0d020bb7, 0x0, 0x0, {0xf}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004e826d4094225a4241d10102030109022b0001000000000904000002e964c2000905040000000000000705a6"], 0x0) 11.036426854s ago: executing program 4 (id=31): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'geneve1\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f00000002c0)="fb149d84f90000000000000086dd704bc6813d6cdc57faeaacb9262e14961cddd515dc3a3a152ac8878adf52255bff6092c27c0ec9c9", 0x36, 0x0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0xf) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xab78b8022101c8b}, 0x240008d0) socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x6a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb60004500005c00000000001190780000000000000000000000000048907803000000000000ef6c4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8ddec71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c525d5278bb1216f789a1f86b8c25885b10d1145db930d9b0d4f30def6b73757e097a715a3afb9e0ee8be95b452cbb55d4c194f2a49"], 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x410900, 0x0) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], &(0x7f0000000200)='GPL\x00', 0x9, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000300)={0x0, 0x20}, 0xe) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6000070002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000100)={r6}, &(0x7f0000000040)=0x8) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0xdcc2, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r8, 0xc02c564a, &(0x7f0000000080)={0x0, 0x1012}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) 11.031225156s ago: executing program 0 (id=32): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd0, &(0x7f0000000000)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$KVM_SET_CLOCK(r3, 0x4188aec6, &(0x7f0000000040)) close_range(r1, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000040)=@newqdisc={0xb0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xbba}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}]}]}]}}]}, 0xb0}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f00000003c0)={0x1, 0x0, @ioapic={0xd000, 0x2a9a, 0x7, 0x7fff, 0x0, [{0xd8, 0x5, 0xeb, '\x00', 0xb2}, {0x6, 0xcb, 0x7, '\x00', 0x1}, {0x4, 0x6, 0x2, '\x00', 0x6}, {0x81, 0x5, 0x27, '\x00', 0xf9}, {0x1, 0x6, 0x6, '\x00', 0xe}, {0x0, 0x7f, 0x85, '\x00', 0x5}, {0x6, 0xff, 0x2, '\x00', 0xe}, {0x2f, 0xfa, 0x6, '\x00', 0xc}, {0x7, 0x4d, 0x0, '\x00', 0x8}, {0xa, 0x34, 0x1, '\x00', 0x6}, {0x3, 0x9, 0x7f, '\x00', 0x3}, {0x6, 0xe3, 0x9, '\x00', 0x3}, {0x66, 0x48, 0x9, '\x00', 0x7}, {0x78, 0x8, 0x3, '\x00', 0x4}, {0x2e, 0xf, 0x1, '\x00', 0xc}, {0xa, 0x8, 0x7, '\x00', 0xa}, {0x8, 0xfe, 0x1, '\x00', 0x2}, {0x0, 0x6, 0x5, '\x00', 0x9}, {0x4, 0x81, 0x81, '\x00', 0xd}, {0x0, 0x81, 0x4, '\x00', 0x6}, {0x5, 0x3d, 0x7, '\x00', 0x99}, {0x9, 0x80, 0x2, '\x00', 0x10}, {0xfb, 0x50, 0x2f, '\x00', 0x9}, {0x7, 0x7, 0x2, '\x00', 0x6}]}}) ioctl$KVM_RUN(r10, 0xae80, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x5, 0x4, 0x5, 0x4, 0x8001, 0x7, "e1364377a5"}}, 0x11d) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000080)=""/152) syz_usb_connect(0x0, 0x41, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000e518a708ac0501859d200000690109022f00010000000009040000000e010000152403", @ANYRES8], 0x0) 6.861949225s ago: executing program 4 (id=34): syz_emit_ethernet(0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaeeb507030c9688a8000081"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x4, @private0, 0x1}, r4}}, 0x48) ioctl$KVM_GET_TSC_KHZ(r2, 0xaea3) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0), 0x1, r4, 0x1c, 0x0, @in6={0xa, 0x4e23, 0xecf, @loopback, 0x30a}}}, 0xa0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'geneve0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="4f8cad880499afeee309c31888a8", 0x12, 0x0, &(0x7f0000000080)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14) 5.861921156s ago: executing program 4 (id=35): r0 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000200)="4800fff01400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 5.675476408s ago: executing program 2 (id=36): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_clone3(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x10, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x7, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000900020073797a3200000000050004000000000005000100060000001400078008000640000000000800134000000000050005000a00000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x80000000, 0xfffffffffffffffc) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10000, 0x441}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e400)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000141bdb7989c08b32000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007ed10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000889049938edebcd600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004140)="02f00c1d0dda83190c8b2969e5d107b997d557314c4da896298ff72343456d7ad8d0a3c9d50de42ef139d0d06f47aefa86d39e623e4983730bc4acd2a3453e9ce8ab83ca57bba44ef9418053978935925402ab801b6979708a525ed019908b34e02f859ad4fe7ea4a350535a413c192c59200cfe1146cfce7eecb4623aeba4b78d98a60a06859f115f185f5849bc4bf657cc34fdbd22e7093ab80cc806d17ca48f8eece4181c9ac3c9683567bd26348a00f13b4227b52da5dbbff4d3903749eb428bb6a464379db2f0332abbfe4d5a1d8f3175def20fd81e00e99af5cd23e1fe1a02affae45d2fcca7311570b269f073fc727285b6eeaacd862f40f1e5b84abec8f63212c89e4458c61ab5c32f7347d7d537d267708129701bdc744d35218ce52988699adf1e34f61493fd397296b4ca0aefbeeea873eff80fe26c0bf3c058ab0ae570ac08e3c53079d31669f34bee6d68b92398fe21c1d76a24d858af557d7723d27c0435f70fe46b18d17f3c207ad809bf3cf81c3074be87ba9d2beb513903109a9dae4a56576ae7bd3ecd4917a2f22c756f100eb0f3b48f3c506aa5d717b9683762e8d268ecddcf5121ab06300b1cf3586c910bf23de3defeedfcc1e899c899eb483c9b30cc56181f34937c70e9a2482ce13531bb80293f85fe080e722bb628b67a1cc9a9e7607313f0ce60a8f79fb0807139f503622c7cdfbdef26fc004897ca200a9b4328e0961a79e46ea7734a51d3c8930ff903d4779a48b338f43ba5d6b50f27f69802ffeb5473b15e66835035b7bf41489804e99eab0fc7579f569b1ba37151913454be46c6cb12b4e5f8c7a0a64c992fe18e07088d4ae91fbe6ef05d74d63173823bcd63948ebd29b70f144c7a03c951de8e3873623c14c4a99b52a9ad881206005e66f8588b0d73994cbfd6aefddbf8cec9622f948fe21287b38b9daf40c6ccb3feedf50f90e8f4da6a6bbc14b87e514cd976302e223a3c9165ec4b79f341908a97e13331582f39da15f2e9a6ea5a836bff4a42cd816f7f2028763bee37e7bbd0ccdf419edd48c55a6883825cb3373eb0b222187fdbf7a0dd4c862e9c658a5590c62b95b2467b155a87013ad20d47bfc8e8049f8bee091cb893b5d507772ccaadabf407a25647019312cad64b940137ceb603e9854a41d540649d52e5b2a39e7865ac1ab41cc1304712520e8e2827403b01dbee87b8b0caffa3c1bdd3b81538743a5422be517a5c679543282fdb46b29cf256a9d7e1c3dfb69c399db615e2e785d5a3cc719cafaa7973a542679b3185f5f86e4864637ececc4557a5465b05bfbdfe433546fe822d00f41b45c1473fe88d8a6911cd673f3d71518d3d3918ed766030448f01ad5e5ab66a6eac88720f7205491f9bd15d448172de258c865534b0dad6e607819aca86211254ecaafe4597af845c1c92098320dc14d1bae44486a02b8e81733a2be227acf940df9a2e717d9373a52a82ae0863af2320ec820fa8778b1e0123d41e6a79055adbe1b63da8e84ad6eb7906ab65b92c493a8150685dab1e2f2a16da54abe9cddf141dc41ea8a600a5e28bd8a342be318fa91d2e98c36a681c98f5676b27583d49f4948666c80f3b49b2ef6b71896e980c6cf93856d2dfb59cdeab1d8940296207d1f15cf75d7beb6f744fdb38f34e00148f48b3b92d65dab43f3514761864c693e6fdf1e08be74ec507d180301d419cf151901bf2bbc1245bedfe9f8b91f64c869d0741026acb0499a4a7cb167107f609141c349a7810d16b417727ded0decd32b4d48a624d027a3d057a9763ac5139adb0042d70caf9969c7a6bad7afe5d8a48d0e5726396d379a2bfaf957468748c9944bad2dcbefb1474a7d782b2e8e278a10dc6d6dc921476d661cea4439d8ba17c95c9189ef879b52a1889574f70c022b0cb973587a70e5d4147aaf1d1f58836540eb0824e73386d2c3a94d253b99d4532c97c2a75588c536cbc24e47088dfebf31ffc0cb23076bb2f515546b3721d8063e3b88d3a8ea196b88564f65e5f808eff5ab6a30095d6e0978a286b9d693a6053231d71dbf96967b5a2c6eec44117078851bab60718ff22a3e8c522fa8d85d6df1a816b62a557b47b05c5df626a47928523541c23e9f0a0a86515437bc0eb7b9b4b7bb866206e093fb4a5dba6ad9d2424d7fb2f8f220b00be734c781a91ad4555f2714c6c59588300ad47d3ecb86fae178609fe60d9f604be31c05cf3cf1edffb45cc2ce24ec44434107834c6335ac09e2e931b0a8c6cea5ddee3686ec9bf9ef6693fc85e36a7fe1146aa93da6f4dd5f36ab0dcbc28d29ddeb481d5d4f8a2817733a8dff3cb07ac1256bd43dab768c1661e4c8bd3ede3aa548f90424fea8e39c6d5d639b49b7b4da6a95700ac6d9f66bae43320ebe5add0c0cf5fb8a1482c60a21d1ed54ca7967bc22362ccad5c9aca0a7151b53546618500ab0a32151c7e61fc1cd7207f165449d4935337ac69259142d952d83e415bf39227224f208ccd4f6476804b7a9ed45f14f7414e36c9c1000ae4ff34e5ccfa224875c81bf30a73300a22c9dbba7770d0078ff37c965b2d9f97e50e64072d7db371fe4cd364e305f64c1fc70b682cde8fa865fdd7cefbc528f3177a67a4f31f3085ab385705a5008d7572b8f6690c07a9f0d8754614bf036d4efa96b09258cc43787df3259138f995a6d9dd13728fa1745c8e4af63e48853bc63106859defe07c53ead96f2bbd300ace2df4281ee764ba0c2234d4e0da8c0bce90ee74322d50a5653001a6706c8f4f315219bbc7fa42ee186ac031ae2a7f806e539f6d498514c3b657f6b6864ba1cc94879bc70ec199ce4124907bbaf5087280f9288a51f6d2849a2ad906aac9e98874fa678c66e0d71479f71d81aea11acca91b1a80e1517f6ce93d63deb7712a15232856db2e4e33b0c50f638c5c0b11fb81c4d9d1f4ba9914b8cdb1ee091b320db91850700a5ee1f8b837deaf3eac758b1aa03ceaf559cd87f5bea97897b97661746fd0e08713fd5fe42a87de04a2c9256571a14818750dc51d3c5190d8c2055860c0470309ebdbcdf1c050e0de01e6111bafd83eed68935fa61dea3dc55c278080935ee9d36233148dcc1ea0a3867ece386248ffb58ad2c198ef8ba29ea07983740e584daad92c62ec10c3dc16be4283bae22ed5e39a9821a29a40952950abf6b41732933950312719749ad06eee0c08eae0136eb4f16cee5ed167df66482ece475632dd25cc43782df12a8573492fa46da81b527213b098e3d9b0bfc9da02bde9c8f0672778cc418f4c0a113a513b358674de8b218fd3345ccf4179a9db6c0e1858e558e749036ea70c045d572ead75e60cf08fb26551741fdb86ff3c0bfcda029aecb789c9b8e27f360ce04159b9814674a3b5ac823546d4ac467ae878d2d4482e4d5bbf8945155410b8e7ec05619c3d6e254e30879f4dcc3d93b5c3e3f73230e2bb406accf83cc5a3f4b8388b851a98fafa03ddf392b9c0c5232445a313f440f158b20cbc34c29a0e36a062a10ec77d0bbeeba5771da4dfdf3654140f53e85d98f6a065850ff5afec907eddae8b7128ba9dd0821acc8511f3e3c68e9ef9da35df09315619ab781192a648baf254fd5f35cb650b7672a9a82f989bf2039961f68763e34db401c903a40a5ee9495b7011893639ed3c3b83998503905cdc1dcfbc223bec4cbb5e1459ec4bfc6eb14dec0741e2364eb9cd9d988013ae2740b722704d99576f897aca6b3d5c34a057d8a5f51c1bce080936a21fe214c3516c6edda99c4fd104e033fb553839a386fa74549921ff4216589dfee205fec1031e121bb58ede2fad12805785abedd162396e11d36dcdb1993853eefb6e1c8c72afecf98969db8216da5276e347a327c60ec97865e2397127198151feeb9e0e6268fa6e88c50ec8d681450e642fc01455fa216f9835d6e309f9e4b5129a2a56db042f0c0486a47033b52f59513094864c0c6c313c7edebebc28db44679c3544e93375c80cb782763f37d85eba6c0bae5934875444245d467de5d6a463443933ae95400f88441d70891e6455f73356717f68e408b0cf91f0deb9aabce6c1cbb1459d8095433a1e08039132fb8ec30687f856e524ca8ba00b6a20225da41bfd260fa214c26de5844246d44ac5ee2af44f158da1f55188277161d7158fcb97b1e37ff3088cad7e79e78b19c7440ae76356f0b094f928a61e9195fe87a0330baa29dc5e1370abc024577a521ad224074f5ee52c30326e2d1e87044b2027232ac28ba099e211a7b33df9fb6d2fd662b7d38a14c40538dcad133f4f75ce114cf8e583f74d2d5251547541af0236aa59075263e2611fc807ff898163c56ef01e7454da2a6000ac229530ea7bf1eb75529d3c98e6f7fbf3d4cba327ed5cdcb83df0c11fbead1de4ec3ac5c2cb8dda8591f4c316e23a0668ca25149f8a55a47649daf9e40f784319e8b901e70a8a31bb4f8c0a86a4999bdfcb0e9f297e753bdb2a275ef98a92b8dbab2d6eedc06ce92502ae7ae76f6b13264ba41e717f8257e34bf1ba512b335d5d178d74742cc0ec6e7b16942095cde010cd90b5c8a158b65fc51d958a96a7d20446c1fd8d1b0fc9f2de8f404a80b504098dc68e2c60b0f43ab538cba0ca5409dacfbdff2267374775605dce498514ee7b32a7f55452986b12dc6178d6a926dfbac6bbdcc051d0cd54bc3aca47bd665e01bf1f050f7903f031197594c513ce5ba931e2819f5bb63c5238c19c1be9f4d9668e5c075804fd43ea60f0ab9f00e06683b8e29379a9326b40e8fe05161adf1cb519c31ecebcb042ed1fbb4b9f1b12470bef6e964855baaff5a7dd6146f07caa8097c778bd10e5ce995884d1f3b91962a7974d84de6157d3f54735d5b82e11e6fc000874ecd396114c693ce2297caf7a9c6a6814a890e4d74e17a16339ba103c0d2da87e522ed67cd23047c7d9bd1562234aec98b85ad4534522cca58ee17ccb9c8fe7cd68ad3d6d6e0edbb550ec957772ee1109d501ab76e364a988e02e6b4a5b62f72e61fa7cc6120d12414d3c8ea09bfaac8e806d19dd76f940b769863d200861e44c72bfd870005f6663a7a6d1d60ac1e376806293d5143968d37af14301c9d6506985eb7bdd607dfa4d3cb5cb058019cc5502c534d3a5a1337bbf6306184230cc21e3ef7744b839cd82fc6347316e098e05ced0f25b9cf5721f2d003bdb4e0a79eff90ec4aacd6afbb78ca6f129cd16c8b2f3aefb5a2036951db7ebb40d36723a75723b3d1011e6085493664bf5d336c5cb4079ae1ca2412c53c464831844c27f089ffe345a2029118672b2fd2a24c72f9088dc5f92cc5f3bcd6c7359f52d32ea15172e95af7e6c81c52f20995877cafed48dd49762701c88c225bbffbbc3160d838957588fc2d41efab4148bc961e8d66b5b21e7eb4228a132d61a1c9f6e2baf7430d92478a3948fca4e10594167ca5e72678189cb4e90a0b0e45caada64d15010d73157cd8b4d04099ecefb1ed187d673d1bd33f13dbe4b44d351a34738280f21a79b3146b0071a0924e643c1dffe0d8c72b3bdcc00f203153f63c249f18e0e9e7ed1c0237411893832fc5be40d308b194bb04a17e38f0717a0808058b7291d20b6f0f1e5ba11e2351d985138c61806b41ea5a77ef80feb1f6f7383000e97549487f1bc9c3b5e8ccb6ed7ab8e08b258c75d5aad2a01fe8b5777ef5c7ec1eb3feca16dabf8eb50312f8786d5018d7bb7c9776f028af7b3423af3410696587f3feba823e5e3ccacfeb23fd4359c252b2ab5136d2fa7a6633758b5c45099f70a672999329eba1c89f07af0eb7c3fea5ac468ce042d699b6f391eaccadcf6d14e97c620a5eff7d92946f09d79d31cc876da261182a73a3234d5e53709185680c8b5376e4d8445fe4fff988062f23e42e4b7908ec079a840f0be839062074c22c44b7f4c4b23be2b6656abbb103acc0bd5058e0112a7d55cdce5042a76fe24ba5e9a1105c68dab94dddd44cc6c860172847f20e6ebc49787ed8ca19824b09468933ae9a496e960b7c592e783b6a5f10a9d9c2265794c5891ae7eb9cca9b3f99981a252d522047b95fdb518fe681829948a9d329b9cc7cb2f806ee81a3c930c73c8f12a05b47f1470ff08d5a03f37dacc1e4a7f65563f8825f9ffc316c2ed7a5ea434cab348c850d1b8eaaa0ab2ef7460269aef06f9c46a1957575cee49e1aa72d470dc9763b4abd61d34693e462353c1d023249bb7085f1362ec6bab9d349633d5f9637e6a12690e502f8af9c2d37a3f573411595539c66e9f82d5b39c01606af258e769b2391c3cd0bb0d93eaa36e168136b301d516724ecb173a0766ea9e9d5be5dcbf58e0322261e584d22594cfac91d16bcf38b8cb69e022b0956fb4be2981a526bb1832749ea1f7b188dce590927620ad9d6162ea52bbdbd14b45ff967f183c1af4269dc16a1be7b0b5278ec02a259aed022039e70a9c1456997fc1d053b1ab54238d8282dd11b68b806c745a257a7c0fcfad3277245b1f7749243f457121b3d17122f27be6b1c56e9bc151f52db66c92246072ca4e5d10619a6730b1609f133b5db1f2b0bb4a86dee2c44a6e25299ee74b99eeab5f195728aa45dc7bd300bccb48819bd40b12152b40e1395ac25d8b0cd1ae12b9cd46a8e54f495cca85a680cd43f70f55505f1a72c030dcebbb2e5b26ec971cd58c76ee67d86fe075bcad475658f1cdf09c94bcb5b4db83b3147882f65f67921267f8471d8deb7b159761c83fb9547db71b6878a21287aef6a2e01134e735c073645d2488138f280754ddf66cf8c0208e51a96696e185120a6b84a73d2c9bfbfa9e501f1126b44c491ec437a0b490cbcec5e8e0e0c21f803354d2d1923fe82509706ab34eb03101dded5f6421a6b90dea3db643a22eee1549e30d44184bbe7b842a656b91184ebbea76d00942b429dc07c704750fcab290c43bfdd2aed8257c21312933a11a76d0be361753a49ccbad5fab68eef867e11fa99a1d8021218809c0ce0bd52bed2d5c97fff7283e549afee371b7f1b3973ebebcf11f9687c7086129ada7bc09bca2da4fc02c0af28aa043f3f2c1e02dadfbc3a245dfd2e30e6050e05388006852e871b6890ddc006072d1a062978240df6166ba6ccb732195f21bec579d3d2b3f13e818e9fac77be72152fd441f6ab772b7fd3f888a91f8420f336e5a69e36dfdcc23b066506167960dcd1e5c84d4f236bb83f8daf03007d86d5b34aee798755077dea9b4faf98daa725cc3ab671b3b2b95c193530e0d018309a460a518878ee82e8495622028383ee97fe6a0111521b9a60fe51011bd0c62ee11e7a3dc5a0e8e8b82e476e752f63c5ba75a32e7b5b40d8ed1f539b3262351ce42d1bbcae0371ca72790ca4deff1441404f072947970ed3f23894e6c894c9fc7644c4082188b1ac8ef1e5c045bf438b9b81c7333859fcd071100785e14568c784ca30c4aea8a728a7796a201aa1b65a9355cf368b440498c433414141aaeaf722b9ee70b7cd28a3c2beb61ed99b619a4486b4b7210fe5b1cffa4474421b41303f6de7432874327532cbaecd0e1e9e90f00cf03161e9748807f3728e947c1ce281f3417a3a162deb2d01a5aa330e95b5624769d278aabfdfe6e8089c62ee1c26be5c121cfef2fcb549c1671497a05c2a397f5090caf6913fb39f01a095d55d33ae31d36bf223cd506ef2eaa48b1729c2dbdd7cf84bd1c2d0ebed7b6487991de616517c4e53665e60e6bbf559dd5cddd5eb88087fe6d0e2632f10b9e0f653bafbf992f55dd2592bea82a9a5958ae3e767bcf2c50b691e33dab8d2b1b2fb33419b5dae945a7d4a0169ec64817cc02b02139d7f70bfb42516c913311b42323cca46e690467c894a26ea624432b3c536f48ad569d56d8bf131048f81c0bf77460bf7acdf513087bcca1366bbfd05136ab5456f7e99f545f343eebf57299bfb4ef4a3af05357037e7080ba36084505eaa7339fc981cb99e381c3456d3de6cec5c5dc76427b13db53c9bfe516577b51411602146929e08c8762e6c99325a00242bd15f511f25eed7aac3537aca0407c70f362a0583fa10bb259f758feca1edb4f8adff7626bbf67fa0d940bb773d1afd523033b25107fe02161faa7a2bfcd629e58d681be5e980f8d563daac8532bc747a4242fa539416bfedf38cd8e3aab1764102c87627308abc41f6ebf8f03126d26ef90c10f0dd0fb5be22ee794fffb3ef0537f640b92c2ec335ff99422fe5fa41467e1a95fdc98e13881e1912f73afb489f237acfa971f6f64d9dc0066552167ebad1a7797412998a748d3b236e41ee5a8c223a1fa033389dfd2beb582987344db19988096e3bc0c44c8fcc4ef4a1d60b3991a5e3eb08d476c6dbdef30ce2b7f84de6925e28eed23daafe6be895d9b9c055519f9f3dd5c67cfafb5138380f581ec2bcd15c415087c85c32db56fd589883d3f1c81d56fe2436e910bc873596d4fc5abe0046e00934912f70c028c41390091988fe9fc46df6f10edb697bd1408486860fb6e77c76b4778a151769be25d891c1bde084ddcf964a7d3e528fb39835d8a003ee95e31f7c6c8f22e2d97454b8bff0450f6d9d3f3066041f19aa7e99cd00bcdb238e493912ffa5992eaa0c10dc4e0c4277ad8b5b9be74f72a0b2b89cb5df3ff6e06d84b4db052a1846a2b8284d49c0562f561dde8fe38bde79afa4eb12095c9fcfb9805ff76db4c63f2c737bb97117f880284feac51aeb26e21071a8770cffb4670fb94894c5b7cb6b60c3cc6a0e04458371bf59669f07be5517d5aafd2485aac11e29332bc9c0d9aab851d40aa713665be691c1887ed057e63bdb4da732f70dfe503a009c6c431d6780559273215a222228082dbe613d2dc235908927b1693adf812ddd267d1f7b64abc5e174b057e550c60d5b4e5f4aed8fe16dc5ecd7d7fbc3647efe8abbd9f2ce4f21a14d2e76af8a0551d99f1d35cfee6a068f521af0340750658b415685ae99459744c3b29e24f70977ca21e8638045a3dcb88556904f4cdb31920b89dadc5b846d7a1306d1f86d179e1f611d0c061146e3df0aac42cc6710231d844e167a57b99f68ca174152d088d5af232d5d4e186f026dbd0fff228e7de1ce0e5d28f439e94b6cf106306a740071a03ee25387d1c0b2da3b24dfbbbf078458e3db1c42d1c369b3f57946cfba615151c118e5bc31d43f9621bc30ab6fca226285c50eaca6daedb148d0c4acf1d9691e875338221074630d9ac117fc704b06da6b595f9906681f5a598d0308da0d56e45a216860a3acbb2e00376d2931a21695239a8216347d39f649c0d990191a62a32563cc967a03e606ada7dc76e67a1e867ace9e05e8a27d96987b93eec3cbce6c8c4021ef2a7a862bcb49b2450c63802c41bbfd8ae9f3c9a55a570470c41a9ac7ec88c83d5c1f2c9342b30ab09e50271a7be04feedf85abac9efaf1422a045f6383886d3014c6436c7986f264d119b1f8aec8c67be8147feebbb94266c009d98db54dcfd9b6f275f13c210d10d808b55cb558faaa2a89f90023fb7aff01dcd6143c7fb985e286ae7bcd521916794ac148bf85ef14d8a54fe91739a4b0c3bfa4e77d70ebe0bd187364be48953bbcbb220dd43f2e9382d430dd0baf069b6e3fa46d696317b4b0dc030c7edf27c416f33082ae1b0b13290580b5c513adb90fd373af0403f268521fcad12940dec7f0532aff0f78813416cf965937f7ca0eaeee97dcf7a7ec603b892ba55801a6637ff1a8e4d99bbb969ae06bfadc232f131b19cece7b8c998d6c57b9b68d2252d7e543091583b67b868c8dc079c1c95294c5e039c637b1a02e58d614fdb79f3f08a29f9f90ba09370675ac1b071f07bbf97e48d3e3d102590c2fc4ccf5354c088f41f1abe507901a1b5e246c88f81e297a2876182669b16f1be10e68f3bc66c7e20f34ea5a5252ea013f71ef78931ea4e99f5ee9e4761cc3f773eb02fce9065c333eb58da334a67525d9f885747aeeb3193c3e6b60e037b7006435be7bf1eb5ac592e288984885b5f9781a900885c59ee235785501ab93d73ce758aba261f5cf1d732246096412a0a9334fc113b1fdedd0a15961a252479a91a889dd312a4fe44a49a5c8f3364740e2c84ad375226b0a8070d6e5f316320c6f33461e7c32395c60b531aef2690da2ce0a965df38756c26be257f62e89404ce58a62846e11ae30490ed476a484c5b798d0c67cbd795b7e02d460fc1be0dbf85180fbc7d650c14cc86cfe65259fde8d330ff96a175c49ccdca9dcc9886dcfdd763a8ac7bf4c02cec7ca5f808406a9a04ea18cab07febdb8f1f65e987de2cf830ed782ee590f857385f3514798bd3c98bc0bf3c9ceb63b7d2c4d084332f0f4702c185fe9b1a5780f8b11f18b10c9eae1d18a5d45d2677cda5c927906c507f21b987026965d5a9edc182cf6b104878aa8afe22731b2ec16b692cd2819b37a50036db1b6a47f6c47299a8bd35735d180eb1d75d956e8d020db4279fe1332664dfc01cedb5742545a3f2173a159841e11552564c3fbd39fdff26c4438d0b2f66b65f4ddd5778734562eb2bf1d56f5970a8463b520cbbc55dbacdf37a6a16e5c7135f3120c7bd4bf2fcefdf47d55d5a7ac628341ecf694098fd457d23bcce0b2296bf99ab9aff749af11b22fa2f24d4ee95659f3faf48978aea794a80415c845a6d7f924c68a62972db65b9185ff527719c5f8bae299fd50bb7ee1ced73528ab0648b870d8e8ff0acecabf2de8fd4ad30b1fce4084d8e1cfcee237f13a27e4d238f6d2eff350f2393f5ed9918cc35917f2035b1a5faf297bff886b6716db37215b822c8af5142ac94849e5484adb4e59ef85dd56473b1f6e1f6065c8e744377d98815f53244558c42af67e3502865bc81c37741c5ed3ed07e33c64a9d8b2f527e54e3c7e10666dd95eed759e8a3244c5a704a9349ee929752226d01c10bfa94d31ac2ced8261e5fc3a15f68500a9e7b5ad53fe3de581ae3fc9a03fc4da706c17b40ba5d9505938dd55f09989812e25ee54f7668fe8bd274e0c0b040a15c18b9d8bcee0cc88590637a8e7b6792ea8aa8dfd4fa8cfa183f3ce15308acc9d91d02e7f7b46f472c8fabead73ebe033fcc507384948a1eaf03548d79b649be7715b1aa0814a59183424e49e86bc9781ce2e9e8277a85f9b0b4faff231453829faa628ab00daedf8b8aeaeef758bbcbeaf8863ba179e1054b3da56466486fd9b8dcc42ca1bae2d4ff8e0877d9a726744080e125f7a1bbca906bcc59e8798e73bd79e5de3b4a79aa2bc2e8be40b695b5add3a8fc0952053bfc352849fe1ba9da83daca4c904c66fe91e55709ebca2a36356912a285f2206446b3216d78c9fe498431025b1af22d99537d5f86efb23e11e6e8e7d6cd97069c533e908cfb234c26a3424915459c53bf76ff18d7cceca11511b689611ff74118844aed1d4882f5d2a9d051bc3e051a53b7633138d0325082263497c9102cd33fb16c27a93055617ad14befe6321d40251d239d45a89bb079e24b04470fa75454d91bcc39c233eb0ad4a03d5667b9c7eea0d927d665dc2db377c71cfee93bbcd77f6096a2dd14452f1d74a9ebc7288670943ce9910f", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x18, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x4882, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$audion(&(0x7f0000000040), 0x4, 0x42000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @local}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x48}}, 0x0) 5.399064149s ago: executing program 4 (id=37): set_mempolicy(0x2, &(0x7f0000000040)=0xb24, 0x5) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x89ef, &(0x7f0000000080)="026447a3eda2f51d28102fcbff099fdbbe1cc65372bc63bfcb3527f04b7dd8d1f9a5653fcae4a3bc7f39a5ba8ae86f60187921d8fec8dad057437e695e555e9198d9cf3f33777f987c178d438f2a80c85556f36969d328020a05d20cec5c08faded2f9338082a1") r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}) syz_usb_connect$uac1(0x2, 0xa8, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x9f, 0x70, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3ff, 0x1}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x202, 0x5, 0x3, 0x8, 0x1a, 0x6}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x202, 0x5, 0x62, 0x81, 0x3, 0x8}, @mixer_unit={0x6, 0x24, 0x4, 0x5, 0x6, "bd"}, @mixer_unit={0x7, 0x24, 0x4, 0x4, 0xef, "e1a1"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x3, 0x9, 0x8, {0x7, 0x25, 0x1, 0x101, 0x4, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x3, 0x4, 0x4, 0x1, "", '}\rG'}, @as_header={0x7, 0x24, 0x1, 0x7, 0xe, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x645f1a2a3e53585b, 0x6, 0x7f, 0x2, {0x7, 0x25, 0x1, 0x1, 0x95, 0x3ff}}}}}}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0xd, r2, 0x2}) ioctl$DMA_BUF_SET_NAME_A(r4, 0x40086200, &(0x7f00000001c0)='\x03\x00\x00\x00\x02\x00\x00\x00-control\x00') r5 = memfd_create(&(0x7f00000008c0)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05YH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2', 0x7) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) chroot(0x0) dup3(r5, r6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x2c011, r6, 0x0) 4.19526841s ago: executing program 0 (id=38): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'dummy0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000800)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800900010069706970000000001400028006001000ff030000060010000500000008000500", @ANYRES32=r1, @ANYBLOB="271386763b60a67b7a33c81fd4f7a522db8e208b9314310213eeedff8c9c2844d600946a38af49"], 0x4c}}, 0x0) r3 = io_uring_setup(0x30d7, &(0x7f00000000c0)={0x0, 0x0, 0x400}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x4e20, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1ff}, 0x1c) sendto$inet6(r4, &(0x7f00000002c0)="9e", 0x1, 0x40091, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @remote}, 0x1c) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000740), 0x8c00) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0xfffffd00, &(0x7f0000000000)='}\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000240)='}\x00') unshare(0x68040200) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket(0x1d, 0x3, 0x80) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000340)={0x9, 0xffffffff, 0x0, 0x1}, 0x58) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000001a0001000000000004000000022000000000fe00ee621e0b4ab47500000000df8699c48ec81a5c6f34895925b243343ab5a031e2b270be90cbef838655eada743d262b8f2e7cff14fbe7d008a1707b7bd592a9fc74abef429e0f19d63ba226a94cd65a3e201ed1b1e6fc55e4325123de9f541bd7d02da9198e7f13aa628434d04bf2ae8a8c212af3d25112e03bf7b5df625907191fef190f30c0adf7220de9bb0512da2b6311ac5757314eb0e973107baa6a1ba8081fc160c5754ce3d1897e4d280a5f1558050e5cd8631033970eacb5aebee240f20a4eba41c346775c7f29c0b0c6a37b300ef52716d3"], 0x1c}}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3e8, 0x200, 0x200, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x4}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) r7 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(r7, &(0x7f0000000080)=""/61, 0x3d, 0x0) mmap(&(0x7f00008b2000/0x4000)=nil, 0x4000, 0x1, 0x13, r7, 0x0) sendto$inet6(r4, &(0x7f0000000c80)="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", 0x3b9, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="120100002565e940450cb862754600000001090283af1e000100000000090400000039a217002f08cbeb520ff2c0bd2922ab783c377716caaa5044f38eb6749c24a2fb"], 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000080)={0x0, 0xfffffefc}, 0xc) writev(r4, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x19fff}], 0x1) close_range(r3, 0xffffffffffffffff, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r2) sendmsg$NL80211_CMD_DEL_INTERFACE(r2, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000780)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000428bd7000fbdbdb25080000000c0099002201000013000000d1d8ca9cc78855e1372dde282ceb560a41c4ba0995490ced1faedc3bc7f28a6534ce00459149b8fdb78f00197243929c7a73eb61114f458de27c3dbb32caff7b"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x9040) 0s ago: executing program 4 (id=40): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028005002e000000000005002500e3ffffff"], 0x44}}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.177' (ED25519) to the list of known hosts. [ 59.181631][ T5221] cgroup: Unknown subsys name 'net' [ 59.311061][ T5221] cgroup: Unknown subsys name 'cpuset' [ 59.320415][ T5221] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.845773][ T5221] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 64.775601][ T5241] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.788384][ T5241] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.797686][ T5241] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.803856][ T5244] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 64.805694][ T5241] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.813659][ T5244] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.820369][ T5241] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.827164][ T5244] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 64.841874][ T5244] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.842032][ T5241] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.849013][ T5244] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.864669][ T5249] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.868729][ T5241] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 64.872103][ T5244] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.879885][ T5241] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 64.886997][ T5244] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.894508][ T5241] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 64.900385][ T5244] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.907873][ T5241] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.915525][ T5244] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.935220][ T5244] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.943651][ T5244] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 64.951131][ T5244] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.956433][ T5246] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.960717][ T5244] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 64.974385][ T5246] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.981490][ T5242] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 64.982999][ T5244] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 64.996769][ T5244] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.997276][ T5246] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.468554][ T5251] chnl_net:caif_netlink_parms(): no params data found [ 65.598789][ T5254] chnl_net:caif_netlink_parms(): no params data found [ 65.619152][ T5252] chnl_net:caif_netlink_parms(): no params data found [ 65.651383][ T5253] chnl_net:caif_netlink_parms(): no params data found [ 65.661553][ T5250] chnl_net:caif_netlink_parms(): no params data found [ 65.691193][ T5251] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.699150][ T5251] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.706496][ T5251] bridge_slave_0: entered allmulticast mode [ 65.713530][ T5251] bridge_slave_0: entered promiscuous mode [ 65.752269][ T5251] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.759647][ T5251] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.766793][ T5251] bridge_slave_1: entered allmulticast mode [ 65.774318][ T5251] bridge_slave_1: entered promiscuous mode [ 65.834713][ T5251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.896463][ T5251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.993741][ T5251] team0: Port device team_slave_0 added [ 66.002520][ T5251] team0: Port device team_slave_1 added [ 66.009975][ T5252] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.017149][ T5252] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.025086][ T5252] bridge_slave_0: entered allmulticast mode [ 66.032870][ T5252] bridge_slave_0: entered promiscuous mode [ 66.039872][ T5254] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.046983][ T5254] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.054315][ T5254] bridge_slave_0: entered allmulticast mode [ 66.061159][ T5254] bridge_slave_0: entered promiscuous mode [ 66.094104][ T5252] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.101402][ T5252] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.109050][ T5252] bridge_slave_1: entered allmulticast mode [ 66.115779][ T5252] bridge_slave_1: entered promiscuous mode [ 66.131685][ T5254] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.139440][ T5254] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.146998][ T5254] bridge_slave_1: entered allmulticast mode [ 66.154820][ T5254] bridge_slave_1: entered promiscuous mode [ 66.161598][ T5250] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.169043][ T5250] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.176185][ T5250] bridge_slave_0: entered allmulticast mode [ 66.183465][ T5250] bridge_slave_0: entered promiscuous mode [ 66.198854][ T5253] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.206082][ T5253] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.213378][ T5253] bridge_slave_0: entered allmulticast mode [ 66.223953][ T5253] bridge_slave_0: entered promiscuous mode [ 66.241899][ T5251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.248962][ T5251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.275484][ T5251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.298967][ T5252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.324381][ T5250] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.332130][ T5250] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.339747][ T5250] bridge_slave_1: entered allmulticast mode [ 66.346440][ T5250] bridge_slave_1: entered promiscuous mode [ 66.353504][ T5253] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.360670][ T5253] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.368343][ T5253] bridge_slave_1: entered allmulticast mode [ 66.375043][ T5253] bridge_slave_1: entered promiscuous mode [ 66.393614][ T5251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.400656][ T5251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.427139][ T5251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.440270][ T5252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.452866][ T5254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.465177][ T5254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.500641][ T5253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.557839][ T5253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.584791][ T5254] team0: Port device team_slave_0 added [ 66.593217][ T5250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.614526][ T5251] hsr_slave_0: entered promiscuous mode [ 66.629395][ T5251] hsr_slave_1: entered promiscuous mode [ 66.639559][ T5252] team0: Port device team_slave_0 added [ 66.647029][ T5254] team0: Port device team_slave_1 added [ 66.655008][ T5250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.684515][ T5253] team0: Port device team_slave_0 added [ 66.702497][ T5252] team0: Port device team_slave_1 added [ 66.726479][ T5253] team0: Port device team_slave_1 added [ 66.756700][ T5250] team0: Port device team_slave_0 added [ 66.797183][ T5254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.806623][ T5254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.833592][ T5254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.846321][ T5250] team0: Port device team_slave_1 added [ 66.853321][ T5253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.860451][ T5253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.887079][ T5253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.902904][ T5252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.909976][ T5252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.936256][ T5252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.949952][ T5252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.956928][ T5252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.982970][ T5252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.995083][ T5254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.002169][ T5254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.028411][ T5254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.052726][ T5253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.059827][ T5253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.085880][ T5253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.098780][ T5237] Bluetooth: hci0: command tx timeout [ 67.098774][ T5239] Bluetooth: hci1: command tx timeout [ 67.099069][ T5237] Bluetooth: hci2: command tx timeout [ 67.104451][ T5239] Bluetooth: hci4: command tx timeout [ 67.110000][ T5244] Bluetooth: hci3: command tx timeout [ 67.175486][ T5250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.183000][ T5250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.209527][ T5250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.222336][ T5250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.229421][ T5250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.255489][ T5250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.290324][ T5254] hsr_slave_0: entered promiscuous mode [ 67.297037][ T5254] hsr_slave_1: entered promiscuous mode [ 67.303235][ T5254] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.311375][ T5254] Cannot create hsr debugfs directory [ 67.337011][ T5252] hsr_slave_0: entered promiscuous mode [ 67.343574][ T5252] hsr_slave_1: entered promiscuous mode [ 67.349983][ T5252] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.357638][ T5252] Cannot create hsr debugfs directory [ 67.380895][ T5253] hsr_slave_0: entered promiscuous mode [ 67.387441][ T5253] hsr_slave_1: entered promiscuous mode [ 67.393613][ T5253] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.401351][ T5253] Cannot create hsr debugfs directory [ 67.487272][ T5250] hsr_slave_0: entered promiscuous mode [ 67.497230][ T5250] hsr_slave_1: entered promiscuous mode [ 67.503949][ T5250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.511915][ T5250] Cannot create hsr debugfs directory [ 67.788261][ T5251] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.814838][ T5251] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.829990][ T5251] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.844271][ T5251] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.863692][ T5254] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.879130][ T5254] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.896022][ T5254] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.906725][ T5254] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.999399][ T5252] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.018198][ T5252] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.029062][ T5252] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.054376][ T5252] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.102289][ T5251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.143689][ T5250] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.155536][ T5250] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.182196][ T5250] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.196154][ T5250] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.223586][ T5251] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.237021][ T5254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.274355][ T5253] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.283932][ T5253] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.296756][ T2969] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.304084][ T2969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.325028][ T5254] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.333197][ T5253] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.345874][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.353168][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.374782][ T5253] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.386967][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.394101][ T1113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.426222][ T2969] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.433376][ T2969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.514021][ T5251] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.553807][ T5252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.569447][ T5254] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.633814][ T5252] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.664591][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.671797][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.690391][ T5250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.705165][ T2567] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.712417][ T2567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.728288][ T5254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.742701][ T5251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.820207][ T5250] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.831366][ T5253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.869751][ T2567] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.877120][ T2567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.912207][ T2567] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.919334][ T2567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.930872][ T5253] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.956859][ T2567] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.964113][ T2567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.975227][ T2567] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.982357][ T2567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.992504][ T5254] veth0_vlan: entered promiscuous mode [ 69.021634][ T5254] veth1_vlan: entered promiscuous mode [ 69.040516][ T5251] veth0_vlan: entered promiscuous mode [ 69.071642][ T5251] veth1_vlan: entered promiscuous mode [ 69.144066][ T5252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.156039][ T5254] veth0_macvtap: entered promiscuous mode [ 69.180748][ T5254] veth1_macvtap: entered promiscuous mode [ 69.188441][ T5244] Bluetooth: hci3: command tx timeout [ 69.193867][ T5251] veth0_macvtap: entered promiscuous mode [ 69.193899][ T5244] Bluetooth: hci2: command tx timeout [ 69.205825][ T5237] Bluetooth: hci1: command tx timeout [ 69.205847][ T5239] Bluetooth: hci0: command tx timeout [ 69.211658][ T5237] Bluetooth: hci4: command tx timeout [ 69.218560][ T5251] veth1_macvtap: entered promiscuous mode [ 69.263541][ T5251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.289692][ T5251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.306499][ T5251] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.316036][ T5251] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.326144][ T5251] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.335074][ T5251] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.374220][ T5254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.386231][ T5254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.398832][ T5254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.410501][ T5253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.424569][ T5250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.435281][ T5254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.447248][ T5254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.459314][ T5254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.509125][ T5254] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.521012][ T5254] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.530371][ T5254] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.539417][ T5254] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.572293][ T5252] veth0_vlan: entered promiscuous mode [ 69.615249][ T5250] veth0_vlan: entered promiscuous mode [ 69.621743][ T2567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.641856][ T2567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.682076][ T5250] veth1_vlan: entered promiscuous mode [ 69.698332][ T5252] veth1_vlan: entered promiscuous mode [ 69.763794][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.783072][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.812639][ T5250] veth0_macvtap: entered promiscuous mode [ 69.818944][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.826825][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.843224][ T5253] veth0_vlan: entered promiscuous mode [ 69.873237][ T5250] veth1_macvtap: entered promiscuous mode [ 69.884605][ T5252] veth0_macvtap: entered promiscuous mode [ 69.893174][ T5251] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 69.909886][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.910132][ T5252] veth1_macvtap: entered promiscuous mode [ 69.923997][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.948866][ T5253] veth1_vlan: entered promiscuous mode [ 70.013880][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.043657][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.054916][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.066359][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.079601][ T5252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.093677][ T5250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.105658][ T5250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.124390][ T5250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.154137][ T5292] delete_channel: no stack [ 70.157246][ T5250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.171795][ T5250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.182936][ T5250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.200416][ T5250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.228482][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.243493][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.262607][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.274932][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.292785][ T5252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.306475][ T5250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.341084][ T5250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.367910][ T5250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.379288][ T5250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.389753][ T5250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.400549][ T5250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.412466][ T5250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.430060][ T5250] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.441215][ T5250] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.454748][ T5250] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.463773][ T5250] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.484903][ T5252] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.494698][ T5252] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.503791][ T5252] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.512796][ T5252] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.543763][ T5253] veth0_macvtap: entered promiscuous mode [ 70.576215][ T5253] veth1_macvtap: entered promiscuous mode [ 70.584034][ T5287] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 70.608502][ T5238] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 70.644475][ T5253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.658658][ T5253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.668598][ T5253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.679173][ T5253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.689101][ T5253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.701435][ T5253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.711703][ T5253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.722267][ T5253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.733632][ T5253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.744012][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.770197][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.776138][ T5238] usb 5-1: config index 0 descriptor too short (expected 146, got 18) [ 70.787095][ T5238] usb 5-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 70.790750][ T5253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.813092][ T5287] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 70.814442][ T5253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.823588][ T5238] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 65 [ 70.846634][ T5253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.847432][ T5287] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.859312][ T5253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.869681][ T5287] usb 1-1: Product: syz [ 70.883458][ T5253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.883490][ T5287] usb 1-1: Manufacturer: syz [ 70.896042][ T5253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.899649][ T5287] usb 1-1: SerialNumber: syz [ 70.915284][ T5253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.918704][ T5238] usb 5-1: New USB device found, idVendor=3909, idProduct=718a, bcdDevice=ba.c5 [ 70.926327][ T5253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.943084][ T5287] usb 1-1: config 0 descriptor?? [ 70.950173][ T5238] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.953810][ T5253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.961019][ T5238] usb 5-1: Product: syz [ 70.980697][ T5238] usb 5-1: Manufacturer: syz [ 70.985476][ T5238] usb 5-1: SerialNumber: syz [ 71.007750][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.011344][ T5238] usb 5-1: config 0 descriptor?? [ 71.015623][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.045336][ T5253] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.055625][ T5253] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.075377][ T5253] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.084649][ T5253] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.135967][ T2567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.159406][ T2567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.194063][ T5287] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 71.230068][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.258776][ T5244] Bluetooth: hci0: command tx timeout [ 71.264274][ T5244] Bluetooth: hci2: command tx timeout [ 71.273605][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.274302][ T5237] Bluetooth: hci1: command tx timeout [ 71.281460][ T5239] Bluetooth: hci4: command tx timeout [ 71.287290][ T5237] Bluetooth: hci3: command tx timeout [ 71.457703][ T5304] binder: 5297:5304 ioctl c0306201 0 returned -14 [ 71.472334][ T5301] Zero length message leads to an empty skb [ 71.489659][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.519754][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.568895][ T2567] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.620316][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.626900][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.658881][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 71.660812][ T2567] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.525374][ T5320] loop8: detected capacity change from 0 to 7 [ 72.621015][ T5320] Dev loop8: unable to read RDB block 7 [ 72.667868][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 72.677915][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 72.703760][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 72.747481][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 72.777401][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 72.799596][ T5320] loop8: unable to read partition table [ 72.842549][ T5320] loop8: partition table beyond EOD, truncated [ 72.849631][ T5320] loop_reread_partitions: partition scan of loop8 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 72.849631][ T5320] ) failed (rc=-5) [ 72.917715][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.926950][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.339668][ T5237] Bluetooth: hci2: command tx timeout [ 73.339687][ T5244] Bluetooth: hci4: command tx timeout [ 73.339727][ T5244] Bluetooth: hci1: command tx timeout [ 73.345802][ T5237] Bluetooth: hci3: command tx timeout [ 73.350700][ T5242] Bluetooth: hci0: command tx timeout [ 73.367890][ T5289] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 73.462792][ T5299] usb 5-1: USB disconnect, device number 2 [ 73.547873][ T5289] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 73.561690][ T5289] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 73.583771][ T5289] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 73.606292][ T5289] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 65339, setting to 64 [ 73.633316][ T5289] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 73.654624][ T5289] usb 2-1: config 0 interface 0 has no altsetting 0 [ 73.679270][ T5289] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 73.689093][ T5289] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 73.698211][ T5289] usb 2-1: Product: syz [ 73.702473][ T5289] usb 2-1: Manufacturer: syz [ 73.707130][ T5289] usb 2-1: SerialNumber: syz [ 73.724797][ T5289] usb 2-1: config 0 descriptor?? [ 73.748542][ T5330] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 73.755834][ T5335] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14'. [ 73.769509][ T5289] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 73.797819][ T5289] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 74.097399][ T5338] syz.1.12 uses obsolete (PF_INET,SOCK_PACKET) [ 74.128823][ T5338] syzkaller1: entered promiscuous mode [ 74.175502][ T5338] syzkaller1: entered allmulticast mode [ 74.219424][ T5287] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 74.238390][ T5341] fuse: Bad value for 'fd' [ 74.377075][ T5287] usb 1-1: USB disconnect, device number 2 [ 74.410408][ T5289] usb 2-1: USB disconnect, device number 2 [ 74.497214][ T5289] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 74.847524][ T5287] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 75.030593][ T5287] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 75.050773][ T5287] usb 3-1: can't read configurations, error -61 [ 75.077973][ T5299] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 75.208243][ T5287] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 75.260182][ T5299] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.291839][ T5299] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 75.322254][ T5299] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.353379][ T5299] usb 5-1: config 0 descriptor?? [ 75.390797][ T5287] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 75.404260][ T5299] pwc: Askey VC010 type 2 USB webcam detected. [ 75.419684][ T5287] usb 3-1: can't read configurations, error -61 [ 75.442203][ T5287] usb usb3-port1: attempt power cycle [ 75.750754][ T5344] netlink: 47 bytes leftover after parsing attributes in process `syz.0.16'. [ 75.811924][ T5299] pwc: recv_control_msg error -32 req 02 val 2b00 [ 75.820720][ T5287] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 75.905717][ T5287] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 75.975840][ T5287] usb 3-1: can't read configurations, error -61 [ 76.102326][ T5299] pwc: recv_control_msg error -71 req 02 val 2700 [ 76.151541][ T5299] pwc: recv_control_msg error -71 req 02 val 2c00 [ 76.167423][ T5287] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 76.213525][ T5299] pwc: recv_control_msg error -71 req 04 val 1000 [ 76.257284][ T5287] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 76.283455][ T5299] pwc: recv_control_msg error -71 req 04 val 1300 [ 76.302013][ T5287] usb 3-1: can't read configurations, error -61 [ 76.330207][ T5299] pwc: recv_control_msg error -71 req 04 val 1400 [ 76.347220][ T5287] usb usb3-port1: unable to enumerate USB device [ 76.373104][ T5299] pwc: recv_control_msg error -71 req 02 val 2000 [ 76.397445][ T5288] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 76.437455][ T5299] pwc: recv_control_msg error -71 req 02 val 2100 [ 76.483152][ T5299] pwc: recv_control_msg error -71 req 04 val 1500 [ 76.511041][ T5299] pwc: recv_control_msg error -71 req 02 val 2500 [ 76.547496][ T5299] pwc: recv_control_msg error -71 req 02 val 2400 [ 76.574433][ T5299] pwc: recv_control_msg error -71 req 02 val 2600 [ 76.600128][ T5299] pwc: recv_control_msg error -71 req 02 val 2900 [ 76.607544][ T5288] usb 1-1: Using ep0 maxpacket: 32 [ 76.632470][ T5354] netlink: 16 bytes leftover after parsing attributes in process `syz.1.20'. [ 76.649844][ T5288] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.661372][ T5299] pwc: recv_control_msg error -71 req 02 val 2800 [ 76.689208][ T5299] pwc: recv_control_msg error -71 req 04 val 1100 [ 76.707410][ T5288] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.725612][ T5354] x_tables: duplicate underflow at hook 1 [ 76.733166][ T5299] pwc: recv_control_msg error -71 req 04 val 1200 [ 76.749329][ T5288] usb 1-1: New USB device found, idVendor=05ac, idProduct=0251, bcdDevice= 0.00 [ 76.770484][ T5299] pwc: Registered as video71. [ 76.776791][ T5299] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5 [ 76.819052][ T5288] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.879820][ T5288] usb 1-1: config 0 descriptor?? [ 76.951520][ T5299] usb 5-1: USB disconnect, device number 3 [ 77.500065][ T5299] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 77.746915][ T5299] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.818234][ T5299] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 77.884552][ T5299] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.983975][ T5299] usb 5-1: config 0 descriptor?? [ 78.023744][ T5299] pwc: Askey VC010 type 2 USB webcam detected. [ 78.477523][ T5287] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 78.707698][ T5287] usb 2-1: config 0 has an invalid interface number: 18 but max is 0 [ 78.718020][ T5299] pwc: recv_control_msg error -71 req 02 val 2700 [ 78.758675][ T5299] pwc: recv_control_msg error -71 req 02 val 2c00 [ 78.777220][ T5287] usb 2-1: config 0 has no interface number 0 [ 78.812804][ T5287] usb 2-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.824434][ T5299] pwc: recv_control_msg error -71 req 04 val 1000 [ 78.857817][ T5299] pwc: recv_control_msg error -71 req 04 val 1300 [ 78.891553][ T5287] usb 2-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.912085][ T5299] pwc: recv_control_msg error -71 req 04 val 1400 [ 78.940444][ T5299] pwc: recv_control_msg error -71 req 02 val 2000 [ 78.959704][ T5287] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 78.988133][ T5299] pwc: recv_control_msg error -71 req 02 val 2100 [ 79.013677][ T5287] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 79.035456][ T5299] pwc: recv_control_msg error -71 req 04 val 1500 [ 79.073877][ T5287] usb 2-1: Manufacturer: syz [ 79.096666][ T5299] pwc: recv_control_msg error -71 req 02 val 2500 [ 79.119511][ T5287] usb 2-1: config 0 descriptor?? [ 79.167600][ T5299] pwc: recv_control_msg error -71 req 02 val 2400 [ 79.197941][ T5299] pwc: recv_control_msg error -71 req 02 val 2600 [ 79.234648][ T5299] pwc: recv_control_msg error -71 req 02 val 2900 [ 79.282305][ T5299] pwc: recv_control_msg error -71 req 02 val 2800 [ 79.331068][ T5299] pwc: recv_control_msg error -71 req 04 val 1100 [ 79.395338][ T5299] pwc: recv_control_msg error -71 req 04 val 1200 [ 79.407337][ C1] sched: DL replenish lagged too much [ 79.468428][ T5299] pwc: Registered as video71. [ 79.562133][ T5299] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input6 [ 79.765864][ T5299] usb 5-1: USB disconnect, device number 4 [ 79.799347][ T5287] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.18/0003:054C:03D5.0001/input/input7 [ 80.041215][ T5366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23'. [ 80.165125][ T5366] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 80.188306][ T5380] netlink: 47 bytes leftover after parsing attributes in process `syz.2.28'. [ 80.313101][ T5287] sony 0003:054C:03D5.0001: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.1-1/input18 [ 80.354096][ T5376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.604068][ T5376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.627462][ T5288] usbhid 1-1:0.0: can't add hid device: -71 [ 80.672257][ T5288] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 80.762207][ T5288] usb 1-1: USB disconnect, device number 3 [ 82.118243][ T8] cfg80211: failed to load regulatory.db [ 82.147839][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.161807][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.073857][ T5287] usb 2-1: reset high-speed USB device number 3 using dummy_hcd [ 83.814666][ T29] audit: type=1326 audit(1727468243.676:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5363 comm="syz.1.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf88b7df39 code=0x7fc00000 [ 84.031584][ T5392] xt_cgroup: invalid path, errno=-2 [ 87.707613][ T5299] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 87.850816][ T5239] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 87.862582][ T5239] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 87.872154][ T5239] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 87.882950][ T5239] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 87.898229][ T5239] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 87.914885][ T5239] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 88.179617][ T5299] usb 5-1: unable to get BOS descriptor or descriptor too short [ 88.238509][ T5299] usb 5-1: not running at top speed; connect to a high speed hub [ 88.580144][ T5299] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 89.017637][ T5299] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 22619, setting to 1023 [ 89.257484][ T5287] usb 2-1: device descriptor read/64, error -110 [ 89.920465][ T5404] fuse: Bad value for 'group_id' [ 89.977629][ T5237] Bluetooth: hci5: command tx timeout [ 90.076922][ T5404] fuse: Bad value for 'group_id' [ 90.220328][ T5299] usb 5-1: string descriptor 0 read error: -71 [ 90.230934][ T5287] usb 2-1: reset high-speed USB device number 3 using dummy_hcd [ 90.328019][ T5299] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 90.379753][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 90.514520][ T5299] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.599800][ T5299] usb 5-1: can't set config #1, error -71 [ 90.777927][ T5299] usb 5-1: USB disconnect, device number 5 [ 90.809092][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 90.858401][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 90.929089][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 90.977519][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.034915][ T9] usb 1-1: Product: syz [ 91.056644][ T9] usb 1-1: Manufacturer: syz [ 91.097819][ T9] usb 1-1: SerialNumber: syz [ 91.132484][ T9] usb 1-1: config 0 descriptor?? [ 91.162020][ T9] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 91.242903][ T8] usb 2-1: USB disconnect, device number 3 [ 91.561594][ T5239] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.572899][ T5239] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.583230][ T5239] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.602738][ T5239] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.618202][ T5239] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 91.626691][ T5239] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.717478][ T9] gspca_zc3xx: reg_w_i err -110 [ 92.058449][ T5239] Bluetooth: hci5: command tx timeout [ 92.307531][ T9] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 92.320294][ T9] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 93.737523][ T5239] Bluetooth: hci0: command tx timeout [ 94.137686][ T5239] Bluetooth: hci5: command tx timeout [ 95.817593][ T5239] Bluetooth: hci0: command tx timeout [ 96.217543][ T5239] Bluetooth: hci5: command tx timeout [ 97.090295][ T5237] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 97.099670][ T5237] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 97.107983][ T5237] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 97.116052][ T5237] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 97.124062][ T5237] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 97.132604][ T5237] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 97.903260][ T5237] Bluetooth: hci0: command tx timeout [ 98.615429][ T5239] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 98.625434][ T5239] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 98.637677][ T5239] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 98.646496][ T5239] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 98.654734][ T5239] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 98.663936][ T5239] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 99.177693][ T5239] Bluetooth: hci4: command tx timeout [ 99.977578][ T5239] Bluetooth: hci0: command tx timeout [ 100.697570][ T5239] Bluetooth: hci6: command tx timeout [ 101.257599][ T5239] Bluetooth: hci4: command tx timeout [ 102.787370][ T5239] Bluetooth: hci6: command tx timeout [ 103.104783][ T5237] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 103.113855][ T5237] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 103.123659][ T5237] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 103.137827][ T5237] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 103.147931][ T5237] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 103.156354][ T5237] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 103.337485][ T5237] Bluetooth: hci4: command tx timeout [ 104.858574][ T5237] Bluetooth: hci6: command tx timeout [ 105.177632][ T5237] Bluetooth: hci7: command tx timeout [ 105.417614][ T5237] Bluetooth: hci4: command tx timeout [ 106.937667][ T5237] Bluetooth: hci6: command tx timeout [ 107.257562][ T5237] Bluetooth: hci7: command tx timeout [ 109.337422][ T5237] Bluetooth: hci7: command tx timeout [ 111.417474][ T5237] Bluetooth: hci7: command tx timeout [ 133.047982][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.054453][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 148.011201][ T5239] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 148.076876][ T5239] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 148.101742][ T5239] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 148.180174][ T5239] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 148.256608][ T5239] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 148.276439][ T5239] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 150.457537][ T5237] Bluetooth: hci8: command tx timeout [ 151.099247][ T5239] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 151.108313][ T5239] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 151.116584][ T5239] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 151.127480][ T5239] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 151.136171][ T5239] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 151.147091][ T5239] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 152.539176][ T5237] Bluetooth: hci8: command tx timeout [ 153.177629][ T5237] Bluetooth: hci9: command tx timeout [ 154.617427][ T5237] Bluetooth: hci8: command tx timeout [ 155.257485][ T5237] Bluetooth: hci9: command tx timeout [ 156.697614][ T5237] Bluetooth: hci8: command tx timeout [ 157.182533][ T5239] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 157.192605][ T5239] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 157.200742][ T5239] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 157.217689][ T5239] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 157.229102][ T5239] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 157.236597][ T5239] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 157.337798][ T5239] Bluetooth: hci9: command tx timeout [ 159.309571][ T5237] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 159.321471][ T5237] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 159.329804][ T5237] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 159.346294][ T5237] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 159.354406][ T5244] Bluetooth: hci10: command tx timeout [ 159.364602][ T5237] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 159.372495][ T5237] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 159.417603][ T5237] Bluetooth: hci9: command tx timeout [ 161.417596][ T5237] Bluetooth: hci11: command tx timeout [ 161.423636][ T5237] Bluetooth: hci10: command tx timeout [ 163.501490][ T5239] Bluetooth: hci11: command tx timeout [ 163.507147][ T5237] Bluetooth: hci10: command tx timeout [ 163.778057][ T5239] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 163.790385][ T5239] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 163.798546][ T5239] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 163.806684][ T5239] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 163.815237][ T5239] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 163.827580][ T5239] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 165.577636][ T5237] Bluetooth: hci11: command tx timeout [ 165.585886][ T5239] Bluetooth: hci10: command tx timeout [ 165.903836][ T5239] Bluetooth: hci12: command tx timeout [ 167.657732][ T5239] Bluetooth: hci11: command tx timeout [ 167.977562][ T5239] Bluetooth: hci12: command tx timeout [ 170.057644][ T5239] Bluetooth: hci12: command tx timeout [ 172.144850][ T5239] Bluetooth: hci12: command tx timeout [ 191.423253][ T5242] Bluetooth: hci3: command 0x0406 tx timeout [ 191.429460][ T4626] Bluetooth: hci2: command 0x0406 tx timeout [ 191.435643][ T4626] Bluetooth: hci1: command 0x0406 tx timeout [ 194.475102][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.481524][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 207.486370][ T5237] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 207.495332][ T5237] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 207.504145][ T5237] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 207.512367][ T5237] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 207.534379][ T5237] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 207.543006][ T5237] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 209.577678][ T5237] Bluetooth: hci13: command tx timeout [ 211.657417][ T5237] Bluetooth: hci13: command tx timeout [ 211.902891][ T5237] Bluetooth: hci5: command 0x0406 tx timeout [ 212.115882][ T5237] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 212.128568][ T5237] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 212.136964][ T5237] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 212.145775][ T5237] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 212.153952][ T5237] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 212.163390][ T5237] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 213.737609][ T5237] Bluetooth: hci13: command tx timeout [ 214.217573][ T5237] Bluetooth: hci14: command tx timeout [ 215.827559][ T5237] Bluetooth: hci13: command tx timeout [ 216.297728][ T5237] Bluetooth: hci14: command tx timeout [ 217.027376][ T5237] Bluetooth: hci0: command 0x0406 tx timeout [ 217.729149][ T5237] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 217.738621][ T5237] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 217.753502][ T5237] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 217.764349][ T5237] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 217.772537][ T5237] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 217.780566][ T5237] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 218.377423][ T5237] Bluetooth: hci14: command tx timeout [ 219.826815][ T5239] Bluetooth: hci15: command tx timeout [ 219.834300][ T5239] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 219.843068][ T5239] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 219.857740][ T5239] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 219.867856][ T5239] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 219.879998][ T5239] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 219.888267][ T5239] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 220.457437][ T5242] Bluetooth: hci14: command tx timeout [ 221.897592][ T5242] Bluetooth: hci15: command tx timeout [ 221.977552][ T5242] Bluetooth: hci16: command tx timeout [ 222.147545][ T5244] Bluetooth: hci6: command 0x0406 tx timeout [ 222.153681][ T5242] Bluetooth: hci4: command 0x0406 tx timeout [ 223.977496][ T5237] Bluetooth: hci15: command tx timeout [ 224.057653][ T5237] Bluetooth: hci16: command tx timeout [ 224.789247][ T5239] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 224.798716][ T5239] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 224.809062][ T5239] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 224.817822][ T5239] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 224.828196][ T5239] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 224.835679][ T5239] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 226.057708][ T5237] Bluetooth: hci15: command tx timeout [ 226.137726][ T5237] Bluetooth: hci16: command tx timeout [ 226.857483][ T5237] Bluetooth: hci17: command tx timeout [ 227.262761][ T5237] Bluetooth: hci7: command 0x0406 tx timeout [ 228.223455][ T5239] Bluetooth: hci16: command tx timeout [ 228.937513][ T5239] Bluetooth: hci17: command tx timeout [ 231.017481][ T5239] Bluetooth: hci17: command tx timeout [ 233.097745][ T5239] Bluetooth: hci17: command tx timeout [ 243.113942][ T30] INFO: task kworker/u8:4:63 blocked for more than 143 seconds. [ 243.122121][ T30] Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 243.137366][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 243.146107][ T30] task:kworker/u8:4 state:D stack:22992 pid:63 tgid:63 ppid:2 flags:0x00004000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 243.204925][ T30] Workqueue: netns cleanup_net [ 243.231385][ T30] Call Trace: [ 243.235035][ T30] [ 243.265977][ T30] __schedule+0x1895/0x4b30 [ 243.347405][ T30] ? __pfx___schedule+0x10/0x10 [ 243.352353][ T30] ? __pfx_lock_release+0x10/0x10 [ 243.437329][ T30] ? kthread_data+0x52/0xd0 [ 243.441930][ T30] ? wq_worker_sleeping+0x66/0x240 [ 243.447101][ T30] ? schedule+0x90/0x320 [ 243.497459][ T30] schedule+0x14b/0x320 [ 243.501720][ T30] schedule_timeout+0xb0/0x310 [ 243.553120][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 243.585757][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 243.626826][ T30] ? wait_for_completion+0x2fe/0x620 [ 243.653347][ T30] ? wait_for_completion+0x2fe/0x620 [ 243.684268][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 243.707446][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 243.713991][ T30] ? wait_for_completion+0x2fe/0x620 [ 243.762438][ T30] wait_for_completion+0x355/0x620 [ 243.783898][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 243.812732][ T30] ? __flush_work+0xe7/0xc50 [ 243.830205][ T30] __flush_work+0xa37/0xc50 [ 243.854174][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 243.865478][ T30] ? __flush_work+0xe7/0xc50 [ 243.887499][ T30] ? __pfx___flush_work+0x10/0x10 [ 243.892630][ T30] ? __pfx_wq_barrier_func+0x10/0x10 [ 243.927411][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 243.950270][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 243.955493][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 244.002236][ T30] unregister_netdevice_many_notify+0x87b/0x1da0 [ 244.033965][ T30] ? net_generic+0x1f/0x240 [ 244.057623][ T30] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 244.064547][ T30] ? vxlan_exit_batch_rtnl+0x36f/0x400 [ 244.102296][ T30] ? nexthop_net_exit_batch_rtnl+0x100/0x150 [ 244.127384][ T30] cleanup_net+0x75d/0xcc0 [ 244.131906][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 244.136906][ T30] ? process_scheduled_works+0x976/0x1850 [ 244.203560][ T30] process_scheduled_works+0xa63/0x1850 [ 244.237414][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 244.243504][ T30] ? assign_work+0x364/0x3d0 [ 244.274930][ T30] worker_thread+0x870/0xd30 [ 244.287687][ T30] ? __kthread_parkme+0x169/0x1d0 [ 244.292883][ T30] ? __pfx_worker_thread+0x10/0x10 [ 244.324461][ T30] kthread+0x2f0/0x390 [ 244.330961][ T30] ? __pfx_worker_thread+0x10/0x10 [ 244.336147][ T30] ? __pfx_kthread+0x10/0x10 [ 244.347127][ T30] ret_from_fork+0x4b/0x80 [ 244.352719][ T30] ? __pfx_kthread+0x10/0x10 [ 244.363704][ T30] ret_from_fork_asm+0x1a/0x30 [ 244.370310][ T30] [ 244.374927][ T30] INFO: task jbd2/sda1-8:4651 blocked for more than 144 seconds. [ 244.387466][ T30] Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 244.394795][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 244.410033][ T30] task:jbd2/sda1-8 state:D stack:24240 pid:4651 tgid:4651 ppid:2 flags:0x00004000 [ 244.425949][ T30] Call Trace: [ 244.434289][ T30] [ 244.441249][ T30] __schedule+0x1895/0x4b30 [ 244.446388][ T30] ? __pfx___schedule+0x10/0x10 [ 244.454164][ T30] ? __pfx_lock_release+0x10/0x10 [ 244.465504][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 244.474261][ T30] ? schedule+0x90/0x320 [ 244.483825][ T30] schedule+0x14b/0x320 [ 244.490809][ T30] io_schedule+0x8d/0x110 [ 244.495212][ T30] bit_wait_io+0x12/0xd0 [ 244.504047][ T30] __wait_on_bit+0xb0/0x2f0 [ 244.516351][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 244.525370][ T30] out_of_line_wait_on_bit+0x1d5/0x260 [ 244.536703][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 244.547638][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 244.554254][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 244.565502][ T30] jbd2_journal_commit_transaction+0x3df6/0x67e0 [ 244.572302][ T30] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 244.585441][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 244.592219][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 244.604343][ T30] ? __try_to_del_timer_sync+0x2ad/0x340 [ 244.610424][ T30] ? __timer_delete_sync+0x15c/0x310 [ 244.615830][ T30] ? __timer_delete_sync+0x25d/0x310 [ 244.636918][ T30] ? __pfx___timer_delete_sync+0x10/0x10 [ 244.647007][ T30] ? __pfx_do_raw_write_lock+0x10/0x10 [ 244.656384][ T30] ? prepare_to_wait+0x186/0x210 [ 244.665472][ T30] ? schedule+0x90/0x320 [ 244.672491][ T30] kjournald2+0x41c/0x7b0 [ 244.676897][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 244.691163][ T30] ? __pfx_kjournald2+0x10/0x10 [ 244.696117][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 244.705417][ T30] ? __kthread_parkme+0x169/0x1d0 [ 244.715673][ T30] ? __pfx_kjournald2+0x10/0x10 [ 244.722429][ T30] kthread+0x2f0/0x390 [ 244.726569][ T30] ? __pfx_kjournald2+0x10/0x10 [ 244.736926][ T30] ? __pfx_kthread+0x10/0x10 [ 244.746408][ T30] ret_from_fork+0x4b/0x80 [ 244.753654][ T30] ? __pfx_kthread+0x10/0x10 [ 244.763190][ T30] ret_from_fork_asm+0x1a/0x30 [ 244.770925][ T30] [ 244.774223][ T30] INFO: task syz-executor:5250 blocked for more than 145 seconds. [ 244.786187][ T30] Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 244.797971][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 244.806694][ T30] task:syz-executor state:D stack:20080 pid:5250 tgid:5250 ppid:1 flags:0x00004006 [ 244.823313][ T30] Call Trace: [ 244.826668][ T30] [ 244.830091][ T30] __schedule+0x1895/0x4b30 [ 244.834711][ T30] ? __pfx___schedule+0x10/0x10 [ 244.849807][ T30] ? __pfx_lock_release+0x10/0x10 [ 244.854937][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 244.866443][ T30] ? schedule+0x90/0x320 [ 244.873325][ T30] schedule+0x14b/0x320 [ 244.882622][ T30] schedule_preempt_disabled+0x13/0x30 [ 244.889670][ T30] __mutex_lock+0x6a7/0xd70 [ 244.894236][ T30] ? __mutex_lock+0x52a/0xd70 [ 244.905466][ T30] ? tun_chr_close+0x3b/0x1b0 [ 244.911817][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 244.916918][ T30] ? __pfx_call_rcu+0x10/0x10 [ 244.926886][ T30] tun_chr_close+0x3b/0x1b0 [ 244.932959][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 244.945317][ T30] __fput+0x23f/0x880 [ 244.952293][ T30] task_work_run+0x24f/0x310 [ 244.956948][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 244.967333][ T30] ? __pfx_task_work_run+0x10/0x10 [ 244.972547][ T30] ? do_exit+0xa2a/0x28e0 [ 244.976918][ T30] ? kmem_cache_free+0x1a2/0x420 [ 244.988609][ T30] ? do_exit+0xa2a/0x28e0 [ 244.993011][ T30] do_exit+0xa2f/0x28e0 [ 244.997219][ T30] ? __pfx_do_exit+0x10/0x10 [ 245.010390][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 245.015830][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 245.027766][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 245.034168][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 245.046876][ T30] do_group_exit+0x207/0x2c0 [ 245.053232][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 245.065296][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 245.071014][ T30] get_signal+0x16a3/0x1740 [ 245.075681][ T30] ? __pfx_get_signal+0x10/0x10 [ 245.086935][ T30] arch_do_signal_or_restart+0x96/0x860 [ 245.093400][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 245.107354][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 245.113422][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 245.125882][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 245.131863][ T30] do_syscall_64+0x100/0x230 [ 245.136512][ T30] ? clear_bhb_loop+0x35/0x90 [ 245.145787][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.155851][ T30] RIP: 0033:0x7f1344574197 [ 245.164860][ T30] RSP: 002b:00007f134485fd90 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 245.180193][ T30] RAX: fffffffffffffe00 RBX: 000000000000000b RCX: 00007f1344574197 [ 245.191028][ T30] RDX: 0000000040000000 RSI: 00007f134485fdec RDI: 00000000ffffffff [ 245.203438][ T30] RBP: 00007f134485fdec R08: 0000000000000000 R09: 7fffffffffffffff [ 245.215675][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 000055556f5905eb [ 245.230155][ T30] R13: 000055556f590590 R14: 0000000000011fbf R15: 00007f134485fe40 [ 245.240993][ T30] [ 245.244142][ T30] INFO: task syz-executor:5253 blocked for more than 145 seconds. [ 245.257662][ T30] Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 245.264997][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 245.281427][ T30] task:syz-executor state:D stack:19968 pid:5253 tgid:5253 ppid:1 flags:0x00004006 [ 245.294450][ T30] Call Trace: [ 245.301621][ T30] [ 245.304607][ T30] __schedule+0x1895/0x4b30 [ 245.315586][ T30] ? __pfx___schedule+0x10/0x10 [ 245.324536][ T30] ? __pfx_lock_release+0x10/0x10 [ 245.332385][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 245.344690][ T30] ? schedule+0x90/0x320 [ 245.353548][ T30] schedule+0x14b/0x320 [ 245.361750][ T30] schedule_preempt_disabled+0x13/0x30 [ 245.376521][ T30] __mutex_lock+0x6a7/0xd70 [ 245.385074][ T30] ? __mutex_lock+0x52a/0xd70 [ 245.392628][ T30] ? tun_chr_close+0x3b/0x1b0 [ 245.401351][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 245.406541][ T30] ? __pfx_call_rcu+0x10/0x10 [ 245.414053][ T30] tun_chr_close+0x3b/0x1b0 [ 245.423071][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 245.432344][ T30] __fput+0x23f/0x880 [ 245.436411][ T30] task_work_run+0x24f/0x310 [ 245.445109][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 245.454910][ T30] ? __pfx_task_work_run+0x10/0x10 [ 245.463966][ T30] ? do_exit+0xa2a/0x28e0 [ 245.471505][ T30] ? kmem_cache_free+0x1a2/0x420 [ 245.476685][ T30] ? do_exit+0xa2a/0x28e0 [ 245.488136][ T30] do_exit+0xa2f/0x28e0 [ 245.492403][ T30] ? __pfx_do_exit+0x10/0x10 [ 245.497127][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 245.511150][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 245.517216][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 245.526946][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 245.537367][ T30] do_group_exit+0x207/0x2c0 [ 245.545116][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 245.553394][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 245.564264][ T30] get_signal+0x16a3/0x1740 [ 245.572140][ T30] ? __pfx_get_signal+0x10/0x10 [ 245.577067][ T30] arch_do_signal_or_restart+0x96/0x860 [ 245.589067][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 245.595295][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 245.607243][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 245.613372][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 245.625321][ T30] do_syscall_64+0x100/0x230 [ 245.631694][ T30] ? clear_bhb_loop+0x35/0x90 [ 245.636433][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.647329][ T30] RIP: 0033:0x7faf88b74197 [ 245.651805][ T30] RSP: 002b:00007faf88e5fd90 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 245.676727][ T30] RAX: fffffffffffffe00 RBX: 0000000000000012 RCX: 00007faf88b74197 [ 245.692976][ T30] RDX: 0000000040000000 RSI: 00007faf88e5fdec RDI: 00000000ffffffff [ 245.702647][ T30] RBP: 00007faf88e5fdec R08: 0000000000000000 R09: 7fffffffffffffff [ 245.715881][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 00005555722925eb [ 245.725555][ T30] R13: 0000555572292590 R14: 0000000000013101 R15: 00007faf88e5fe40 [ 245.742881][ T30] [ 245.746199][ T30] INFO: task kworker/0:6:5288 blocked for more than 145 seconds. [ 245.756166][ T30] Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 245.769810][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 245.783675][ T30] task:kworker/0:6 state:D stack:23680 pid:5288 tgid:5288 ppid:2 flags:0x00004000 [ 245.796876][ T30] Workqueue: events_power_efficient crda_timeout_work [ 245.807596][ T30] Call Trace: [ 245.811015][ T30] [ 245.813987][ T30] __schedule+0x1895/0x4b30 [ 245.824172][ T30] ? __pfx___schedule+0x10/0x10 [ 245.829458][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 245.835502][ T30] ? __pfx_lock_release+0x10/0x10 [ 245.848565][ T30] ? kick_pool+0x45c/0x620 [ 245.853151][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 245.867018][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 245.872667][ T30] ? schedule+0x90/0x320 [ 245.876977][ T30] schedule+0x14b/0x320 [ 245.887437][ T30] schedule_preempt_disabled+0x13/0x30 [ 245.893004][ T30] __mutex_lock+0x6a7/0xd70 [ 245.904917][ T30] ? __mutex_lock+0x52a/0xd70 [ 245.909988][ T30] ? crda_timeout_work+0x15/0x50 [ 245.914996][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 245.926528][ T30] ? process_scheduled_works+0x976/0x1850 [ 245.932704][ T30] crda_timeout_work+0x15/0x50 [ 245.945085][ T30] process_scheduled_works+0xa63/0x1850 [ 245.951080][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 245.957133][ T30] ? assign_work+0x364/0x3d0 [ 245.965717][ T30] worker_thread+0x870/0xd30 [ 245.975568][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 245.983306][ T30] ? __kthread_parkme+0x169/0x1d0 [ 245.995332][ T30] ? __pfx_worker_thread+0x10/0x10 [ 246.002128][ T30] kthread+0x2f0/0x390 [ 246.006253][ T30] ? __pfx_worker_thread+0x10/0x10 [ 246.016692][ T30] ? __pfx_kthread+0x10/0x10 [ 246.022932][ T30] ret_from_fork+0x4b/0x80 [ 246.032906][ T30] ? __pfx_kthread+0x10/0x10 [ 246.039217][ T30] ret_from_fork_asm+0x1a/0x30 [ 246.044064][ T30] [ 246.049310][ T30] INFO: task syz.2.36:5404 blocked for more than 146 seconds. [ 246.056821][ T30] Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 246.073513][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 246.084404][ T30] task:syz.2.36 state:D stack:26592 pid:5404 tgid:5403 ppid:5252 flags:0x00000004 [ 246.102894][ T30] Call Trace: [ 246.106231][ T30] [ 246.110933][ T30] __schedule+0x1895/0x4b30 [ 246.115529][ T30] ? __pfx___schedule+0x10/0x10 [ 246.125913][ T30] ? __pfx_lock_release+0x10/0x10 [ 246.132584][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 246.140704][ T30] ? schedule+0x90/0x320 [ 246.145017][ T30] schedule+0x14b/0x320 [ 246.155045][ T30] schedule_preempt_disabled+0x13/0x30 [ 246.162102][ T30] __mutex_lock+0x6a7/0xd70 [ 246.166675][ T30] ? __mutex_lock+0x52a/0xd70 [ 246.177746][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 246.182935][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 246.194868][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 246.201622][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 246.206804][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 246.218752][ T30] ? ref_tracker_free+0x643/0x7e0 [ 246.223860][ T30] netlink_rcv_skb+0x1e3/0x430 [ 246.233935][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 246.240997][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 246.246379][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 246.257297][ T30] netlink_unicast+0x7f6/0x990 [ 246.262145][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 246.275515][ T30] ? __virt_addr_valid+0x183/0x530 [ 246.281031][ T30] ? __check_object_size+0x48e/0x900 [ 246.286381][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 246.298242][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 246.303613][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 246.315669][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 246.321360][ T30] __sock_sendmsg+0x221/0x270 [ 246.326197][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 246.337223][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 246.342654][ T30] __sys_sendmsg+0x292/0x380 [ 246.353664][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 246.360604][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 246.367005][ T30] ? do_syscall_64+0x100/0x230 [ 246.375459][ T30] ? do_syscall_64+0xb6/0x230 [ 246.387390][ T30] do_syscall_64+0xf3/0x230 [ 246.392403][ T30] ? clear_bhb_loop+0x35/0x90 [ 246.397143][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.412304][ T30] RIP: 0033:0x7fc73137df39 [ 246.416789][ T30] RSP: 002b:00007fc73223a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 246.428752][ T30] RAX: ffffffffffffffda RBX: 00007fc731535f80 RCX: 00007fc73137df39 [ 246.436787][ T30] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000009 [ 246.447801][ T30] RBP: 00007fc7313f0216 R08: 0000000000000000 R09: 0000000000000000 [ 246.455830][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.470784][ T30] R13: 0000000000000000 R14: 00007fc731535f80 R15: 00007fc73165fa28 [ 246.484487][ T30] [ 246.490443][ T30] INFO: task syz.0.38:5418 blocked for more than 146 seconds. [ 246.502393][ T30] Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 246.513897][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 246.526459][ T30] task:syz.0.38 state:D stack:27136 pid:5418 tgid:5416 ppid:5251 flags:0x00000004 [ 246.546290][ T30] Call Trace: [ 246.550053][ T30] [ 246.553034][ T30] __schedule+0x1895/0x4b30 [ 246.563822][ T30] ? __pfx___schedule+0x10/0x10 [ 246.570427][ T30] ? __pfx_lock_release+0x10/0x10 [ 246.575527][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 246.587359][ T30] ? schedule+0x90/0x320 [ 246.591687][ T30] schedule+0x14b/0x320 [ 246.595902][ T30] schedule_preempt_disabled+0x13/0x30 [ 246.608030][ T30] __mutex_lock+0x6a7/0xd70 [ 246.612639][ T30] ? __mutex_lock+0x52a/0xd70 [ 246.629403][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 246.634614][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 246.644892][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 246.651895][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 246.657086][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 246.667327][ T30] ? ref_tracker_free+0x643/0x7e0 [ 246.672437][ T30] netlink_rcv_skb+0x1e3/0x430 [ 246.686382][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 246.692249][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 246.712810][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 246.719954][ T30] netlink_unicast+0x7f6/0x990 [ 246.724794][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 246.736454][ T30] ? __virt_addr_valid+0x183/0x530 [ 246.742018][ T30] ? __check_object_size+0x48e/0x900 [ 246.753493][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 246.759207][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 246.764569][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 246.777565][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 246.782943][ T30] __sock_sendmsg+0x221/0x270 [ 246.795704][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 246.801479][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 246.806847][ T30] __sys_sendmsg+0x292/0x380 [ 246.817845][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 246.823171][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 246.836492][ T30] ? do_syscall_64+0x100/0x230 [ 246.841708][ T30] ? do_syscall_64+0xb6/0x230 [ 246.846444][ T30] do_syscall_64+0xf3/0x230 [ 246.857486][ T30] ? clear_bhb_loop+0x35/0x90 [ 246.862246][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.876847][ T30] RIP: 0033:0x7f32e397df39 [ 246.881740][ T30] RSP: 002b:00007f32e4749038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 246.898460][ T30] RAX: ffffffffffffffda RBX: 00007f32e3b35f80 RCX: 00007f32e397df39 [ 246.906550][ T30] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 246.920453][ T30] RBP: 00007f32e39f0216 R08: 0000000000000000 R09: 0000000000000000 [ 246.932702][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.945557][ T30] R13: 0000000000000000 R14: 00007f32e3b35f80 R15: 00007f32e3c5fa28 [ 246.956386][ T30] [ 246.963332][ T30] INFO: task syz.0.38:5419 blocked for more than 147 seconds. [ 246.973639][ T30] Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 246.986744][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 247.003516][ T30] task:syz.0.38 state:D stack:22336 pid:5419 tgid:5416 ppid:5251 flags:0x00004004 [ 247.014701][ T30] Call Trace: [ 247.024386][ T30] [ 247.028976][ T30] __schedule+0x1895/0x4b30 [ 247.033587][ T30] ? __pfx___schedule+0x10/0x10 [ 247.045177][ T30] ? __pfx_lock_release+0x10/0x10 [ 247.051206][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 247.056757][ T30] ? schedule+0x90/0x320 [ 247.067310][ T30] schedule+0x14b/0x320 [ 247.071555][ T30] schedule_preempt_disabled+0x13/0x30 [ 247.077121][ T30] __mutex_lock+0x6a7/0xd70 [ 247.089661][ T30] ? __mutex_lock+0x52a/0xd70 [ 247.096313][ T30] ? register_nexthop_notifier+0x84/0x290 [ 247.113368][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 247.119155][ T30] ? __asan_memset+0x23/0x50 [ 247.123837][ T30] register_nexthop_notifier+0x84/0x290 [ 247.137044][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 247.143329][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 247.155950][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 247.162576][ T30] ? __asan_memset+0x23/0x50 [ 247.173496][ T30] ops_init+0x31e/0x590 [ 247.178191][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 247.183642][ T30] setup_net+0x287/0x9e0 [ 247.194554][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 247.204061][ T30] ? __pfx_setup_net+0x10/0x10 [ 247.212143][ T30] copy_net_ns+0x33f/0x570 [ 247.216641][ T30] create_new_namespaces+0x425/0x7b0 [ 247.226035][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 247.234675][ T30] ksys_unshare+0x619/0xc10 [ 247.244703][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 247.252683][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 247.266038][ T30] ? do_syscall_64+0x100/0x230 [ 247.273684][ T30] __x64_sys_unshare+0x38/0x40 [ 247.282420][ T30] do_syscall_64+0xf3/0x230 [ 247.286992][ T30] ? clear_bhb_loop+0x35/0x90 [ 247.301490][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.309580][ T30] RIP: 0033:0x7f32e397df39 [ 247.314054][ T30] RSP: 002b:00007f32e4728038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 247.330010][ T30] RAX: ffffffffffffffda RBX: 00007f32e3b36058 RCX: 00007f32e397df39 [ 247.346056][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000068040200 [ 247.356963][ T30] RBP: 00007f32e39f0216 R08: 0000000000000000 R09: 0000000000000000 [ 247.368957][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.376997][ T30] R13: 0000000000000000 R14: 00007f32e3b36058 R15: 00007f32e3c5fa28 [ 247.391597][ T30] [ 247.394766][ T30] INFO: task syz-executor:5417 blocked for more than 147 seconds. [ 247.412528][ T30] Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 247.426066][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 247.441447][ T30] task:syz-executor state:D stack:26816 pid:5417 tgid:5417 ppid:1 flags:0x00004004 [ 247.454908][ T30] Call Trace: [ 247.463304][ T30] [ 247.466298][ T30] __schedule+0x1895/0x4b30 [ 247.472671][ T30] ? __pfx___schedule+0x10/0x10 [ 247.482716][ T30] ? __pfx_lock_release+0x10/0x10 [ 247.489414][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 247.495055][ T30] ? schedule+0x90/0x320 [ 247.507376][ T30] schedule+0x14b/0x320 [ 247.511620][ T30] schedule_preempt_disabled+0x13/0x30 [ 247.517133][ T30] __mutex_lock+0x6a7/0xd70 [ 247.528999][ T30] ? __mutex_lock+0x52a/0xd70 [ 247.533753][ T30] ? register_nexthop_notifier+0x84/0x290 [ 247.546379][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 247.553213][ T30] ? __asan_memset+0x23/0x50 [ 247.560515][ T30] register_nexthop_notifier+0x84/0x290 [ 247.566142][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 247.582399][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 247.592718][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 247.604148][ T30] ? __asan_memset+0x23/0x50 [ 247.613606][ T30] ops_init+0x31e/0x590 [ 247.619396][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 247.624851][ T30] setup_net+0x287/0x9e0 [ 247.634814][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 247.642480][ T30] ? __pfx_setup_net+0x10/0x10 [ 247.653978][ T30] copy_net_ns+0x33f/0x570 [ 247.664002][ T30] create_new_namespaces+0x425/0x7b0 [ 247.675733][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 247.683151][ T30] ksys_unshare+0x619/0xc10 [ 247.692904][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 247.701047][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 247.713950][ T30] ? do_syscall_64+0x100/0x230 [ 247.720364][ T30] __x64_sys_unshare+0x38/0x40 [ 247.725197][ T30] do_syscall_64+0xf3/0x230 [ 247.735334][ T30] ? clear_bhb_loop+0x35/0x90 [ 247.751497][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.764293][ T30] RIP: 0033:0x7faef8d7f737 [ 247.769097][ T30] RSP: 002b:00007faef905ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 247.783825][ T30] RAX: ffffffffffffffda RBX: 00007faef8df198c RCX: 00007faef8d7f737 [ 247.792253][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 247.808890][ T30] RBP: 0000000000000000 R08: 00007faef9a67d60 R09: 0000000000000000 [ 247.816964][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 247.832259][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 247.843168][ T30] [ 247.846347][ T30] INFO: task syz-executor:5423 blocked for more than 148 seconds. [ 247.859036][ T30] Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 247.866378][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 247.881205][ T30] task:syz-executor state:D stack:26400 pid:5423 tgid:5423 ppid:1 flags:0x00004004 [ 247.893157][ T30] Call Trace: [ 247.896488][ T30] [ 247.906109][ T30] __schedule+0x1895/0x4b30 [ 247.914167][ T30] ? __pfx___schedule+0x10/0x10 [ 247.924103][ T30] ? __pfx_lock_release+0x10/0x10 [ 247.931249][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 247.936786][ T30] ? schedule+0x90/0x320 [ 247.946258][ T30] schedule+0x14b/0x320 [ 247.952071][ T30] schedule_preempt_disabled+0x13/0x30 [ 247.964065][ T30] __mutex_lock+0x6a7/0xd70 [ 247.970220][ T30] ? __mutex_lock+0x52a/0xd70 [ 247.974959][ T30] ? register_nexthop_notifier+0x84/0x290 [ 247.986556][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 247.993239][ T30] ? __asan_memset+0x23/0x50 [ 248.002921][ T30] register_nexthop_notifier+0x84/0x290 [ 248.011429][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 248.024026][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 248.032472][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 248.043783][ T30] ? __asan_memset+0x23/0x50 [ 248.050013][ T30] ops_init+0x31e/0x590 [ 248.054244][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 248.066469][ T30] setup_net+0x287/0x9e0 [ 248.072365][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 248.083410][ T30] ? __pfx_setup_net+0x10/0x10 [ 248.090106][ T30] copy_net_ns+0x33f/0x570 [ 248.094843][ T30] create_new_namespaces+0x425/0x7b0 [ 248.105377][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 248.116086][ T30] ksys_unshare+0x619/0xc10 [ 248.126021][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 248.133225][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 248.144743][ T30] ? do_syscall_64+0x100/0x230 [ 248.151317][ T30] __x64_sys_unshare+0x38/0x40 [ 248.156153][ T30] do_syscall_64+0xf3/0x230 [ 248.165874][ T30] ? clear_bhb_loop+0x35/0x90 [ 248.173693][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.184650][ T30] RIP: 0033:0x7f859457f737 [ 248.190696][ T30] RSP: 002b:00007f859485ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 248.205008][ T30] RAX: ffffffffffffffda RBX: 00007f85945f198c RCX: 00007f859457f737 [ 248.214992][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 248.232606][ T30] RBP: 0000000000000000 R08: 00007f8595267d60 R09: 0000000000000000 [ 248.242830][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 248.256227][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 248.265903][ T30] [ 248.275632][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 248.286319][ T30] INFO: task syz.4.40:5425 blocked for more than 148 seconds. [ 248.297610][ T30] Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 248.305056][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 248.322246][ T30] task:syz.4.40 state:D stack:26624 pid:5425 tgid:5424 ppid:5254 flags:0x00000004 [ 248.336704][ T30] Call Trace: [ 248.344644][ T30] [ 248.350403][ T30] __schedule+0x1895/0x4b30 [ 248.355007][ T30] ? __pfx___schedule+0x10/0x10 [ 248.363875][ T30] ? __pfx_lock_release+0x10/0x10 [ 248.371766][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 248.382699][ T30] ? schedule+0x90/0x320 [ 248.387018][ T30] schedule+0x14b/0x320 [ 248.394134][ T30] schedule_preempt_disabled+0x13/0x30 [ 248.403531][ T30] __mutex_lock+0x6a7/0xd70 [ 248.409651][ T30] ? __mutex_lock+0x52a/0xd70 [ 248.414391][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 248.434925][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 248.441586][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 248.446650][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 248.460709][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 248.466260][ T30] ? ref_tracker_free+0x643/0x7e0 [ 248.475444][ T30] netlink_rcv_skb+0x1e3/0x430 [ 248.484241][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 248.493660][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 248.501768][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 248.507071][ T30] netlink_unicast+0x7f6/0x990 [ 248.515967][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 248.525672][ T30] ? __virt_addr_valid+0x183/0x530 [ 248.536813][ T30] ? __check_object_size+0x48e/0x900 [ 248.545557][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 248.555527][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.562449][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 248.572461][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.579335][ T30] __sock_sendmsg+0x221/0x270 [ 248.584082][ T30] __sys_sendto+0x39b/0x4f0 [ 248.595632][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 248.602271][ T30] ? do_futex+0x33b/0x560 [ 248.606777][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 248.617491][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 248.623912][ T30] __x64_sys_sendto+0xde/0x100 [ 248.640410][ T30] do_syscall_64+0xf3/0x230 [ 248.644991][ T30] ? clear_bhb_loop+0x35/0x90 [ 248.655427][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.662982][ T30] RIP: 0033:0x7f6a2d37df39 [ 248.672559][ T30] RSP: 002b:00007f6a2e178038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 248.683960][ T30] RAX: ffffffffffffffda RBX: 00007f6a2d535f80 RCX: 00007f6a2d37df39 [ 248.697088][ T30] RDX: 0000000000010a73 RSI: 0000000020000000 RDI: 0000000000000006 [ 248.710717][ T30] RBP: 00007f6a2d3f0216 R08: 0000000000000000 R09: 4b6ae4f95a5de35b [ 248.723790][ T30] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000000 [ 248.736519][ T30] R13: 0000000000000000 R14: 00007f6a2d535f80 R15: 00007f6a2d65fa28 [ 248.752209][ T30] [ 248.755315][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 248.766382][ T30] INFO: task syz-executor:5429 blocked for more than 149 seconds. [ 248.792746][ T30] Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 248.801940][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 248.815860][ T30] task:syz-executor state:D stack:26552 pid:5429 tgid:5429 ppid:1 flags:0x00004006 [ 248.832923][ T30] Call Trace: [ 248.836282][ T30] [ 248.842909][ T30] __schedule+0x1895/0x4b30 [ 248.851912][ T30] ? __pfx___schedule+0x10/0x10 [ 248.856855][ T30] ? __pfx_lock_release+0x10/0x10 [ 248.866326][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 248.876335][ T30] ? schedule+0x90/0x320 [ 248.883536][ T30] schedule+0x14b/0x320 [ 248.891719][ T30] schedule_preempt_disabled+0x13/0x30 [ 248.901371][ T30] __mutex_lock+0x6a7/0xd70 [ 248.905951][ T30] ? __mutex_lock+0x52a/0xd70 [ 248.914734][ T30] ? register_nexthop_notifier+0x84/0x290 [ 248.923278][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 248.932257][ T30] ? __asan_memset+0x23/0x50 [ 248.941806][ T30] register_nexthop_notifier+0x84/0x290 [ 248.953209][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 248.961834][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 248.972061][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 248.981571][ T30] ? __asan_memset+0x23/0x50 [ 248.986268][ T30] ops_init+0x31e/0x590 [ 248.995935][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 249.004086][ T30] setup_net+0x287/0x9e0 [ 249.012244][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 249.023277][ T30] ? __pfx_setup_net+0x10/0x10 [ 249.031989][ T30] copy_net_ns+0x33f/0x570 [ 249.041049][ T30] create_new_namespaces+0x425/0x7b0 [ 249.046422][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 249.057529][ T30] ksys_unshare+0x619/0xc10 [ 249.062121][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 249.067196][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 249.080423][ T30] ? do_syscall_64+0x100/0x230 [ 249.085251][ T30] __x64_sys_unshare+0x38/0x40 [ 249.096896][ T30] do_syscall_64+0xf3/0x230 [ 249.104521][ T30] ? clear_bhb_loop+0x35/0x90 [ 249.115406][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.122065][ T30] RIP: 0033:0x7f68dc57f737 [ 249.126538][ T30] RSP: 002b:00007f68dc85ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 249.137287][ T30] RAX: ffffffffffffffda RBX: 00007f68dc5f198c RCX: 00007f68dc57f737 [ 249.154318][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 249.163213][ T30] RBP: 0000000000000000 R08: 00007f68dd267d60 R09: 0000000000000000 [ 249.178209][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 249.186263][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 249.197807][ T30] [ 249.200885][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 249.216462][ T30] INFO: task syz-executor:5434 blocked for more than 149 seconds. [ 249.224659][ T30] Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 249.238385][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 249.253956][ T30] task:syz-executor state:D stack:26368 pid:5434 tgid:5434 ppid:1 flags:0x00004004 [ 249.269446][ T30] Call Trace: [ 249.272779][ T30] [ 249.275746][ T30] __schedule+0x1895/0x4b30 [ 249.286861][ T30] ? __pfx___schedule+0x10/0x10 [ 249.292151][ T30] ? __pfx_lock_release+0x10/0x10 [ 249.303588][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 249.311346][ T30] ? schedule+0x90/0x320 [ 249.315659][ T30] schedule+0x14b/0x320 [ 249.326238][ T30] schedule_preempt_disabled+0x13/0x30 [ 249.332223][ T30] __mutex_lock+0x6a7/0xd70 [ 249.336784][ T30] ? __mutex_lock+0x52a/0xd70 [ 249.345018][ T30] ? register_nexthop_notifier+0x84/0x290 [ 249.357125][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 249.363577][ T30] ? __asan_memset+0x23/0x50 [ 249.374509][ T30] register_nexthop_notifier+0x84/0x290 [ 249.380473][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 249.386521][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 249.399300][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 249.405546][ T30] ? __asan_memset+0x23/0x50 [ 249.415499][ T30] ops_init+0x31e/0x590 [ 249.423010][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 249.432432][ T30] setup_net+0x287/0x9e0 [ 249.436924][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 249.446640][ T30] ? __pfx_setup_net+0x10/0x10 [ 249.456016][ T30] copy_net_ns+0x33f/0x570 [ 249.464705][ T30] create_new_namespaces+0x425/0x7b0 [ 249.474396][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 249.482962][ T30] ksys_unshare+0x619/0xc10 [ 249.491471][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 249.496583][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 249.507395][ T30] ? do_syscall_64+0x100/0x230 [ 249.512255][ T30] __x64_sys_unshare+0x38/0x40 [ 249.517084][ T30] do_syscall_64+0xf3/0x230 [ 249.529694][ T30] ? clear_bhb_loop+0x35/0x90 [ 249.534461][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.546809][ T30] RIP: 0033:0x7f955437f737 [ 249.553771][ T30] RSP: 002b:00007f955465ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 249.569045][ T30] RAX: ffffffffffffffda RBX: 00007f95543f198c RCX: 00007f955437f737 [ 249.584870][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 249.593376][ T30] RBP: 0000000000000000 R08: 00007f9555067d60 R09: 0000000000000000 [ 249.607438][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 249.615486][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 249.630958][ T30] [ 249.634096][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 249.651588][ T30] [ 249.651588][ T30] Showing all locks held in the system: [ 249.666183][ T30] 1 lock held by khungtaskd/30: [ 249.675484][ T30] #0: ffffffff8e937da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 249.688312][ T30] 5 locks held by kworker/u8:4/63: [ 249.693473][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 249.709872][ T30] #1: ffffc900015e7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 249.725808][ T30] #2: ffffffff8fcc4910 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 249.738086][ T30] #3: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: cleanup_net+0x6af/0xcc0 [ 249.747078][ T30] #4: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 249.767329][ T30] 3 locks held by kworker/u8:6/2567: [ 249.773114][ T30] #0: ffff88814b70e948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 249.792087][ T30] #1: ffffc90009297d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 249.808779][ T30] #2: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 249.834738][ T30] 1 lock held by klogd/4678: [ 249.839930][ T30] #0: ffff8880b863ea98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 249.856910][ T30] 2 locks held by getty/4993: [ 249.863121][ T30] #0: ffff88802e7dc0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 249.881874][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 249.893789][ T30] 3 locks held by kworker/0:4/5238: [ 249.905691][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 249.924554][ T30] #1: ffffc90003c47d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 249.937570][ T30] #2: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 249.953547][ T30] 1 lock held by syz-executor/5250: [ 249.961012][ T30] #0: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 249.977098][ T30] 1 lock held by syz-executor/5253: [ 249.984544][ T30] #0: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 249.997309][ T30] 6 locks held by kworker/1:3/5285: [ 250.002558][ T30] 3 locks held by kworker/0:6/5288: [ 250.013247][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 250.027555][ T30] #1: ffffc90004477d00 ((crda_timeout).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 250.044982][ T30] #2: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: crda_timeout_work+0x15/0x50 [ 250.054789][ T30] 1 lock held by syz.2.36/5404: [ 250.067289][ T30] #0: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 250.076826][ T30] 1 lock held by syz.0.38/5418: [ 250.091557][ T30] #0: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 250.106141][ T30] 2 locks held by syz.0.38/5419: [ 250.112659][ T30] #0: ffffffff8fcc4910 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 250.129219][ T30] #1: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 250.154807][ T30] 2 locks held by syz-executor/5417: [ 250.160584][ T30] #0: ffffffff8fcc4910 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 250.178105][ T30] #1: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 250.194886][ T30] 2 locks held by syz-executor/5423: [ 250.202477][ T30] #0: ffffffff8fcc4910 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 250.217068][ T30] #1: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 250.233931][ T30] 1 lock held by syz.4.40/5425: [ 250.240478][ T30] #0: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 250.256359][ T30] 2 locks held by syz-executor/5429: [ 250.262050][ T30] #0: ffffffff8fcc4910 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 250.277291][ T30] #1: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 250.294506][ T30] 2 locks held by syz-executor/5434: [ 250.300219][ T30] #0: ffffffff8fcc4910 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 250.316427][ T30] #1: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 250.326927][ T30] 2 locks held by syz-executor/5446: [ 250.338864][ T30] #0: ffffffff8fcc4910 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 250.354649][ T30] #1: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 250.365176][ T30] 2 locks held by syz-executor/5450: [ 250.377306][ T30] #0: ffffffff8fcc4910 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 250.386838][ T30] #1: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 250.404096][ T30] 2 locks held by syz-executor/5455: [ 250.409838][ T30] #0: ffffffff8fcc4910 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 250.426086][ T30] #1: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 250.443958][ T30] 2 locks held by syz-executor/5459: [ 250.449692][ T30] #0: ffffffff8fcc4910 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 250.461757][ T30] #1: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 250.479288][ T30] 2 locks held by syz-executor/5464: [ 250.484631][ T30] #0: ffffffff8fcc4910 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 250.502554][ T30] #1: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 250.516269][ T30] 2 locks held by syz-executor/5470: [ 250.525503][ T30] #0: ffffffff8fcc4910 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 250.539483][ T30] #1: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 250.557114][ T30] 2 locks held by syz-executor/5477: [ 250.564092][ T30] #0: ffffffff8fcc4910 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 250.580469][ T30] #1: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 250.595215][ T30] 2 locks held by syz-executor/5483: [ 250.604513][ T30] #0: ffffffff8fcc4910 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 250.616855][ T30] #1: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 250.634458][ T30] 2 locks held by syz-executor/5488: [ 250.641904][ T30] #0: ffffffff8fcc4910 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 250.657295][ T30] #1: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 250.673292][ T30] 2 locks held by syz-executor/5491: [ 250.680878][ T30] #0: ffffffff8fcc4910 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 250.700863][ T30] #1: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 250.717294][ T30] 2 locks held by syz-executor/5494: [ 250.722642][ T30] #0: ffffffff8fcc4910 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 250.737774][ T30] #1: ffffffff8fcd1408 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 250.756025][ T30] [ 250.758804][ T30] ============================================= [ 250.758804][ T30] [ 250.773744][ T30] NMI backtrace for cpu 0 [ 250.778150][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 250.788366][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 250.798467][ T30] Call Trace: [ 250.801777][ T30] [ 250.804742][ T30] dump_stack_lvl+0x241/0x360 [ 250.809464][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.814701][ T30] ? __pfx__printk+0x10/0x10 [ 250.819353][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 250.824340][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 250.829843][ T30] ? _printk+0xd5/0x120 [ 250.834047][ T30] ? __pfx__printk+0x10/0x10 [ 250.838691][ T30] ? __wake_up_klogd+0xcc/0x110 [ 250.843597][ T30] ? __pfx__printk+0x10/0x10 [ 250.848243][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 250.853319][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 250.859346][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 250.865383][ T30] watchdog+0xff4/0x1040 [ 250.869676][ T30] ? watchdog+0x1ea/0x1040 [ 250.874187][ T30] ? __pfx_watchdog+0x10/0x10 [ 250.878915][ T30] kthread+0x2f0/0x390 [ 250.883023][ T30] ? __pfx_watchdog+0x10/0x10 [ 250.887752][ T30] ? __pfx_kthread+0x10/0x10 [ 250.892384][ T30] ret_from_fork+0x4b/0x80 [ 250.896849][ T30] ? __pfx_kthread+0x10/0x10 [ 250.901488][ T30] ret_from_fork_asm+0x1a/0x30 [ 250.906315][ T30] [ 250.910362][ T30] Sending NMI from CPU 0 to CPUs 1: [ 250.915633][ C1] NMI backtrace for cpu 1 [ 250.915648][ C1] CPU: 1 UID: 0 PID: 5285 Comm: kworker/1:3 Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 250.915670][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 250.915682][ C1] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 250.915710][ C1] RIP: 0010:rcu_lockdep_current_cpu_online+0x82/0x120 [ 250.915738][ C1] Code: c1 e8 03 42 80 3c 30 00 74 08 48 89 df e8 e6 76 83 00 48 8b 03 48 8d 98 40 fa 03 00 48 8d b8 60 fa 03 00 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 c2 76 83 00 4c 8b 7b 20 48 83 c3 18 48 89 [ 250.915759][ C1] RSP: 0018:ffffc90000a17e10 EFLAGS: 00000a02 [ 250.915775][ C1] RAX: 1ffff110170e7f4c RBX: ffff8880b873fa40 RCX: 0000000080000101 [ 250.915788][ C1] RDX: ffff88806254bc00 RSI: ffffffff8c60f440 RDI: ffff8880b873fa60 [ 250.915802][ C1] RBP: ffffc90000a17ef0 R08: ffffffff8a22311b R09: ffffffff8a222239 [ 250.915816][ C1] R10: 0000000000000002 R11: ffff88806254bc00 R12: dffffc0000000000 [ 250.915829][ C1] R13: ffff88802d71e000 R14: dffffc0000000000 R15: dffffc0000000000 [ 250.915842][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 250.915858][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 250.915871][ C1] CR2: 0000001b32c1eff8 CR3: 000000005fac8000 CR4: 00000000003506f0 [ 250.915887][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 250.915898][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 250.915910][ C1] Call Trace: [ 250.915917][ C1] [ 250.915924][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 250.915946][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 250.915974][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 250.915994][ C1] ? nmi_handle+0x2a/0x5a0 [ 250.916020][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 250.916043][ C1] ? nmi_handle+0x14f/0x5a0 [ 250.916060][ C1] ? nmi_handle+0x2a/0x5a0 [ 250.916078][ C1] ? rcu_lockdep_current_cpu_online+0x82/0x120 [ 250.916102][ C1] ? default_do_nmi+0x63/0x160 [ 250.916123][ C1] ? exc_nmi+0x123/0x1f0 [ 250.916144][ C1] ? end_repeat_nmi+0xf/0x53 [ 250.916163][ C1] ? ip_finish_output2+0x5b9/0x1390 [ 250.916189][ C1] ? ip_neigh_gw4+0xfb/0x500 [ 250.916216][ C1] ? rcu_lockdep_current_cpu_online+0x82/0x120 [ 250.916240][ C1] ? rcu_lockdep_current_cpu_online+0x82/0x120 [ 250.916265][ C1] ? rcu_lockdep_current_cpu_online+0x82/0x120 [ 250.916289][ C1] [ 250.916295][ C1] [ 250.916301][ C1] rcu_read_lock_held+0x1e/0x50 [ 250.916321][ C1] ip_neigh_gw4+0x109/0x500 [ 250.916349][ C1] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 250.916379][ C1] ? ip_finish_output2+0x45f/0x1390 [ 250.916410][ C1] ip_finish_output2+0x10c5/0x1390 [ 250.916437][ C1] ? nf_hook+0x9e/0x450 [ 250.916463][ C1] ? __pfx_ip_finish_output2+0x10/0x10 [ 250.916491][ C1] ? ip_skb_dst_mtu+0x6ba/0x9b0 [ 250.916517][ C1] ? __ip_finish_output+0x349/0x400 [ 250.916545][ C1] synproxy_send_client_synack+0x8b8/0xf30 [ 250.916576][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 250.916603][ C1] ? synproxy_pernet+0x45/0x270 [ 250.916630][ C1] nft_synproxy_eval_v4+0x3ca/0x610 [ 250.916659][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 250.916687][ C1] ? nf_ip_checksum+0x13a/0x500 [ 250.916715][ C1] nft_synproxy_do_eval+0x362/0xa60 [ 250.916744][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 250.916771][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 250.916796][ C1] ? __pfx_validate_chain+0x10/0x10 [ 250.916814][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 250.916841][ C1] nft_do_chain+0x4ad/0x1da0 [ 250.916867][ C1] ? wg_packet_receive+0x11f3/0x2570 [ 250.916896][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 250.916922][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 250.916958][ C1] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 250.916989][ C1] nft_do_chain_inet+0x418/0x6b0 [ 250.917016][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 250.917041][ C1] ? ipt_do_table+0x312/0x1860 [ 250.917075][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 250.917100][ C1] nf_hook_slow+0xc3/0x220 [ 250.917122][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 250.917144][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 250.917164][ C1] NF_HOOK+0x29e/0x450 [ 250.917184][ C1] ? NF_HOOK+0x9a/0x450 [ 250.917202][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 250.917222][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 250.917251][ C1] ? ip_rcv_finish+0x406/0x560 [ 250.917273][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 250.917293][ C1] NF_HOOK+0x3a4/0x450 [ 250.917315][ C1] ? NF_HOOK+0x9a/0x450 [ 250.917334][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 250.917353][ C1] ? ip_rcv_core+0x801/0xd10 [ 250.917376][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 250.917407][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 250.917429][ C1] __netif_receive_skb+0x2bf/0x650 [ 250.917457][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 250.917486][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 250.917510][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 250.917541][ C1] ? __pfx_lock_release+0x10/0x10 [ 250.917572][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 250.917607][ C1] process_backlog+0x662/0x15b0 [ 250.917637][ C1] ? process_backlog+0x33b/0x15b0 [ 250.917668][ C1] ? __pfx_process_backlog+0x10/0x10 [ 250.917695][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 250.917726][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 250.917759][ C1] __napi_poll+0xcb/0x490 [ 250.917785][ C1] net_rx_action+0x89b/0x1240 [ 250.917823][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 250.917847][ C1] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 250.917889][ C1] handle_softirqs+0x2c5/0x980 [ 250.917914][ C1] ? do_softirq+0x11b/0x1e0 [ 250.917938][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 250.917965][ C1] do_softirq+0x11b/0x1e0 [ 250.917987][ C1] [ 250.917992][ C1] [ 250.917999][ C1] ? __pfx_do_softirq+0x10/0x10 [ 250.918021][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 250.918049][ C1] ? rcu_is_watching+0x15/0xb0 [ 250.918069][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 250.918092][ C1] ? wg_socket_send_skb_to_peer+0x176/0x1d0 [ 250.918116][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 250.918142][ C1] ? mod_peer_timer+0x21/0x260 [ 250.918164][ C1] wg_socket_send_skb_to_peer+0x176/0x1d0 [ 250.918191][ C1] wg_packet_tx_worker+0x1bf/0x810 [ 250.918215][ C1] ? process_scheduled_works+0x976/0x1850 [ 250.918240][ C1] process_scheduled_works+0xa63/0x1850 [ 250.918277][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 250.918305][ C1] ? assign_work+0x364/0x3d0 [ 250.918330][ C1] worker_thread+0x870/0xd30 [ 250.918362][ C1] ? __kthread_parkme+0x169/0x1d0 [ 250.918394][ C1] ? __pfx_worker_thread+0x10/0x10 [ 250.918418][ C1] kthread+0x2f0/0x390 [ 250.918434][ C1] ? __pfx_worker_thread+0x10/0x10 [ 250.918458][ C1] ? __pfx_kthread+0x10/0x10 [ 250.918474][ C1] ret_from_fork+0x4b/0x80 [ 250.918499][ C1] ? __pfx_kthread+0x10/0x10 [ 250.918516][ C1] ret_from_fork_asm+0x1a/0x30 [ 250.918548][ C1] [ 251.632922][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 251.639851][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 251.650048][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 251.660184][ T30] Call Trace: [ 251.663500][ T30] [ 251.666465][ T30] dump_stack_lvl+0x241/0x360 [ 251.671187][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 251.676428][ T30] ? __pfx__printk+0x10/0x10 [ 251.681081][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 251.687120][ T30] ? vscnprintf+0x5d/0x90 [ 251.691494][ T30] panic+0x349/0x880 [ 251.695441][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 251.701641][ T30] ? __pfx_panic+0x10/0x10 [ 251.706099][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 251.711512][ T30] ? __irq_work_queue_local+0x137/0x410 [ 251.717107][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 251.722523][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 251.728723][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 251.734929][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 251.741132][ T30] watchdog+0x1033/0x1040 [ 251.745529][ T30] ? watchdog+0x1ea/0x1040 [ 251.750004][ T30] ? __pfx_watchdog+0x10/0x10 [ 251.754730][ T30] kthread+0x2f0/0x390 [ 251.758837][ T30] ? __pfx_watchdog+0x10/0x10 [ 251.763563][ T30] ? __pfx_kthread+0x10/0x10 [ 251.768196][ T30] ret_from_fork+0x4b/0x80 [ 251.772659][ T30] ? __pfx_kthread+0x10/0x10 [ 251.777376][ T30] ret_from_fork_asm+0x1a/0x30 [ 251.782205][ T30] [ 251.785492][ T30] Kernel Offset: disabled [ 251.789855][ T30] Rebooting in 86400 seconds..