last executing test programs: 19.644441255s ago: executing program 0 (id=12): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000004040)={0x2020}, 0x2020) mmap(&(0x7f0000316000/0x2000)=nil, 0x2000, 0xf, 0x8010, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) recvmmsg(r1, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000045, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = syz_open_dev$media(&(0x7f0000000080), 0x1000, 0x2080) ioctl$MEDIA_IOC_DEVICE_INFO(r3, 0xc1007c00, &(0x7f0000000100)) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90824fc60", 0x14}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000002c0), &(0x7f0000000340)=0x4) syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x10d480) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bind$tipc(r4, &(0x7f0000000540)=@name={0x1e, 0x2, 0x1, {{0x43, 0x1}}}, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f00000009c0), 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = dup(r8) ioctl$KVM_SET_MSRS(r9, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYRES64=r6, @ANYRES64]) 19.483131012s ago: executing program 2 (id=13): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000800)=@delchain={0x5f0, 0x65, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffe0}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_u32={{0x8}, {0x54, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth0_to_team\x00'}, @TCA_U32_INDEV={0x14, 0x8, 'batadv_slave_0\x00'}, @TCA_U32_HASH={0x8}, @TCA_U32_CLASSID={0x8, 0x1, {0xffe0}}, @TCA_U32_POLICE={0x10, 0x6, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}]}, @TCA_U32_FLAGS={0x8}]}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x38, 0x2, [@TCA_FLOWER_KEY_ARP_OP_MASK={0x5, 0x3e, 0x9}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0xa2}, @TCA_FLOWER_KEY_CVLAN_PRIO={0x5, 0x4e, 0x5}, @TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "cda6a02c3728266fd864bc6b04f6c051"}, @TCA_FLOWER_KEY_TCP_DST={0x6}]}}, @filter_kind_options=@f_route={{0xa}, {0x510, 0x2, [@TCA_ROUTE4_POLICE={0x414, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x4c, 0x6, 0x34, 0x9eac90e, 0x5, 0x9, 0x7af, 0x4, 0x5, 0x6, 0x1, 0x1c000, 0x9, 0x3, 0xfffffffb, 0x7, 0x2, 0x2, 0x8, 0x2df, 0x2, 0x6, 0x3, 0x7ea, 0x9f000000, 0x8, 0x2, 0x6, 0x8, 0x80000001, 0x6, 0x6, 0x0, 0xfffffc01, 0x100, 0xffffffc6, 0x7, 0x9, 0x7, 0x8, 0x851, 0x8a, 0x8001, 0x4, 0xf, 0x1, 0x7fffffff, 0x8, 0x200, 0x1, 0xfffffffd, 0x6ddc, 0xffffffff, 0x80000000, 0xfffffffb, 0x9, 0x7, 0x40, 0x1000, 0x9, 0xe4a5, 0xc031, 0xfffff1a4, 0x200, 0x8, 0x1, 0xa, 0xd09, 0x3, 0x7, 0x0, 0x166d, 0x3, 0x0, 0x0, 0x9, 0x4, 0x81, 0x100, 0x8001, 0x8, 0x8, 0x3, 0x0, 0x10000, 0x5, 0x3, 0x4, 0x9, 0x5, 0x8, 0x7ff, 0x6, 0x5, 0x1, 0x5, 0x3, 0x400, 0xa9ae, 0x8000, 0x6, 0x80000001, 0xa, 0x0, 0x3, 0xd, 0x9, 0x68b0, 0x200, 0x2, 0x5, 0x5, 0x4, 0x9, 0xfffffffd, 0x66, 0x800, 0x4, 0xffffffff, 0x101, 0x3, 0x2, 0x3, 0x2, 0x7, 0x6, 0xffffffff, 0x8000, 0x0, 0xfffffff8, 0xfffffff3, 0x2, 0x4, 0x7ff, 0x81, 0x7, 0x3, 0xffffffff, 0x10000, 0x2, 0x9, 0x4, 0x800, 0x2, 0x5, 0xc245, 0x2, 0x9, 0x100, 0xf, 0xfffffffc, 0x4, 0x8e4, 0x800, 0x40, 0xfffffffd, 0x1, 0x80000001, 0x6, 0xffffffff, 0x0, 0x8, 0x10000, 0x5, 0x80000001, 0x2, 0x3, 0x9, 0x3, 0x2, 0x9, 0x401, 0x9, 0x4, 0x9, 0x8, 0xfffffffd, 0x5, 0x81, 0x29, 0x0, 0x200, 0x56, 0x200, 0x5, 0x1, 0x0, 0x67b2, 0x4, 0x5, 0x0, 0xbd, 0x0, 0x2, 0xdb36, 0x100, 0x2da, 0x6, 0x4, 0xfffffffb, 0x7f, 0x2, 0xf19, 0x10, 0x8, 0x8, 0x0, 0xedc, 0x2, 0x4, 0x1, 0x10000, 0x16, 0x6, 0x0, 0x40, 0x3, 0x13, 0x5, 0xac47, 0x9, 0x72de, 0xfffffff8, 0x2147bb77, 0x7, 0x8000, 0x0, 0x4, 0xffffffff, 0x7, 0x27c, 0xd8b, 0x7, 0x40, 0x8, 0xfff, 0x8000, 0x200, 0x5, 0x5, 0x5, 0x5, 0x1, 0x2, 0x60000000, 0x8, 0x1, 0xe, 0x5, 0x3, 0x5, 0x8, 0x5, 0x3, 0x7fffffff]}]}, @TCA_ROUTE4_ACT={0xf8, 0x6, [@m_connmark={0xf4, 0x0, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x30000003}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x0, 0x0, 0x5}}}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x1}}}, @TCA_CONNMARK_PARMS={0x1c}]}, {0x19, 0x6, "91a991d04aa8cb411880b88050856c4a5b99aafe5c"}, {0xc}, {0xc}}}]}]}}]}, 0x5f0}}, 0x0) clock_getres(0x2b85be7a825c77c0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) gettid() pipe(&(0x7f0000000340)) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x47f9, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x169802, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001e05e410b1134200557b0102030109021b0001000000000904000001cf28fc00090501004000000000"], 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x48, 0x0, 0x0, 0x8}, {0x6}]}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing', 0x0, 0x0) lseek(r6, 0x5, 0x0) lseek(r6, 0x0, 0x0) r7 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x40041) dup2(r7, r7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x22000) write$UHID_CREATE2(r8, &(0x7f0000000180)=ANY=[], 0x118) 17.71264305s ago: executing program 0 (id=16): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc3400000000001090224"], 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2004c890, 0x0, 0x0) syz_io_uring_setup(0x20007279, &(0x7f0000000080)={0x0, 0x0, 0x20, 0x3, 0x3c}, &(0x7f0000000180), &(0x7f00000001c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0}, 0x10) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0xfffd, 0x0, @private1}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000200)='i', 0x1}], 0x1}}], 0x2, 0x8000000) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x7d, &(0x7f0000000080)="1af3050000f2bd5b", 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000002640)=""/102400, 0x18ff2}], 0x63, 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000023c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r4, 0x3b8a, &(0x7f00000000c0)={0x28, 0x0, r6, 0x0, 0x0}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r3) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2, 0x0, 0x0, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r8, 0x80047453, &(0x7f0000005280)) 17.709929413s ago: executing program 4 (id=17): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) preadv2(r1, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/100, 0x64}], 0x1, 0x2b, 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = syz_open_dev$video4linux(&(0x7f0000000280), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r2, 0xc0305616, &(0x7f0000000040)={0x0, 0x0, @value}) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x5, &(0x7f0000000400)=[{0x0, 0x7}, {0x7, 0x0, 0x8, 0x7}, {0x0, 0x0, 0xff}, {}, {}]}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) set_mempolicy(0x3, &(0x7f0000000100)=0x1, 0x5592) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000500)=0x1, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x400003, @loopback, 0x700}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x34, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7b0}]}]}]}, 0x34}}, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000700)=""/4096, &(0x7f0000000480)=""/255}) 16.520268139s ago: executing program 4 (id=19): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300000f00000011000000de000000010018000000000005000600000000000a00000000000000fc02000000000000000000000000000000000000000000000200010000000000000002000000000005000500000000000a00000000000000ff0100000000000000000000000000010000000000000000"], 0x78}, 0x1, 0x7}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$l2tp6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) recvmmsg(r2, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/142, 0x8e}}], 0x1, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x48001, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r3, &(0x7f0000001880)=[{&(0x7f000001a8c0)=""/102400, 0x19000}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) socket$inet6_dccp(0xa, 0x6, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/544]}, 0x298) 16.514966029s ago: executing program 3 (id=20): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000004040)={0x2020}, 0x2020) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000200)={0x1, 0x1, 0x4}) mmap(&(0x7f0000316000/0x2000)=nil, 0x2000, 0xf, 0x8010, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) recvmmsg(r1, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000045, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = syz_open_dev$media(&(0x7f0000000080), 0x1000, 0x2080) ioctl$MEDIA_IOC_DEVICE_INFO(r3, 0xc1007c00, &(0x7f0000000100)) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90824fc60", 0x14}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000002c0), &(0x7f0000000340)=0x4) syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x10d480) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bind$tipc(r4, &(0x7f0000000540)=@name={0x1e, 0x2, 0x1, {{0x43, 0x1}}}, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f00000009c0), 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = dup(r8) ioctl$KVM_SET_MSRS(r9, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYRES64=r6, @ANYRES64]) 16.265437279s ago: executing program 2 (id=21): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000004040)={0x2020}, 0x2020) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000200)={0x1, 0x1, 0x4}) mmap(&(0x7f0000316000/0x2000)=nil, 0x2000, 0xf, 0x8010, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) recvmmsg(r1, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000045, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = syz_open_dev$media(&(0x7f0000000080), 0x1000, 0x2080) ioctl$MEDIA_IOC_DEVICE_INFO(r3, 0xc1007c00, &(0x7f0000000100)) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90824fc60", 0x14}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000002c0), &(0x7f0000000340)=0x4) syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x10d480) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bind$tipc(r4, &(0x7f0000000540)=@name={0x1e, 0x2, 0x1, {{0x43, 0x1}}}, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f00000009c0), 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = dup(r8) ioctl$KVM_SET_MSRS(r9, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYRES64=r6, @ANYRES64]) 15.366715124s ago: executing program 0 (id=24): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300000f00000011000000de000000010018000000000005000600000000000a00000000000000fc02000000000000000000000000000000000000000000000200010000000000000002000000000005000500000000000a00000000000000ff0100000000000000000000000000010000000000000000"], 0x78}, 0x1, 0x7}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$l2tp6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) bind$inet(r2, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r2, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/142, 0x8e}}], 0x1, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x48001, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r3, &(0x7f0000001880)=[{&(0x7f000001a8c0)=""/102400, 0x19000}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) socket$inet6_dccp(0xa, 0x6, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/544]}, 0x298) 14.884481288s ago: executing program 3 (id=25): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000000000008a306cd0c000000000001090224000100000000090400000103000000092100000001220b0009058103"], 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$packet(0x11, 0xddb0570830f10b23, 0x300) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f00000055c0), 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x5452, &(0x7f00000000c0)) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000540)={0x2c, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000380)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f00000001c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, &(0x7f0000000300)={0x0, 0x21, 0x9, {0x9}}}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = socket$inet_sctp(0x2, 0x5, 0x84) keyctl$setperm(0x5, 0x0, 0x8000004) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x3, @private2, 0xffffffa0}, @in6={0xa, 0x4e23, 0x1, @mcast1, 0x4}], 0x38) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0xffffffffffffd518, 0x7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newqdisc={0x7c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x6a, 0x2, 0x200, 0x2, 0x4800, 0x8, 0x3}}, {0xa, 0x2, [0x4, 0x8, 0x9d]}}, {{0x1c, 0x1, {0x4, 0x4, 0x7, 0xe30, 0x0, 0xe9e3, 0x4000}}, {0x4}}]}]}, 0x7c}}, 0x0) r7 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) mmap(&(0x7f0000963000/0x3000)=nil, 0x3000, 0x0, 0x8031, r7, 0x1000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') preadv(r8, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/198, 0xc6}], 0x1, 0x14a, 0x1) 14.850230859s ago: executing program 2 (id=26): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sysfs$1(0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x103982, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'geneve0\x00'}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000100)=0x1) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f0000000280)) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) pselect6(0x65, &(0x7f0000000180)={0xfffffffffffffffd, 0x3}, 0x0, 0x0, 0x0, 0x0) 14.790270967s ago: executing program 4 (id=27): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300000f00000011000000de000000010018000000000005000600000000000a00000000000000fc02000000000000000000000000000000000000000000000200010000000000000002000000000005000500000000000a00000000000000ff0100000000000000000000000000010000000000000000"], 0x78}, 0x1, 0x7}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$l2tp6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r1, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/142, 0x8e}}], 0x1, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x48001, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r2, &(0x7f0000001880)=[{&(0x7f000001a8c0)=""/102400, 0x19000}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) socket$inet6_dccp(0xa, 0x6, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/544]}, 0x298) 14.482905044s ago: executing program 2 (id=28): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300000f00000011000000de000000010018000000000005000600000000000a00000000000000fc02000000000000000000000000000000000000000000000200010000000000000002000000000005000500000000000a00000000000000ff0100000000000000000000000000010000000000000000"], 0x78}, 0x1, 0x7}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$l2tp6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r1, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/142, 0x8e}}], 0x1, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x48001, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r2, &(0x7f0000001880)=[{&(0x7f000001a8c0)=""/102400, 0x19000}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) socket$inet6_dccp(0xa, 0x6, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/544]}, 0x298) 13.256727261s ago: executing program 0 (id=29): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'vlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000010000d040000ff030000000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000002000128009000100766c616e00000000100002800c0002000b0000001e"], 0x40}}, 0x0) syz_usb_connect(0x0, 0x3e, &(0x7f0000001100)=ANY=[@ANYBLOB="1201000020dafb2099041010f5050102030109022c00010000000009040000016f2bae000824020100000000092402020000000000090585da20"], 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_mems\x00', 0x275a, 0x0) read$FUSE(r4, &(0x7f0000001140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, &(0x7f00000000c0)={{0x7, 0x0, 0x80000001, 0x1000}, 0x6, 0x30, 0x1, r5, 0x3, 0x2, 'syz1\x00', &(0x7f0000000000)=['-\x00', '/dev/snd/controlC#\x00', 'cpuset.effective_mems\x00'], 0x2b}) sync() socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000015c0)="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", 0x2000, &(0x7f0000003f00)={&(0x7f00000035c0)={0x50, 0x0, 0x7, {0x7, 0x28, 0x4, 0x2012, 0x8, 0x1, 0x6, 0x2}}, 0x0, 0x0, &(0x7f00000036c0)={0x18, 0x0, 0x8, {0x3}}, 0x0, &(0x7f0000003780)={0x28, 0xffffffffffffffda, 0xffffffffffffffff, {{0x80, 0x0, 0x1}}}, &(0x7f00000037c0)={0x60, 0x0, 0x9, {{0xe972, 0x100000000, 0x1, 0x76, 0x2, 0x3ff, 0x4d, 0x839}}}, 0x0, 0x0, &(0x7f00000038c0)={0x20, 0x0, 0x6}, &(0x7f0000003900)={0x78, 0x0, 0x8000000000000000, {0x3, 0x1, 0x0, {0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x6, 0x7, 0x10, 0xffffffff, 0x4000, 0x0, 0x0, 0x0, 0x3ff, 0x9}}}, &(0x7f0000003ac0)={0x90, 0xfffffffffffffffe, 0x0, {0x4, 0x0, 0xa6b6, 0x5, 0x0, 0xe0e, {0x3, 0x0, 0x0, 0xa, 0x3, 0x1, 0x0, 0xd9, 0xfa2, 0xe000, 0x8, 0x0, 0x0, 0x8, 0x5}}}, &(0x7f0000000400)=ANY=[@ANYBLOB="90000000000000000001000000000000050000000000000200000009000000790000000000000001200000000000000000000000b7000001000000000000002d000000000000000600000000000000960d00000000000001000000000001000000000000000000020000000000000000000000000000000115000000004647fd2a74bfb21800000000000000000000000d832280f339c7b708648ccaaa61e9e31fb4aacb0006995edd9f767c8de5d803afa9feba08826ec0f622f2a348bb480016"], &(0x7f0000003d40)=ANY=[@ANYBLOB="b000000000000000030000000000000004000000000000000200000000000000810b000000000000e000000000000000755d000002000000040000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0080000000000000000000000500000000000000080000000000000003000000050000005c2623000000"], 0x0, &(0x7f0000003ec0)={0x20, 0x0, 0x9, {0x3}}}) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r8 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000100)=0x0) syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x0) r10 = memfd_create(&(0x7f0000001980)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f\x02\xc1v\x98\xd6\xfexW\x11\x84\xa1\x9e\xc6\f\x9f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xffr9%\x97!\x97.A\x84\x1d\xc2\x86\x89{\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e/\x85c\xae\x9c\xe9\xc4\xd2\xf3\x9f\n-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\x12\x00\x00\x00\x00\x00\x00\x00[\xf9\r\t\xef{h\xb0\xc0\x00\x00\x00\x00\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8Fb\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5O\x8fI\x00\xf0\xc9%\n\xa7\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=j\x8a\xa4\x97;\bNl\x81\x9bx\xa1\x02\xb8M\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\xb7\xbc\xc3\xad\xf1\x92\xaf(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\x9d\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x00\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f\x00\x01\x00\x00_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0s\xa8\x1f(\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x84\xe38\xac>\xbbqJ\x8f\x8cmu\x12\x1d\x9a\xd7\x1c}\x8a]1\x8a\x84\xedo\t*77\xbb0\x8b\xe5R\xc8\t\x94\xbc\x95\xc0\x92\xfc^e\x15\x10\x96\x18\'\xfa\x8e\x81\x03)3\xbf\xa6|\x88\x1f\xfb\xf0\xa3\xd2\x99\x06\xb1\x15\xc4\xe9\x80\xfb\xcfD\xe3\xff\xc1V\x00\xc4\xd1\xa1\xa6\xba\x9a\x91\xdb\x0f\xb6\xb9&\xf5\x05\x9b_\xde\xc6\xc4P\xf9,\xab\x13\xd0+*\xa3\x002\x19Z\x0e\xa7\xb9\xf2\xed\xd7#\b0\xba\xaa\x93\xf6\xef-\x1fL\xc6\xdc\xa7?\xf9\xbcdI\xca_\xa3\xbd\xe6,\xe6\x87$\xe8W8\xa6Zb\x1a7\xd7\x86\xe5\v\xa5\xaf\x8b\xd8t\x9fk\xee#\"\xa4\x96\xd5m\xdb\xb0\xdf\xa8\xb9{\xca\xea\nD|+;\x14\xc4\xe5\x9c\xebDJ\xf4\x19PFi\xce\xd6E9\x18\x1d~\x17\x06\xe9iDu:ou\a<\xaf\x8f0v\x81\xb1HC\xf3\x96\x96]bp\a\xdf7\xcb\x10x\xff\x17L\xde\xff\b\fm\a\x1b\x13\xe2[\xea,\xfc\x8ep<\xa4gq\xf4\xb4\xd7\x1d\'\xd6\xb5\xa3\x90\xf9\xf2\x1a\xaa\xb0\b\x7f\x89\xf7\x9e\x89\x85O\xe6U\x9fO\xa5\x8dfO\x11S\x00\xb6\x809\r\x96\xf2\xb8,\xe1N\xa1\xfd\xaa\x99\xe9\xb4\t\xf1(>\xf8fLBQ\xcf\x9c\xd4\x88\x96\xbc\xf0\xa4\xeb\x92\xd7\xc1\xef\x13\xc7U\x9b\xa8r\xc1_\x11<\x19?)\xb3\xfdf\xc3\xba\x1e\xbaY\xea|~^\x00\x1e\xea/\x1e\xd2&1Z@\xa50\x06s\xf2PP\xf9\xdcv\xc6\xaf\x12M\x8b\x12\xdbf\xb2r\x1a\x84\b\xde\b5\xdb[ruJ\xa0\xa9Nj\xd5<\xcc\xdeA4|1Ye\xd7\xf3\x1b\xedq)\xab_\xc1\aR\xef%\xfb\x9c\x18<\xa3\x133T\x89\xff\x99S\xb7n\xe3%\x05g*X\xe5\xfc\x97\x01\xec\xeb\xd6\rf\xbdl\xee\xca\x1c\xa2{\x98v\xcc\x8a\xcc\xa1\xf1\xb4\xf6\xe1\xc0\x96\xc8\x1c\x05C\x93\x1c\x89e\xc1~\xf3\xc8\xe8\xe6]S\xbd\xbe\xb3M\xc1\x9b\x05\x12\xe9C\x11\xbb\x03U\x80KRd\x14c3I\xa0\xc7\x8a\xba9\xfeH\x94\xb2\xe7h\xb1\x02\xf6\x0f\x02\xb0\xc3\xd8\x02\r\v\xfa\xc7\xbdE\xf6b\xde\xbeJ\x9509\xe8\x18\x05\x15zi\xba\tf7\x9b,\xa3\xa5\xa1\xc1|\xd2:D3z\x8f\x19\xa8\xe1d\xedk\xe8\xa2/\x95`$\x81\xc2g\x04u\x16\xbc{\xb7\x90\xbe\xeb\x85 \f ^I\xd5\x0e\r\xdf4\xd0\x95d\xe4\xaf\x83\x88\xd8l\xae\"\xef\xe5\xfc\x01\x15\xb5\x99U\x1c\xb1\x9c \xe7\xa6\x8fv\xfe\xea\x9a\x11\xe2-\xeb$\x1e&gQxv4\xad\xaf\xad.ev\xf3x\xeb\xb6\xac\x8b\xdb;j%\xcb:\x98\b\xc7\x90-\\\v\x91\\\xb9\x9b\x932\x0f}>\xbc\xf6\b\x8ca\xcb\xd5\xe7\x97\xc6;$\xab\xcc\x884js\rF9\x8d\x86\x8e\xfb\xba\xb0\xe97\xb3kZ\xc1\xcf\xa3>\xe5\xe9G\xcb\xc5\xff\xf0+Rx\xb5\xb8`\xab\xcd*\xfd\x92\b\xf6\x9a\xf0Nx\xf8\xd7\x8e\xfd\xe4\xa2\x00\xadb\xce\xd0\xcc\t%\xbd\n\xc1\xaa\x89~\xf5\n\x1b\x9b', 0x4) fallocate(r10, 0x10, 0x0, 0x400001) syz_io_uring_submit(0x0, r9, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r7, 0x0, 0x0}) io_uring_enter(r8, 0x7a98, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc10c5541, &(0x7f0000000080)) 12.862189472s ago: executing program 2 (id=30): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000000000008a306cd0c000000000001090224000100000000090400000103000000092100000001220b0009058103"], 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$packet(0x11, 0xddb0570830f10b23, 0x300) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f00000055c0), 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x5452, &(0x7f00000000c0)) r2 = syz_usb_connect(0x0, 0x4d, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000735aca105e042107c4900102030109023b00010000000009040000000e010000052406000105240300000d240f0100000000000000000006"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000380)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f00000001c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, &(0x7f0000000300)={0x0, 0x21, 0x9, {0x9}}}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = socket$inet_sctp(0x2, 0x5, 0x84) keyctl$setperm(0x5, 0x0, 0x8000004) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x3, @private2, 0xffffffa0}, @in6={0xa, 0x4e23, 0x1, @mcast1, 0x4}], 0x38) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0xffffffffffffd518, 0x7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newqdisc={0x7c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x6a, 0x2, 0x200, 0x2, 0x4800, 0x8, 0x3}}, {0xa, 0x2, [0x4, 0x8, 0x9d]}}, {{0x1c, 0x1, {0x4, 0x4, 0x7, 0xe30, 0x0, 0xe9e3, 0x4000}}, {0x4}}]}]}, 0x7c}}, 0x0) r8 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) mmap(&(0x7f0000963000/0x3000)=nil, 0x3000, 0x0, 0x8031, r8, 0x1000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') preadv(r9, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/198, 0xc6}], 0x1, 0x14a, 0x1) 12.720231339s ago: executing program 4 (id=31): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc3400000000001090224"], 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2004c890, 0x0, 0x0) syz_io_uring_setup(0x20007279, &(0x7f0000000080)={0x0, 0x0, 0x20, 0x3, 0x3c}, &(0x7f0000000180), &(0x7f00000001c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0}, 0x10) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0xfffd, 0x0, @private1}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000200)='i', 0x1}], 0x1}}], 0x2, 0x8000000) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x7d, &(0x7f0000000080)="1af3050000f2bd5b", 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000002640)=""/102400, 0x18ff2}], 0x63, 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000023c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r4, 0x3b8a, &(0x7f00000000c0)={0x28, 0x0, r6, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r3) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2, 0x0, 0x0, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r8, 0x80047453, &(0x7f0000005280)) 11.557784181s ago: executing program 3 (id=33): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300000f00000011000000de000000010018000000000005000600000000000a00000000000000fc02000000000000000000000000000000000000000000000200010000000000000002000000000005000500000000000a00000000000000ff0100000000000000000000000000010000000000000000"], 0x78}, 0x1, 0x7}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$l2tp6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r1, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/142, 0x8e}}], 0x1, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x48001, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r2, &(0x7f0000001880)=[{&(0x7f000001a8c0)=""/102400, 0x19000}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) socket$inet6_dccp(0xa, 0x6, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/544]}, 0x298) 10.08598056s ago: executing program 0 (id=34): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000004040)={0x2020}, 0x2020) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000200)={0x1, 0x1, 0x4}) mmap(&(0x7f0000316000/0x2000)=nil, 0x2000, 0xf, 0x8010, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000045, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = syz_open_dev$media(&(0x7f0000000080), 0x1000, 0x2080) ioctl$MEDIA_IOC_DEVICE_INFO(r2, 0xc1007c00, &(0x7f0000000100)) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90824fc60", 0x14}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000002c0), &(0x7f0000000340)=0x4) syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x10d480) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bind$tipc(r3, &(0x7f0000000540)=@name={0x1e, 0x2, 0x1, {{0x43, 0x1}}}, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f00000009c0), 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = dup(r7) ioctl$KVM_SET_MSRS(r8, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYRES64=r5, @ANYRES64]) 9.775681569s ago: executing program 4 (id=35): r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, 0x0) socket(0x15, 0x5, 0x0) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000040)) r1 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000100)={0x0, 0x5}) syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a"], 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee000000010902240001000000000904000000ff0100000724", @ANYRES16], 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x6a841, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000080)=@s={0x5, @generic=0xff, 0x1e}) r3 = socket(0x2b, 0x1, 0x1) getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, 0x0, &(0x7f0000000240)) 9.28752614s ago: executing program 2 (id=36): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b00011100000009040000019569", @ANYRES32], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/bpf', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000001000"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800c0001006d6163766c616e001800028004000580ae442be9ec0f27fe30f5acf9cfef54d568e76d01db82bfef6965e45bebab74f55027d960580f75c8515cde379a77b3b1f749cbdbd06724850afbc10b84da03a43c86285b12e9d661b278a3aea1e05d4d2e3b24a51c79b5b283612c606f06b22da5c3497833f165c5dc34edfb778c3e56f2e6b3f666a3497107fd4a7113e1"], 0x38}}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x70, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xfffa}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x70}}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000600", 0x33fe0}], 0x1}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r6, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a24000000000a01010000000000000000050000000900010073797a30000000000400060070000000030a01030000000000000000050000000900010073797a30000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000080001400000000014000300766c616e3000"/167], 0xd0}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x0, 0xa005}, @sack_perm]}}}}}}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 9.111294835s ago: executing program 3 (id=37): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x319, 0x8000) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)) r2 = dup(r1) read$dsp(r2, &(0x7f0000000100)=""/167, 0xa7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{0x5, 0x200}, {0x5794, 0x800000}]}, 0x14, 0x3) r3 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000690, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x280) openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = mq_open(&(0x7f0000001100)='*a%\xff\x00\xf1\fNC\x84\xe0\x99\x1e-\x9a\x0f\x1a\x90\xee\x10\xfeARsO\xae\xd6\x05K\xe2D\x8d\xa4H8\xcf:\a;\xd8\xc7\xc8\\C\xcf\xa7\xcb\xb4\xe4\x8dY\xe3\xa5K&\xe5\xc4\x84v\xfa\xe7\x11\xc4\x99\x10,\xe3M\x80\xd3\xc2\x1c\xb0\x84\xb83', 0x41, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = accept4$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000001c0)=0x1c, 0x80800) syz_io_uring_complete(0x0) accept(r7, &(0x7f0000000200)=@ethernet={0x0, @multicast}, &(0x7f0000000300)=0x80) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x38, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0xac14140b}}, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4a6}]}, &(0x7f00000002c0)=0x10) mq_timedreceive(r5, 0x0, 0x0, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'icmp\x00'}, &(0x7f0000000140)=0x1e) 9.000167023s ago: executing program 1 (id=38): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010b00000000000000000c000000", @ANYRES32], 0x1c}}, 0x0) 8.80590881s ago: executing program 1 (id=39): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000000c0)=[0xffffffffffffffff], 0x1) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x9, 0x100000000, 0x2, 0x40000000000000, 0x663, 0x7, 0x2004c8, 0x8000000, 0x10000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x20000000, 0x1]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8.521961792s ago: executing program 0 (id=40): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) preadv2(r1, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/100, 0x64}], 0x1, 0x2b, 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = syz_open_dev$video4linux(&(0x7f0000000280), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r2, 0xc0305616, &(0x7f0000000040)={0x0, 0x0, @value}) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x5, &(0x7f0000000400)=[{0x0, 0x7}, {0x7, 0x0, 0x8, 0x7}, {0x0, 0x0, 0xff}, {}, {}]}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) set_mempolicy(0x3, &(0x7f0000000100)=0x1, 0x5592) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000500)=0x1, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x400003, @loopback, 0x700}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x34, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7b0}]}]}]}, 0x34}}, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000700)=""/4096, &(0x7f0000000480)=""/255}) 8.452721281s ago: executing program 3 (id=41): unshare(0x60600) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000b00)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @remote}}, {{0xa, 0x0, 0x0, @remote}}]}, 0x190) syz_emit_ethernet(0x4e, &(0x7f0000000480)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @mld={0x83, 0x0, 0x0, 0x0, 0x0, @private0}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000a00)=@file={0x1, './file0\x00'}, 0x6e) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) 8.310934539s ago: executing program 1 (id=42): r0 = socket$inet(0x2, 0x4000000805, 0x0) listen(r0, 0x7) sendmmsg(r0, 0x0, 0x0, 0x0) 8.223285987s ago: executing program 3 (id=43): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x30, 0x4, 0x0, 0x0, 0xc0, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x9, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@dev, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote, 0x1}, {@multicast2}, {@private=0xa0100fe}, {@rand_addr=0x64010100}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @lsrr={0x83, 0x7, 0xdc, [@rand_addr=0x64010102]}, @rr={0x7, 0x13, 0x0, [@remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) ioctl$KVM_RUN(r4, 0xae80, 0x0) 8.175597431s ago: executing program 1 (id=44): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800dd8d000000000000000002000000000000060000"], 0x38}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f00000001c0)={0x0, @aes128, 0x0, @desc4}) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040), &(0x7f0000000080)=0x4) 8.009865532s ago: executing program 1 (id=45): r0 = syz_open_dev$I2C(0x0, 0x319, 0x8000) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)) r2 = dup(r1) read$dsp(r2, &(0x7f0000000100)=""/167, 0xa7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{0x5, 0x200}, {0x5794, 0x800000}]}, 0x14, 0x3) r3 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000690, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x280) openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = mq_open(&(0x7f0000001100)='*a%\xff\x00\xf1\fNC\x84\xe0\x99\x1e-\x9a\x0f\x1a\x90\xee\x10\xfeARsO\xae\xd6\x05K\xe2D\x8d\xa4H8\xcf:\a;\xd8\xc7\xc8\\C\xcf\xa7\xcb\xb4\xe4\x8dY\xe3\xa5K&\xe5\xc4\x84v\xfa\xe7\x11\xc4\x99\x10,\xe3M\x80\xd3\xc2\x1c\xb0\x84\xb83', 0x41, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = accept4$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000001c0)=0x1c, 0x80800) syz_io_uring_complete(0x0) accept(r7, &(0x7f0000000200)=@ethernet={0x0, @multicast}, &(0x7f0000000300)=0x80) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x38, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0xac14140b}}, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4a6}]}, &(0x7f00000002c0)=0x10) mq_timedreceive(r5, 0x0, 0x0, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'icmp\x00'}, &(0x7f0000000140)=0x1e) 7.946784763s ago: executing program 4 (id=46): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000000000008a306cd0c000000000001090224000100000000090400000103000000092100000001220b0009058103"], 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$packet(0x11, 0xddb0570830f10b23, 0x300) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000055c0), 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x5452, &(0x7f00000000c0)) r1 = syz_usb_connect(0x0, 0x4d, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000735aca105e042107c4900102030109023b00010000000009040000000e010000052406000105240300000d240f0100000000000000000006"], 0x0) syz_usb_control_io(r1, &(0x7f0000000540)={0x2c, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000380)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f00000001c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, &(0x7f0000000300)={0x0, 0x21, 0x9, {0x9}}}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = socket$inet_sctp(0x2, 0x5, 0x84) keyctl$setperm(0x5, 0x0, 0x8000004) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x3, @private2, 0xffffffa0}, @in6={0xa, 0x4e23, 0x1, @mcast1, 0x4}], 0x38) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0xffffffffffffd518, 0x7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newqdisc={0x7c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x6a, 0x2, 0x200, 0x2, 0x4800, 0x8, 0x3}}, {0xa, 0x2, [0x4, 0x8, 0x9d]}}, {{0x1c, 0x1, {0x4, 0x4, 0x7, 0xe30, 0x0, 0xe9e3, 0x4000}}, {0x4}}]}]}, 0x7c}}, 0x0) r7 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) mmap(&(0x7f0000963000/0x3000)=nil, 0x3000, 0x0, 0x8031, r7, 0x1000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') preadv(r8, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/198, 0xc6}], 0x1, 0x14a, 0x1) 0s ago: executing program 1 (id=47): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc3400000000001090224"], 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2004c890, 0x0, 0x0) syz_io_uring_setup(0x20007279, &(0x7f0000000080)={0x0, 0x0, 0x20, 0x3, 0x3c}, &(0x7f0000000180), &(0x7f00000001c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0}, 0x10) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0xfffd, 0x0, @private1}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000200)='i', 0x1}], 0x1}}], 0x2, 0x8000000) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x7d, &(0x7f0000000080)="1af3050000f2bd5b", 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000002640)=""/102400, 0x18ff2}], 0x63, 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000023c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r4, 0x3b8a, &(0x7f00000000c0)={0x28, 0x0, r5, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r3) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2, 0x0, 0x0, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r7, 0x80047453, &(0x7f0000005280)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.130' (ED25519) to the list of known hosts. [ 49.437415][ T5220] cgroup: Unknown subsys name 'net' [ 49.587015][ T5220] cgroup: Unknown subsys name 'cpuset' [ 49.595594][ T5220] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 50.878762][ T5220] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 54.288754][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 54.297068][ T5238] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.308271][ T5244] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 54.318407][ T5242] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 54.324944][ T5244] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 54.326724][ T5242] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.334119][ T5244] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 54.340445][ T5242] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 54.355147][ T5247] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 54.363827][ T5247] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 54.371854][ T5247] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 54.372928][ T5245] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.380065][ T5247] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 54.394287][ T5247] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.402023][ T5242] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 54.408504][ T5244] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 54.410471][ T5242] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.416623][ T5244] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 54.424088][ T5242] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 54.430745][ T5244] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 54.438382][ T5233] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.453425][ T5244] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 54.455178][ T5242] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.470240][ T5242] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.481521][ T5242] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 54.490180][ T5242] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 54.497863][ T5242] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 54.506761][ T5242] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 54.514120][ T5242] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.523429][ T5242] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.871130][ T5248] chnl_net:caif_netlink_parms(): no params data found [ 55.001257][ T5250] chnl_net:caif_netlink_parms(): no params data found [ 55.065009][ T5249] chnl_net:caif_netlink_parms(): no params data found [ 55.079398][ T5248] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.086809][ T5248] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.094422][ T5248] bridge_slave_0: entered allmulticast mode [ 55.101114][ T5248] bridge_slave_0: entered promiscuous mode [ 55.108966][ T5252] chnl_net:caif_netlink_parms(): no params data found [ 55.119272][ T5253] chnl_net:caif_netlink_parms(): no params data found [ 55.145288][ T5248] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.152504][ T5248] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.159768][ T5248] bridge_slave_1: entered allmulticast mode [ 55.166830][ T5248] bridge_slave_1: entered promiscuous mode [ 55.267495][ T5248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.306415][ T5250] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.313557][ T5250] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.321038][ T5250] bridge_slave_0: entered allmulticast mode [ 55.327661][ T5250] bridge_slave_0: entered promiscuous mode [ 55.336620][ T5250] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.343730][ T5250] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.351122][ T5250] bridge_slave_1: entered allmulticast mode [ 55.358300][ T5250] bridge_slave_1: entered promiscuous mode [ 55.373259][ T5248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.439763][ T5248] team0: Port device team_slave_0 added [ 55.467299][ T5250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.477054][ T5249] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.484159][ T5249] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.491808][ T5249] bridge_slave_0: entered allmulticast mode [ 55.498654][ T5249] bridge_slave_0: entered promiscuous mode [ 55.506966][ T5248] team0: Port device team_slave_1 added [ 55.512838][ T5249] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.520197][ T5249] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.527655][ T5249] bridge_slave_1: entered allmulticast mode [ 55.534156][ T5249] bridge_slave_1: entered promiscuous mode [ 55.554684][ T5250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.599577][ T5252] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.607516][ T5252] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.616755][ T5252] bridge_slave_0: entered allmulticast mode [ 55.623257][ T5252] bridge_slave_0: entered promiscuous mode [ 55.638926][ T5253] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.646099][ T5253] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.653259][ T5253] bridge_slave_0: entered allmulticast mode [ 55.660463][ T5253] bridge_slave_0: entered promiscuous mode [ 55.667874][ T5248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.675024][ T5248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.700961][ T5248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.723756][ T5249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.733016][ T5252] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.740516][ T5252] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.747755][ T5252] bridge_slave_1: entered allmulticast mode [ 55.754366][ T5252] bridge_slave_1: entered promiscuous mode [ 55.768119][ T5253] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.775369][ T5253] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.782586][ T5253] bridge_slave_1: entered allmulticast mode [ 55.789419][ T5253] bridge_slave_1: entered promiscuous mode [ 55.804707][ T5248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.811678][ T5248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.837988][ T5248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.855577][ T5249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.873483][ T5250] team0: Port device team_slave_0 added [ 55.890978][ T5253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.929210][ T5250] team0: Port device team_slave_1 added [ 55.944945][ T5253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.970385][ T5252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.995253][ T5248] hsr_slave_0: entered promiscuous mode [ 56.001476][ T5248] hsr_slave_1: entered promiscuous mode [ 56.016854][ T5249] team0: Port device team_slave_0 added [ 56.031049][ T5252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.040760][ T5250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.048194][ T5250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.075270][ T5250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.088032][ T5250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.095580][ T5250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.121892][ T5250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.145442][ T5253] team0: Port device team_slave_0 added [ 56.152659][ T5249] team0: Port device team_slave_1 added [ 56.187419][ T5253] team0: Port device team_slave_1 added [ 56.228161][ T5249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.235447][ T5249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.261869][ T5249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.276408][ T5249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.283377][ T5249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.309360][ T5249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.326470][ T5252] team0: Port device team_slave_0 added [ 56.344009][ T5253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.351173][ T5253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.377363][ T5253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.401987][ T5252] team0: Port device team_slave_1 added [ 56.415083][ T5253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.422056][ T5253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.448155][ T5253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.489532][ T5250] hsr_slave_0: entered promiscuous mode [ 56.495880][ T5250] hsr_slave_1: entered promiscuous mode [ 56.501990][ T5250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.513119][ T5250] Cannot create hsr debugfs directory [ 56.535498][ T54] Bluetooth: hci1: command tx timeout [ 56.535502][ T5242] Bluetooth: hci2: command tx timeout [ 56.544357][ T5242] Bluetooth: hci4: command tx timeout [ 56.569892][ T5252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.577203][ T5252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.603783][ T5252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.614476][ T5242] Bluetooth: hci3: command tx timeout [ 56.614486][ T54] Bluetooth: hci0: command tx timeout [ 56.642730][ T5249] hsr_slave_0: entered promiscuous mode [ 56.649450][ T5249] hsr_slave_1: entered promiscuous mode [ 56.655950][ T5249] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.663517][ T5249] Cannot create hsr debugfs directory [ 56.669867][ T5252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.676898][ T5252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.703252][ T5252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.742738][ T5253] hsr_slave_0: entered promiscuous mode [ 56.749557][ T5253] hsr_slave_1: entered promiscuous mode [ 56.755681][ T5253] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.763246][ T5253] Cannot create hsr debugfs directory [ 56.869499][ T5252] hsr_slave_0: entered promiscuous mode [ 56.875719][ T5252] hsr_slave_1: entered promiscuous mode [ 56.881712][ T5252] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.889396][ T5252] Cannot create hsr debugfs directory [ 56.963646][ T5248] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.997541][ T5248] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.029562][ T5248] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.038856][ T5248] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.161372][ T5250] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 57.171152][ T5250] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 57.199531][ T5250] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 57.215515][ T5250] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 57.270139][ T5249] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.283347][ T5249] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.293245][ T5249] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.306614][ T5249] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.399906][ T5253] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.410322][ T5253] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.422709][ T5253] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.434831][ T5253] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.449158][ T5248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.514672][ T5252] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.533839][ T5248] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.545537][ T5252] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.558356][ T5252] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.568820][ T5252] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.592660][ T1602] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.599945][ T1602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.611952][ T1602] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.619099][ T1602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.718513][ T5250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.770969][ T5249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.789124][ T5250] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.826291][ T3008] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.833364][ T3008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.851441][ T5249] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.867648][ T5252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.880027][ T1002] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.887187][ T1002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.911478][ T1602] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.918586][ T1602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.928764][ T1602] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.935879][ T1602] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.959324][ T5248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.972648][ T5253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.988714][ T5252] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.020029][ T1002] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.027157][ T1002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.067477][ T1002] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.074705][ T1002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.101363][ T5253] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.132129][ T1002] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.139410][ T1002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.148908][ T1002] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.156070][ T1002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.195292][ T5248] veth0_vlan: entered promiscuous mode [ 58.237895][ T5248] veth1_vlan: entered promiscuous mode [ 58.265854][ T5249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.329699][ T5250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.367086][ T5248] veth0_macvtap: entered promiscuous mode [ 58.376958][ T5248] veth1_macvtap: entered promiscuous mode [ 58.385645][ T5253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.430520][ T5252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.447781][ T5248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.466431][ T5249] veth0_vlan: entered promiscuous mode [ 58.483105][ T5250] veth0_vlan: entered promiscuous mode [ 58.497905][ T5249] veth1_vlan: entered promiscuous mode [ 58.511301][ T5248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.537664][ T5248] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.547326][ T5248] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.556444][ T5248] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.566106][ T5248] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.579258][ T5250] veth1_vlan: entered promiscuous mode [ 58.614727][ T5242] Bluetooth: hci4: command tx timeout [ 58.620192][ T5242] Bluetooth: hci1: command tx timeout [ 58.625791][ T54] Bluetooth: hci2: command tx timeout [ 58.638477][ T5252] veth0_vlan: entered promiscuous mode [ 58.667125][ T5252] veth1_vlan: entered promiscuous mode [ 58.695275][ T5240] Bluetooth: hci0: command tx timeout [ 58.700807][ T5240] Bluetooth: hci3: command tx timeout [ 58.706935][ T5253] veth0_vlan: entered promiscuous mode [ 58.717612][ T5250] veth0_macvtap: entered promiscuous mode [ 58.745821][ T5249] veth0_macvtap: entered promiscuous mode [ 58.753120][ T5250] veth1_macvtap: entered promiscuous mode [ 58.775217][ T5253] veth1_vlan: entered promiscuous mode [ 58.807568][ T3008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.821887][ T3008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.825041][ T5252] veth0_macvtap: entered promiscuous mode [ 58.841183][ T5252] veth1_macvtap: entered promiscuous mode [ 58.857647][ T5249] veth1_macvtap: entered promiscuous mode [ 58.867377][ T5250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.880317][ T5250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.892152][ T5250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.917966][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.926183][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.949440][ T5250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.960810][ T5250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.973959][ T5250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.991278][ T5250] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.002503][ T5250] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.016208][ T5250] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.017740][ T5248] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 59.029620][ T5250] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.066098][ T5253] veth0_macvtap: entered promiscuous mode [ 59.084504][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.101595][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.120987][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.134981][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.152585][ T5249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.162877][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.173528][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.189067][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.201176][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.211311][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.222241][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.238059][ T5252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.266210][ T5253] veth1_macvtap: entered promiscuous mode [ 59.280352][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.298801][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.310329][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.323062][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.353362][ T5249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.366502][ T5249] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.376624][ T5249] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.387091][ T5249] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.397018][ T5249] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.428347][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.439031][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.449659][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.461794][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.472720][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.484321][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.498409][ T5252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.531524][ T5252] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.541946][ T5252] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.553565][ T5252] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.562433][ T5252] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.589189][ T5253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.612839][ T5253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.623548][ T5253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.636242][ T5253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.646345][ T5253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.658592][ T5253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.669556][ T5253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.684229][ T5253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.699187][ T5253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.722466][ T5253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.733588][ T5253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.746044][ T5253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.756701][ T5253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.767385][ T5253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.779538][ T5253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.790510][ T5253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.801886][ T5253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.813603][ T5253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.911242][ T5253] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.923582][ T5253] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.933510][ T5253] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.944372][ T5253] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.963217][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.971481][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.077590][ T2932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.087913][ T2932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.158572][ T2932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.173879][ T5295] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6'. [ 60.183056][ T2932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.241411][ T2932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.263685][ T2932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.286824][ T1602] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.299278][ T5295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6'. [ 60.300358][ T1602] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.322588][ T2932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.344121][ T2932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.364416][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.372273][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.424896][ T5297] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 60.457751][ T3008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.472596][ T3008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.703165][ T5240] Bluetooth: hci1: command tx timeout [ 60.708701][ T54] Bluetooth: hci4: command tx timeout [ 60.712975][ T5242] Bluetooth: hci2: command tx timeout [ 60.789640][ T5242] Bluetooth: hci3: command tx timeout [ 60.793708][ T5240] Bluetooth: hci0: command tx timeout [ 60.837035][ T5313] Zero length message leads to an empty skb [ 61.014603][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 61.021066][ T29] audit: type=1326 audit(1727108842.672:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5304 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58d017def9 code=0x7ffc0000 [ 61.129384][ T46] hid-generic 0000:0000:0000.0001: unknown main item tag 0x7 [ 61.155877][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 61.161791][ T29] audit: type=1326 audit(1727108842.672:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5304 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58d017def9 code=0x7ffc0000 [ 61.164379][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 61.194808][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 61.211395][ T46] hid-generic 0000:0000:0000.0001: ignoring exceeding usage max [ 61.244987][ T46] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 61.285793][ T46] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 61.293234][ T46] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 61.311031][ T29] audit: type=1326 audit(1727108842.672:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5304 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f58d017def9 code=0x7ffc0000 [ 61.360949][ T46] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 61.375978][ T46] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 61.383694][ T29] audit: type=1326 audit(1727108842.672:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5304 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58d017def9 code=0x7ffc0000 [ 61.416362][ T46] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 61.429887][ T46] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 61.482725][ T46] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 61.484549][ T29] audit: type=1326 audit(1727108842.672:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5304 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58d017def9 code=0x7ffc0000 [ 61.499658][ T46] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 61.592525][ T46] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 61.621604][ T29] audit: type=1326 audit(1727108842.732:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5312 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43a717def9 code=0x7ffc0000 [ 61.652608][ T46] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 61.698002][ T29] audit: type=1326 audit(1727108842.732:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5312 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f43a717def9 code=0x7ffc0000 [ 61.711906][ T46] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 61.771386][ T46] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 61.778968][ T46] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 61.788832][ T46] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 61.796477][ T46] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 61.803977][ T46] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 61.811603][ T46] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 61.819277][ T46] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 61.826860][ T46] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 61.834492][ T46] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 61.851549][ T46] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 61.874281][ T29] audit: type=1326 audit(1727108842.732:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5312 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43a717def9 code=0x7ffc0000 [ 62.004878][ T29] audit: type=1326 audit(1727108842.732:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5312 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f43a717def9 code=0x7ffc0000 [ 62.074288][ T29] audit: type=1326 audit(1727108842.732:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5312 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43a717def9 code=0x7ffc0000 [ 62.084390][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 62.686978][ T5298] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 62.774428][ T5240] Bluetooth: hci2: command tx timeout [ 62.784578][ T5240] Bluetooth: hci1: command tx timeout [ 62.784586][ T5242] Bluetooth: hci4: command tx timeout [ 62.854949][ T5240] Bluetooth: hci3: command tx timeout [ 62.864456][ T5240] Bluetooth: hci0: command tx timeout [ 63.074644][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!! [ 63.689021][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 63.976750][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 64.324441][ T937] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 64.414604][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.610470][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 64.824278][ T937] usb 1-1: Using ep0 maxpacket: 32 [ 64.910385][ T937] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 64.960538][ T937] usb 1-1: config 0 has no interfaces? [ 64.978836][ T937] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 65.075913][ T937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.121373][ T937] usb 1-1: config 0 descriptor?? [ 65.519767][ T5387] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 65.708082][ T937] usb 1-1: USB disconnect, device number 2 [ 66.304305][ T25] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 66.484330][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 66.521761][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.555315][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.580241][ T25] usb 2-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 66.592922][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.625726][ T25] usb 2-1: config 0 descriptor?? [ 66.841805][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 66.841848][ T29] audit: type=1326 audit(1727108848.492:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5407 comm="syz.2.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58d017def9 code=0x7ffc0000 [ 66.959157][ T29] audit: type=1326 audit(1727108848.502:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5407 comm="syz.2.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58d017def9 code=0x7ffc0000 [ 67.005592][ T29] audit: type=1326 audit(1727108848.542:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5407 comm="syz.2.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7f58d017def9 code=0x7ffc0000 [ 67.028721][ T29] audit: type=1326 audit(1727108848.542:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5407 comm="syz.2.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58d017def9 code=0x7ffc0000 [ 67.054296][ T29] audit: type=1326 audit(1727108848.542:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5407 comm="syz.2.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58d017def9 code=0x7ffc0000 [ 67.085376][ T29] audit: type=1326 audit(1727108848.542:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5407 comm="syz.2.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f58d017def9 code=0x7ffc0000 [ 67.112961][ T29] audit: type=1326 audit(1727108848.542:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5407 comm="syz.2.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58d017def9 code=0x7ffc0000 [ 67.188313][ T29] audit: type=1326 audit(1727108848.542:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5407 comm="syz.2.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58d017def9 code=0x7ffc0000 [ 67.248420][ T29] audit: type=1326 audit(1727108848.552:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5407 comm="syz.2.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f58d017def9 code=0x7ffc0000 [ 67.278015][ T5298] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 67.301174][ T29] audit: type=1326 audit(1727108848.552:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5407 comm="syz.2.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58d017def9 code=0x7ffc0000 [ 67.452409][ T5298] usb 4-1: Using ep0 maxpacket: 8 [ 67.466183][ T5298] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.491911][ T5298] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.542679][ T5298] usb 4-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 67.573097][ T5298] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.619854][ T5298] usb 4-1: config 0 descriptor?? [ 68.144202][ C1] hrtimer: interrupt took 64641 ns [ 68.667603][ T5237] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 68.835157][ T5237] usb 1-1: Using ep0 maxpacket: 32 [ 68.869740][ T5237] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 68.939985][ T5237] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 68.954346][ T5237] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.963252][ T5237] usb 1-1: Product: syz [ 68.975804][ T5237] usb 1-1: Manufacturer: syz [ 68.989622][ T5237] usb 1-1: SerialNumber: syz [ 69.012452][ T5237] usb 1-1: config 0 descriptor?? [ 69.022521][ T5427] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 69.045406][ T5237] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 69.204558][ T5286] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 69.217148][ T25] usbhid 2-1:0.0: can't add hid device: -71 [ 69.247662][ T25] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 69.298638][ T25] usb 2-1: USB disconnect, device number 2 [ 69.366065][ T5293] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 69.424296][ T5286] usb 3-1: Using ep0 maxpacket: 8 [ 69.432271][ T5286] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.453129][ T5286] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.467853][ T5286] usb 3-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 69.486963][ T5286] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.489025][ T5440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.519622][ T5440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.552288][ T5286] usb 3-1: config 0 descriptor?? [ 69.554308][ T5293] usb 5-1: Using ep0 maxpacket: 32 [ 69.570031][ T5293] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.594327][ T5293] usb 5-1: config 0 has no interfaces? [ 69.613666][ T5293] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 69.663435][ T5293] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.721051][ T5293] usb 5-1: config 0 descriptor?? [ 69.873102][ T5431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.914362][ T46] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 69.971696][ T5431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.068644][ T5298] usbhid 4-1:0.0: can't add hid device: -71 [ 70.082962][ T5298] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 70.102975][ T5298] usb 4-1: USB disconnect, device number 2 [ 70.190293][ T5448] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 71.245887][ T937] usb 5-1: USB disconnect, device number 2 [ 71.505528][ T937] usb 1-1: USB disconnect, device number 3 [ 71.583920][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.591584][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.265563][ T25] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 72.310623][ T5286] usbhid 3-1:0.0: can't add hid device: -71 [ 72.325586][ T5286] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 72.396462][ T5286] usb 3-1: USB disconnect, device number 3 [ 72.496858][ T25] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 72.540999][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.575858][ T25] usb 5-1: config 0 has no interface number 0 [ 72.594630][ T25] usb 5-1: config 0 interface 117 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 72.629002][ T25] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 72.644244][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.662578][ T25] usb 5-1: Product: syz [ 72.671015][ T25] usb 5-1: Manufacturer: syz [ 72.684308][ T25] usb 5-1: SerialNumber: syz [ 72.693709][ T25] usb 5-1: config 0 descriptor?? [ 72.814394][ T5286] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 72.951944][ T5459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.988490][ T5459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.013063][ T5286] usb 3-1: config 17 has an invalid descriptor of length 255, skipping remainder of the config [ 73.055048][ T5286] usb 3-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 73.059875][ T25] usb 5-1: USB disconnect, device number 3 [ 73.092548][ T5286] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 73.125630][ T5286] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.508147][ T5464] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.36'. [ 73.530239][ T5464] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 73.560570][ T5485] netlink: 28 bytes leftover after parsing attributes in process `syz.1.44'. [ 78.559772][ T5286] usb 3-1: string descriptor 0 read error: -32 [ 78.570380][ T3008] sched: DL replenish lagged too much [ 81.151188][ T8] cfg80211: failed to load regulatory.db [ 94.971805][ T5286] aiptek 3-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 96.684340][ T5298] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 96.692015][ T46] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 96.714726][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 96.721862][ C1] raw-gadget.2 gadget.1: ignoring, device is not running [ 96.862955][ T5298] usb 5-1: device descriptor read/64, error -32 [ 96.874376][ T46] usb 2-1: device descriptor read/64, error -32 [ 97.164371][ T5298] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 97.172908][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 97.181417][ T46] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 97.189203][ C1] raw-gadget.2 gadget.1: ignoring, device is not running [ 97.279656][ T5242] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 97.289236][ T5242] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 97.299910][ T5242] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 97.307964][ T5242] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 97.316147][ T5242] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 97.323476][ T5242] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 97.365690][ T46] usb 2-1: device descriptor read/64, error -32 [ 97.414399][ T5298] usb 5-1: device descriptor read/64, error -32 [ 97.475881][ T46] usb usb2-port1: attempt power cycle [ 97.544464][ T5298] usb usb5-port1: attempt power cycle [ 97.964400][ T46] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 98.025838][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.037473][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.045478][ T5298] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 98.053300][ C1] raw-gadget.2 gadget.1: ignoring, device is not running [ 98.060828][ T46] usb 2-1: device descriptor read/8, error -32 [ 98.068965][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.080224][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 98.087663][ T5298] usb 5-1: device descriptor read/8, error -32 [ 98.095931][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.103648][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 98.111930][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.176546][ T46] raw-gadget.2 gadget.1: failed to queue suspend event [ 98.183855][ T46] raw-gadget.2 gadget.1: failed to queue reset event [ 98.194388][ T5298] raw-gadget.0 gadget.4: failed to queue suspend event [ 98.202605][ T5298] raw-gadget.0 gadget.4: failed to queue reset event [ 98.225001][ T4621] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 98.254375][ T46] raw-gadget.2 gadget.1: failed to queue resume event [ 98.274335][ T5298] raw-gadget.0 gadget.4: failed to queue resume event [ 98.314367][ T46] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 98.345306][ T5298] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 98.367332][ C1] raw-gadget.2 gadget.1: ignoring, device is not running [ 98.374572][ T46] usb 2-1: device descriptor read/8, error -32 [ 98.387019][ T54] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 98.397255][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 98.408765][ T5298] usb 5-1: device descriptor read/8, error -32 [ 98.415390][ T54] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 98.424123][ T54] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 98.432179][ T54] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 98.442338][ T54] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 98.449905][ T54] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 98.484479][ T46] raw-gadget.2 gadget.1: failed to queue suspend event [ 98.491572][ T46] usb usb2-port1: unable to enumerate USB device [ 98.524442][ T5298] raw-gadget.0 gadget.4: failed to queue suspend event [ 98.532736][ T5298] usb usb5-port1: unable to enumerate USB device [ 98.551065][ T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 98.563829][ T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 98.571941][ T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 98.580513][ T54] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 98.587947][ T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 98.648345][ T4621] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 98.656999][ T4621] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 98.665220][ T4621] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 98.673568][ T4621] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 98.681769][ T4621] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 98.691574][ T4621] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 99.414346][ T54] Bluetooth: hci5: command tx timeout [ 100.214349][ T54] Bluetooth: hci2: command tx timeout [ 100.694475][ T54] Bluetooth: hci8: command tx timeout [ 100.774731][ T54] Bluetooth: hci6: command tx timeout [ 100.855096][ T54] Bluetooth: hci7: command tx timeout [ 101.494399][ T54] Bluetooth: hci5: command tx timeout [ 102.294294][ T54] Bluetooth: hci2: command tx timeout [ 102.774434][ T54] Bluetooth: hci8: command tx timeout [ 102.854696][ T54] Bluetooth: hci6: command tx timeout [ 102.934370][ T54] Bluetooth: hci7: command tx timeout [ 103.574452][ T54] Bluetooth: hci5: command tx timeout [ 104.374407][ T54] Bluetooth: hci2: command tx timeout [ 104.854466][ T54] Bluetooth: hci8: command tx timeout [ 104.934532][ T54] Bluetooth: hci6: command tx timeout [ 105.014767][ T54] Bluetooth: hci7: command tx timeout [ 105.654326][ T54] Bluetooth: hci5: command tx timeout [ 106.454381][ T54] Bluetooth: hci2: command tx timeout [ 106.934398][ T54] Bluetooth: hci8: command tx timeout [ 107.014690][ T54] Bluetooth: hci6: command tx timeout [ 107.094442][ T54] Bluetooth: hci7: command tx timeout [ 133.017189][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.023573][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 159.780206][ T4621] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 159.788842][ T4621] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 159.800801][ T4621] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 159.854618][ T4621] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 159.862493][ T4621] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 159.870964][ T4621] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 160.151670][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 160.164404][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 160.172296][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 160.182998][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 160.190682][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 160.201367][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 160.313160][ T4621] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 160.322733][ T4621] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 160.331046][ T4621] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 160.356482][ T4621] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 160.364889][ T4621] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 160.372502][ T4621] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 160.470509][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 160.479609][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 160.489611][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 160.498041][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 160.506816][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 160.514667][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 160.779097][ T54] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 160.789811][ T54] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 160.798012][ T54] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 160.806003][ T54] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 160.814984][ T54] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 160.823378][ T54] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 161.894348][ T54] Bluetooth: hci0: command tx timeout [ 162.294547][ T54] Bluetooth: hci1: command tx timeout [ 162.454465][ T54] Bluetooth: hci3: command tx timeout [ 162.614394][ T54] Bluetooth: hci4: command tx timeout [ 162.854381][ T54] Bluetooth: hci9: command tx timeout [ 163.978788][ T54] Bluetooth: hci0: command tx timeout [ 164.374670][ T54] Bluetooth: hci1: command tx timeout [ 164.534423][ T54] Bluetooth: hci3: command tx timeout [ 164.694392][ T54] Bluetooth: hci4: command tx timeout [ 164.935439][ T54] Bluetooth: hci9: command tx timeout [ 166.054502][ T54] Bluetooth: hci0: command tx timeout [ 166.454461][ T54] Bluetooth: hci1: command tx timeout [ 166.614413][ T54] Bluetooth: hci3: command tx timeout [ 166.774347][ T54] Bluetooth: hci4: command tx timeout [ 167.014429][ T54] Bluetooth: hci9: command tx timeout [ 168.134415][ T54] Bluetooth: hci0: command tx timeout [ 168.534499][ T54] Bluetooth: hci1: command tx timeout [ 168.694404][ T54] Bluetooth: hci3: command tx timeout [ 168.855337][ T54] Bluetooth: hci4: command tx timeout [ 169.094322][ T54] Bluetooth: hci9: command tx timeout [ 194.464457][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.470800][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 220.225072][ T5244] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 220.235112][ T5244] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 220.242895][ T5244] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 220.251176][ T5244] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 220.260558][ T5244] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 220.268259][ T5244] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 221.280568][ T5244] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 221.290948][ T5244] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 221.299899][ T5244] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 221.308612][ T5244] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 221.316564][ T5244] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 221.346894][ T5244] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 221.459206][ T5233] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 221.469445][ T5233] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 221.479799][ T5233] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 221.495654][ T5233] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 221.503772][ T5233] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 221.511361][ T5233] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 221.587366][ T5244] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 221.599052][ T5244] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 221.607299][ T5244] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 221.615725][ T5244] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 221.625618][ T5244] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 221.635681][ T5244] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 222.160688][ T5244] Bluetooth: hci5: command 0x0406 tx timeout [ 222.166840][ T5233] Bluetooth: hci2: command 0x0406 tx timeout [ 222.175026][ T5247] Bluetooth: hci8: command 0x0406 tx timeout [ 222.181133][ T5245] Bluetooth: hci6: command 0x0406 tx timeout [ 222.187252][ T5245] Bluetooth: hci7: command 0x0406 tx timeout [ 222.294971][ T5246] Bluetooth: hci10: command tx timeout [ 222.486531][ T5242] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 222.496342][ T5242] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 222.504109][ T5242] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 222.513045][ T5242] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 222.520936][ T5242] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 222.531118][ T5242] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 223.414429][ T5242] Bluetooth: hci11: command tx timeout [ 223.574440][ T5242] Bluetooth: hci12: command tx timeout [ 223.743329][ T5242] Bluetooth: hci13: command tx timeout [ 224.374348][ T5242] Bluetooth: hci10: command tx timeout [ 224.614390][ T5242] Bluetooth: hci14: command tx timeout [ 225.496529][ T5242] Bluetooth: hci11: command tx timeout [ 225.654363][ T5242] Bluetooth: hci12: command tx timeout [ 225.822361][ T5242] Bluetooth: hci13: command tx timeout [ 226.454391][ T5242] Bluetooth: hci10: command tx timeout [ 226.694400][ T5242] Bluetooth: hci14: command tx timeout [ 227.574344][ T5242] Bluetooth: hci11: command tx timeout [ 227.735090][ T5242] Bluetooth: hci12: command tx timeout [ 227.894435][ T5242] Bluetooth: hci13: command tx timeout [ 228.534378][ T5242] Bluetooth: hci10: command tx timeout [ 228.779778][ T5242] Bluetooth: hci14: command tx timeout [ 229.654301][ T5242] Bluetooth: hci11: command tx timeout [ 229.814502][ T5242] Bluetooth: hci12: command tx timeout [ 229.974543][ T5242] Bluetooth: hci13: command tx timeout [ 230.854453][ T5242] Bluetooth: hci14: command tx timeout [ 255.901630][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.913669][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.454279][ T30] INFO: task kworker/0:0:8 blocked for more than 143 seconds. [ 258.462057][ T30] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 258.504231][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 258.550198][ T30] task:kworker/0:0 state:D stack:23856 pid:8 tgid:8 ppid:2 flags:0x00004000 [ 258.639025][ T30] Workqueue: events_power_efficient crda_timeout_work [ 258.682168][ T30] Call Trace: [ 258.710138][ T30] [ 258.713150][ T30] __schedule+0x1895/0x4b30 [ 258.752760][ T30] ? __pfx___schedule+0x10/0x10 [ 258.780568][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 258.800425][ T30] ? __pfx_lock_release+0x10/0x10 [ 258.839105][ T30] ? kick_pool+0x45c/0x620 [ 258.843620][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 258.881831][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 258.919991][ T30] ? schedule+0x90/0x320 [ 258.929169][ T30] schedule+0x14b/0x320 [ 258.933378][ T30] schedule_preempt_disabled+0x13/0x30 [ 258.989821][ T30] __mutex_lock+0x6a7/0xd70 [ 258.999572][ T30] ? __mutex_lock+0x52a/0xd70 [ 259.040184][ T30] ? crda_timeout_work+0x15/0x50 [ 259.050015][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 259.068720][ T30] ? process_scheduled_works+0x976/0x1850 [ 259.114463][ T30] crda_timeout_work+0x15/0x50 [ 259.119294][ T30] process_scheduled_works+0xa63/0x1850 [ 259.152242][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 259.171039][ T30] ? assign_work+0x364/0x3d0 [ 259.194416][ T30] worker_thread+0x870/0xd30 [ 259.199088][ T30] ? __kthread_parkme+0x169/0x1d0 [ 259.224228][ T30] ? __pfx_worker_thread+0x10/0x10 [ 259.229405][ T30] kthread+0x2f0/0x390 [ 259.233487][ T30] ? __pfx_worker_thread+0x10/0x10 [ 259.273358][ T30] ? __pfx_kthread+0x10/0x10 [ 259.300673][ T30] ret_from_fork+0x4b/0x80 [ 259.319944][ T30] ? __pfx_kthread+0x10/0x10 [ 259.339846][ T30] ret_from_fork_asm+0x1a/0x30 [ 259.384240][ T30] [ 259.387487][ T30] INFO: task kworker/u8:7:2932 blocked for more than 144 seconds. [ 259.424481][ T30] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 259.431828][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 259.462685][ T30] task:kworker/u8:7 state:D stack:20016 pid:2932 tgid:2932 ppid:2 flags:0x00004000 [ 259.488391][ T30] Workqueue: events_unbound linkwatch_event [ 259.507562][ T30] Call Trace: [ 259.510892][ T30] [ 259.513837][ T30] __schedule+0x1895/0x4b30 [ 259.538649][ T30] ? __pfx___schedule+0x10/0x10 [ 259.543559][ T30] ? __pfx_lock_release+0x10/0x10 [ 259.568737][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 259.581208][ T30] ? kthread_data+0x52/0xd0 [ 259.597328][ T30] ? schedule+0x90/0x320 [ 259.601630][ T30] ? wq_worker_sleeping+0x66/0x240 [ 259.623775][ T30] ? schedule+0x90/0x320 [ 259.632474][ T30] schedule+0x14b/0x320 [ 259.651347][ T30] schedule_preempt_disabled+0x13/0x30 [ 259.665668][ T30] __mutex_lock+0x6a7/0xd70 [ 259.670220][ T30] ? __mutex_lock+0x52a/0xd70 [ 259.690233][ T30] ? linkwatch_event+0xe/0x60 [ 259.701093][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 259.717500][ T30] ? process_scheduled_works+0x976/0x1850 [ 259.723264][ T30] linkwatch_event+0xe/0x60 [ 259.745795][ T30] process_scheduled_works+0xa63/0x1850 [ 259.751421][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 259.774214][ T30] ? assign_work+0x364/0x3d0 [ 259.778862][ T30] worker_thread+0x870/0xd30 [ 259.783486][ T30] ? __kthread_parkme+0x169/0x1d0 [ 259.810726][ T30] ? __pfx_worker_thread+0x10/0x10 [ 259.821955][ T30] kthread+0x2f0/0x390 [ 259.840149][ T30] ? __pfx_worker_thread+0x10/0x10 [ 259.854215][ T30] ? __pfx_kthread+0x10/0x10 [ 259.858841][ T30] ret_from_fork+0x4b/0x80 [ 259.863278][ T30] ? __pfx_kthread+0x10/0x10 [ 259.888307][ T30] ret_from_fork_asm+0x1a/0x30 [ 259.893142][ T30] [ 259.911612][ T30] INFO: task syz.3.43:5486 blocked for more than 144 seconds. [ 259.930877][ T30] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 259.952452][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 259.974275][ T30] task:syz.3.43 state:D stack:23072 pid:5486 tgid:5481 ppid:5253 flags:0x00004006 [ 260.001484][ T30] Call Trace: [ 260.011880][ T30] [ 260.023994][ T30] __schedule+0x1895/0x4b30 [ 260.033164][ T30] ? __pfx___schedule+0x10/0x10 [ 260.054723][ T30] ? __pfx_lock_release+0x10/0x10 [ 260.059802][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 260.079607][ T30] ? schedule+0x90/0x320 [ 260.083896][ T30] schedule+0x14b/0x320 [ 260.104273][ T30] schedule_preempt_disabled+0x13/0x30 [ 260.109795][ T30] __mutex_lock+0x6a7/0xd70 [ 260.131080][ T30] ? __mutex_lock+0x52a/0xd70 [ 260.154207][ T30] ? tun_chr_close+0x3b/0x1b0 [ 260.158937][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 260.163989][ T30] ? __pfx_call_rcu+0x10/0x10 [ 260.189745][ T30] tun_chr_close+0x3b/0x1b0 [ 260.204522][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 260.214594][ T30] __fput+0x23f/0x880 [ 260.218637][ T30] task_work_run+0x24f/0x310 [ 260.223246][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 260.253986][ T30] ? __pfx_task_work_run+0x10/0x10 [ 260.265327][ T30] ? do_exit+0xa2a/0x28e0 [ 260.269703][ T30] ? kmem_cache_free+0x1a2/0x420 [ 260.292991][ T30] ? do_exit+0xa2a/0x28e0 [ 260.304325][ T30] do_exit+0xa2f/0x28e0 [ 260.308543][ T30] ? __pfx_do_exit+0x10/0x10 [ 260.313151][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 260.362962][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 260.379403][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 260.400236][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 260.410719][ T30] do_group_exit+0x207/0x2c0 [ 260.424669][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 260.440121][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 260.453930][ T30] get_signal+0x176f/0x1810 [ 260.465853][ T30] ? __pfx_get_signal+0x10/0x10 [ 260.470761][ T30] ? do_futex+0x33b/0x560 [ 260.489658][ T30] arch_do_signal_or_restart+0x96/0x860 [ 260.509170][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 260.522288][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 260.541964][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 260.560222][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 260.573396][ T30] do_syscall_64+0x100/0x230 [ 260.588638][ T30] ? clear_bhb_loop+0x35/0x90 [ 260.593383][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.617417][ T30] RIP: 0033:0x7eff5e37def9 [ 260.621905][ T30] RSP: 002b:00007eff5f1b40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 260.650326][ T30] RAX: fffffffffffffe00 RBX: 00007eff5e536060 RCX: 00007eff5e37def9 [ 260.674119][ T30] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007eff5e536060 [ 260.682234][ T30] RBP: 00007eff5e536058 R08: 0000000000000000 R09: 0000000000000000 [ 260.711295][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00007eff5e536064 [ 260.734228][ T30] R13: 0000000000000000 R14: 00007eff5e65f940 R15: 00007eff5e65fa28 [ 260.742286][ T30] [ 260.764327][ T30] [ 260.764327][ T30] Showing all locks held in the system: [ 260.772097][ T30] 3 locks held by kworker/0:0/8: [ 260.799935][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 260.834207][ T30] #1: ffffc900000d7d00 ((crda_timeout).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 260.862034][ T30] #2: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: crda_timeout_work+0x15/0x50 [ 260.888529][ T30] 1 lock held by khungtaskd/30: [ 260.893435][ T30] #0: ffffffff8e937ee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 260.937927][ T30] 3 locks held by kworker/u8:2/35: [ 260.943108][ T30] 3 locks held by kworker/0:2/937: [ 260.964078][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 260.991605][ T30] #1: ffffc900037afd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 261.028443][ T30] #2: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 261.057701][ T30] 3 locks held by kworker/u8:7/2932: [ 261.063036][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 261.097744][ T30] #1: ffffc900097a7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 261.128738][ T30] #2: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 261.148629][ T30] 3 locks held by kworker/u8:8/2934: [ 261.153961][ T30] #0: ffff88802e104148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 261.203349][ T30] #1: ffffc90009817d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 261.230555][ T30] #2: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 261.263200][ T30] 4 locks held by kworker/u8:10/3008: [ 261.279035][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 261.306655][ T30] #1: ffffc900099d7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 261.334069][ T30] #2: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 261.363704][ T30] #3: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 261.402928][ T30] 2 locks held by getty/4985: [ 261.412951][ T30] #0: ffff88803235a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 261.440346][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 261.467140][ T30] 2 locks held by syz-executor/5249: [ 261.472473][ T30] #0: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 261.489704][ T30] #1: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 261.519876][ T30] 4 locks held by kworker/0:5/5286: [ 261.534324][ T30] 4 locks held by kworker/0:7/5288: [ 261.539558][ T30] 1 lock held by syz.3.43/5486: [ 261.564347][ T30] #0: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 261.573397][ T30] 1 lock held by syz.4.46/5500: [ 261.600151][ T30] #0: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 261.614326][ T30] 1 lock held by syz.1.47/5502: [ 261.619212][ T30] #0: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 261.655166][ T30] 2 locks held by syz-executor/5507: [ 261.661139][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 261.697751][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x602/0x9e0 [ 261.724262][ T30] 2 locks held by syz-executor/5510: [ 261.729589][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 261.769282][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 261.801826][ T30] 2 locks held by syz-executor/5512: [ 261.813968][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 261.837886][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x602/0x9e0 [ 261.864210][ T30] 2 locks held by syz-executor/5514: [ 261.869550][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 261.897633][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x602/0x9e0 [ 261.921442][ T30] 2 locks held by syz-executor/5515: [ 261.939035][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 261.964252][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x602/0x9e0 [ 261.988077][ T30] 2 locks held by syz-executor/5523: [ 261.993404][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 262.023034][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 262.048664][ T30] 2 locks held by syz-executor/5526: [ 262.069215][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 262.091523][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 262.117284][ T30] 2 locks held by syz-executor/5528: [ 262.122610][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 262.155694][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 262.181719][ T30] 2 locks held by syz-executor/5530: [ 262.200281][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 262.232236][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 262.259311][ T30] 2 locks held by syz-executor/5532: [ 262.271667][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 262.303466][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 262.329339][ T30] 2 locks held by syz-executor/5538: [ 262.360436][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 262.395221][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 262.416324][ T30] 2 locks held by syz-executor/5543: [ 262.421651][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 262.445974][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 262.461509][ T30] 2 locks held by syz-executor/5546: [ 262.469698][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 262.486869][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 262.500760][ T30] 2 locks held by syz-executor/5547: [ 262.508583][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 262.521788][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 262.539539][ T30] 2 locks held by syz-executor/5550: [ 262.545190][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 262.561848][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 262.573693][ T30] [ 262.581839][ T30] ============================================= [ 262.581839][ T30] [ 262.591078][ T30] NMI backtrace for cpu 1 [ 262.595439][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 262.605612][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 262.615679][ T30] Call Trace: [ 262.618968][ T30] [ 262.621919][ T30] dump_stack_lvl+0x241/0x360 [ 262.626622][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 262.631841][ T30] ? __pfx__printk+0x10/0x10 [ 262.636459][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 262.641423][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 262.646903][ T30] ? _printk+0xd5/0x120 [ 262.651100][ T30] ? __pfx__printk+0x10/0x10 [ 262.655708][ T30] ? __wake_up_klogd+0xcc/0x110 [ 262.660576][ T30] ? __pfx__printk+0x10/0x10 [ 262.665185][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 262.670231][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 262.676237][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 262.682243][ T30] watchdog+0xff4/0x1040 [ 262.686502][ T30] ? watchdog+0x1ea/0x1040 [ 262.690938][ T30] ? __pfx_watchdog+0x10/0x10 [ 262.695630][ T30] kthread+0x2f0/0x390 [ 262.699709][ T30] ? __pfx_watchdog+0x10/0x10 [ 262.704414][ T30] ? __pfx_kthread+0x10/0x10 [ 262.709032][ T30] ret_from_fork+0x4b/0x80 [ 262.713467][ T30] ? __pfx_kthread+0x10/0x10 [ 262.718069][ T30] ret_from_fork_asm+0x1a/0x30 [ 262.722862][ T30] [ 262.726704][ T30] Sending NMI from CPU 1 to CPUs 0: [ 262.731942][ C0] NMI backtrace for cpu 0 [ 262.731954][ C0] CPU: 0 UID: 0 PID: 5288 Comm: kworker/0:7 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 262.731972][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 262.731983][ C0] Workqueue: events nsim_dev_trap_report_work [ 262.732006][ C0] RIP: 0010:__lock_acquire+0x4dc/0x2050 [ 262.732029][ C0] Code: 13 00 00 44 89 3b 44 89 c3 48 89 d8 48 c1 e8 06 48 8d 3c c5 c0 97 25 94 be 08 00 00 00 e8 6c 49 8e 00 48 0f a3 1d 04 71 b5 12 <73> 27 48 69 c3 c8 00 00 00 48 8d 98 c0 16 c2 93 48 ba 00 00 00 00 [ 262.732047][ C0] RSP: 0018:ffffc90000007510 EFLAGS: 00000057 [ 262.732060][ C0] RAX: 0000000000000001 RBX: 0000000000000022 RCX: ffffffff817026b4 [ 262.732072][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff942597c0 [ 262.732082][ C0] RBP: 0000000000000019 R08: ffffffff942597c7 R09: 1ffffffff284b2f8 [ 262.732093][ C0] R10: dffffc0000000000 R11: fffffbfff284b2f9 R12: ffff88802d9f5a00 [ 262.732105][ C0] R13: 0000000000000022 R14: 0000000000022022 R15: 0000000000000000 [ 262.732115][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 262.732133][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 262.732145][ C0] CR2: 000055555b3305c8 CR3: 000000000e734000 CR4: 00000000003526f0 [ 262.732158][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 262.732168][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 262.732178][ C0] Call Trace: [ 262.732184][ C0] [ 262.732190][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 262.732212][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 262.732231][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 262.732257][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 262.732275][ C0] ? nmi_handle+0x14f/0x5a0 [ 262.732290][ C0] ? nmi_handle+0x2a/0x5a0 [ 262.732305][ C0] ? __lock_acquire+0x4dc/0x2050 [ 262.732324][ C0] ? default_do_nmi+0x63/0x160 [ 262.732339][ C0] ? exc_nmi+0x123/0x1f0 [ 262.732353][ C0] ? end_repeat_nmi+0xf/0x53 [ 262.732372][ C0] ? __lock_acquire+0x4d4/0x2050 [ 262.732392][ C0] ? __lock_acquire+0x4dc/0x2050 [ 262.732411][ C0] ? __lock_acquire+0x4dc/0x2050 [ 262.732431][ C0] ? __lock_acquire+0x4dc/0x2050 [ 262.732450][ C0] [ 262.732455][ C0] [ 262.732466][ C0] lock_acquire+0x1ed/0x550 [ 262.732484][ C0] ? NF_HOOK+0x9a/0x450 [ 262.732506][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 262.732524][ C0] ? nf_nat_inet_fn+0xa30/0xd10 [ 262.732546][ C0] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 262.732566][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 262.732585][ C0] NF_HOOK+0xbb/0x450 [ 262.732603][ C0] ? NF_HOOK+0x9a/0x450 [ 262.732622][ C0] ? NF_HOOK+0x9a/0x450 [ 262.732640][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 262.732661][ C0] ? ip_rcv_finish+0x406/0x560 [ 262.732681][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 262.732700][ C0] NF_HOOK+0x3a4/0x450 [ 262.732718][ C0] ? __lock_acquire+0x1384/0x2050 [ 262.732737][ C0] ? NF_HOOK+0x9a/0x450 [ 262.732756][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 262.732774][ C0] ? ip_rcv_core+0x801/0xd10 [ 262.732793][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 262.732815][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 262.732835][ C0] __netif_receive_skb+0x2bf/0x650 [ 262.732851][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 262.732869][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 262.732883][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 262.732902][ C0] ? __pfx_lock_release+0x10/0x10 [ 262.732921][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 262.732942][ C0] process_backlog+0x662/0x15b0 [ 262.732959][ C0] ? process_backlog+0x33b/0x15b0 [ 262.732976][ C0] ? __pfx_process_backlog+0x10/0x10 [ 262.732991][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 262.733011][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 262.733031][ C0] __napi_poll+0xcb/0x490 [ 262.733047][ C0] net_rx_action+0x89b/0x1240 [ 262.733069][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 262.733084][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 262.733114][ C0] handle_softirqs+0x2c5/0x980 [ 262.733139][ C0] ? do_softirq+0x11b/0x1e0 [ 262.733156][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 262.733177][ C0] do_softirq+0x11b/0x1e0 [ 262.733193][ C0] [ 262.733198][ C0] [ 262.733204][ C0] ? __pfx_do_softirq+0x10/0x10 [ 262.733221][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 262.733241][ C0] ? rcu_is_watching+0x15/0xb0 [ 262.733257][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 262.733275][ C0] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 262.733294][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 262.733312][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 262.733329][ C0] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 262.733349][ C0] nsim_dev_trap_report_work+0x75d/0xaa0 [ 262.733373][ C0] ? process_scheduled_works+0x976/0x1850 [ 262.733392][ C0] process_scheduled_works+0xa63/0x1850 [ 262.733418][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 262.733440][ C0] ? assign_work+0x364/0x3d0 [ 262.733458][ C0] worker_thread+0x870/0xd30 [ 262.733479][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 262.733497][ C0] ? __kthread_parkme+0x169/0x1d0 [ 262.733517][ C0] ? __pfx_worker_thread+0x10/0x10 [ 262.733535][ C0] kthread+0x2f0/0x390 [ 262.733549][ C0] ? __pfx_worker_thread+0x10/0x10 [ 262.733566][ C0] ? __pfx_kthread+0x10/0x10 [ 262.733580][ C0] ret_from_fork+0x4b/0x80 [ 262.733598][ C0] ? __pfx_kthread+0x10/0x10 [ 262.733612][ C0] ret_from_fork_asm+0x1a/0x30 [ 262.733636][ C0] [ 263.298977][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 263.305881][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 263.316043][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 263.326109][ T30] Call Trace: [ 263.329393][ T30] [ 263.332333][ T30] dump_stack_lvl+0x241/0x360 [ 263.337031][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 263.342247][ T30] ? __pfx__printk+0x10/0x10 [ 263.346856][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 263.352866][ T30] ? vscnprintf+0x5d/0x90 [ 263.357218][ T30] panic+0x349/0x880 [ 263.361131][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 263.367306][ T30] ? __pfx_panic+0x10/0x10 [ 263.371735][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 263.377126][ T30] ? __irq_work_queue_local+0x137/0x410 [ 263.382687][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 263.388072][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 263.394243][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 263.400430][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 263.406616][ T30] watchdog+0x1033/0x1040 [ 263.411076][ T30] ? watchdog+0x1ea/0x1040 [ 263.415520][ T30] ? __pfx_watchdog+0x10/0x10 [ 263.420214][ T30] kthread+0x2f0/0x390 [ 263.424295][ T30] ? __pfx_watchdog+0x10/0x10 [ 263.428988][ T30] ? __pfx_kthread+0x10/0x10 [ 263.433590][ T30] ret_from_fork+0x4b/0x80 [ 263.438022][ T30] ? __pfx_kthread+0x10/0x10 [ 263.442626][ T30] ret_from_fork_asm+0x1a/0x30 [ 263.447422][ T30] [ 263.450715][ T30] Kernel Offset: disabled [ 263.455031][ T30] Rebooting in 86400 seconds..