last executing test programs: 24.677934885s ago: executing program 3 (id=4): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000480)=0x5, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95", 0x6f}], 0x1}}], 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'erspan0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2e, 0x4, 0x0, 0x0, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@rr={0x7, 0x13, 0x7c, [@loopback, @rand_addr=0x64010101, @multicast2, @remote]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x0, [{@private, 0xffffff14}, {@remote}, {@remote}, {@dev, 0x659}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd200}, {@private}]}, @timestamp_prespec={0x44, 0x2c, 0x2e, 0x3, 0x0, [{@dev}, {@multicast2}, {@private=0x20000000}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}]}, @noop, @noop, @noop, @lsrr={0x83, 0x7, 0x0, [@multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @local, @private=0xa010102, @remote]}]}}}}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x0) r3 = dup(r2) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x82, &(0x7f0000001100)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x50) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r5, 0xae9a) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f00000041c0)={0x2020, 0x0, 0x0}, 0x202f) write$FUSE_INIT(r6, &(0x7f00000000c0)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x7ab78c4493c52f9b, 0xefe}}, 0x50) creat(&(0x7f0000000180)='./file0\x00', 0x0) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 24.02748494s ago: executing program 3 (id=7): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@local}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r3 = gettid() r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000400)=""/218, 0xda) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000080)={0x335}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0xc08c5334, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x80000001}) tkill(r3, 0x7) syz_open_procfs(0x0, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r5, 0xc0485619, &(0x7f00000001c0)={0x80000001, 0xc04000, "dcc6f634e1403f2b003cd3306565209259a6937336eab171"}) write$binfmt_script(r1, &(0x7f0000000080), 0x76e5467) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f00000001c0)) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, &(0x7f0000000180)={@any, 0x6}) 23.308131866s ago: executing program 3 (id=8): r0 = mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedsend(r0, 0x0, 0xff7f, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getpid() syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x80801) r1 = syz_io_uring_setup(0x3759, &(0x7f0000000140)={0x0, 0xe616, 0x0, 0x0, 0x100}, &(0x7f00000000c0), &(0x7f0000000200)) syz_io_uring_setup(0x5c2, &(0x7f00000006c0)={0x0, 0x60e9, 0x1, 0x0, 0x15d, 0x0, r1}, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) capset(&(0x7f0000000380)={0x19980330}, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x10, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x81) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000200)={0x100, r5}, 0x0) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x12b582, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r6, 0xc0045009, &(0x7f0000000000)=0x8) 18.007109015s ago: executing program 1 (id=17): r0 = socket$inet(0x2, 0x4000000805, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) socket$inet(0x2, 0x6, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x20009) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x3, "7ddee814"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000001740)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000200)=@userptr={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "020037e0"}, 0x0, 0x2, {0x0}}) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000280)=@fd={0x7df0e1e1, 0x1, 0x4, 0x0, 0x4b, {}, {0x5, 0x8, 0x1, 0x6, 0x7, 0x2, "b796ff69"}, 0xa, 0x4, {}, 0x1e}) syz_usb_control_io(r3, &(0x7f0000000e80)={0x2c, 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="00030400000005030000"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000000)={0x24, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0xc, @string={0xc, 0x3, "3b772b5c38e2870b4e77"}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r3, &(0x7f0000000980)={0x2c, 0x0, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c09}}, 0x0, 0x0, 0x0}, 0x0) gettid() connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000003f000/0xf000)=nil, 0x400000, 0x0, 0x18100}) listen(r0, 0x7) 13.024023624s ago: executing program 1 (id=25): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x22000, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) ioctl$PPPIOCGFLAGS1(r1, 0x40047452, &(0x7f0000000100)) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000080)={0x10, 0x2}, 0x10, 0x0) getsockopt(r2, 0x2, 0x4, &(0x7f0000000380)=""/117, &(0x7f00000002c0)=0x75) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000140)={0x404}, 0x10, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r3, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x1) eventfd2(0x10, 0x80801) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000280)='hybla\x00', 0x6) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x24008814) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 12.790861214s ago: executing program 2 (id=26): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x40, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x40}}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 12.676542689s ago: executing program 1 (id=27): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)) fchdir(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000) fadvise64(0xffffffffffffffff, 0x4, 0x0, 0x3) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x8, 0x0, &(0x7f0000002380)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f00000003c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\xfd\x00\x00\x00@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x5) ftruncate(r2, 0xffff) r3 = syz_open_dev$sg(0x0, 0x0, 0x8002) ioctl$SG_IO(r3, 0x2285, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, &(0x7f0000000200)=[{0x0, 0x2, 0x0, 0xff, @time, {}, {0x0, 0x5}, @raw32={[0x90b9dc2e, 0x0, 0xfffffff7]}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8}, {0x0, 0x0, 0xff, 0x0, @time, {}, {}, @connect={{0x0, 0x7}}}], 0x54) ioctl$SG_GET_REQUEST_TABLE(r4, 0x227d, &(0x7f00000018c0)) 12.505389789s ago: executing program 1 (id=28): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x160, 0x4c, 0x2500, 0x290, 0x73, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x3}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r1 = socket(0x2, 0x5, 0x0) r2 = getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@private1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000640)=0xe8) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680)={r2, r3, 0xee01}, 0xc) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, &(0x7f0000000100)=0x10) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x18018, 0x4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@ipv4={""/10, ""/2, @dev}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@private1}}, &(0x7f00000004c0)=0xe8) quotactl_fd$Q_GETINFO(r5, 0xffffffff80000502, r6, &(0x7f0000000500)) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="400000003a00090000000000000000000100000004000000080002809dfa5f8a0c0003000000000000000000140005"], 0x40}}, 0x0) r9 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000700)={0xffffffffffffffff}, 0x4) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000740)=r10, 0x4) syz_usb_disconnect(r9) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0) ioctl$EVIOCRMFF(r9, 0x40085503, 0x0) r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$UI_END_FF_ERASE(r11, 0x400c55cb, &(0x7f00000000c0)) r12 = fcntl$getown(r1, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x3, r12, 0x3, &(0x7f00000001c0)) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={r7, 0xaefa}, &(0x7f0000000180)=0x8) 12.068079573s ago: executing program 2 (id=29): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x703, 0x0, 0x0, 0x0, 0x0, 0x41000000}}], 0x600, 0x0, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890c, &(0x7f0000000000)) write$cgroup_subtree(r3, &(0x7f0000000740)=ANY=[@ANYRESOCT=r4, @ANYBLOB="033549636e26ef2bda69adcc3f9614d56b182d2cdf2824134350525c36a775c3cb7cddf38a6db10f98c3a3300c66d0b19c56ea388d0f9eddf1cfcacb8f13b5ee67ff15327a74318e9e14e8aa668f66151d033635cab4eee5a89665dbcce5875fa272a8ccb138d922d086c35c2f333dc77d727a07a09eb30f611b9c584cc5aa0995a05f024b6be4c0331d6bdcf291535df5290cdef8242de7544adcc317be4232c3e7a032009dfec9131919551ecae0e2127dd4f519bfd94e855aab564a14ae851715ec6db38dc3b1f270bb356bcf7043ef512fd358185f14fb6f8f35b9da51e6057fcaf3accbb3530b05db91af2a431ed3dd2715b7916b07", @ANYRES64=r2, @ANYRES32=r1], 0xfe76) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x416400) ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, &(0x7f00000004c0)={0xd5, 0x0, 0x25f29af0, "9c40a1da19bccf7a07221d7cdd81f5eb449454b4d8378e932b7b42eec04dbdd8f90b655382b71a10943755a995f7e2cd8b1811d61797d5506fb8616720d97175b74afad106d78283a7d16522489c91fdbab2f804d42bb7461c9e2fe08b234fa3f4f2a3f63cef807fd134414888e2d93a18f1d82f7faf9dc8d85548223662fcc75decea9e2d662e9726dce1ac4ae04723178b05d279f4c22eceba8ac53237b63583678ad4bfe438a7bee8fc5431901b2648ef5a0fde4d12b159ed190ae6008231c1c6e9a5abd6ee5f1789c37a03543f2e7ad1aa7d98"}) r8 = dup(r6) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000006c00011c8500"/20, @ANYRES32=r9, @ANYBLOB="000000000000000018003480140035006970365f76746930"], 0x38}}, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x62}, 0x8) recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000005580)=""/4084, 0xff4}, {&(0x7f00000016c0)=""/4098, 0x1002}, {&(0x7f0000003540)=""/4102, 0x1006}, {&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000001300)=""/214, 0xd6}, {&(0x7f0000000200)=""/157, 0x9d}, {&(0x7f0000000380)=""/138, 0x8a}], 0x7}, 0x0) 11.896497935s ago: executing program 0 (id=30): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) (async) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000001240)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000000000383a0020010000000000000000000000000001ff0200000000000000000000000000010101907802000000656f21ef37ba2bffff010000000000000000000000000e00000000000000000000000000000000002c00000066000000"], 0x0) write$P9_RSTATu(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1d0200007d00000005df000000000000000000000000000000000000000000000000000000000000000000000000000000001f00046e6f6465767b6576626f6825ffffff8102000000000000ff03ff9200000034007002007dfa673effeb09b5351f5bde054000000000187b82d9b500002b595fcb14034354b9fd9ef196a51cd5157adc8106"], 0x21d) 11.735886197s ago: executing program 0 (id=31): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b00011100000009040000019569", @ANYRES32], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/bpf', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000001000"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800c0001006d6163766c616e001800028004000580ae442be9ec0f27fe30f5acf9cfef54d568e76d01db82bfef6965e45bebab74f55027d960580f75c8515cde379a77b3b1f749cbdbd06724850afbc10b84da03a43c86285b12e9d661b278a3aea1e05d4d2e3b24a51c79b5b283612c606f06b22da5c3497833f165c5dc34edfb778c3e56f2e6b3f666a3497107fd4a7113e1"], 0x38}}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x70, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xfffa}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x70}}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000600", 0x33fe0}], 0x1}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r6, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a24000000000a01010000000000000000050000000900010073797a30000000000400060070000000030a01030000000000000000050000000900010073797a30000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000080001400000000014000300766c616e3000"/167], 0xd0}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb"], 0xcc}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x0, 0xa005}, @sack_perm]}}}}}}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 11.098460389s ago: executing program 2 (id=33): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x71) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x58, 0x10, 0x1, 0x70bd2c, 0x0, {}, [@IFLA_VFINFO_LIST={0x34, 0x16, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x1, 0x50e, 0xff, 0x88a8}}, {0x14, 0x1, {0x5, 0x2c38, 0x101}}]}]}]}, @IFLA_IFALIASn={0x46}]}, 0x58}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000680)=@newqdisc={0x224, 0x24, 0x601, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xf}, {0x6, 0xfff1}, {0x7}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}, @TCA_STAB={0x8c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x9, 0xae, 0x1, 0x2, 0xe9e, 0x2, 0x6}}, {0x10, 0x2, [0xe, 0x8, 0x200, 0x2, 0xb064, 0x28]}}, {{0x1c, 0x1, {0x8, 0x7, 0xfc, 0x5, 0x1, 0x7, 0x1, 0x3}}, {0xa, 0x2, [0xf, 0x2d, 0x0]}}, {{0x1c, 0x1, {0xb6, 0xc, 0x6, 0x764, 0x1, 0xfff, 0x4, 0xa}}, {0x18, 0x2, [0x9, 0x6, 0x8, 0x8, 0x2c, 0x6, 0x1, 0x7, 0x9, 0x9]}}]}, @TCA_STAB={0x164, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x22, 0x1, 0x0, 0x1, 0x2, 0x9, 0x81, 0x5}}, {0xe, 0x2, [0xc, 0x4, 0x2, 0x2c, 0xffff]}}, {{0x1c, 0x1, {0x7f, 0x3, 0xee, 0x55c7, 0x2, 0x7, 0x530d, 0x2}}, {0x8, 0x2, [0x2, 0x3]}}, {{0x1c, 0x1, {0x9, 0x1, 0xcdb, 0x5, 0x2, 0x2, 0x9, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0x6e, 0x8, 0x2, 0x40, 0x2, 0x286cd411, 0x26, 0x3}}, {0xa, 0x2, [0x1, 0x0, 0xfff7]}}, {{0x1c, 0x1, {0xff, 0xcd, 0x100, 0x6c11d340, 0x1, 0x4, 0x6}}, {0x4}}, {{0x1c, 0x1, {0x8c, 0x3, 0x6, 0xe2cd, 0x0, 0x7cb, 0x4, 0x8}}, {0x14, 0x2, [0x20, 0x94, 0x7, 0x40, 0x7f, 0x2, 0x2, 0xc]}}, {{0x1c, 0x1, {0x5, 0x9, 0x6, 0x8f0, 0x0, 0x14000000, 0x3, 0x3}}, {0xa, 0x2, [0x3, 0xf539, 0x4]}}, {{0x1c, 0x1, {0x8, 0x7, 0x5d6, 0xd51a, 0x1, 0xb3, 0x3, 0x1}}, {0x6, 0x2, [0xda6e]}}, {{0x1c, 0x1, {0x3, 0x4, 0x4, 0x0, 0x0, 0x1, 0x7, 0x3}}, {0xa, 0x2, [0x2, 0x9, 0x4]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x224}, 0x1, 0x0, 0x0, 0x8081}, 0x24000010) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) cachestat(r6, &(0x7f0000000180)={0x3, 0xf12}, &(0x7f0000000200), 0x0) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000340)='user\x00', &(0x7f00000008c0)={'syz', 0x3}, &(0x7f00000005c0)='AT_7jsj\xa5\xb0\xf7\xca\xe7\xbd,\x00', 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r8 = dup(r5) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r7, 0xc0a85352, &(0x7f0000000280)={{0x0, 0x9}, 'port1\x00', 0x0, 0x0, 0xfffffffe, 0x6, 0x3}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0xff, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000480)={r9, 0xb, 0x3}, 0x8) 10.552007355s ago: executing program 1 (id=34): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'erspan0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2e, 0x4, 0x0, 0x0, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x1000, 0x5, 0x0, 0x3f, 0x8]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x0, [{@private, 0xffffff14}, {@remote}, {@dev, 0x659}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd200}, {@private}]}, @timestamp_prespec={0x44, 0x2c, 0x2c, 0x3, 0x0, [{@dev}, {@multicast2}, {@private=0x20000000}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}]}, @noop, @lsrr={0x83, 0x7, 0x0, [@multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @local, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f00000003c0)={0x5, 0x0, [{0x7, 0x2, 0x2, 0x6, 0x4, 0x7fffffff, 0x5}, {0x80000019, 0x1, 0x362fbf15e27055ad, 0x0, 0x1, 0x6}, {0xa, 0xffff, 0x0, 0x100, 0x2, 0x3, 0x100}, {0x7, 0xc, 0x1, 0xffff, 0x9, 0x6, 0x183}, {0x40000001, 0x7, 0x7, 0x4, 0x8, 0x10000, 0x469}]}) ioctl$KVM_NMI(r4, 0xae9a) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) fsmount(r5, 0x1, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 10.240544654s ago: executing program 0 (id=35): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/dev\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000180)="3900000013000347f3bb65e1c3e4ffff01000000010000005600000025000200000004000400000007fd17e5ffff0800040000000000000000", 0x39}, {&(0x7f0000000680)="c29b2b8246", 0x5}, {&(0x7f0000000f00)="fabbaea1c65a531d3bfc812736bf1432abf572259f8a5d3deef9360c616f20ea58ea7801c70850290575ad78c5f985552a4d60c74f7b12ab97ce56b7154945b60b427b440102cdbc63d39775744f15936f2822ad95eee9d776612e3c0a08d1fdbf6af429a235a203c337f3d99c25a4264391338786424ccac427536763367245044003ae9db866cd", 0x88}], 0x3) writev(r2, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={0x0, @nl=@proc={0x10, 0x0, 0x25dfdbff, 0x8000}, @sco, @nfc={0x27, r4, 0xffffffffffffffff, 0x6}, 0x8, 0x0, 0x0, 0x0, 0x2400, &(0x7f0000000080)='bond_slave_1\x00', 0x3, 0x5, 0x14cd}) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000e40)=ANY=[@ANYBLOB="c7436a5008a4e38431ee07785afc22812aa495293c5e9d3de4c16cb96eb1cfcb7d52cf14679ee563b3c4dfb07b17a6333fa3a863e4ffb4fcd14882c3ecb3567aaeaf3e48c751ae09d0b171e93fdf051d95c37906850ef2921524b59cd40e2b52247e03a846a63d1fdadd99dee9389e91a87314c973d43684d36ed910f6f92a68c9a4ce67e273c70a22f1cf6644112cb3"], 0x57) setsockopt$inet_mreqsrc(r1, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000020000102505a1a4400000000101090244000101000000090400001602020000052417000005240000000d240f0100000000000000000009058103400000000009058202ee010000000905030240"], 0x0) ioprio_set$pid(0x2, 0x0, 0x0) syz_clone(0x21104000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x3, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x3a, 0xd, 0x0, 0x0) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a759400000001090212000100000000090400200003"], 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0x1, 0x4, 0x0, 0x4, 0x8b14c6a5df82cbe, 0x0, {0x0, r8}}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000e00)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000dc0)={&(0x7f00000007c0)=@qipcrtr={0x2a, 0x3, 0x4001}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000840)="1097a33215d5eecb61707e2cccb655a988b33cc7732a34b6a77f29ac603351668b739520ccb9ffc3671918bbc677fc5b", 0x30}, {&(0x7f0000000880)="66354d9844887e4efb212601209db2a6fa37f51e4fa43f00266c444be98c79", 0x1f}, {&(0x7f00000008c0)="0a7a39a17466edf3d42e8591dbd22c3c80daa808ef3b6be877bfe274580605b73ec8d6b6ee2ab16bc2c59bc95e62b5af0568fe3ea97c17516fa69b09e53aaba25e3a878fd65b36b1ddb970888bb6df85abac0b83e5cb796d7a6fab", 0x5b}, {&(0x7f0000000940)="21f7fec85fa9b40398ae50fba75225b1fec9d412ea7c82f1a528fb5f1a192bc77a09a0271b16f0504e0a8f60e7209522de17a26dd3a288014cd5122ef6018777f64e454bba3fb81ea35599da428a973646c27856903d0b78bf30b37b534d04f862e911d142ca0be7c6f2f10225e2d45b31d788da1f1f3a28db710ad5d00b5dbebfbeb471b3f31a221340bf73", 0x8c}, {&(0x7f0000000a00)}, {&(0x7f0000000a40)="014abbac18edc383fbd52acea46f8ca7da0381a35a56cb303334b8c3a594a490bcde30daa9e9b835e7542e66a8ac3d337f4dd6e9e8d64818eaf58cba47e5d4e9eeab6a9cf421c7e4f3a2f4f094264b09c6a73d0c759d0f49f567f4cca7aa61f1398bd68ee44f0ff7b33ad9ab11500896b8e8ebb1519e9bf7b9c061ec1ef78b03e68d3cfaf3", 0x85}, {&(0x7f0000000b00)="f811fd33f6668c9ec3d7a3324e753319b624a6278f83f6140be62bfae55e09060993a0e8f8b3390d22d97279d03e423c55d01a3fe6e367ce2b7a5466e4dcb705f075cf94e9034e7f0998ab88c8dce5756f00a947c8407c731441c59bb41ba4392e2b2b35c39f0560e3b6d1663b95fe560491a7812b71a1182a2d5a235f00ab84536ed05d0ec28cd1cebd5c782b96aac3b02be6c171d6856196a564f2", 0x9c}, {&(0x7f0000000bc0)="8186ddbc6b006d07cfc47385af045549eb864edfa1fbc878f73343b4ef01a49cc01545", 0x23}, {&(0x7f0000000c00)="ad1b21813333e9ebf042eee5143fa7968f5d4028154b7d0d9c0a5395dff36e90f8056c6b732d4af5d142e32639cbb57d3d8d887161f1daedbc8613b69b34baf223afcacbbc432a25a4c7b26294db5c95ab169206c1154dae66c7a2bf522e8b613b26544f937502561b0fe7c0791c2c9fd738e4b92d5c57454aacbcac01380ccc07da65968a24096a7c8b080198c7f545e7cc2291f3152d796e04e1d48a19d50f43491d9a2f57b5eb0226339a164bc058a1b6a8cdb6595968876b1084fb932ff821c0e663e46c13420256445f95f96794548504275efa67f1ebc7", 0xda}], 0x9}, 0x0, 0x0, 0x0, {0x0, r8}}) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$printer(r7, &(0x7f0000000140)={0x14, &(0x7f0000000300)={0x0, 0x23, 0x8d, {0x8d, 0xa, "9cdb4c7b2b25e5015ba2a0971cc0d20668005550866dc354516cdc644843c3331f13402e9abaf20a2239c037a2998310c142c708c57075a95d89f11ab73636126db4a049ea9d820bed87d1f82168ecdb99c3380e099562574f5d652d70959b905b50804e3d691cb54ac10903c93ea26ac25543677d08512b66d6c66a108908d4cdfc5b80148509ee74547e"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x449}}}, &(0x7f0000000640)={0x34, &(0x7f0000000480)={0x40, 0x15, 0x3f, "a147277ab023f3f00a194008b956b82cddf4287b232ce849ae81f336e71834484480d08c169eab9ef78806959a910529f30066c5201718e94b5c1ac7922788"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000540)={0x20, 0x0, 0x5c, {0x5a, "2c7dce5e6e8374f111438091557793d0866388b0239d664bbb9bcd5d9abc4d7cf2e0efc70d5d2f783183673e796132f11e701d5808be6e27ecfff337edb496bc7c1a3e36935a0bd630872a2bd0d556ee9fd69cb884310ba555de"}}, &(0x7f00000005c0)={0x20, 0x1, 0x1, 0x2}, &(0x7f0000000600)={0x20, 0x0, 0x1, 0x40}}) ioctl$sock_inet_SIOCSIFPFLAGS(r5, 0x8934, &(0x7f0000000000)={'pimreg\x00', 0x2}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) lseek(r0, 0xc8, 0x0) 10.039683138s ago: executing program 2 (id=36): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x22000, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) ioctl$PPPIOCGFLAGS1(r1, 0x40047452, &(0x7f0000000100)) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000080)={0x10, 0x2}, 0x10, 0x0) getsockopt(r2, 0x2, 0x4, &(0x7f0000000380)=""/117, &(0x7f00000002c0)=0x75) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000140)={0x404}, 0x10, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r3, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x1) eventfd2(0x10, 0x80801) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000280)='hybla\x00', 0x6) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)}, 0x24008814) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 9.688009271s ago: executing program 4 (id=38): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000d40), 0x0, 0x48844, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000300)='wg2\x00', 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x275a, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) renameat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='./file1\x00') r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x18) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="4000b27b584d00000000000000000000000000080900020073797a3200000000050004000000000005000100070000000d006973743a73657400000000a117703d1da09aef0000006213d1c5207f726c41057278da70993ea4b35284600320ccf2e24e3c351a12e151dc205f27007e299274a8fcc59f02cdb327e1e487d2f22ed8d02f0347ad557c4c24f937bfcdcf4926882848ce2452e96b"], 0x40}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) memfd_create(0x0, 0x0) mremap(&(0x7f0000439000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000595000/0x1000)=nil) 9.488210186s ago: executing program 2 (id=39): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x40, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x40}}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 9.43741258s ago: executing program 1 (id=40): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = socket$packet(0x11, 0x3, 0x300) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100007b16b3406d04b408320e010203010902120001000000000904"], 0x0) socket$kcm(0x10, 0x2, 0x10) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = dup(r1) capset(&(0x7f0000000280)={0x20080522}, &(0x7f0000000440)={0x0, 0x0, 0xfffffffe, 0x1944, 0x0, 0x1000}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = dup(r4) ioctl$sock_SIOCBRDELBR(r5, 0x89a1, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90424fc605800024004000400060082c137153e", 0x23}], 0x1}, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="030100"/20, @ANYRESOCT=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000800000000a6300000000000008efd11fbb947831cf5178263acd0d38749e993ae71cd8bf5603d499d834d771212f7e76a15dcf9f51d5f974a1caefaaac6e90045fe836cbe8bb33f5bdf0f3e03d01cec95eb5ee1e7ce63dbef263a9ebe7915d14c9a2a2522232df71c6d374bc99f3c3fba6c62e29bd11506f35c9f7fe4ee49cb89e831f9673fe290e1ee8e95c9595d4ed8094f6cde847852a70468bb51fbd33565d71630e08c94f60763f675eb1bc80cfe36d0f2465e515cc6ef65b74d6ba52ab9d1f02d7267f1969b0fb4931ef101d1e38de68e33aedf44bb68e325e7e4e160"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="18080000001713d4730027a6d7b14b43d74cb236841f5e1cd98600eebc505470cb7ac17582cb1c82250c343fe31dcc5b8551c131d41bf0e496974cf8cf289ba782ed3c05c19a78fae39aa06d3707b90410865fd8e97b4e9d0055c0ee85545a4ae1350208384d1646f86e8fd9ea664e38d056d986a0c7c413b7911499522b3e7510156f69ee9500000000000000", @ANYRES16=0x0], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="184676c85e00000f0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e00000085000000a00000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r10, &(0x7f0000000000)=[{0x22, 0x21, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x95ffffff]}}], 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r7}, &(0x7f0000000100), &(0x7f0000000140)=r9}, 0x20) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r11, 0x84, 0x3ff, &(0x7f0000000300)="fb7371014b5f445badeebfb3813659c55e87693e65ca5d897e8f25ff070000000000008aad999cf944eb", 0x2a) 9.055016454s ago: executing program 4 (id=41): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a001540020014", 0x23}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x80}) ioctl$SNDRV_PCM_IOCTL_RESET(r4, 0x4141, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000380)=0x5f) write$char_usb(r1, &(0x7f0000000040)="e2", 0x918) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x700, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)=@nfc_llcp, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)=""/41, 0x29}, {&(0x7f0000000200)=""/50, 0x32}], 0x2, &(0x7f00000002c0)=""/55, 0x37}, 0x62) r5 = creat(0x0, 0x0) r6 = syz_open_dev$dri(0x0, 0x1, 0x0) r7 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000003c0), 0x208000, 0x0) r8 = syz_genetlink_get_family_id$auto(&(0x7f0000000440)='\x00', r5) sendmsg$autorun(r7, &(0x7f0000000540)=@policy43={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r8, 0x2, 0x70bd2d, 0x25dfdbfe, {0x1a}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000003380)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r12 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r12, 0x89e0, &(0x7f00000001c0)={r11, r10}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYRES64=r6, @ANYRES16], 0x58}, 0x1, 0xba01}, 0x0) 8.373701092s ago: executing program 4 (id=42): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc34000000000010902"], 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2004c890, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r1, 0x10d, 0x10, 0x0, &(0x7f0000000000)) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{0x0}], 0x1}}, {{&(0x7f0000000100)={0xa, 0xfffd, 0x0, @private1}, 0x1c, &(0x7f0000002400)}}], 0x2, 0x8000000) shutdown(0xffffffffffffffff, 0x1) setsockopt(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000080)="1af3050000f2bd5b", 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r4, 0x3b8a, &(0x7f00000000c0)={0x28, 0x0, r6, 0x0, 0x0}) r7 = syz_open_dev$video(&(0x7f0000000040), 0x3, 0x0) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfeedcafe, 0x3, 0x6, 0x0, 0x1}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x3bf4a000) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000040)='(+\x00', &(0x7f0000000340)="da4b7cf07f35d6aa10bb9e8a927aa2da4b016ee374d2c7a9531ed4a4f887d76c6e3d8311967a345f4b31b4c7eed53615f6062c4dde0450ab169836ff745ee0bd7565a9ffc1724ea805b50fe7039b9c196af3a4e88429223c4daac104e9892cdd70ea93acb7f8", 0x66) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r3) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2, 0x0, 0x0, 0x2}}, 0x2e) 8.232676776s ago: executing program 2 (id=43): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b00011100000009040000019569", @ANYRES32], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/bpf', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000180012800c0001006d6163766c616e001800028004000580ae442be9ec0f27fe30f5acf9cfef54d568e76d01db82bfef6965e45bebab74f55027d960580f75c8515cde379a77b3b1f749cbdbd06724850afbc10b84da03a43c86285b12e9d661b278a3aea1e05d4d2e3b24a51c79b5b283612c606f06b22da5c3497833f165c5dc34edfb778c3e56f2e6b3f666a3497107fd4a7113e1"], 0x38}}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x70, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xfffa}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x70}}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000600", 0x33fe0}], 0x1}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r6, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a24000000000a01010000000000000000050000000900010073797a30000000000400060070000000030a01030000000000000000050000000900010073797a30000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000080001400000000014000300766c616e3000"/167], 0xd0}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x0, 0xa005}, @sack_perm]}}}}}}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 8.16000769s ago: executing program 0 (id=44): sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="000128bd06000014df2710000000"], 0x14}}, 0x80) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e751d"], 0x24) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000080)='d', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) syz_open_dev$loop(&(0x7f0000000400), 0x75f, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, r4}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x11af, 0xdfd2, 0x1, 0x0, 0x0) write$P9_RATTACH(r4, &(0x7f00000000c0)={0x14, 0x69, 0x2, {0x2, 0x2, 0x6}}, 0x14) ioctl$SIOCGSTAMPNS(r3, 0x8907, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, &(0x7f0000000700)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="5c000000071400012cbd7000fcdbdf2508004400", @ANYRES32=r4, @ANYBLOB="0900020073797a320000000008004400c855691191cd6bbe23a29d7d05ede3b2773f899a3cfae732d5f1c202f1bfdcabc068c42a78890f98c59d0e8880fdb4e24176b36b3348ca8be7b039d37cdb1e1f361238f90a06635b669b459cf9d8ecfe0333b74216042bf523f56b6b81f2e31fe08df39c045204116ccf61b02fea85e955a403fbc792", @ANYRES32=r4, @ANYBLOB="0900020073797a30000000000900020073797a3000000000050054000900000008000100000000000800010002000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x810) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xe) shutdown(r3, 0x1) recvmmsg(r3, 0x0, 0x0, 0x0, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @hyper}, 0x10) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="040e06"], 0x9) socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0) 7.81961701s ago: executing program 3 (id=9): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x71) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x58, 0x10, 0x1, 0x70bd2c, 0x0, {}, [@IFLA_VFINFO_LIST={0x34, 0x16, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x1, 0x50e, 0xff, 0x88a8}}, {0x14, 0x1, {0x5, 0x2c38, 0x101}}]}]}]}, @IFLA_IFALIASn={0x46}]}, 0x58}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000680)=@newqdisc={0x230, 0x24, 0x601, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xf}, {0x6, 0xfff1}, {0x7}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}, @TCA_STAB={0x8c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x9, 0xae, 0x1, 0x2, 0xe9e, 0x2, 0x6}}, {0x10, 0x2, [0xe, 0x8, 0x200, 0x2, 0xb064, 0x28]}}, {{0x1c, 0x1, {0x8, 0x7, 0xfc, 0x5, 0x1, 0x7, 0x1, 0x3}}, {0xa, 0x2, [0xf, 0x2d, 0x0]}}, {{0x1c, 0x1, {0xb6, 0xc, 0x6, 0x764, 0x1, 0xfff, 0x4, 0xa}}, {0x18, 0x2, [0x9, 0x6, 0x8, 0x8, 0x2c, 0x6, 0x1, 0x7, 0x9, 0x9]}}]}, @TCA_STAB={0x170, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x22, 0x1, 0x0, 0x1, 0x2, 0x9, 0x81, 0x5}}, {0xe, 0x2, [0xc, 0x4, 0x2, 0x2c, 0xffff]}}, {{0x1c, 0x1, {0x7f, 0x3, 0xee, 0x55c7, 0x2, 0x7, 0x530d, 0x2}}, {0x8, 0x2, [0x2, 0x3]}}, {{0x1c, 0x1, {0x9, 0x1, 0xcdb, 0x5, 0x2, 0x2, 0x9, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0x6e, 0x8, 0x2, 0x40, 0x2, 0x286cd411, 0x26, 0x3}}, {0xa, 0x2, [0x1, 0x0, 0xfff7]}}, {{0x1c, 0x1, {0xff, 0xcd, 0x100, 0x6c11d340, 0x1, 0x4, 0x6, 0x5}}, {0xe, 0x2, [0xd9b, 0x0, 0x2, 0x4, 0x28ad]}}, {{0x1c, 0x1, {0x8c, 0x3, 0x6, 0xe2cd, 0x0, 0x7cb, 0x4, 0x7}}, {0x12, 0x2, [0x20, 0x7, 0x40, 0x7f, 0x2, 0x2, 0xc]}}, {{0x1c, 0x1, {0x5, 0x9, 0x6, 0x8f0, 0x0, 0x14000000, 0x3, 0x3}}, {0xa, 0x2, [0x3, 0xf539, 0x4]}}, {{0x1c, 0x1, {0x8, 0x7, 0x5d6, 0xd51a, 0x1, 0xb3, 0x3, 0x1}}, {0x6, 0x2, [0xda6e]}}, {{0x1c, 0x1, {0x3, 0x4, 0x4, 0x0, 0x0, 0x1, 0x7, 0x3}}, {0xa, 0x2, [0x2, 0x9, 0x4]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x230}, 0x1, 0x0, 0x0, 0x8081}, 0x24000010) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) cachestat(r6, &(0x7f0000000180)={0x3, 0xf12}, &(0x7f0000000200), 0x0) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000340)='user\x00', &(0x7f00000008c0)={'syz', 0x3}, &(0x7f00000005c0)='AT_7jsj\xa5\xb0\xf7\xca\xe7\xbd,\x00', 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r8 = dup(r5) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r7, 0xc0a85352, &(0x7f0000000280)={{0x0, 0x9}, 'port1\x00', 0x0, 0x0, 0xfffffffe, 0x6, 0x3}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0xff, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000480)={r9, 0xb, 0x3}, 0x8) 6.936211122s ago: executing program 0 (id=45): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b00011100000009040000019569", @ANYRES32], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/bpf', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000001000"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800c0001006d6163766c616e001800028004000580ae442be9ec0f27fe30f5acf9cfef54d568e76d01db82bfef6965e45bebab74f55027d960580f75c8515cde379a77b3b1f749cbdbd06724850afbc10b84da03a43c86285b12e9d661b278a3aea1e05d4d2e3b24a51c79b5b283612c606f06b22da5c3497833f165c5dc34edfb778c3e56f2e6b3f666a3497107fd4a7113e1"], 0x38}}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x70, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xfffa}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x70}}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000600", 0x33fe0}], 0x1}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r6, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a24000000000a01010000000000000000050000000900010073797a30000000000400060070000000030a01030000000000000000050000000900010073797a30000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000080001400000000014000300766c616e3000"/167], 0xd0}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b4000000000"], 0xcc}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x0, 0xa005}, @sack_perm]}}}}}}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 677.437459ms ago: executing program 0 (id=46): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x71) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x58, 0x10, 0x1, 0x70bd2c, 0x0, {}, [@IFLA_VFINFO_LIST={0x34, 0x16, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x1, 0x50e, 0xff, 0x88a8}}, {0x14, 0x1, {0x5, 0x2c38, 0x101}}]}]}]}, @IFLA_IFALIASn={0x46}]}, 0x58}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000680)=@newqdisc={0x224, 0x24, 0x601, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xf}, {0x6, 0xfff1}, {0x7}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}, @TCA_STAB={0x8c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x9, 0xae, 0x1, 0x2, 0xe9e, 0x2, 0x6}}, {0x10, 0x2, [0xe, 0x8, 0x200, 0x2, 0xb064, 0x28]}}, {{0x1c, 0x1, {0x8, 0x7, 0xfc, 0x5, 0x1, 0x7, 0x1, 0x3}}, {0xa, 0x2, [0xf, 0x2d, 0x0]}}, {{0x1c, 0x1, {0xb6, 0xc, 0x6, 0x764, 0x1, 0xfff, 0x4, 0xa}}, {0x18, 0x2, [0x9, 0x6, 0x8, 0x8, 0x2c, 0x6, 0x1, 0x7, 0x9, 0x9]}}]}, @TCA_STAB={0x164, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x22, 0x1, 0x0, 0x1, 0x2, 0x9, 0x81, 0x5}}, {0xe, 0x2, [0xc, 0x4, 0x2, 0x2c, 0xffff]}}, {{0x1c, 0x1, {0x7f, 0x3, 0xee, 0x55c7, 0x2, 0x7, 0x530d, 0x2}}, {0x8, 0x2, [0x2, 0x3]}}, {{0x1c, 0x1, {0x9, 0x1, 0xcdb, 0x5, 0x2, 0x2, 0x9, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0x6e, 0x8, 0x2, 0x40, 0x2, 0x286cd411, 0x26, 0x3}}, {0xa, 0x2, [0x1, 0x0, 0xfff7]}}, {{0x1c, 0x1, {0xff, 0xcd, 0x100, 0x6c11d340, 0x1, 0x4, 0x6}}, {0x4}}, {{0x1c, 0x1, {0x8c, 0x3, 0x6, 0xe2cd, 0x0, 0x7cb, 0x4, 0x8}}, {0x14, 0x2, [0x20, 0x94, 0x7, 0x40, 0x7f, 0x2, 0x2, 0xc]}}, {{0x1c, 0x1, {0x5, 0x9, 0x6, 0x8f0, 0x0, 0x14000000, 0x3, 0x3}}, {0xa, 0x2, [0x3, 0xf539, 0x4]}}, {{0x1c, 0x1, {0x8, 0x7, 0x5d6, 0xd51a, 0x1, 0xb3, 0x3, 0x1}}, {0x6, 0x2, [0xda6e]}}, {{0x1c, 0x1, {0x3, 0x4, 0x4, 0x0, 0x0, 0x1, 0x7, 0x3}}, {0xa, 0x2, [0x2, 0x9, 0x4]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x224}, 0x1, 0x0, 0x0, 0x8081}, 0x24000010) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) cachestat(r6, &(0x7f0000000180)={0x3, 0xf12}, &(0x7f0000000200), 0x0) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000340)='user\x00', &(0x7f00000008c0)={'syz', 0x3}, &(0x7f00000005c0)='AT_7jsj\xa5\xb0\xf7\xca\xe7\xbd,\x00', 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r8 = dup(r5) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r7, 0xc0a85352, &(0x7f0000000280)={{0x0, 0x9}, 'port1\x00', 0x0, 0x0, 0xfffffffe, 0x6, 0x3}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0xff, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000480)={r9, 0xb, 0x3}, 0x8) 508.189986ms ago: executing program 4 (id=47): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)) fchdir(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000) fadvise64(0xffffffffffffffff, 0x4, 0x0, 0x3) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x8, 0x0, &(0x7f0000002380)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f00000003c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\xfd\x00\x00\x00@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x5) ftruncate(r2, 0xffff) r3 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x8002) ioctl$SG_IO(r3, 0x2285, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(r4, 0x227d, &(0x7f00000018c0)) 261.580308ms ago: executing program 4 (id=48): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x22000, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) ioctl$PPPIOCGFLAGS1(r1, 0x40047452, &(0x7f0000000100)) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000080)={0x10, 0x2}, 0x10, 0x0) getsockopt(r2, 0x2, 0x4, &(0x7f0000000380)=""/117, &(0x7f00000002c0)=0x75) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000140)={0x404}, 0x10, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r3, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x1) eventfd2(0x10, 0x80801) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000280)='hybla\x00', 0x6) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)}, 0x24008814) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 0s ago: executing program 4 (id=49): unshare(0x62040200) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="580000000102010100000000000000000a0000004400018006000340000000002c0001"], 0x58}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x7fffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3209000000140004800800024032658aeb08000140000000010900010073797a3000000000140000001100010000000000000000000000000a"], 0x88}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) r4 = syz_io_uring_setup(0x7485, &(0x7f0000000100)={0x0, 0xee0e, 0x80, 0x3, 0x37f}, &(0x7f0000000080), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f00000001c0)=[0xffffffffffffffff], 0x100000) r5 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r5, 0x0, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x41, &(0x7f0000000100)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.131' (ED25519) to the list of known hosts. [ 58.225172][ T5212] cgroup: Unknown subsys name 'net' [ 58.373374][ T5212] cgroup: Unknown subsys name 'cpuset' [ 58.381847][ T5212] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.890986][ T5212] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 63.275365][ T5223] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.284616][ T5223] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.301128][ T5223] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.322127][ T5223] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.342103][ T5226] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 63.346331][ T5230] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.357715][ T5230] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.365075][ T5230] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.368718][ T5231] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.372515][ T5230] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 63.380109][ T5231] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 63.395244][ T5230] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.396973][ T5231] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 63.410008][ T5231] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.412500][ T5230] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 63.417540][ T5231] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 63.431755][ T5231] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 63.439371][ T5231] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.448190][ T5235] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.455517][ T5235] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 63.456925][ T5231] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.463108][ T5235] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.470731][ T5231] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 63.476990][ T5235] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.485107][ T5231] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.492769][ T5235] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 63.497975][ T5231] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 63.505269][ T5235] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 63.519297][ T5235] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.520129][ T4618] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 63.942127][ T5239] chnl_net:caif_netlink_parms(): no params data found [ 63.953271][ T5242] chnl_net:caif_netlink_parms(): no params data found [ 64.039014][ T5240] chnl_net:caif_netlink_parms(): no params data found [ 64.095504][ T5241] chnl_net:caif_netlink_parms(): no params data found [ 64.202324][ T5244] chnl_net:caif_netlink_parms(): no params data found [ 64.232902][ T5242] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.240707][ T5242] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.248075][ T5242] bridge_slave_0: entered allmulticast mode [ 64.255909][ T5242] bridge_slave_0: entered promiscuous mode [ 64.266684][ T5239] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.273852][ T5239] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.281070][ T5239] bridge_slave_0: entered allmulticast mode [ 64.287670][ T5239] bridge_slave_0: entered promiscuous mode [ 64.297527][ T5240] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.304715][ T5240] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.312235][ T5240] bridge_slave_0: entered allmulticast mode [ 64.318824][ T5240] bridge_slave_0: entered promiscuous mode [ 64.326221][ T5240] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.333725][ T5240] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.340988][ T5240] bridge_slave_1: entered allmulticast mode [ 64.347578][ T5240] bridge_slave_1: entered promiscuous mode [ 64.354825][ T5242] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.362147][ T5242] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.369841][ T5242] bridge_slave_1: entered allmulticast mode [ 64.376897][ T5242] bridge_slave_1: entered promiscuous mode [ 64.386406][ T5239] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.393604][ T5239] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.400757][ T5239] bridge_slave_1: entered allmulticast mode [ 64.407308][ T5239] bridge_slave_1: entered promiscuous mode [ 64.455476][ T5240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.501409][ T5240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.521033][ T5242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.541061][ T5239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.559301][ T5244] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.566530][ T5244] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.574153][ T5244] bridge_slave_0: entered allmulticast mode [ 64.581184][ T5244] bridge_slave_0: entered promiscuous mode [ 64.597803][ T5242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.614953][ T5241] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.625839][ T5241] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.633273][ T5241] bridge_slave_0: entered allmulticast mode [ 64.639922][ T5241] bridge_slave_0: entered promiscuous mode [ 64.650240][ T5239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.666080][ T5244] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.673494][ T5244] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.680981][ T5244] bridge_slave_1: entered allmulticast mode [ 64.687667][ T5244] bridge_slave_1: entered promiscuous mode [ 64.705973][ T5240] team0: Port device team_slave_0 added [ 64.721974][ T5241] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.729065][ T5241] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.736687][ T5241] bridge_slave_1: entered allmulticast mode [ 64.743697][ T5241] bridge_slave_1: entered promiscuous mode [ 64.774763][ T5240] team0: Port device team_slave_1 added [ 64.789566][ T5242] team0: Port device team_slave_0 added [ 64.807296][ T5239] team0: Port device team_slave_0 added [ 64.815643][ T5244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.834713][ T5242] team0: Port device team_slave_1 added [ 64.849865][ T5241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.861817][ T5239] team0: Port device team_slave_1 added [ 64.869140][ T5241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.879644][ T5244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.889340][ T5240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.896890][ T5240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.923803][ T5240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.936690][ T5240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.943716][ T5240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.969635][ T5240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.988358][ T5242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.995654][ T5242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.021791][ T5242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.078150][ T5242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.085225][ T5242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.112164][ T5242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.164089][ T5239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.171145][ T5239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.197345][ T5239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.211074][ T5241] team0: Port device team_slave_0 added [ 65.218618][ T5244] team0: Port device team_slave_0 added [ 65.233700][ T5239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.240785][ T5239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.266761][ T5239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.280129][ T5241] team0: Port device team_slave_1 added [ 65.287604][ T5244] team0: Port device team_slave_1 added [ 65.296144][ T5240] hsr_slave_0: entered promiscuous mode [ 65.303102][ T5240] hsr_slave_1: entered promiscuous mode [ 65.345968][ T5244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.353184][ T5244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.379511][ T5244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.405968][ T5241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.413084][ T5241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.439118][ T5241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.450976][ T5226] Bluetooth: hci2: command tx timeout [ 65.464590][ T5244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.471621][ T5244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.497561][ T5244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.516525][ T5242] hsr_slave_0: entered promiscuous mode [ 65.523094][ T5242] hsr_slave_1: entered promiscuous mode [ 65.529116][ T5242] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.536113][ T5226] Bluetooth: hci3: command tx timeout [ 65.536952][ T5235] Bluetooth: hci0: command tx timeout [ 65.544249][ T5242] Cannot create hsr debugfs directory [ 65.564298][ T5241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.573799][ T5241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.600149][ T5241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.621143][ T5235] Bluetooth: hci1: command tx timeout [ 65.621152][ T5226] Bluetooth: hci4: command tx timeout [ 65.634575][ T5239] hsr_slave_0: entered promiscuous mode [ 65.641505][ T5239] hsr_slave_1: entered promiscuous mode [ 65.647617][ T5239] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.655262][ T5239] Cannot create hsr debugfs directory [ 65.746708][ T5241] hsr_slave_0: entered promiscuous mode [ 65.753614][ T5241] hsr_slave_1: entered promiscuous mode [ 65.759778][ T5241] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.767588][ T5241] Cannot create hsr debugfs directory [ 65.776249][ T5244] hsr_slave_0: entered promiscuous mode [ 65.782552][ T5244] hsr_slave_1: entered promiscuous mode [ 65.788589][ T5244] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.796816][ T5244] Cannot create hsr debugfs directory [ 66.085125][ T5241] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.098231][ T5241] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.111789][ T5241] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.141591][ T5241] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.176176][ T5240] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.189789][ T5240] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.198868][ T5240] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.214164][ T5240] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.265507][ T5239] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.280240][ T5239] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.289948][ T5239] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.318729][ T5239] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.362566][ T5242] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.372523][ T5242] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.403117][ T5242] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.414602][ T5242] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.478035][ T5244] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.489098][ T5244] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.524106][ T5244] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.533941][ T5244] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.606814][ T5241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.644183][ T5240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.678207][ T5242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.712180][ T5241] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.733411][ T5239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.748113][ T5242] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.759652][ T5240] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.769607][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.777161][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.793015][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.800125][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.826062][ T2925] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.833281][ T2925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.855239][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.862386][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.896600][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.903771][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.916975][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.924080][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.957209][ T5239] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.979593][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.986721][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.998949][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.006044][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.022971][ T5244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.064990][ T5244] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.114896][ T2925] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.122032][ T2925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.144237][ T2925] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.151444][ T2925] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.223231][ T5241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.265334][ T5240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.285484][ T5242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.325447][ T5244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.349525][ T5239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.380426][ T5241] veth0_vlan: entered promiscuous mode [ 67.408957][ T5240] veth0_vlan: entered promiscuous mode [ 67.435647][ T5240] veth1_vlan: entered promiscuous mode [ 67.447789][ T5241] veth1_vlan: entered promiscuous mode [ 67.496732][ T5242] veth0_vlan: entered promiscuous mode [ 67.524035][ T5242] veth1_vlan: entered promiscuous mode [ 67.531640][ T5235] Bluetooth: hci2: command tx timeout [ 67.535582][ T5244] veth0_vlan: entered promiscuous mode [ 67.554792][ T5239] veth0_vlan: entered promiscuous mode [ 67.583946][ T5239] veth1_vlan: entered promiscuous mode [ 67.595702][ T5241] veth0_macvtap: entered promiscuous mode [ 67.604381][ T5240] veth0_macvtap: entered promiscuous mode [ 67.620599][ T5235] Bluetooth: hci3: command tx timeout [ 67.620668][ T5226] Bluetooth: hci0: command tx timeout [ 67.635742][ T5241] veth1_macvtap: entered promiscuous mode [ 67.650075][ T5242] veth0_macvtap: entered promiscuous mode [ 67.657649][ T5240] veth1_macvtap: entered promiscuous mode [ 67.684920][ T5242] veth1_macvtap: entered promiscuous mode [ 67.691206][ T5226] Bluetooth: hci4: command tx timeout [ 67.701180][ T5226] Bluetooth: hci1: command tx timeout [ 67.712245][ T5244] veth1_vlan: entered promiscuous mode [ 67.734759][ T5241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.755074][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.766104][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.777528][ T5240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.789694][ T5240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.805383][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.815881][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.827678][ T5241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.844941][ T5240] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.854423][ T5240] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.864326][ T5240] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.873471][ T5240] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.890285][ T5241] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.899230][ T5241] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.908607][ T5241] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.917385][ T5241] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.928385][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.939388][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.949876][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.964011][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.974951][ T5242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.988082][ T5244] veth0_macvtap: entered promiscuous mode [ 68.014076][ T5244] veth1_macvtap: entered promiscuous mode [ 68.025384][ T5239] veth0_macvtap: entered promiscuous mode [ 68.043758][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.054906][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.065740][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.077965][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.088971][ T5242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.099360][ T5239] veth1_macvtap: entered promiscuous mode [ 68.135224][ T5242] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.144986][ T5242] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.154227][ T5242] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.163328][ T5242] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.195051][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.207273][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.217560][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.228363][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.238656][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.249614][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.262610][ T5244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.323740][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.335089][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.347403][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.358116][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.368261][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.379113][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.389010][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.399549][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.412234][ T5239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.419936][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.431159][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.441396][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.453178][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.463219][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.473679][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.484647][ T5244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.504360][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.516566][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.538551][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.549545][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.562016][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.572588][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.582524][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.592988][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.602902][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.613394][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.624689][ T5239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.634576][ T5244] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.643834][ T5244] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.653887][ T5244] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.662728][ T5244] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.686508][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.694925][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.723537][ T5239] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.733369][ T5239] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.743335][ T5239] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.752349][ T5239] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.768889][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.778370][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.815418][ T2925] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.834366][ T2925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.862261][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.872278][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.906490][ T5240] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 68.928439][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.941045][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.963566][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.973725][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.042330][ T2925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.056768][ T2925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.153230][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.163907][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.170882][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.180759][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.285826][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.346976][ T5290] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 69.367120][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.391027][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.449334][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 69.570751][ T5288] input: syz1 as /devices/virtual/input/input5 [ 69.600958][ T1168] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 69.660725][ T5226] Bluetooth: hci2: command tx timeout [ 69.685776][ T5288] kernel profiling enabled (shift: 0) [ 69.700753][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 69.709869][ T5226] Bluetooth: hci0: command tx timeout [ 69.715369][ T5226] Bluetooth: hci3: command tx timeout [ 69.770954][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 69.779880][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 69.790288][ T5235] Bluetooth: hci1: command tx timeout [ 69.796768][ T5235] Bluetooth: hci4: command tx timeout [ 69.843220][ T1168] usb 3-1: config 17 has an invalid descriptor of length 255, skipping remainder of the config [ 69.860356][ T1168] usb 3-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 69.918170][ T1168] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 69.966623][ T1168] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.050658][ T5276] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 70.142123][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 70.201337][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.209849][ T5276] usb 2-1: Using ep0 maxpacket: 32 [ 70.253776][ T5276] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 70.264121][ T5287] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3'. [ 70.270939][ T5276] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.293905][ T5276] usb 2-1: Product: syz [ 70.299101][ T5276] usb 2-1: Manufacturer: syz [ 70.319374][ T5276] usb 2-1: SerialNumber: syz [ 70.350984][ T5287] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 70.389711][ T5276] usb 2-1: config 0 descriptor?? [ 70.460440][ C0] hrtimer: interrupt took 55817 ns [ 70.642883][ T5298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 70.697158][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 70.839116][ T1168] usb 3-1: string descriptor 0 read error: -71 [ 70.843634][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.872263][ T5298] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 70.915086][ T1168] aiptek 3-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 71.009112][ T1168] usb 3-1: USB disconnect, device number 2 [ 71.157740][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.411543][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.452519][ T5276] airspy 2-1:0.0: usb_control_msg() failed -110 request 09 [ 71.526834][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.534105][ T5276] airspy 2-1:0.0: Could not detect board [ 71.555715][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.562406][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.634577][ T5276] airspy 2-1:0.0: probe with driver airspy failed with error -110 [ 71.690604][ T5226] Bluetooth: hci2: command tx timeout [ 71.770586][ T5226] Bluetooth: hci3: command tx timeout [ 71.771232][ T5235] Bluetooth: hci0: command tx timeout [ 71.850826][ T5235] Bluetooth: hci4: command tx timeout [ 71.882114][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.131228][ T5288] syz.4.5: vmalloc error: size 738197504, failed to allocated page array size 1441792, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 72.194272][ T5288] CPU: 1 UID: 0 PID: 5288 Comm: syz.4.5 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 72.204401][ T5288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 72.214477][ T5288] Call Trace: [ 72.217787][ T5288] [ 72.220740][ T5288] dump_stack_lvl+0x241/0x360 [ 72.225495][ T5288] ? __pfx_dump_stack_lvl+0x10/0x10 [ 72.230732][ T5288] ? __pfx__printk+0x10/0x10 [ 72.235367][ T5288] ? __rcu_read_unlock+0xa1/0x110 [ 72.240425][ T5288] warn_alloc+0x278/0x410 [ 72.244805][ T5288] ? __pfx_warn_alloc+0x10/0x10 [ 72.249691][ T5288] ? profile_init+0xb1/0x100 [ 72.254315][ T5288] ? __get_vm_area_node+0x23d/0x270 [ 72.259559][ T5288] __vmalloc_node_range_noprof+0x691/0x13f0 [ 72.265505][ T5288] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 72.271859][ T5288] ? rcu_is_watching+0x15/0xb0 [ 72.276637][ T5288] ? rcu_is_watching+0x15/0xb0 [ 72.281425][ T5288] ? profile_init+0xb1/0x100 [ 72.286030][ T5288] ? __pfx_sysfs_kf_write+0x10/0x10 [ 72.291250][ T5288] vzalloc_noprof+0x79/0x90 [ 72.295780][ T5288] ? profile_init+0xb1/0x100 [ 72.300392][ T5288] profile_init+0xb1/0x100 [ 72.304830][ T5288] profiling_store+0x6c/0xf0 [ 72.309458][ T5288] kernfs_fop_write_iter+0x3a0/0x500 [ 72.314776][ T5288] vfs_write+0xa6d/0xc90 [ 72.319050][ T5288] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 72.324880][ T5288] ? __pfx_vfs_write+0x10/0x10 [ 72.329673][ T5288] ? do_futex+0x33b/0x560 [ 72.334053][ T5288] ? __fdget_pos+0x24e/0x320 [ 72.338674][ T5288] ksys_write+0x1a0/0x2c0 [ 72.343058][ T5288] ? __pfx_ksys_write+0x10/0x10 [ 72.347955][ T5288] ? do_syscall_64+0x100/0x230 [ 72.352743][ T5288] ? do_syscall_64+0xb6/0x230 [ 72.357481][ T5288] do_syscall_64+0xf3/0x230 [ 72.362028][ T5288] ? clear_bhb_loop+0x35/0x90 [ 72.366746][ T5288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.372679][ T5288] RIP: 0033:0x7f401177def9 [ 72.377132][ T5288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.396770][ T5288] RSP: 002b:00007f40124fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 72.405209][ T5288] RAX: ffffffffffffffda RBX: 00007f4011936058 RCX: 00007f401177def9 [ 72.413190][ T5288] RDX: 0000000000000048 RSI: 0000000020000280 RDI: 0000000000000008 [ 72.421183][ T5288] RBP: 00007f40117f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 72.429171][ T5288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.437160][ T5288] R13: 0000000000000000 R14: 00007f4011936058 R15: 00007f4011a5fa28 [ 72.445181][ T5288] [ 72.448235][ C1] vkms_vblank_simulate: vblank timer overrun [ 72.517382][ T5288] Mem-Info: [ 72.584516][ T5288] active_anon:4039 inactive_anon:0 isolated_anon:0 [ 72.584516][ T5288] active_file:1214 inactive_file:38181 isolated_file:0 [ 72.584516][ T5288] unevictable:772 dirty:1569 writeback:0 [ 72.584516][ T5288] slab_reclaimable:8789 slab_unreclaimable:91935 [ 72.584516][ T5288] mapped:22539 shmem:1244 pagetables:767 [ 72.584516][ T5288] sec_pagetables:0 bounce:0 [ 72.584516][ T5288] kernel_misc_reclaimable:0 [ 72.584516][ T5288] free:1347109 free_pcp:933 free_cma:0 [ 72.630385][ T5226] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.639473][ T5226] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.648754][ T5226] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.661016][ T5226] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.670215][ T5226] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 72.679284][ T5226] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.861082][ T11] bridge_slave_1: left allmulticast mode [ 72.868971][ T11] bridge_slave_1: left promiscuous mode [ 72.887036][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.892989][ T5288] Node 0 active_anon:16956kB inactive_anon:0kB active_file:4856kB inactive_file:152656kB unevictable:1552kB isolated(anon):0kB isolated(file):0kB mapped:86056kB dirty:6256kB writeback:0kB shmem:3440kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10192kB pagetables:3268kB sec_pagetables:0kB all_unreclaimable? no [ 73.015705][ T5277] usb 2-1: USB disconnect, device number 2 [ 73.164833][ T5288] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:20kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 73.250541][ T5288] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 73.325831][ T11] bridge_slave_0: left allmulticast mode [ 73.352109][ T11] bridge_slave_0: left promiscuous mode [ 73.357805][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.425127][ T5288] lowmem_reserve[]: 0 2465 2466 0 0 [ 73.474039][ T5288] Node 0 DMA32 free:1447632kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:16932kB inactive_anon:0kB active_file:4856kB inactive_file:151820kB unevictable:1536kB writepending:6244kB present:3129332kB managed:2552492kB mlocked:0kB bounce:0kB free_pcp:8488kB local_pcp:596kB free_cma:0kB [ 73.622568][ T8] usb 1-1: unable to get BOS descriptor or descriptor too short [ 73.661039][ T5288] lowmem_reserve[]: 0 0 0 0 0 [ 73.669504][ T5288] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:836kB unevictable:0kB writepending:12kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 73.670841][ T8] usb 1-1: too many configurations: 198, using maximum allowed: 8 [ 73.696323][ C1] vkms_vblank_simulate: vblank timer overrun [ 73.716818][ T5288] lowmem_reserve[]: 0 0 0 0 0 [ 73.721724][ T5288] Node 1 Normal free:3924164kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB writepending:20kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:96kB local_pcp:0kB free_cma:0kB [ 73.750588][ C1] vkms_vblank_simulate: vblank timer overrun [ 73.757823][ T5288] lowmem_reserve[]: 0 0 0 0 0 [ 73.769448][ T5288] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 73.808000][ T5288] Node 0 DMA32: 153*4kB (UME) 99*8kB (UME) 20*16kB (UME) 30*32kB (UME) 6*64kB (UME) 2*128kB (E) 1*256kB (M) 6*512kB (UME) 6*1024kB (UME) 7*2048kB (UME) 347*4096kB (M) = 1448444kB [ 73.852837][ T5288] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 73.877415][ T8] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 73.885155][ T8] usb 1-1: can't read configurations, error -71 [ 73.951872][ T5288] Node 1 Normal: 197*4kB (UME) 44*8kB (UME) 23*16kB (UME) 187*32kB (UME) 86*64kB (UME) 36*128kB (UME) 14*256kB (UM) 9*512kB (UME) 5*1024kB (UME) 3*2048kB (UE) 949*4096kB (M) = 3924164kB [ 74.038625][ T5288] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 74.077398][ T5288] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 74.118368][ T5288] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 74.140537][ T5234] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 74.158480][ T5288] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 74.176794][ T5288] 42165 total pagecache pages [ 74.185982][ T5288] 0 pages in swap cache [ 74.190299][ T5288] Free swap = 124984kB [ 74.198737][ T5288] Total swap = 124996kB [ 74.206770][ T5288] 2097051 pages RAM [ 74.215028][ T5288] 0 pages HighMem/MovableOnly [ 74.219819][ T5288] 427078 pages reserved [ 74.226593][ T5288] 0 pages cma reserved [ 74.260571][ T5277] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 74.318013][ T5234] usb 3-1: New USB device found, idVendor=046d, idProduct=08b4, bcdDevice= e.32 [ 74.412514][ T5234] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.418902][ T5277] usb 2-1: config 17 has an invalid descriptor of length 255, skipping remainder of the config [ 74.446993][ T5277] usb 2-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 74.476377][ T5234] usb 3-1: Product: syz [ 74.501535][ T5234] usb 3-1: Manufacturer: syz [ 74.506270][ T5277] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 74.512006][ T5234] usb 3-1: SerialNumber: syz [ 74.555708][ T5277] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.609698][ T5234] usb 3-1: config 0 descriptor?? [ 74.650020][ T5234] pwc: Logitech QuickCam Zoom (new model) USB webcam detected. [ 74.736052][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.812865][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.853621][ T11] bond0 (unregistering): Released all slaves [ 74.882195][ T5337] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.14'. [ 74.892810][ T5226] Bluetooth: hci1: command tx timeout [ 74.938981][ T5337] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 74.975774][ T5327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13'. [ 75.171777][ T5277] usb 2-1: string descriptor 0 read error: -71 [ 75.235347][ T5277] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 75.286703][ T5277] usb 2-1: USB disconnect, device number 3 [ 75.766332][ T5346] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15'. [ 76.420574][ T5280] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 76.470802][ T5277] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 76.581397][ T5280] usb 2-1: Using ep0 maxpacket: 8 [ 76.609880][ T5280] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 76.621095][ T5277] usb 1-1: Using ep0 maxpacket: 16 [ 76.647040][ T5277] usb 1-1: config 0 interface 0 altsetting 44 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 76.660852][ T5280] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 76.702338][ T5280] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 76.704819][ T5277] usb 1-1: config 0 interface 0 altsetting 44 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 76.720479][ T5280] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 76.754188][ T5280] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 76.780517][ T5280] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.833853][ T11] hsr_slave_0: left promiscuous mode [ 76.843442][ T5234] pwc: Failed to set LED on/off time (-71) [ 76.869443][ T5277] usb 1-1: config 0 interface 0 altsetting 44 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 76.900621][ T5234] pwc: send_video_command error -71 [ 76.906146][ T5234] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 76.910688][ T5277] usb 1-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 76.930741][ T11] hsr_slave_1: left promiscuous mode [ 76.937755][ T5234] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 76.967865][ T5277] usb 1-1: config 0 interface 0 has no altsetting 0 [ 76.976501][ T5226] Bluetooth: hci1: command tx timeout [ 76.992755][ T5277] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 77.001629][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.004386][ T5277] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.009268][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.027342][ T5234] usb 3-1: USB disconnect, device number 3 [ 77.030507][ T5277] usb 1-1: Product: syz [ 77.037383][ T5277] usb 1-1: Manufacturer: syz [ 77.063791][ T5277] usb 1-1: SerialNumber: syz [ 77.116900][ T5277] usb 1-1: config 0 descriptor?? [ 77.129116][ T5356] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 77.138186][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.162012][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.176838][ T5277] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input8 [ 77.205282][ T5366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.272331][ T5366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.325650][ T11] veth1_macvtap: left promiscuous mode [ 77.346322][ T11] veth0_macvtap: left promiscuous mode [ 77.371026][ T11] veth1_vlan: left promiscuous mode [ 77.397399][ T11] veth0_vlan: left promiscuous mode [ 78.268713][ T5279] usb 1-1: USB disconnect, device number 4 [ 79.001707][ T11] team0 (unregistering): Port device team_slave_1 removed [ 79.050838][ T5226] Bluetooth: hci1: command tx timeout [ 79.060958][ T5279] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 79.103997][ T11] team0 (unregistering): Port device team_slave_0 removed [ 79.235683][ T5279] usb 1-1: New USB device found, idVendor=046d, idProduct=08b4, bcdDevice= e.32 [ 79.246164][ T5279] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.259474][ T5279] usb 1-1: Product: syz [ 79.266645][ T5279] usb 1-1: Manufacturer: syz [ 79.274950][ T5279] usb 1-1: SerialNumber: syz [ 79.303900][ T5279] usb 1-1: config 0 descriptor?? [ 79.320147][ T5279] pwc: Logitech QuickCam Zoom (new model) USB webcam detected. [ 80.383418][ T5317] chnl_net:caif_netlink_parms(): no params data found [ 80.520807][ T51] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 80.664433][ T5280] usb 2-1: usb_control_msg returned -71 [ 80.696491][ T51] usb 5-1: config 17 has an invalid descriptor of length 255, skipping remainder of the config [ 80.728724][ T5280] usbtmc 2-1:16.0: can't read capabilities [ 80.817692][ T51] usb 5-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 80.865617][ T5280] usb 2-1: USB disconnect, device number 4 [ 80.931500][ T51] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 80.970854][ T51] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.000277][ T5317] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.026616][ T5317] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.067552][ T5317] bridge_slave_0: entered allmulticast mode [ 81.087971][ T5317] bridge_slave_0: entered promiscuous mode [ 81.112664][ T5317] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.120171][ T5317] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.132990][ T5226] Bluetooth: hci1: command tx timeout [ 81.146862][ T5317] bridge_slave_1: entered allmulticast mode [ 81.165543][ T5317] bridge_slave_1: entered promiscuous mode [ 81.292349][ T5401] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.24'. [ 81.347808][ T5401] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 81.383889][ T5317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.434760][ T5317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.539692][ T5401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.24'. [ 81.617841][ T51] usb 5-1: string descriptor 0 read error: -71 [ 81.662713][ T51] aiptek 5-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 81.682084][ T51] usb 5-1: USB disconnect, device number 2 [ 81.716512][ T5317] team0: Port device team_slave_0 added [ 81.759643][ T5317] team0: Port device team_slave_1 added [ 81.783111][ T25] cfg80211: failed to load regulatory.db [ 81.831980][ T5429] xt_CT: No such helper "syz0" [ 81.910044][ T5317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.927269][ T5317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.970742][ T5279] pwc: Failed to set LED on/off time (-71) [ 81.979525][ T5279] pwc: send_video_command error -71 [ 81.984942][ T5279] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 81.992820][ T5279] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 82.003612][ T5317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.017522][ T5317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.024750][ T5317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.050637][ C1] vkms_vblank_simulate: vblank timer overrun [ 82.056885][ T5317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.093336][ T5279] usb 1-1: USB disconnect, device number 5 [ 82.157785][ T5317] hsr_slave_0: entered promiscuous mode [ 82.176196][ T5317] hsr_slave_1: entered promiscuous mode [ 82.188675][ T5317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.246342][ T5317] Cannot create hsr debugfs directory [ 82.331534][ T5277] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 82.516635][ T5277] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.545938][ T5277] usb 2-1: config 0 has no interfaces? [ 82.550588][ T5279] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 82.566061][ T5277] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 82.578912][ T5277] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 82.589578][ T5277] usb 2-1: Product: syz [ 82.594223][ T5277] usb 2-1: Manufacturer: syz [ 82.601001][ T51] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 82.604139][ T5277] usb 2-1: config 0 descriptor?? [ 82.723133][ T5279] usb 1-1: config 17 has an invalid descriptor of length 255, skipping remainder of the config [ 82.735858][ T5279] usb 1-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 82.749599][ T5279] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 82.758746][ T5279] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.768545][ T51] usb 5-1: config 17 has an invalid descriptor of length 255, skipping remainder of the config [ 82.791422][ T51] usb 5-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 82.806067][ T51] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 82.816083][ T51] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.832083][ T5281] usb 2-1: USB disconnect, device number 5 [ 82.972957][ T5458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.33'. [ 83.005823][ T5440] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.31'. [ 83.016629][ T5440] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 83.104419][ T5446] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.32'. [ 83.128747][ T5440] netlink: 12 bytes leftover after parsing attributes in process `syz.0.31'. [ 83.140522][ T5446] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 83.176460][ T5279] usb 1-1: string descriptor 0 read error: -71 [ 83.207385][ T5279] aiptek 1-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 83.242034][ T5279] usb 1-1: USB disconnect, device number 6 [ 83.281022][ T5446] netlink: 12 bytes leftover after parsing attributes in process `syz.4.32'. [ 83.372818][ T51] usb 5-1: string descriptor 0 read error: -71 [ 83.384109][ T51] aiptek 5-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 83.417273][ T51] usb 5-1: USB disconnect, device number 3 [ 83.545155][ T5317] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.564952][ T5317] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.587505][ T5317] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.618408][ T5317] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.822724][ T5317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.868878][ T5317] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.900105][ T5474] netlink: 25 bytes leftover after parsing attributes in process `syz.0.35'. [ 83.954362][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.961569][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.026073][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.033285][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.061925][ T5474] netlink: 'syz.0.35': attribute type 4 has an invalid length. [ 84.122473][ T5317] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 84.133694][ T5317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.249507][ T5317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.333992][ T8] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 84.380587][ T5488] Zero length message leads to an empty skb [ 84.387670][ T5317] veth0_vlan: entered promiscuous mode [ 84.407763][ T5317] veth1_vlan: entered promiscuous mode [ 84.489442][ T5317] veth0_macvtap: entered promiscuous mode [ 84.518873][ T5317] veth1_macvtap: entered promiscuous mode [ 84.527491][ T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 84.573811][ T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 494, setting to 64 [ 84.605074][ T5317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.620992][ T8] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 84.642882][ T5317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.656904][ T5317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.678214][ T8] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 84.696020][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 84.704265][ T5317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.719870][ T8] usb 1-1: SerialNumber: syz [ 84.726245][ T5317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.744374][ T5474] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 84.760912][ T5317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.775661][ T5317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.791287][ T5317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.804236][ T5317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.862011][ T5317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.895517][ T5317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.900547][ T5279] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 84.922502][ T5317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.936183][ T5317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.958072][ T5317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.013889][ T5317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.035139][ T5478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.044680][ T5317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.058292][ T5317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.078158][ T5478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.087160][ T5317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.114085][ T5508] netlink: 'syz.4.41': attribute type 10 has an invalid length. [ 85.134897][ T5279] usb 2-1: New USB device found, idVendor=046d, idProduct=08b4, bcdDevice= e.32 [ 85.148555][ T5279] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.160517][ T5279] usb 2-1: Product: syz [ 85.164736][ T5279] usb 2-1: Manufacturer: syz [ 85.172895][ T5279] usb 2-1: SerialNumber: syz [ 85.180245][ T5279] usb 2-1: config 0 descriptor?? [ 85.201921][ T5279] pwc: Logitech QuickCam Zoom (new model) USB webcam detected. [ 85.211942][ T5508] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.239666][ T5508] bond0: (slave team0): Enslaving as an active interface with an up link [ 85.262713][ T8] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 85.280880][ T8] usb 1-1: USB disconnect, device number 7 [ 85.301966][ T5317] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.320167][ T5317] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.342350][ T5317] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.356071][ T5317] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.375714][ T5514] netlink: 'syz.4.41': attribute type 10 has an invalid length. [ 85.434370][ T5514] bond0: (slave team0): Releasing backup interface [ 85.501637][ T5514] bridge0: port 3(team0) entered blocking state [ 85.522562][ T5514] bridge0: port 3(team0) entered disabled state [ 85.529744][ T5514] team0: entered allmulticast mode [ 85.538163][ T5514] team_slave_0: entered allmulticast mode [ 85.547134][ T5514] team_slave_1: entered allmulticast mode [ 85.559917][ T5514] team0: entered promiscuous mode [ 85.567592][ T5514] team_slave_0: entered promiscuous mode [ 85.575236][ T5514] team_slave_1: entered promiscuous mode [ 85.920081][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.960207][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.970676][ T3280] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 86.035793][ T2947] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.050050][ T2947] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.141280][ T8] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 86.151660][ T3280] usb 5-1: Using ep0 maxpacket: 32 [ 86.175013][ T3280] usb 5-1: config 0 has no interfaces? [ 86.192744][ T3280] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 86.214808][ T3280] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.292946][ T3280] usb 5-1: config 0 descriptor?? [ 86.322517][ T8] usb 3-1: config 17 has an invalid descriptor of length 255, skipping remainder of the config [ 86.337607][ T8] usb 3-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 86.358878][ T8] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 86.371156][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.408699][ T5540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9'. [ 86.650193][ T5530] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.43'. [ 86.683449][ T5530] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 88.160698][ T3280] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 88.471672][ T3280] usb 1-1: config 17 has an invalid descriptor of length 255, skipping remainder of the config [ 88.647094][ T3280] usb 1-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 90.320786][ T5226] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 90.329319][ T5226] Bluetooth: hci0: Injecting HCI hardware error event [ 91.774687][ T5226] Bluetooth: hci0: hardware error 0x00 [ 92.940700][ T3280] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 93.003791][ T5279] pwc: Failed to set LED on/off time (-32) [ 93.026076][ T3280] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.082291][ T5279] pwc: send_video_command error -32 [ 93.134537][ T5279] pwc: Failed to set video mode VGA@30 fps; return code = -32 [ 93.194417][ T3280] usb 1-1: can't set config #17, error -71 [ 93.212281][ T5279] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -32 [ 93.269696][ T3280] usb 1-1: USB disconnect, device number 8 [ 93.416392][ T5279] usb 5-1: USB disconnect, device number 4 [ 94.161478][ T5577] netlink: 12 bytes leftover after parsing attributes in process `syz.4.49'. [ 94.223796][ T5577] netlink: 40 bytes leftover after parsing attributes in process `syz.4.49'. [ 95.062694][ T5578] syz.4.49 uses obsolete (PF_INET,SOCK_PACKET) [ 95.130826][ T5226] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 95.468968][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 95.478962][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 95.487278][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 95.496014][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 95.504434][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 95.513688][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 97.094738][ T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 97.108421][ T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 97.118539][ T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 97.126528][ T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 97.147618][ T54] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 97.155928][ T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 97.200950][ T5235] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 97.209499][ T5235] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 97.216871][ T5226] Bluetooth: hci0: Opcode 0x206c failed: -110 [ 97.229704][ T5235] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 97.239509][ T5235] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 97.248114][ T5235] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 97.257029][ T5235] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 97.531705][ T5235] Bluetooth: hci5: command tx timeout [ 98.600473][ C0] sched: DL replenish lagged too much [ 99.219486][ T5235] Bluetooth: hci6: command tx timeout [ 99.290642][ T5235] Bluetooth: hci7: command tx timeout [ 99.298096][ T5226] Bluetooth: hci0: Opcode 0x2046 failed: -110 [ 99.610638][ T5226] Bluetooth: hci5: command tx timeout [ 101.290661][ T5226] Bluetooth: hci6: command tx timeout [ 101.370569][ T5226] Bluetooth: hci7: command tx timeout [ 101.690626][ T5226] Bluetooth: hci5: command tx timeout [ 103.370587][ T5226] Bluetooth: hci6: command tx timeout [ 103.450678][ T5226] Bluetooth: hci7: command tx timeout [ 103.770606][ T5226] Bluetooth: hci5: command tx timeout [ 104.614814][ T5235] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 104.623836][ T5235] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 104.631672][ T5235] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 104.639519][ T5235] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 104.647714][ T5235] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 104.660613][ T5235] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 104.700770][ T5226] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 104.721192][ T5226] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 104.731073][ T5226] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 104.738946][ T5226] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 104.746749][ T5226] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 104.755933][ T5226] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 105.450783][ T5226] Bluetooth: hci6: command tx timeout [ 105.530614][ T5226] Bluetooth: hci7: command tx timeout [ 106.730649][ T5226] Bluetooth: hci8: command tx timeout [ 106.810642][ T5226] Bluetooth: hci9: command tx timeout [ 108.810681][ T5226] Bluetooth: hci8: command tx timeout [ 108.892929][ T5226] Bluetooth: hci9: command tx timeout [ 110.890608][ T5226] Bluetooth: hci8: command tx timeout [ 110.970685][ T5226] Bluetooth: hci9: command tx timeout [ 112.970735][ T5226] Bluetooth: hci8: command tx timeout [ 113.050616][ T5226] Bluetooth: hci9: command tx timeout [ 132.977266][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.983784][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 157.603314][ T5235] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 157.624452][ T5235] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 157.658230][ T5235] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 157.757954][ T5235] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 157.837149][ T5235] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 157.853771][ T5235] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 158.436255][ T5226] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 158.450638][ T5226] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 158.459518][ T5226] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 158.468838][ T5226] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 158.476639][ T5226] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 158.484112][ T5226] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 158.581817][ T5226] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 158.591105][ T5226] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 158.598958][ T5226] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 158.610014][ T5226] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 158.627255][ T5226] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 158.634683][ T5226] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 159.932857][ T5235] Bluetooth: hci10: command tx timeout [ 160.570650][ T5235] Bluetooth: hci11: command tx timeout [ 160.730579][ T5235] Bluetooth: hci12: command tx timeout [ 162.010663][ T5235] Bluetooth: hci10: command tx timeout [ 162.660679][ T5235] Bluetooth: hci11: command tx timeout [ 162.810674][ T5235] Bluetooth: hci12: command tx timeout [ 164.096880][ T5235] Bluetooth: hci10: command tx timeout [ 164.492528][ T5226] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 164.503265][ T5226] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 164.511296][ T5226] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 164.519677][ T5226] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 164.527947][ T5226] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 164.535477][ T5226] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 164.730532][ T5235] Bluetooth: hci11: command tx timeout [ 164.890648][ T5235] Bluetooth: hci12: command tx timeout [ 164.939450][ T5226] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 164.949519][ T5226] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 164.957607][ T5226] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 164.965776][ T5226] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 164.974981][ T5226] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 164.983372][ T5226] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 166.170572][ T5226] Bluetooth: hci10: command tx timeout [ 166.570614][ T5226] Bluetooth: hci13: command tx timeout [ 166.810609][ T5226] Bluetooth: hci11: command tx timeout [ 166.970745][ T5226] Bluetooth: hci12: command tx timeout [ 167.050696][ T5226] Bluetooth: hci14: command tx timeout [ 168.660502][ T5226] Bluetooth: hci13: command tx timeout [ 169.136726][ T5226] Bluetooth: hci14: command tx timeout [ 170.730636][ T5226] Bluetooth: hci13: command tx timeout [ 171.210600][ T5226] Bluetooth: hci14: command tx timeout [ 172.810505][ T5226] Bluetooth: hci13: command tx timeout [ 173.291831][ T5235] Bluetooth: hci14: command tx timeout [ 186.268740][ T4618] Bluetooth: hci2: command 0x0406 tx timeout [ 186.275033][ T4618] Bluetooth: hci3: command 0x0406 tx timeout [ 186.281154][ T5226] Bluetooth: hci4: command 0x0406 tx timeout [ 194.423864][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.430323][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.497462][ T5223] Bluetooth: hci1: command 0x0406 tx timeout [ 216.876493][ T5223] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 216.891882][ T5223] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 216.899703][ T5223] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 216.917280][ T5223] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 216.926050][ T5223] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 216.933680][ T5223] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 218.283584][ T54] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 218.292183][ T54] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 218.299918][ T54] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 218.308817][ T54] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 218.316713][ T54] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 218.327274][ T54] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 218.971793][ T54] Bluetooth: hci15: command tx timeout [ 219.340929][ T5223] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 219.349403][ T5223] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 219.357671][ T5223] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 219.367040][ T5223] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 219.375364][ T5223] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 219.385390][ T5223] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 220.410616][ T54] Bluetooth: hci16: command tx timeout [ 221.051718][ T54] Bluetooth: hci15: command tx timeout [ 221.450649][ T54] Bluetooth: hci17: command tx timeout [ 222.110461][ T54] Bluetooth: hci7: command 0x0406 tx timeout [ 222.116541][ T54] Bluetooth: hci6: command 0x0406 tx timeout [ 222.122668][ T4618] Bluetooth: hci5: command 0x0406 tx timeout [ 222.490606][ T5231] Bluetooth: hci16: command tx timeout [ 223.130533][ T5231] Bluetooth: hci15: command tx timeout [ 223.530638][ T5231] Bluetooth: hci17: command tx timeout [ 224.570612][ T5231] Bluetooth: hci16: command tx timeout [ 225.216317][ T5235] Bluetooth: hci15: command tx timeout [ 225.611781][ T5235] Bluetooth: hci17: command tx timeout [ 225.717260][ T54] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 225.726624][ T54] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 225.738578][ T54] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 225.746990][ T54] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 225.756922][ T54] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 225.766684][ T54] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 225.851061][ T5235] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 225.859582][ T5235] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 225.868592][ T5235] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 225.876957][ T5235] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 225.884954][ T5235] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3 [ 225.895344][ T5235] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 226.650557][ T54] Bluetooth: hci16: command tx timeout [ 227.216516][ T5235] Bluetooth: hci8: command 0x0406 tx timeout [ 227.222708][ T54] Bluetooth: hci9: command 0x0406 tx timeout [ 227.690769][ T5223] Bluetooth: hci17: command tx timeout [ 227.850578][ T5223] Bluetooth: hci18: command tx timeout [ 227.930530][ T5223] Bluetooth: hci19: command tx timeout [ 229.930559][ T5223] Bluetooth: hci18: command tx timeout [ 230.010792][ T5223] Bluetooth: hci19: command tx timeout [ 232.010701][ T5223] Bluetooth: hci18: command tx timeout [ 232.090586][ T5223] Bluetooth: hci19: command tx timeout [ 234.090576][ T5223] Bluetooth: hci18: command tx timeout [ 234.170636][ T5223] Bluetooth: hci19: command tx timeout [ 242.410568][ T30] INFO: task kworker/1:1:51 blocked for more than 143 seconds. [ 242.418532][ T30] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 242.455846][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 242.500408][ T30] task:kworker/1:1 state:D stack:19600 pid:51 tgid:51 ppid:2 flags:0x00004000 [ 242.547202][ T30] Workqueue: events_power_efficient crda_timeout_work [ 242.600572][ T30] Call Trace: [ 242.604015][ T30] [ 242.606978][ T30] __schedule+0x1895/0x4b30 [ 242.716396][ T30] ? __pfx___schedule+0x10/0x10 [ 242.766535][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 242.790425][ T30] ? __pfx_lock_release+0x10/0x10 [ 242.795528][ T30] ? kick_pool+0x45c/0x620 [ 242.800002][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 242.870745][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 242.876050][ T30] ? schedule+0x90/0x320 [ 242.880336][ T30] schedule+0x14b/0x320 [ 242.970640][ T30] schedule_preempt_disabled+0x13/0x30 [ 242.976275][ T30] __mutex_lock+0x6a7/0xd70 [ 243.020484][ T30] ? __mutex_lock+0x52a/0xd70 [ 243.025248][ T30] ? crda_timeout_work+0x15/0x50 [ 243.030233][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 243.088894][ T30] ? process_scheduled_works+0x976/0x1850 [ 243.130496][ T30] crda_timeout_work+0x15/0x50 [ 243.135349][ T30] process_scheduled_works+0xa63/0x1850 [ 243.167560][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 243.194223][ T30] ? assign_work+0x364/0x3d0 [ 243.198897][ T30] worker_thread+0x870/0xd30 [ 243.247663][ T30] ? __kthread_parkme+0x169/0x1d0 [ 243.253752][ T30] ? __pfx_worker_thread+0x10/0x10 [ 243.258919][ T30] kthread+0x2f0/0x390 [ 243.277408][ T30] ? __pfx_worker_thread+0x10/0x10 [ 243.283222][ T30] ? __pfx_kthread+0x10/0x10 [ 243.287863][ T30] ret_from_fork+0x4b/0x80 [ 243.298230][ T30] ? __pfx_kthread+0x10/0x10 [ 243.303158][ T30] ret_from_fork_asm+0x1a/0x30 [ 243.307990][ T30] [ 243.317029][ T30] INFO: task kworker/u8:5:409 blocked for more than 144 seconds. [ 243.325137][ T30] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 243.340315][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 243.351078][ T30] task:kworker/u8:5 state:D stack:24112 pid:409 tgid:409 ppid:2 flags:0x00004000 [ 243.366988][ T30] Workqueue: ipv6_addrconf addrconf_dad_work [ 243.376018][ T30] Call Trace: [ 243.379329][ T30] [ 243.388576][ T30] __schedule+0x1895/0x4b30 [ 243.393641][ T30] ? __pfx___schedule+0x10/0x10 [ 243.398545][ T30] ? __pfx_lock_release+0x10/0x10 [ 243.411345][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 243.416861][ T30] ? kthread_data+0x52/0xd0 [ 243.427673][ T30] ? schedule+0x90/0x320 [ 243.432269][ T30] ? wq_worker_sleeping+0x66/0x240 [ 243.437629][ T30] ? schedule+0x90/0x320 [ 243.445205][ T30] schedule+0x14b/0x320 [ 243.449416][ T30] schedule_preempt_disabled+0x13/0x30 [ 243.461850][ T30] __mutex_lock+0x6a7/0xd70 [ 243.466454][ T30] ? mark_lock+0x9a/0x360 [ 243.480477][ T30] ? __mutex_lock+0x52a/0xd70 [ 243.485231][ T30] ? addrconf_dad_work+0xd0/0x16f0 [ 243.495103][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 243.500195][ T30] addrconf_dad_work+0xd0/0x16f0 [ 243.506134][ T30] ? __pfx_addrconf_dad_work+0x10/0x10 [ 243.517325][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 243.524055][ T30] ? process_scheduled_works+0x976/0x1850 [ 243.529836][ T30] process_scheduled_works+0xa63/0x1850 [ 243.540484][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 243.546535][ T30] ? assign_work+0x364/0x3d0 [ 243.560055][ T30] worker_thread+0x870/0xd30 [ 243.565049][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 243.577319][ T30] ? __kthread_parkme+0x169/0x1d0 [ 243.582851][ T30] ? __pfx_worker_thread+0x10/0x10 [ 243.588019][ T30] kthread+0x2f0/0x390 [ 243.598024][ T30] ? __pfx_worker_thread+0x10/0x10 [ 243.603559][ T30] ? __pfx_kthread+0x10/0x10 [ 243.608182][ T30] ret_from_fork+0x4b/0x80 [ 243.620421][ T30] ? __pfx_kthread+0x10/0x10 [ 243.625068][ T30] ret_from_fork_asm+0x1a/0x30 [ 243.629897][ T30] [ 243.641217][ T30] INFO: task kworker/u8:7:2947 blocked for more than 144 seconds. [ 243.650905][ T30] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 243.658320][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 243.673596][ T30] task:kworker/u8:7 state:D stack:21680 pid:2947 tgid:2947 ppid:2 flags:0x00004000 [ 243.687283][ T30] Workqueue: events_unbound linkwatch_event [ 243.701396][ T30] Call Trace: [ 243.704729][ T30] [ 243.707699][ T30] __schedule+0x1895/0x4b30 [ 243.718284][ T30] ? __pfx___schedule+0x10/0x10 [ 243.723997][ T30] ? __pfx_lock_release+0x10/0x10 [ 243.729090][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 243.740899][ T30] ? kthread_data+0x52/0xd0 [ 243.745560][ T30] ? schedule+0x90/0x320 [ 243.749843][ T30] ? wq_worker_sleeping+0x66/0x240 [ 243.762283][ T30] ? schedule+0x90/0x320 [ 243.766579][ T30] schedule+0x14b/0x320 [ 243.776712][ T30] schedule_preempt_disabled+0x13/0x30 [ 243.785521][ T30] __mutex_lock+0x6a7/0xd70 [ 243.790096][ T30] ? __mutex_lock+0x52a/0xd70 [ 243.798501][ T30] ? linkwatch_event+0xe/0x60 [ 243.805672][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 243.814221][ T30] ? process_scheduled_works+0x976/0x1850 [ 243.820168][ T30] linkwatch_event+0xe/0x60 [ 243.827464][ T30] process_scheduled_works+0xa63/0x1850 [ 243.837308][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 243.846002][ T30] ? assign_work+0x364/0x3d0 [ 243.857993][ T30] worker_thread+0x870/0xd30 [ 243.865032][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 243.874782][ T30] ? __kthread_parkme+0x169/0x1d0 [ 243.879965][ T30] ? __pfx_worker_thread+0x10/0x10 [ 243.887688][ T30] kthread+0x2f0/0x390 [ 243.895848][ T30] ? __pfx_worker_thread+0x10/0x10 [ 243.903519][ T30] ? __pfx_kthread+0x10/0x10 [ 243.908151][ T30] ret_from_fork+0x4b/0x80 [ 243.916305][ T30] ? __pfx_kthread+0x10/0x10 [ 243.923595][ T30] ret_from_fork_asm+0x1a/0x30 [ 243.928439][ T30] [ 243.949341][ T30] INFO: task syz.3.9:5540 blocked for more than 144 seconds. [ 243.958799][ T30] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 243.972204][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 243.984380][ T30] task:syz.3.9 state:D stack:21632 pid:5540 tgid:5539 ppid:5317 flags:0x00004006 [ 243.997838][ T30] Call Trace: [ 244.005354][ T30] [ 244.008323][ T30] __schedule+0x1895/0x4b30 [ 244.016665][ T30] ? __pfx___schedule+0x10/0x10 [ 244.024267][ T30] ? __pfx_lock_release+0x10/0x10 [ 244.029368][ T30] ? schedule+0x90/0x320 [ 244.037473][ T30] schedule+0x14b/0x320 [ 244.044208][ T30] schedule_timeout+0xb0/0x310 [ 244.049022][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 244.058180][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 244.068321][ T30] ? wait_for_completion+0x2fe/0x620 [ 244.079062][ T30] ? wait_for_completion+0x2fe/0x620 [ 244.086842][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 244.097647][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 244.105448][ T30] ? wait_for_completion+0x2fe/0x620 [ 244.114258][ T30] wait_for_completion+0x355/0x620 [ 244.119433][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 244.127872][ T30] ? __flush_work+0xe7/0xc50 [ 244.136310][ T30] __flush_work+0xa37/0xc50 [ 244.145257][ T30] ? __flush_work+0xe7/0xc50 [ 244.149924][ T30] ? __pfx___flush_work+0x10/0x10 [ 244.164556][ T30] ? __pfx_wq_barrier_func+0x10/0x10 [ 244.169929][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 244.179933][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 244.187571][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 244.196943][ T30] unregister_netdevice_many_notify+0x87b/0x1da0 [ 244.206235][ T30] ? __pfx___netdev_upper_dev_unlink+0x10/0x10 [ 244.216331][ T30] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 244.227289][ T30] ? unregister_netdevice_queue+0x26b/0x370 [ 244.237029][ T30] ? netdev_upper_dev_unlink+0x84/0xd0 [ 244.245146][ T30] ? netdev_upper_dev_unlink+0x92/0xd0 [ 244.260446][ T30] ? macvlan_dellink+0x404/0x4a0 [ 244.266460][ T30] macvlan_device_event+0x7e0/0x870 [ 244.278806][ T30] ? __pfx_macvlan_device_event+0x10/0x10 [ 244.284939][ T30] notifier_call_chain+0x19f/0x3e0 [ 244.296390][ T30] unregister_netdevice_many_notify+0xedd/0x1da0 [ 244.305180][ T30] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 244.317923][ T30] ? unregister_netdevice_queue+0x26b/0x370 [ 244.324177][ T30] ? veth_dellink+0xef/0x140 [ 244.328817][ T30] ? __pfx_veth_dellink+0x10/0x10 [ 244.340791][ T30] rtnl_dellink+0x50f/0x8e0 [ 244.345377][ T30] ? __pfx_rtnl_dellink+0x10/0x10 [ 244.356671][ T30] ? __pfx_lock_release+0x10/0x10 [ 244.362080][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 244.369017][ T30] ? __pfx_rtnl_dellink+0x10/0x10 [ 244.382552][ T30] rtnetlink_rcv_msg+0x73f/0xcf0 [ 244.387626][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 244.399566][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 244.405881][ T30] ? ref_tracker_free+0x643/0x7e0 [ 244.425364][ T30] netlink_rcv_skb+0x1e3/0x430 [ 244.430192][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 244.436278][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 244.447663][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 244.453253][ T30] netlink_unicast+0x7f6/0x990 [ 244.458071][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 244.470182][ T30] ? __virt_addr_valid+0x183/0x530 [ 244.478339][ T30] ? __check_object_size+0x48e/0x900 [ 244.486047][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 244.494366][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.499714][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 244.508113][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.517035][ T30] __sock_sendmsg+0x221/0x270 [ 244.524392][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 244.529318][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 244.540463][ T30] __sys_sendmsg+0x2aa/0x390 [ 244.545124][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 244.550327][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 244.563102][ T30] ? do_syscall_64+0x100/0x230 [ 244.567912][ T30] ? do_syscall_64+0xb6/0x230 [ 244.580701][ T30] do_syscall_64+0xf3/0x230 [ 244.585264][ T30] ? clear_bhb_loop+0x35/0x90 [ 244.589991][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.603821][ T30] RIP: 0033:0x7fb03c17def9 [ 244.608274][ T30] RSP: 002b:00007fb03cf3a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.621383][ T30] RAX: ffffffffffffffda RBX: 00007fb03c335f80 RCX: 00007fb03c17def9 [ 244.629418][ T30] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000006 [ 244.640854][ T30] RBP: 00007fb03c1f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 244.648882][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 244.662698][ T30] R13: 0000000000000000 R14: 00007fb03c335f80 R15: 00007fb03c45fa28 [ 244.677542][ T30] [ 244.683680][ T30] INFO: task syz.0.46:5560 blocked for more than 145 seconds. [ 244.694808][ T30] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 244.705202][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 244.718054][ T30] task:syz.0.46 state:D stack:26880 pid:5560 tgid:5559 ppid:5240 flags:0x00000004 [ 244.731600][ T30] Call Trace: [ 244.734927][ T30] [ 244.737897][ T30] __schedule+0x1895/0x4b30 [ 244.751949][ T30] ? __pfx___schedule+0x10/0x10 [ 244.756881][ T30] ? __pfx_lock_release+0x10/0x10 [ 244.768716][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 244.776560][ T30] ? schedule+0x90/0x320 [ 244.786784][ T30] schedule+0x14b/0x320 [ 244.791293][ T30] schedule_preempt_disabled+0x13/0x30 [ 244.796803][ T30] __mutex_lock+0x6a7/0xd70 [ 244.806978][ T30] ? __mutex_lock+0x52a/0xd70 [ 244.813122][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 244.818299][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 244.828848][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 244.837170][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 244.847806][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 244.859492][ T30] ? ref_tracker_free+0x643/0x7e0 [ 244.869248][ T30] netlink_rcv_skb+0x1e3/0x430 [ 244.875407][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 244.889076][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 244.895938][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 244.907528][ T30] netlink_unicast+0x7f6/0x990 [ 244.913733][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 244.919114][ T30] ? __virt_addr_valid+0x183/0x530 [ 244.929816][ T30] ? __check_object_size+0x48e/0x900 [ 244.936646][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 244.946403][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.953669][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 244.958668][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.968793][ T30] __sock_sendmsg+0x221/0x270 [ 244.990115][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 244.995288][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 245.006208][ T30] __sys_sendmsg+0x2aa/0x390 [ 245.011127][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 245.016870][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 245.029551][ T30] ? do_syscall_64+0x100/0x230 [ 245.034671][ T30] ? do_syscall_64+0xb6/0x230 [ 245.039413][ T30] do_syscall_64+0xf3/0x230 [ 245.052150][ T30] ? clear_bhb_loop+0x35/0x90 [ 245.056892][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.069240][ T30] RIP: 0033:0x7f3d8a37def9 [ 245.073993][ T30] RSP: 002b:00007f3d8b1e5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.090205][ T30] RAX: ffffffffffffffda RBX: 00007f3d8a535f80 RCX: 00007f3d8a37def9 [ 245.098585][ T30] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000006 [ 245.112592][ T30] RBP: 00007f3d8a3f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 245.126834][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.138899][ T30] R13: 0000000000000000 R14: 00007f3d8a535f80 R15: 00007f3d8a65fa28 [ 245.150456][ T30] [ 245.156296][ T30] INFO: task syz.4.49:5575 blocked for more than 146 seconds. [ 245.168154][ T30] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 245.179928][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 245.196118][ T30] task:syz.4.49 state:D stack:26560 pid:5575 tgid:5574 ppid:5242 flags:0x00004004 [ 245.208835][ T30] Call Trace: [ 245.218024][ T30] [ 245.221769][ T30] __schedule+0x1895/0x4b30 [ 245.226360][ T30] ? __pfx___schedule+0x10/0x10 [ 245.237562][ T30] ? __pfx_lock_release+0x10/0x10 [ 245.242942][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 245.248463][ T30] ? schedule+0x90/0x320 [ 245.259162][ T30] schedule+0x14b/0x320 [ 245.263419][ T30] schedule_preempt_disabled+0x13/0x30 [ 245.268916][ T30] __mutex_lock+0x6a7/0xd70 [ 245.279942][ T30] ? __mutex_lock+0x52a/0xd70 [ 245.287159][ T30] ? register_nexthop_notifier+0x84/0x290 [ 245.304755][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 245.309851][ T30] ? __asan_memset+0x23/0x50 [ 245.315948][ T30] register_nexthop_notifier+0x84/0x290 [ 245.326903][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 245.334243][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 245.345470][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 245.353161][ T30] ? __asan_memset+0x23/0x50 [ 245.357906][ T30] ops_init+0x31e/0x590 [ 245.368308][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 245.375768][ T30] setup_net+0x287/0x9e0 [ 245.380064][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 245.392074][ T30] ? __pfx_setup_net+0x10/0x10 [ 245.396906][ T30] copy_net_ns+0x33f/0x570 [ 245.406964][ T30] create_new_namespaces+0x425/0x7b0 [ 245.412743][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 245.418625][ T30] ksys_unshare+0x619/0xc10 [ 245.429414][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 245.436808][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 245.447903][ T30] ? exc_page_fault+0x590/0x8c0 [ 245.457274][ T30] __x64_sys_unshare+0x38/0x40 [ 245.467185][ T30] do_syscall_64+0xf3/0x230 [ 245.473301][ T30] ? clear_bhb_loop+0x35/0x90 [ 245.478045][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.489174][ T30] RIP: 0033:0x7f401177def9 [ 245.496822][ T30] RSP: 002b:00007f401251d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 245.510144][ T30] RAX: ffffffffffffffda RBX: 00007f4011935f80 RCX: 00007f401177def9 [ 245.525401][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 245.535270][ T30] RBP: 00007f40117f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 245.547083][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.557784][ T30] R13: 0000000000000001 R14: 00007f4011935f80 R15: 00007f4011a5fa28 [ 245.569535][ T30] [ 245.575169][ T30] INFO: task syz.4.49:5577 blocked for more than 146 seconds. [ 245.586332][ T30] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 245.599542][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 245.612027][ T30] task:syz.4.49 state:D stack:22736 pid:5577 tgid:5574 ppid:5242 flags:0x00000004 [ 245.627275][ T30] Call Trace: [ 245.633702][ T30] [ 245.637179][ T30] __schedule+0x1895/0x4b30 [ 245.647990][ T30] ? __pfx___schedule+0x10/0x10 [ 245.655486][ T30] ? __pfx_lock_release+0x10/0x10 [ 245.664245][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 245.669769][ T30] ? schedule+0x90/0x320 [ 245.678754][ T30] schedule+0x14b/0x320 [ 245.686726][ T30] schedule_preempt_disabled+0x13/0x30 [ 245.694924][ T30] __mutex_lock+0x6a7/0xd70 [ 245.705085][ T30] ? __mutex_lock+0x52a/0xd70 [ 245.709828][ T30] ? __tun_chr_ioctl+0x48c/0x2400 [ 245.717624][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 245.726850][ T30] ? __might_fault+0xc6/0x120 [ 245.734733][ T30] __tun_chr_ioctl+0x48c/0x2400 [ 245.739666][ T30] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 245.753633][ T30] ? __fget_files+0x3f3/0x470 [ 245.758380][ T30] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 245.767499][ T30] __se_sys_ioctl+0xf9/0x170 [ 245.776912][ T30] do_syscall_64+0xf3/0x230 [ 245.785199][ T30] ? clear_bhb_loop+0x35/0x90 [ 245.790020][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.798735][ T30] RIP: 0033:0x7f401177def9 [ 245.808814][ T30] RSP: 002b:00007f40124fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 245.819959][ T30] RAX: ffffffffffffffda RBX: 00007f4011936058 RCX: 00007f401177def9 [ 245.835957][ T30] RDX: 0000000020000200 RSI: 00000000400454ca RDI: 0000000000000005 [ 245.844249][ T30] RBP: 00007f40117f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 245.858902][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.867172][ T30] R13: 0000000000000000 R14: 00007f4011936058 R15: 00007f4011a5fa28 [ 245.880686][ T30] [ 245.884412][ T30] INFO: task syz.4.49:5578 blocked for more than 146 seconds. [ 245.898698][ T30] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 245.909192][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 245.920714][ T30] task:syz.4.49 state:D stack:23168 pid:5578 tgid:5574 ppid:5242 flags:0x00000004 [ 245.936161][ T30] Call Trace: [ 245.940039][ T30] [ 245.943444][ T30] __schedule+0x1895/0x4b30 [ 245.948109][ T30] ? __pfx___schedule+0x10/0x10 [ 245.959041][ T30] ? __pfx_lock_release+0x10/0x10 [ 245.965049][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 245.978185][ T30] ? schedule+0x90/0x320 [ 245.982833][ T30] schedule+0x14b/0x320 [ 245.987040][ T30] schedule_preempt_disabled+0x13/0x30 [ 245.998393][ T30] __mutex_lock+0x6a7/0xd70 [ 246.003226][ T30] ? __mutex_lock+0x52a/0xd70 [ 246.009605][ T30] ? devinet_ioctl+0x2ce/0x1aa0 [ 246.029076][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 246.034981][ T30] ? apparmor_capable+0x13b/0x1b0 [ 246.040069][ T30] ? bpf_lsm_capable+0x9/0x10 [ 246.052807][ T30] devinet_ioctl+0x2ce/0x1aa0 [ 246.057639][ T30] ? get_user_ifreq+0x1bb/0x200 [ 246.067899][ T30] inet_ioctl+0x3d7/0x4f0 [ 246.073082][ T30] ? __pfx_inet_ioctl+0x10/0x10 [ 246.077977][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 246.089394][ T30] ? packet_ioctl+0x26b/0x350 [ 246.094617][ T30] sock_do_ioctl+0x158/0x460 [ 246.099258][ T30] ? __pfx_sock_do_ioctl+0x10/0x10 [ 246.108512][ T30] sock_ioctl+0x626/0x8e0 [ 246.116889][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 246.123241][ T30] ? __fget_files+0x29/0x470 [ 246.127888][ T30] ? __fget_files+0x3f3/0x470 [ 246.137934][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 246.145819][ T30] __se_sys_ioctl+0xf9/0x170 [ 246.153095][ T30] do_syscall_64+0xf3/0x230 [ 246.157652][ T30] ? clear_bhb_loop+0x35/0x90 [ 246.166156][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.175815][ T30] RIP: 0033:0x7f401177def9 [ 246.180276][ T30] RSP: 002b:00007f40124db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 246.195348][ T30] RAX: ffffffffffffffda RBX: 00007f4011936130 RCX: 00007f401177def9 [ 246.205112][ T30] RDX: 0000000020000180 RSI: 0000000000008914 RDI: 0000000000000006 [ 246.220418][ T30] RBP: 00007f40117f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 246.228441][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.242923][ T30] R13: 0000000000000000 R14: 00007f4011936130 R15: 00007f4011a5fa28 [ 246.254698][ T30] [ 246.257826][ T30] INFO: task syz-executor:5595 blocked for more than 147 seconds. [ 246.268390][ T30] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 246.283246][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 246.295732][ T30] task:syz-executor state:D stack:25424 pid:5595 tgid:5595 ppid:1 flags:0x00004004 [ 246.308999][ T30] Call Trace: [ 246.317954][ T30] [ 246.323615][ T30] __schedule+0x1895/0x4b30 [ 246.328196][ T30] ? __pfx___schedule+0x10/0x10 [ 246.340451][ T30] ? __pfx_lock_release+0x10/0x10 [ 246.345558][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 246.358989][ T30] ? schedule+0x90/0x320 [ 246.363555][ T30] schedule+0x14b/0x320 [ 246.367750][ T30] schedule_preempt_disabled+0x13/0x30 [ 246.378817][ T30] __mutex_lock+0x6a7/0xd70 [ 246.383737][ T30] ? __mutex_lock+0x52a/0xd70 [ 246.388458][ T30] ? register_nexthop_notifier+0x84/0x290 [ 246.400308][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 246.405548][ T30] ? __asan_memset+0x23/0x50 [ 246.410189][ T30] register_nexthop_notifier+0x84/0x290 [ 246.424452][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 246.430336][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 246.445327][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 246.453092][ T30] ? __asan_memset+0x23/0x50 [ 246.457746][ T30] ops_init+0x31e/0x590 [ 246.469766][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 246.476829][ T30] setup_net+0x287/0x9e0 [ 246.486074][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 246.496135][ T30] ? __pfx_setup_net+0x10/0x10 [ 246.505882][ T30] copy_net_ns+0x33f/0x570 [ 246.510353][ T30] create_new_namespaces+0x425/0x7b0 [ 246.526236][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 246.533582][ T30] ksys_unshare+0x619/0xc10 [ 246.538250][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 246.549017][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 246.556502][ T30] ? do_syscall_64+0x100/0x230 [ 246.566234][ T30] __x64_sys_unshare+0x38/0x40 [ 246.572585][ T30] do_syscall_64+0xf3/0x230 [ 246.577141][ T30] ? clear_bhb_loop+0x35/0x90 [ 246.588440][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.595792][ T30] RIP: 0033:0x7f8527d7f6f7 [ 246.600248][ T30] RSP: 002b:00007f852805ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 246.610870][ T30] RAX: ffffffffffffffda RBX: 00007f8527df22ec RCX: 00007f8527d7f6f7 [ 246.626468][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 246.635263][ T30] RBP: 0000000000000000 R08: 00007f8528a67d60 R09: 0000000000000000 [ 246.649317][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 246.660073][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 246.674117][ T30] [ 246.677252][ T30] INFO: task syz-executor:5601 blocked for more than 147 seconds. [ 246.687010][ T30] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 246.698975][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 246.708986][ T30] task:syz-executor state:D stack:26560 pid:5601 tgid:5601 ppid:1 flags:0x00004004 [ 246.727282][ T30] Call Trace: [ 246.732500][ T30] [ 246.735473][ T30] __schedule+0x1895/0x4b30 [ 246.740034][ T30] ? __pfx___schedule+0x10/0x10 [ 246.751800][ T30] ? __pfx_lock_release+0x10/0x10 [ 246.756968][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 246.767831][ T30] ? schedule+0x90/0x320 [ 246.773650][ T30] schedule+0x14b/0x320 [ 246.777865][ T30] schedule_preempt_disabled+0x13/0x30 [ 246.788435][ T30] __mutex_lock+0x6a7/0xd70 [ 246.794449][ T30] ? __mutex_lock+0x52a/0xd70 [ 246.799181][ T30] ? register_nexthop_notifier+0x84/0x290 [ 246.814968][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 246.820075][ T30] ? __asan_memset+0x23/0x50 [ 246.832624][ T30] register_nexthop_notifier+0x84/0x290 [ 246.838238][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 246.847578][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 246.857068][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 246.866753][ T30] ? __asan_memset+0x23/0x50 [ 246.873923][ T30] ops_init+0x31e/0x590 [ 246.878148][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 246.889109][ T30] setup_net+0x287/0x9e0 [ 246.897349][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 246.906524][ T30] ? __pfx_setup_net+0x10/0x10 [ 246.913748][ T30] copy_net_ns+0x33f/0x570 [ 246.918215][ T30] create_new_namespaces+0x425/0x7b0 [ 246.929181][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 246.937361][ T30] ksys_unshare+0x619/0xc10 [ 246.945395][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 246.955266][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 246.965037][ T30] ? do_syscall_64+0x100/0x230 [ 246.969858][ T30] __x64_sys_unshare+0x38/0x40 [ 246.977489][ T30] do_syscall_64+0xf3/0x230 [ 246.985324][ T30] ? clear_bhb_loop+0x35/0x90 [ 246.990076][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.998592][ T30] RIP: 0033:0x7f2b62f7f6f7 [ 247.006476][ T30] RSP: 002b:00007f2b6325ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 247.017438][ T30] RAX: ffffffffffffffda RBX: 00007f2b62ff22ec RCX: 00007f2b62f7f6f7 [ 247.030547][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 247.038568][ T30] RBP: 0000000000000000 R08: 00007f2b63c67d60 R09: 0000000000000000 [ 247.060316][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 247.074517][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 247.083908][ T30] [ 247.086956][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 247.100719][ T30] INFO: task syz-executor:5602 blocked for more than 148 seconds. [ 247.108556][ T30] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 247.121796][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 247.137283][ T30] task:syz-executor state:D stack:26304 pid:5602 tgid:5602 ppid:1 flags:0x00004006 [ 247.148909][ T30] Call Trace: [ 247.157055][ T30] [ 247.160114][ T30] __schedule+0x1895/0x4b30 [ 247.167900][ T30] ? __pfx___schedule+0x10/0x10 [ 247.177422][ T30] ? __pfx_lock_release+0x10/0x10 [ 247.184349][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 247.189883][ T30] ? schedule+0x90/0x320 [ 247.202564][ T30] schedule+0x14b/0x320 [ 247.206775][ T30] schedule_preempt_disabled+0x13/0x30 [ 247.217159][ T30] __mutex_lock+0x6a7/0xd70 [ 247.224355][ T30] ? __mutex_lock+0x52a/0xd70 [ 247.229273][ T30] ? register_nexthop_notifier+0x84/0x290 [ 247.247036][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 247.252419][ T30] ? __asan_memset+0x23/0x50 [ 247.257066][ T30] register_nexthop_notifier+0x84/0x290 [ 247.268717][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 247.275315][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 247.286953][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 247.293834][ T30] ? __asan_memset+0x23/0x50 [ 247.298470][ T30] ops_init+0x31e/0x590 [ 247.310125][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 247.315873][ T30] setup_net+0x287/0x9e0 [ 247.320171][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 247.330417][ T30] ? __pfx_setup_net+0x10/0x10 [ 247.335252][ T30] copy_net_ns+0x33f/0x570 [ 247.346861][ T30] create_new_namespaces+0x425/0x7b0 [ 247.352522][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 247.358287][ T30] ksys_unshare+0x619/0xc10 [ 247.368587][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 247.378477][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 247.391787][ T30] ? do_syscall_64+0x100/0x230 [ 247.396608][ T30] __x64_sys_unshare+0x38/0x40 [ 247.407751][ T30] do_syscall_64+0xf3/0x230 [ 247.412582][ T30] ? clear_bhb_loop+0x35/0x90 [ 247.417312][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.429744][ T30] RIP: 0033:0x7facc8f7f6f7 [ 247.434481][ T30] RSP: 002b:00007facc925ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 247.450523][ T30] RAX: ffffffffffffffda RBX: 00007facc8ff22ec RCX: 00007facc8f7f6f7 [ 247.458544][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 247.473908][ T30] RBP: 0000000000000000 R08: 00007facc9c67d60 R09: 0000000000000000 [ 247.486636][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 247.495993][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 247.508995][ T30] [ 247.513901][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 247.528176][ T30] [ 247.528176][ T30] Showing all locks held in the system: [ 247.548981][ T30] 5 locks held by kworker/0:0/8: [ 247.554220][ T30] 1 lock held by khungtaskd/30: [ 247.559094][ T30] #0: ffffffff8e937ee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 247.575341][ T30] 3 locks held by kworker/1:1/51: [ 247.580775][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 247.598780][ T30] #1: ffffc90000bb7d00 ((crda_timeout).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 247.617193][ T30] #2: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: crda_timeout_work+0x15/0x50 [ 247.627419][ T30] 3 locks held by kworker/u8:5/409: [ 247.638946][ T30] #0: ffff88802da7c948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 247.657646][ T30] #1: ffffc90002edfd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 247.678229][ T30] #2: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 247.688704][ T30] 3 locks held by kworker/0:2/1168: [ 247.699971][ T30] 3 locks held by kworker/u8:7/2947: [ 247.705616][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 247.723530][ T30] #1: ffffc90009c47d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 247.737428][ T30] #2: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 247.752699][ T30] 1 lock held by klogd/4669: [ 247.757414][ T30] 2 locks held by getty/4980: [ 247.766657][ T30] #0: ffff88802e3940a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 247.777693][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 247.793626][ T30] 4 locks held by kworker/0:4/5276: [ 247.798850][ T30] 3 locks held by kworker/1:5/5280: [ 247.805574][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 247.825839][ T30] #1: ffffc9000457fd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 247.838453][ T30] #2: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 247.858125][ T30] 2 locks held by syz.3.9/5540: [ 247.863320][ T30] #0: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 247.878281][ T30] #1: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 247.891458][ T30] 1 lock held by syz.0.46/5560: [ 247.896360][ T30] #0: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 247.911785][ T30] 2 locks held by syz.4.49/5575: [ 247.916753][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 247.930910][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 247.946267][ T30] 1 lock held by syz.4.49/5577: [ 247.953266][ T30] #0: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x48c/0x2400 [ 247.970914][ T30] 1 lock held by syz.4.49/5578: [ 247.975807][ T30] #0: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x2ce/0x1aa0 [ 247.991746][ T30] 2 locks held by syz-executor/5595: [ 247.997065][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 248.013329][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 248.027368][ T30] 2 locks held by syz-executor/5601: [ 248.036974][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 248.050261][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 248.070010][ T30] 2 locks held by syz-executor/5602: [ 248.077249][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 248.101502][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 248.118040][ T30] 2 locks held by syz-executor/5615: [ 248.124842][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 248.139068][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 248.156332][ T30] 2 locks held by syz-executor/5616: [ 248.162184][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 248.180512][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 248.198523][ T30] 2 locks held by syz-executor/5621: [ 248.204122][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 248.219545][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 248.230086][ T30] 2 locks held by syz-executor/5625: [ 248.240402][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 248.249893][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 248.269413][ T30] 2 locks held by syz-executor/5627: [ 248.275030][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 248.291053][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 248.306484][ T30] 2 locks held by syz-executor/5633: [ 248.313218][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 248.329880][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 248.345610][ T30] 2 locks held by syz-executor/5636: [ 248.351315][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 248.368044][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 248.378416][ T30] 2 locks held by syz-executor/5644: [ 248.389307][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 248.401804][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 248.420650][ T30] 2 locks held by syz-executor/5647: [ 248.425979][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 248.443482][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 248.456074][ T30] 2 locks held by syz-executor/5650: [ 248.468554][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 248.483891][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 248.495592][ T30] 2 locks held by syz-executor/5656: [ 248.506437][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 248.517670][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 248.533396][ T30] 2 locks held by syz-executor/5658: [ 248.538728][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 248.555717][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 248.568990][ T30] [ 248.579147][ T30] ============================================= [ 248.579147][ T30] [ 248.589292][ T30] NMI backtrace for cpu 1 [ 248.593663][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 248.603851][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 248.613938][ T30] Call Trace: [ 248.617246][ T30] [ 248.620214][ T30] dump_stack_lvl+0x241/0x360 [ 248.624944][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 248.630181][ T30] ? __pfx__printk+0x10/0x10 [ 248.634845][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 248.639834][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 248.645341][ T30] ? _printk+0xd5/0x120 [ 248.649541][ T30] ? __pfx__printk+0x10/0x10 [ 248.654175][ T30] ? __wake_up_klogd+0xcc/0x110 [ 248.659066][ T30] ? __pfx__printk+0x10/0x10 [ 248.663702][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 248.668774][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 248.674795][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 248.680819][ T30] watchdog+0xff4/0x1040 [ 248.685100][ T30] ? watchdog+0x1ea/0x1040 [ 248.689565][ T30] ? __pfx_watchdog+0x10/0x10 [ 248.694294][ T30] kthread+0x2f0/0x390 [ 248.698391][ T30] ? __pfx_watchdog+0x10/0x10 [ 248.703102][ T30] ? __pfx_kthread+0x10/0x10 [ 248.707723][ T30] ret_from_fork+0x4b/0x80 [ 248.712173][ T30] ? __pfx_kthread+0x10/0x10 [ 248.716795][ T30] ret_from_fork_asm+0x1a/0x30 [ 248.721618][ T30] [ 248.725392][ T30] Sending NMI from CPU 1 to CPUs 0: [ 248.731246][ C0] NMI backtrace for cpu 0 [ 248.731260][ C0] CPU: 0 UID: 0 PID: 5276 Comm: kworker/0:4 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 248.731281][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 248.731293][ C0] Workqueue: events_power_efficient neigh_periodic_work [ 248.731317][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x0/0x90 [ 248.731344][ C0] Code: 10 48 89 74 0a 18 4c 89 44 0a 20 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 4c 8b 04 24 65 48 8b 14 25 c0 d7 03 00 65 8b 05 c0 19 [ 248.731359][ C0] RSP: 0018:ffffc900000068b8 EFLAGS: 00000046 [ 248.731374][ C0] RAX: ffffffff8185d512 RBX: 00000039e7bc1453 RCX: ffff88802d27bc00 [ 248.731388][ C0] RDX: 0000000000010100 RSI: 0000000000000001 RDI: 0000000000000000 [ 248.731399][ C0] RBP: 0000000000000003 R08: ffffffff8185d508 R09: 0000000000000000 [ 248.731411][ C0] R10: ffff8880283eb420 R11: ffffed100507d686 R12: 7fffffffffffffff [ 248.731425][ C0] R13: dffffc0000000000 R14: ffff8880b8628340 R15: 0000000000000001 [ 248.731438][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 248.731453][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 248.731466][ C0] CR2: 00007f89ba11fff0 CR3: 0000000021ba4000 CR4: 00000000003506f0 [ 248.731482][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 248.731493][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 248.731504][ C0] Call Trace: [ 248.731511][ C0] [ 248.731518][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 248.731547][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 248.731574][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 248.731601][ C0] ? nmi_handle+0x2a/0x5a0 [ 248.731626][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 248.731649][ C0] ? nmi_handle+0x14f/0x5a0 [ 248.731666][ C0] ? nmi_handle+0x2a/0x5a0 [ 248.731684][ C0] ? __pfx___sanitizer_cov_trace_const_cmp4+0x10/0x10 [ 248.731708][ C0] ? default_do_nmi+0x63/0x160 [ 248.731726][ C0] ? exc_nmi+0x123/0x1f0 [ 248.731742][ C0] ? end_repeat_nmi+0xf/0x53 [ 248.731767][ C0] ? tick_program_event+0x78/0x130 [ 248.731784][ C0] ? tick_program_event+0x82/0x130 [ 248.731801][ C0] ? __pfx___sanitizer_cov_trace_const_cmp4+0x10/0x10 [ 248.731826][ C0] ? __pfx___sanitizer_cov_trace_const_cmp4+0x10/0x10 [ 248.731850][ C0] ? __pfx___sanitizer_cov_trace_const_cmp4+0x10/0x10 [ 248.731874][ C0] [ 248.731880][ C0] [ 248.731886][ C0] tick_program_event+0x8c/0x130 [ 248.731904][ C0] hrtimer_start_range_ns+0x7a3/0xca0 [ 248.731938][ C0] dummy_timer+0x4421/0x45a0 [ 248.731959][ C0] ? __pfx_lock_release+0x10/0x10 [ 248.731993][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 248.732016][ C0] ? __pfx_lock_release+0x10/0x10 [ 248.732050][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 248.732070][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 248.732086][ C0] __hrtimer_run_queues+0x59b/0xd50 [ 248.732111][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 248.732130][ C0] ? ktime_get_update_offsets_now+0x22d/0x250 [ 248.732157][ C0] hrtimer_interrupt+0x396/0x990 [ 248.732185][ C0] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 248.732204][ C0] sysvec_apic_timer_interrupt+0x52/0xc0 [ 248.732225][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 248.732254][ C0] RIP: 0010:__kasan_check_read+0x6/0x20 [ 248.732280][ C0] Code: b7 c0 09 31 db eb d0 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 89 f6 <48> 8b 0c 24 31 d2 e9 6f e6 ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f [ 248.732294][ C0] RSP: 0018:ffffc90000006ff8 EFLAGS: 00000246 [ 248.732309][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff88802d27bc00 [ 248.732320][ C0] RDX: 0000000000000100 RSI: 0000000000000008 RDI: ffffffff901c82a8 [ 248.732332][ C0] RBP: ffffc90000007140 R08: ffffffff89f53372 R09: 1ffffffff284b2f8 [ 248.732346][ C0] R10: dffffc0000000000 R11: fffffbfff284b2f9 R12: 1ffff92000000e0c [ 248.732359][ C0] R13: ffffffff89f53255 R14: ffffffff89f53255 R15: dffffc0000000000 [ 248.732373][ C0] ? synproxy_pernet+0x45/0x270 [ 248.732394][ C0] ? synproxy_pernet+0x45/0x270 [ 248.732415][ C0] ? synproxy_pernet+0x162/0x270 [ 248.732439][ C0] lock_release+0xb0/0xa30 [ 248.732465][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 248.732491][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 248.732518][ C0] ? __pfx_lock_release+0x10/0x10 [ 248.732544][ C0] ? kasan_quarantine_put+0xdc/0x230 [ 248.732571][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 248.732597][ C0] ? synproxy_pernet+0x45/0x270 [ 248.732617][ C0] synproxy_pernet+0x202/0x270 [ 248.732639][ C0] nft_synproxy_eval_v4+0x124/0x610 [ 248.732662][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 248.732683][ C0] ? sched_clock_cpu+0x76/0x490 [ 248.732704][ C0] ? nf_ip_checksum+0x13a/0x500 [ 248.732729][ C0] nft_synproxy_do_eval+0x362/0xa60 [ 248.732752][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 248.732777][ C0] ? __pfx_validate_chain+0x10/0x10 [ 248.732801][ C0] nft_do_chain+0x4ad/0x1da0 [ 248.732829][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 248.732850][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 248.732886][ C0] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 248.732912][ C0] nft_do_chain_inet+0x418/0x6b0 [ 248.732935][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 248.732955][ C0] ? ipt_do_table+0x312/0x1860 [ 248.732984][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 248.733005][ C0] nf_hook_slow+0xc3/0x220 [ 248.733023][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 248.733050][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 248.733077][ C0] NF_HOOK+0x29e/0x450 [ 248.733103][ C0] ? NF_HOOK+0x9a/0x450 [ 248.733128][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 248.733154][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 248.733184][ C0] ? ip_rcv_finish+0x406/0x560 [ 248.733210][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 248.733236][ C0] NF_HOOK+0x3a4/0x450 [ 248.733265][ C0] ? __lock_acquire+0x1384/0x2050 [ 248.733292][ C0] ? NF_HOOK+0x9a/0x450 [ 248.733316][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 248.733340][ C0] ? ip_rcv_core+0x801/0xd10 [ 248.733366][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 248.733395][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 248.733421][ C0] __netif_receive_skb+0x2bf/0x650 [ 248.733439][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 248.733464][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 248.733480][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 248.733507][ C0] ? __pfx_lock_release+0x10/0x10 [ 248.733533][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 248.733558][ C0] process_backlog+0x662/0x15b0 [ 248.733579][ C0] ? process_backlog+0x33b/0x15b0 [ 248.733601][ C0] ? __pfx_process_backlog+0x10/0x10 [ 248.733619][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 248.733646][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 248.733674][ C0] __napi_poll+0xcb/0x490 [ 248.733692][ C0] net_rx_action+0x89b/0x1240 [ 248.733721][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 248.733740][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 248.733781][ C0] handle_softirqs+0x2c5/0x980 [ 248.733806][ C0] ? do_softirq+0x11b/0x1e0 [ 248.733829][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 248.733857][ C0] do_softirq+0x11b/0x1e0 [ 248.733878][ C0] [ 248.733884][ C0] [ 248.733890][ C0] ? __pfx_do_softirq+0x10/0x10 [ 248.733913][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 248.733940][ C0] ? rcu_is_watching+0x15/0xb0 [ 248.733960][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 248.733983][ C0] ? neigh_periodic_work+0xb35/0xd50 [ 248.734000][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 248.734024][ C0] ? neigh_destroy+0x423/0x580 [ 248.734054][ C0] neigh_periodic_work+0xb35/0xd50 [ 248.734075][ C0] ? process_scheduled_works+0x976/0x1850 [ 248.734099][ C0] process_scheduled_works+0xa63/0x1850 [ 248.734136][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 248.734163][ C0] ? assign_work+0x364/0x3d0 [ 248.734188][ C0] worker_thread+0x870/0xd30 [ 248.734216][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 248.734246][ C0] ? __kthread_parkme+0x169/0x1d0 [ 248.734272][ C0] ? __pfx_worker_thread+0x10/0x10 [ 248.734296][ C0] kthread+0x2f0/0x390 [ 248.734312][ C0] ? __pfx_worker_thread+0x10/0x10 [ 248.734335][ C0] ? __pfx_kthread+0x10/0x10 [ 248.734352][ C0] ret_from_fork+0x4b/0x80 [ 248.734376][ C0] ? __pfx_kthread+0x10/0x10 [ 248.734392][ C0] ret_from_fork_asm+0x1a/0x30 [ 248.734425][ C0] [ 249.632365][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 249.639284][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 249.649521][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 249.659606][ T30] Call Trace: [ 249.662909][ T30] [ 249.665860][ T30] dump_stack_lvl+0x241/0x360 [ 249.670583][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.675829][ T30] ? __pfx__printk+0x10/0x10 [ 249.680458][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 249.686490][ T30] ? vscnprintf+0x5d/0x90 [ 249.690864][ T30] panic+0x349/0x880 [ 249.694799][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 249.700987][ T30] ? __pfx_panic+0x10/0x10 [ 249.705433][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 249.710847][ T30] ? __irq_work_queue_local+0x137/0x410 [ 249.716449][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 249.721851][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 249.728048][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 249.734261][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 249.740464][ T30] watchdog+0x1033/0x1040 [ 249.744854][ T30] ? watchdog+0x1ea/0x1040 [ 249.749316][ T30] ? __pfx_watchdog+0x10/0x10 [ 249.754028][ T30] kthread+0x2f0/0x390 [ 249.758123][ T30] ? __pfx_watchdog+0x10/0x10 [ 249.762840][ T30] ? __pfx_kthread+0x10/0x10 [ 249.767547][ T30] ret_from_fork+0x4b/0x80 [ 249.772081][ T30] ? __pfx_kthread+0x10/0x10 [ 249.776701][ T30] ret_from_fork_asm+0x1a/0x30 [ 249.781519][ T30] [ 249.784857][ T30] Kernel Offset: disabled [ 249.789190][ T30] Rebooting in 86400 seconds..