last executing test programs: 22.24850409s ago: executing program 4 (id=6): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)='0', 0x1}], 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r5, &(0x7f0000000ec0)={0x2c, 0x0, &(0x7f0000000d00)={0x0, 0x3, 0x2, @string={0x2}}, &(0x7f0000000080)=ANY=[@ANYBLOB="000f14108000050f14000203100b0c100af9e001000000ff0100ef5f3a6426723eb3427b3a9a6be8c7b8890f5f53c23fdbeec5c94162e687bd921b70604dd18bd84f69524e31fe353c06e49a09fbbb52667e841f5ab9200cdb27644ec85badc4aefa7a5ef447ea288abec47105ac0e72b3d154717d723d7363aa9b5aff2ca6492d8e9e0e07f54ab1904e364997072ce58db602d4a9ddb3413e7a5db42c664ea899a07dcfd935de066443a5708319249b501d783a20049fdd7c9a61682c6d784300"/202], 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0xc38, &(0x7f0000000c40)=ANY=[@ANYRESOCT=r5, @ANYRES64=r5, @ANYRES8]) 21.234879857s ago: executing program 3 (id=4): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_PIM(r0, 0x29, 0xcf, &(0x7f0000000000)=0x2, 0x4) r1 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc517, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0x0, 0x5, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0x1, 0x1, 0x1, {0x22, 0x200}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x5, 0xd8, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x9b, 0x2, 0x4}}]}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0xd, 0x5, 0x9, 0x10, 0xd}, 0x19, &(0x7f00000000c0)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x1, 0x2, 0x0, 0x0, 0xb3, [0xffc000, 0xc00f]}]}, 0xa, [{0xc2, &(0x7f0000000100)=@string={0xc2, 0x3, "4e226e67a8ec7d6247b2c9cc56df53f8ba90ce57e6b4139c4e8f42a84970aeb97f319c058d6ba8d0a559fb6f528bf8c4d13e25ada932cc7a3174a37dc55c11438ea5237964946d8b7cb6dbce582bf80986b7ca66dd782e0950d0b73efa47baba5ddd460e468ccf94b6dfc5d48c5dcb19a4e7009d50927b0ba0f33b12616dd0e8494e554291f6356613b976a0376577741b44b68629e8c84377d65175e5fa6fd88cc6020d109d9f8a61939a9e0b50b489918bb5e185d3a0343f33734d85704bc1"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x44b}}, {0x5c, &(0x7f0000000280)=@string={0x5c, 0x3, "ee74685b5dd9130217d8e0bfc2117e572c536e09dce9b0ef1f1c137bf4d93bc88c390501700901fe285aab5d1b7ae042239d69c4dfa589b2cb8f84706a49bf5d56d1f1836856cf530b5b84319d0bcd958640a365e1db59f34f16"}}, {0xbf, &(0x7f0000000300)=@string={0xbf, 0x3, "b67e3ea86870d92253e27242dd027bafe9baa47cbf0647676d72e490ca18797a77b809ffce224b4834dee756fec428cfcca31b87d158dabfc850a1cdce64945f92a514130ca8fb707e5bf9b7f55cc476c5a9f329fc99a73bcd21b44930a04703941738f8ce5faba1d499593f2eacb8f4299c8b3bbd4ae0ffc9a57ec647bfc7d742d992dc9c07f6dde6d6121ba5bc02e40d28c5ddb8a5683a45d8d5e28fef24b757cd9a50ed43350ccb1541753f8b341a269f135c9f8aa60c936f460751"}}, {0x21, &(0x7f00000003c0)=@string={0x21, 0x3, "5578030d9a06dbf1f323fe325c982a8c62f7bdb1d088878e3a39c301375de6"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0xc01}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xc03}}, {0x40, &(0x7f0000000480)=@string={0x40, 0x3, "ba84b5267cc44fc183eb51d2f2c171d87d9d189d26ef35d295a92858ce2dcc9f976bc3990f6a8d19fea07c8631743f66eb9e173f1f4680bb1ae5dbd45822"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x812}}]}) syz_usb_control_io$hid(r1, &(0x7f00000006c0)={0x24, &(0x7f00000005c0)={0x40, 0x9, 0x14, {0x14, 0x21, "5d110cddcf405e9445a8ad88db272c9f10f1"}}, &(0x7f0000000600)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41a}}, &(0x7f0000000640)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x8, "0c60a55a"}, @main=@item_012={0x1, 0x0, 0xc, "11"}]}}, &(0x7f0000000680)={0x0, 0x21, 0x9, {0x9, 0x21, 0x58, 0xff, 0x1, {0x22, 0xb56}}}}, &(0x7f0000000840)={0x2c, &(0x7f0000000700)={0x40, 0x8, 0x26, "8f41d9416ac4b842b9ccc0e375d5ca01852428b6e49f4286c602007b542eb62c6c809d132ea1"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000007c0)={0x20, 0x1, 0x2, "05c9"}, &(0x7f0000000800)={0x20, 0x3, 0x1, 0xc7}}) prctl$PR_SET_TSC(0x1a, 0x3) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000880)={0x1, 0xd, 0x1, 0xfffffe01, "a540fb9e5b896cbc34b0a1e40e0d5e35615ecf9ed5a095941d456c8608fa41c3"}) prctl$PR_SET_TSC(0x1a, 0x2) prctl$PR_SET_TSC(0x1a, 0x1000058acd0390d4) r2 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f00000008c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x6a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0x50, 0x8, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x1, 0x2, 0xa, {0x9, 0x21, 0x9, 0x5, 0x1, {0x22, 0x8d9}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x1, 0x9, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x2, 0x40, 0x4}}]}}}]}}]}}, &(0x7f0000000d40)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x300, 0x7, 0xa, 0x1, 0x20, 0x9}, 0x95, &(0x7f0000000940)={0x5, 0xf, 0x95, 0x5, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x5, 0xf, 0x6}, @generic={0x78, 0x10, 0x2, "0e9a6f55f2122e572564dbce571f7cc96c597e8d5a6506aaa38f73dd3e2c3c4f93a730938401204445170e6ebdd115232abeb0e72722b11376182153eae100f7ae21ebb4dc1793a4b536c4055dd497bb8a403257d7af6d309a27cc047271e6ba52347099c2c76574dd70be304da1eb2b9c89675012"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x81, 0x8, 0xff, 0x9, 0x9}]}, 0x8, [{0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x445}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x140a}}, {0xb3, &(0x7f0000000b40)=@string={0xb3, 0x3, "cb5a2a40ccd22441baf97a67998dd7a80cac23fd57455853a78ed324f2e10dabe25d706a6db7c9a5e6c969a0500567d58b76c2a778b016ba42fde8ac6f22fc78ca1e1e1bb3239ec081822c2bd8dfc359e4c48318f1ddfa154d3307de89db5bde3b79df6580934b464e9300acc3f5c48605cfeb30c82e7a0e4a019b98ca745a1629b354c002b39c75f958766305d6552823c00c9ce3d556048bc50f040d574c12abb669454acae24ac95a9fb6cb044c47cd"}}, {0xc1, &(0x7f0000000c00)=@string={0xc1, 0x3, "9173c80221b035cb6f1d5f9f51f8cd25b1cbf6ae48bf8ab1bec8904ebb9323458147c82d3b0703643cb98dcc741346a87c25cfa509f2a7a6874fd5c31ae80082b5d5dc65ff38c9ee99e1210fa8b12a4a3834a9cd548dc2ac0721278798a3a44fe597a275e5580acecd9e7740c1feb896bab3b879666f295d26e44caf4e518145eec1ddbc0398003ead26ec19d65a1c07d5f0c0bb29a83eb57bfbcdf14c73f9912646983d27fdbc6f90328d66a4b112067c891e57e1e410aacaf9000cec1ad6"}}, {0x16, &(0x7f0000000d00)=@string={0x16, 0x3, "ae68bfdd5db4e1f8c2e6459bcb2e43c1ca8bf020"}}]}) syz_usb_control_io$hid(r2, &(0x7f0000001080)={0x24, &(0x7f0000000dc0)={0x40, 0xc, 0xff, {0xff, 0x3, "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"}}, &(0x7f0000000f00)={0x0, 0x3, 0xdb, @string={0xdb, 0x3, "42428f253f4ac6d9fe7fe6e2bebcb1d5cd873d2b361489ddf118a45d86d04185d821685c616c5f7095c74089eef9df648138a86f100d241aa0a0ea7fccc1741dd2d3a499c4790868f58235775490c10aab4efe14819b9cf7eed929f67f3b2bc4868bb67414edf8a35306175f3726452b029514eea1404e2a6872551cdc57e6faf98052abd2b571341e5383a3d5f28e679ed2c56de142141bf537b953c393216168d3cca7a99a2b623bfc11e3d98edae26a94fb8e690198ba89ffba1b601d58e28e14607baded36d57c01f9cd7cd68c205fcbc1dc256358dde6"}}, &(0x7f0000001000)={0x0, 0x22, 0xb, {[@local=@item_4={0x3, 0x2, 0x0, "c30b164a"}, @global=@item_4={0x3, 0x1, 0xa, "aefd9b76"}, @main=@item_012={0x0, 0x0, 0x8}]}}, &(0x7f0000001040)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7fff, 0x7, 0x1, {0x22, 0x39e}}}}, &(0x7f0000001280)={0x2c, &(0x7f00000010c0)={0x0, 0xa, 0x1d, "9943a8bf32e1bfd6284e287fd04d71f2f7b40b04b50ed955a59e3ecff1"}, &(0x7f0000001100)={0x0, 0xa, 0x1, 0xf9}, &(0x7f0000001140)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000001180)={0x20, 0x1, 0x9d, "44ef509f1cf45c2300612fd0459ac42fe5a818881259adbdc2839d59c99a6dc76259d78e37eebf371aff4bb896d993a3a877a70471df547c1dcabb7bd07666de91902e3e41527d0691d1be3cbcddd0c9cf7e0a054d6bdd40de60a86cdc6443d3921dd755839492c3cf2eebe1388c1ed620a4c81491485adada6bf5a3bbc5df6714364af633c3cace6d1723cb95b9cbc1872cbb28131d8892d4729cf0f8"}, &(0x7f0000001240)={0x20, 0x3, 0x1, 0x6}}) syz_usb_control_io$hid(r1, &(0x7f00000013c0)={0x24, &(0x7f00000012c0)={0x40, 0x1, 0x2, {0x2, 0x23}}, &(0x7f0000001300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3009}}, &(0x7f0000001340)={0x0, 0x22, 0x1e, {[@global=@item_4={0x3, 0x1, 0x4, "a31c88f1"}, @local=@item_4={0x3, 0x2, 0x8, "7a86c960"}, @global=@item_4={0x3, 0x1, 0x7, "5f27d985"}, @local=@item_012={0x1, 0x2, 0x1, "e9"}, @main=@item_4={0x3, 0x0, 0xc, "f5f3db0a"}, @global=@item_4={0x3, 0x1, 0x4, "de2c12ef"}, @main=@item_012={0x2, 0x0, 0xa, "8e2f"}]}}, &(0x7f0000001380)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x5, 0x1, {0x22, 0x295}}}}, &(0x7f0000001680)={0x2c, &(0x7f0000001400)={0x40, 0x0, 0x100, "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"}, &(0x7f0000001540)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000001580)={0x0, 0x8, 0x1, 0xa7}, &(0x7f00000015c0)={0x20, 0x1, 0x58, "ca719ca3cd48616ad96beac1f66dc7e06d12ff4f021b3a072ea97e05674d27619569b30d5f029825e8fcecba08372b9212b7e8b837cf97eb7318c4f09550f0e7ff4a52e46d73f0104da9f22ac7271d91fa5b681a6ff221f4"}, &(0x7f0000001640)={0x20, 0x3, 0x1}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000016c0)={0x0, 0x0}, &(0x7f0000001700)=0xc) prctl$PR_SET_TSC(0x1a, 0x1) prctl$PR_SET_TSC(0x1a, 0x1) prctl$PR_SET_TSC(0x1a, 0x1) syz_open_dev$I2C(&(0x7f0000001740), 0x7, 0x100) syz_usb_control_io$hid(r2, &(0x7f0000001940)={0x24, &(0x7f0000001780)={0x0, 0x4, 0xbf, {0xbf, 0x22, "0b0959d1381e4148a739c6d11e196a3af42585809efe023fb93fb270d752338f3f0075ce09b8e7e46bb287e00cac2a4fc322623eb37aa9fb956120a7c1143eb712b80e02babd51d18863a1f8586e30678f7fd72b80565c86520d637ea60c7f024a15643b4474c9f8f193970be2a583113794d7a5876a80f747875450b4483a4368ad9f6d2e6863060d2a187b458f46f49be4a97d16604a707b4a900c1d379ca0c1d1d9c701d82cb37e24b8dda26849b9cfec8078b1c5c0e63e14c0c02f"}}, &(0x7f0000001880)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40e}}, &(0x7f00000018c0)={0x0, 0x22, 0xd, {[@main=@item_4={0x3, 0x0, 0xb, "4e85ed43"}, @global=@item_4={0x3, 0x1, 0xb, "e2781482"}, @local=@item_012={0x2, 0x2, 0x8, "8f2d"}]}}, &(0x7f0000001900)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x5, 0x1, {0x22, 0x277}}}}, &(0x7f0000001c00)={0x2c, &(0x7f0000001980)={0x0, 0x18, 0xcb, "527fe6526aed24a222def829b5fdd5ade695e3ec8949fca756a370760e5b296f752608bcd40bf6173d629e78fbc3aa6a487aebd2e3689b6c38618c60438f157bbe2a90c01e0a6b40074adacffcf1f057657ae4ae0ced995d7e973781908cf71c39f31438446b73b26c041684cdb2b1b8581a7ad5a29f7f9111c0ed8745a0bb3d6927130691cd52747963739e2ecaec869b53eb45b72ceac1e4451456814a0c66e81270792f36eba3dd0ce0f6ab57311bcb4c19730c1b5618d185a660adb17bee764053d2e7d5f750f5af7d"}, &(0x7f0000001a80)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000001ac0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000001b00)={0x20, 0x1, 0xaf, "acc400eeb3b6666edcd37c9dcd8e9a65fd1edd4577669c99cfc1dbfd56fc42f2ac38c7359c5ce9e55e6891f5a45252e029483b34018ab204cd70751163f150d66117eca82c9b50ad291b120121e82bbd4d655936519d95c6f2890ee56f73aa58303e147f8f27876ca68f94de0d451ff43513c1b95a71254c2375e016749ad883f91045992a1d3799fe1947e2bfe2fe363683cf4636ceaaca676bd3ab73273a0ece6bb21e634039272700f162a2f44f"}, &(0x7f0000001bc0)={0x20, 0x3, 0x1}}) prctl$PR_SET_TSC(0x1a, 0x0) setresuid(r3, r3, r3) getdents(0xffffffffffffff9c, &(0x7f0000001c40), 0x0) r4 = syz_usb_connect$cdc_ncm(0x2, 0xac, &(0x7f0000001c80)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x2, 0x1, 0x3, 0xb0, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "4902"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x6b3f, 0xdfb, 0x6}, {0x6, 0x24, 0x1a, 0x7}, [@country_functional={0x10, 0x24, 0x7, 0xf, 0x5, [0x8, 0xfff, 0x8, 0x282, 0x4558]}, @mdlm_detail={0x17, 0x24, 0x13, 0x0, "c4b99d39c2dcaf8661700405bf7f8faa928951"}, @obex={0x5, 0x24, 0x15, 0x3}, @acm={0x4, 0x24, 0x2, 0x9}, @mbim={0xc, 0x24, 0x1b, 0xbac, 0x8000, 0x9, 0x6, 0xff}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x21, 0x2, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0xf8, 0xc}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x80, 0x57}}}}}}}]}}, &(0x7f0000001e80)={0xa, &(0x7f0000001d40)={0xa, 0x6, 0x250, 0x5, 0x8, 0x9, 0x10, 0x3}, 0x26, &(0x7f0000001d80)={0x5, 0xf, 0x26, 0x3, [@ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0xfd, 0x2, 0x842, 0x1e00, 0x1ff, [0xf, 0xff000f]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x6, 0x10, 0xff}]}, 0x3, [{0x4, &(0x7f0000001dc0)=@lang_id={0x4, 0x3, 0x40b}}, {0x3f, &(0x7f0000001e00)=@string={0x3f, 0x3, "08fa1b4677fa5f1e1d2134e83a44bedf24e82c22fd748828f419259f128ed06d2b3f344836d76321a1da9ec8fedc5023c9f0ae58d15e932ef6f11e11a5"}}, {0x4, &(0x7f0000001e40)=@lang_id={0x4, 0x3, 0x40b}}]}) syz_usb_control_io$cdc_ncm(r4, &(0x7f0000001f40)={0x14, &(0x7f0000001ec0)={0x0, 0xa, 0x8, {0x8, 0x3, "d8575b5fbb0b"}}, &(0x7f0000001f00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002200)={0x44, &(0x7f0000001f80)={0x20, 0x10, 0xb5, "80d8460ad094df0b2814ec09d026d49cda0654adc2c119a4b320453191e8b94173127e10ce486a22342493f10b04483afe1e387d20f2ea0267241be8d2ea1d66cb043234e55d651f34ccdc0deadd1fa000e408ad686f5a82f47b8fb54663ea4f427f4cfc2be638c10f99993cd2743e5b39991bc276d36785a1d198f4665f4cfaf4db1dd1117db9ee94b034772642eb54943fe059003f856733125a9fb93d84fe388148a57bd252ad821efe4aae6632cf20d8683fde"}, &(0x7f0000002040)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000002080)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000020c0)={0x20, 0x80, 0x1c, {0x7, 0x6, 0x1, 0x3, 0x82, 0x0, 0x5, 0x81, 0x8, 0xd090, 0xc20, 0x3}}, &(0x7f0000002100)={0x20, 0x85, 0x4, 0x3}, &(0x7f0000002140)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000002180)={0x20, 0x87, 0x2, 0x1000}, &(0x7f00000021c0)={0x20, 0x89, 0x2, 0x1}}) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000002280), 0x400080, 0x0) read$usbmon(r5, &(0x7f00000022c0)=""/127, 0x7f) prctl$PR_SET_TSC(0x1a, 0x1) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002400)={r5, &(0x7f0000002340)="1c", &(0x7f0000002380)=""/75}, 0x20) add_key$user(&(0x7f0000002440), &(0x7f0000002480)={'syz', 0x2}, &(0x7f00000024c0)="b5672418d30660f4cc415129c514a60e05b65bcb9e3f240fa54935e5dfb03a409c5343e02ac536d79ce5f702c397af308ff93629983475e2f8c9d2146aa09e4b8afdc893bcf4e507b4c487c6b90fae2882f1394c7f0e60b264a16a17dd81e04ba7c88ec852ff88c225f12cd3d3e89365376e210020d7bf77ee0e60aed72c238e9b7202ba2f53231890d73597faf9abf67bef69e540d904b4b4275338787a5ba8797746dee00a9fa9d938ed54e1", 0xad, 0xfffffffffffffffc) prctl$PR_SET_TSC(0x1a, 0x1) prctl$PR_SET_TSC(0x1a, 0x3) getsockname$packet(0xffffffffffffffff, &(0x7f0000002580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000025c0)=0x14) 21.013358834s ago: executing program 0 (id=1): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000040)={0x1d, r2}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x0, 0xe6efb000, 0x1000, &(0x7f0000fe8000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000000)={0x3}) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r4, 0x4068aea3, &(0x7f00000000c0)) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000040)={[{0x10, 0x3, 0x4, 0xc, 0x3, 0xfa, 0xfe, 0x3, 0x2, 0x1, 0x10, 0xf8, 0x5}, {0x6, 0x9, 0x3, 0xd, 0xae, 0x5, 0x2, 0xc, 0x1, 0x40, 0x6, 0x17, 0x3c}, {0xa20000, 0x7, 0x4, 0x7, 0x5, 0x77, 0x1, 0x9, 0x2, 0x5, 0x8, 0x54, 0x5c5}], 0xd6}) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8000000190001000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000100000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffff000000000101000000000000"], 0xb8}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r8, 0x4068aea3, &(0x7f0000000400)) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1e0000000400000006000000d200000001000000", @ANYRES32=r0, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000005fd90500000000000000000000000000000064bbc2a08ed9d0d9ff2c816b1696f6954efef8a427c118c64de8ee62c91a82e8b462f2def613cf7e031d9a3978a8f6000000000000"], 0x50) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r9, 0x0, 0x0, 0x2}, 0x20) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r7, 0x89f5, &(0x7f0000000080)={'sit0\x00', 0x0}) io_uring_setup(0x209, &(0x7f0000000500)={0x0, 0x0, 0x80, 0x2, 0x23c}) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "7e12ddc5a89047bf00"}) syz_open_pts(r10, 0x0) 20.907815459s ago: executing program 3 (id=7): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000480)={0xb0, 0x800010, 0x4a, "7e1bdad46691110200000000000000c1d08b87048a41bb4584a0d28b801d3bc5e0b839eb8982e538c3e574f58e0970d20dab01b4fdb3442a3a71d85b58806d3d849f575279944d83980f54299e5236e4086a597ab4c632169f0290925f3812f33b40d7e15bc93b3869042f86f89125c2b426306b3cc614800e9771cd376fb06d25ada1a4e52d4260daa79a8b039d4fcac88906ded92e7c049e3a185eb4217600"/176}) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r4 = dup(0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x8, 0x70bd27}, 0xffffffffffffffa7}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000010ef17096000000000000109022400010000000009040000010300000009210000000122050009058103000000000017"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r4, 0x5385, &(0x7f0000000380)={0xca, ""/202}) r7 = syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x14a442) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0) write$hidraw(r7, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cff", 0x45, 0x0, 0x0, 0x0) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006d000100"/20, @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x24, 0x6, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_COMPAT={0x4}, @NFTA_RULE_COMPAT={0x4}]}], {0x14}}, 0x98}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340), 0x106}}, 0x20) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340), 0x106}}, 0x20) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b40), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000000940)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20) 20.620239049s ago: executing program 0 (id=8): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0x179e1f}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRES64=0x0, @ANYRESHEX=r0], 0x20) 19.105385759s ago: executing program 4 (id=11): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x59, 0x77, 0xc, 0x40, 0x9c0, 0x203, 0xd332, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xfa, 0x10, 0xc9}}]}}]}}, 0x0) memfd_create(&(0x7f0000000180)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2>\xa1\x9c\x86x\x1c\x9f\x97\x87\xd9c\xecR\xd6\xe8\xf3Y\x121p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xb0\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\b`\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fX\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \xe2\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2t\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xaf\tC\x1cq\xaa\x92,Li\r\x95Z\x89\"\xaf]\x95\xb9b_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b\x8f\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca`<_}\'\xce\x81\xb3O\xae\xa1\xbfwcN,\xf2#\x16\xc4\xad\a&\xb1U\x83w\xd0K\xaa\xdf\x84\xe5\xe4\xdb\xa3G(\x7fv\x93\xb8m\x96\xd89Kb\xa9\x852\xb9\xcaG\x8b\x11\x16\x16\xeeI\x14\xcb\xe4\x9a\x1e\xb6^\xa3\xaa^\xdc\xcfo\xfb\xd6<\xa2\xc6\xbdj\xc4\xb1B\xf3S}\xfeI\xe2e\xec}o\xcfB\xa6\x877\'\x80\x82\t\xec\xc1&\xb8\xa9\x82&\xb8XQ8M@\xaa\x1f\vj\x9aW\xec\x92\x19\xdb^\x9d\x94\x87-&\x00/z\xa2\xd7\x01\\\t\xae~\xed\no\x1a\x9cKG^+\xc9\xe0v\xc0\x96\xc4\xcc\xb7\xdd\xdf\xf9\x01\x91\xe5\to[\x97\xbe\x110\x93\x14\xf8\x8a\x8d\xeb\t\xe7?/C\xaa\xd9\xc4\xc9\xbe\x12\xed\xb3*f\xd1J\x14\x80Iy4\xa9\xf88C\xe3', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x30, 0x2, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_QUEUE_MAXLEN={0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_PARAMS={0x9}]}, 0x30}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001a00010000000000000000008180"], 0x30}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x2, 0x6, @broadcast}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000000c0)={'wg2\x00'}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000680)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0), 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), 0x24) close(0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 17.25977208s ago: executing program 3 (id=13): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000500)={0x1, r3}) r4 = eventfd(0xfffffffe) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000002c0)={0x0, 0x0, 0x4, r4, 0xb}) r5 = dup(r2) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_PEC(r8, 0x708, 0x9) ioctl$I2C_SMBUS(r8, 0x720, &(0x7f0000000100)={0x1, 0x6, 0x1, &(0x7f00000000c0)={0x9, "d7bd8d496ed82a16bfe22d38b5ad2c23855c53a391d9bfe5b77954918f46bc0cf9"}}) r9 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r9, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x40}, 0x1c) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'batadv0\x00'}]}]}]}], {0x14, 0x10}}, 0xe4}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) pselect6(0x29, &(0x7f0000000040)={0x8}, 0x0, 0x0, 0x0, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r10, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r10, 0x84, 0x0, &(0x7f0000000100)={r11, 0x321, 0x0, 0xfffffffd}, 0x10) r12 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r12, 0xc0585609, &(0x7f0000000380)={0x40, 0x5, 0x4, 0x0, 0x4, {0x0, 0x2710}, {0x3, 0x1, 0xb6, 0x7, 0xc, 0x5, "f56976de"}, 0x1c, 0x4, {}, 0x1}) 17.248479976s ago: executing program 0 (id=14): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) socket$isdn(0x22, 0x3, 0x11) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) memfd_create(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) io_setup(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRESDEC], 0x0) preadv(r1, &(0x7f0000001880)=[{0x0}], 0x1, 0x0, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r3 = socket(0x2, 0x3, 0x6) bind$inet(r3, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x6, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r3, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000000900), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x238, 0x0, 0x720d, 0x148, 0x0, 0x148, 0x1a4, 0x240, 0x240, 0x1a4, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @remote, 0xffffffff, 0x0, 'wg1\x00', 'veth0_to_bridge\x00', {0xff}, {}, 0x84, 0x3, 0x11}, 0x0, 0x94, 0xf4, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x8}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x1e01, 0x2]}, {0xffffffffffffffff, [0x6, 0xb2cc575b459b5b33, 0x4, 0x5, 0x20], 0x6, 0x3}}}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0x12ee6d772310561e, 'bond_slave_0\x00', 'ip6gre0\x00', {0xff}, {0xff}, 0x67, 0x2, 0x40}, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x0, 0x100]}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x294) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e24, 0x8, @remote, 0x3}, 0x1c) shutdown(r0, 0x0) 17.152623328s ago: executing program 1 (id=16): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001e61e410b1134200557b0102030109021b0001000000000904000001cf28fc00"], 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x121301) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0x2, 0x7fff7ffc}]}) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000032c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000033c0)={0x0, 0x0, &(0x7f0000003380)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000054000000280001"], 0x3c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x180, r3, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x100, @mcast2, 0x1a}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @empty, 0x6}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_NODE={0xa4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "2b8cb336a33984be137ad0402c8e8e4d6b18183b26393e53da"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "6226881413349ffbba927384adbc96a9e130ef784edfd6646596e056"}}, @TIPC_NLA_NODE_ID={0xa, 0x3, "324fbcc1cc5c"}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x200}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8064}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x47ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x28}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x200408d0}, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@'], 0x7e}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x301, 0x0, 0x0, {0x24}}, 0x14}}, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') 16.755748005s ago: executing program 2 (id=17): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x14, 0x10, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x4) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x0, 0xd4, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40, 0x0, 0x0, 0x200000000000008}, {0x10001, 0xe171, 0x0, 0x0, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x43}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40005) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB]) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16.345191006s ago: executing program 2 (id=18): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000040)={0x1d, r2}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x0, 0xe6efb000, 0x1000, &(0x7f0000fe8000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000000)={0x3}) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r4, 0x4068aea3, &(0x7f00000000c0)) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000040)={[{0x10, 0x3, 0x4, 0xc, 0x3, 0xfa, 0xfe, 0x3, 0x2, 0x1, 0x10, 0xf8, 0x5}, {0x6, 0x9, 0x3, 0xd, 0xae, 0x5, 0x2, 0xc, 0x1, 0x40, 0x6, 0x17, 0x3c}, {0xa20000, 0x7, 0x4, 0x7, 0x5, 0x77, 0x1, 0x9, 0x2, 0x5, 0x8, 0x54, 0x5c5}], 0xd6}) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000340)="660f381d53b2ba6100b8c400ef66b95cef0a0000003266b9830000c066b84700000066ba000000000f30f2a60fc75add650fdabc755ac09af67f2066b98004000066b8532ebe18660f388067070f3066b9830500000f32", 0x57}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8000000190001000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000100000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffff000000000101000000000000"], 0xb8}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r8, 0x4068aea3, &(0x7f0000000400)) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1e0000000400000006000000d200000001000000", @ANYRES32=r0, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000005fd90500000000000000000000000000000064bbc2a08ed9d0d9ff2c816b1696f6954efef8a427c118c64de8ee62c91a82e8b462f2def613cf7e031d9a3978a8f6000000000000"], 0x50) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r9, 0x0, 0x0, 0x2}, 0x20) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r7, 0x89f5, &(0x7f0000000080)={'sit0\x00', 0x0}) io_uring_setup(0x209, &(0x7f0000000500)={0x0, 0x0, 0x80, 0x2, 0x23c}) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "7e12ddc5a89047bf00"}) syz_open_pts(r10, 0x0) 16.252032991s ago: executing program 3 (id=19): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/74, 0x32a000, 0x800}, 0x20) syz_usb_connect(0x0, 0x5d, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005240000000d240f0100000000000000000007241400000000042413fa042406"], 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) syz_usb_connect(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 16.035996786s ago: executing program 1 (id=20): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x40000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000140)={0x800, 0x7f, 0x0, 'queue0\x00', 0x4}) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x2, 0x4800003e, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x34, &(0x7f0000000300)=ANY=[@ANYBLOB="b40000000000000079114b000000000005000000000000009500740000000000d6f02467fe4160e96570b3e364dede27eea47a2376278b442d5bd3b2bb62e6906bdcd3dd07346213ada6c2a8cbd003c64a8909d663bf7edfa661457ea09635cb21a673f324f66e254708333fac0a39447b64f7f0b0"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff6d, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 15.943877281s ago: executing program 4 (id=21): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x40000, 0x0, {{0x22, 0x4, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x1000, 0x4, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x34, 0xc0, 0x3, 0x0, [{@multicast1, 0x5}, {@dev, 0x659}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd200}, {@private=0xfffffffd}]}, @timestamp_prespec={0x44, 0x14, 0x0, 0x3, 0x4, [{@multicast2, 0x3}, {@private=0xa010101}]}, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r5, 0x0, 0xf, &(0x7f0000018000)=0x1, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x1002, @empty}], 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @broadcast}], 0x10) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000380)={0x0, 0xa0, "085bd6f5e0ff83fe330f50adef8892a62e4f743957a6c89850c12bf9e70caeb90f0210d8e819ee54ee5c73c98a32716c53a6e1351b92cb0a5db899c193efa4a876d82ba69af5e45fbe02813a29c8e5fc6b4ae94d335ca05a502a48c93e053d6836f49d25513f3c3e9ebb6d6b767e8c8b425a6dc5b36357db0ef17ecef070714dfd02586e6707a1d1d69fe297cc177fd6867237acac722bdc2aa20b9deddc075a"}, &(0x7f00000000c0)=0xa8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={r6, 0x3}, 0x8) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8}]}, 0x34}}, 0x0) 15.899169068s ago: executing program 2 (id=22): socket$packet(0x11, 0x2, 0x300) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x4) umount2(&(0x7f0000000000)='./file0\x00', 0xa) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x101000) syz_open_dev$video4linux(&(0x7f00000000c0), 0x7, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/wakeup_count', 0x2c0, 0x102) openat$vnet(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x4, 0xe7142) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'ip6gretap0\x00', &(0x7f0000000080)=@ethtool_rxnfc={0x2f, 0x0, 0x0, {0x0, @sctp_ip4_spec={@loopback, @empty}, {0x0, @random="496e8a70920f"}, @esp_ip6_spec={@mcast1, @private0}, {0x0, @random="19dd7cf0e8b6"}}}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x64, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x1, 0x0, 0x0, {[@sack={0x5, 0x2}, @generic={0x2, 0x2}]}}}}}}}, 0x0) write$P9_RREADDIR(r1, &(0x7f00000001c0)={0xc5, 0x29, 0x1, {0x1, [{{0x1, 0x2}, 0x81, 0x94, 0x7, './file0'}, {{0x10, 0x401, 0x5}, 0x80, 0xf, 0x7, './file0'}, {{0x10}, 0x10, 0x7, 0x7, './file0'}, {{0x20, 0x4, 0x7}, 0x300000000000000, 0x0, 0x7, './file0'}, {{0x80, 0x2, 0x8}, 0x5f54, 0x2, 0x7, './file0'}, {{0x10, 0x3, 0x3}, 0x6, 0x80, 0x7, './file0'}]}}, 0xc5) pselect6(0x40, &(0x7f0000000100)={0x0, 0x10000000, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xdd}, 0x0, &(0x7f0000000080)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x0) 15.871345682s ago: executing program 1 (id=23): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x44, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_COUNTERS={0x4}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r2, 0x211, 0x0, 0x0, {}, [@FOU_ATTR_PEER_PORT={0x6}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}]}, 0x24}}, 0x0) r4 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x5, 0xfffffffd}, 0x54) write(r4, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff02000000000000", 0x1e5) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYRES64=r1, @ANYRESHEX=r0, @ANYRES8=r0], 0x54}}, 0x4000000) 15.514952984s ago: executing program 1 (id=24): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0xffffff7f, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x2131c100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r2, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000083667d1040206402d14e010203010902"], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 14.861931865s ago: executing program 2 (id=25): r0 = socket$netlink(0x10, 0x3, 0x6) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="480000001500190a20ffff7fffffff5602113e850e1de0974881030491720000de213ee23ffbf510040041feff5aff2b0000000000000700"/68, 0x44}, {&(0x7f0000000080)="c1130389", 0x4}], 0x2) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) r2 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000300), 0x0, 0x0, 0x0, r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'geneve1\x00'}) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) futex(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ptrace(0x10, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, &(0x7f0000000080)=0x1a43) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f00000005c0), 0x10) splice(r6, 0x0, r7, 0x0, 0x7, 0x0) readv(r4, &(0x7f00000013c0)=[{&(0x7f000000a400)=""/4092, 0xffc}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="c801000010001100"/20, @ANYRES32, @ANYBLOB="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"], 0x1c8}}, 0x0) request_key(&(0x7f0000000540)='id_legacy\x00', &(0x7f0000000580)={'syz', 0x2}, &(0x7f00000005c0)='\x00', 0x0) request_key(&(0x7f0000000540)='id_legacy\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0xffffffffffffffff) 9.002314229s ago: executing program 2 (id=26): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001700)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000003100)=""/4096, 0x101d0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000004100)=""/4096, 0x300}], 0xf, 0x0, 0x500}}], 0x3, 0x58ca02a0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000100)={0xa510}, 0x0) 8.998771117s ago: executing program 4 (id=27): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @private=0xa010100}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0x7fffffff}]]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = memfd_secret(0x0) mmap$snddsp_status(&(0x7f0000ffa000/0x4000)=nil, 0x1000, 0x200000d, 0x12, r4, 0x82000000) socket$inet(0x2, 0x4000000000000001, 0x0) (async) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r5, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) (async) bind$inet(r5, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000080)=0x300, 0x4) socket$rds(0x15, 0x5, 0x0) (async) socket$rds(0x15, 0x5, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r6, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000300)) socket$packet(0x11, 0x3, 0x300) (async) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000003c0)=""/75, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000003c0)=""/75, 0x0}) r8 = dup(r7) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000000)={0x0, r8}) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x200}) (async) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x200}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, &(0x7f0000000680)={0xff}, 0x0, 0x0) (async) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, &(0x7f0000000680)={0xff}, 0x0, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(r8, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x88, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x4}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4008050}, 0x85) preadv(r6, &(0x7f0000000340)=[{&(0x7f00000006c0)=""/185, 0xb9}, {&(0x7f0000000780)=""/164, 0xa4}, {&(0x7f0000000840)=""/111, 0x6f}, {&(0x7f00000008c0)=""/119, 0x77}, {&(0x7f0000000940)=""/200, 0xc8}, {&(0x7f00000002c0)=""/24, 0x18}], 0x6, 0xc, 0x3ffc0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r9, 0xc05064a7, &(0x7f0000000040)={&(0x7f0000002200)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, r10}) socket$nl_generic(0x10, 0x3, 0x10) 8.516157516s ago: executing program 3 (id=28): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000001740)=[{&(0x7f0000001800)="c0b3f641e93358db730fa114ef6fd9c6705352e1b8dfb95390d3ebb8cd73712ed6131a236b661abbe3038b46fa6f7c0f1e5c157cc3b5089582c0ef2a0fb81c4b6d478f7be370faea02f562a6fdead5a874b85495136d707a1cef985f3a56aeab38fa694e94d9e726bc11b61f00000000000000ed469d85cbf48688f6f8b4cd643a32a94ab6ec8efc569356a30a982aeae44ce595e461a425b08c032a84b79b477b410627d19c42cbb08d", 0xaa}, {&(0x7f0000000100)="83237bff00001d39afc62ceefc8936f299eecf", 0x1a}, {&(0x7f0000000180), 0x13}, {&(0x7f00000001c0)="55c1ac6a33bcabcbf05b5674529841f58350038a066a02a6bc9d8c5eecfdbde63fe0ae2f71fe751ba7f269ebe88062259a37084b213e218b5a144b53a81e7cc49a22a19158853dbfabb1be2c6ab892f6083dc94e6a6710e73b7f4d1e2c52f8fe322e59d8020f1b81ca806ad1d02ffb2e82e69cf0a80a05a65dead7c62f7974b805c23351c9b7c340b4b064e60b5a4efdc0833b928d4530831c03a39c7727a1a29aec7354d1c5e9a5aa8af60670eee565ae446b989f81ea74a578a387aec81be9a2fdc25f94c171a3874be3e051956f638cf1f01811ddb63de509efb4008cdeb5cb0644c7cb2c", 0xfd82}, {&(0x7f0000000700)="820566a0e5038adaeacf19e7470234a058fa1a347381c790661dde230dc4150ae23ec76b77396270f45644f86e8d09edab75a26acb1e6209b5be5b40d09ba299b5c626c28448e5f04342e71e03d98aab89bf23721c77e3d1d2553eef61a61dc700000000000010bc27d1586457875f2878644dc8f4c8d47c9edc1bdb46392e3b52895de73f4d8808e1bd71ed7a571dc4f41465e8ad35c2ed5a79d701f8a8e492", 0xa0}, {&(0x7f0000000380)="c77d467908bfdef41403f806aa8abd7163a810e03642f3dea6321a7b21b738ed132db614140e7dc513a4f44adab6b69a9208bc55cf77e018bf5821baa9521cedb29a6d43c72b87ca91a291", 0x4b}, {&(0x7f0000000400)="172aab8be48dffb8c13bbe5b7830bf9c344a13084e2fe8f6dd2605827df7b1ac7b2450cbf05c35253ae54cd33901f51668d716b66c13f6ba284ef2cf01d7bbf939b1d4cab10a1aa86185486095621eae55893ba69c943d96f0d6f95a051299a481dd32a52809b340ef6368464019b9cf147d8af9f1db8c905526aafec152c725543f934aa63e25c407322d061317ca63986f9fbad6810113789ed7701e8ef0e7bdbd1a930b3ee45e55f0092f6fdb6e8e501ad0ea53f16079b866d5bedee8c5408e434a3d98ed6b71aac6756428923db3d6dfaf85336bf481969bfd22f7b49ec349907250ed61c5d23be87ea69afd88a5052001a3eff7d51d950c6ab7d98b8b7981171c34810a3470368d70ef8c68b7147a8be2b04e17dfc96f857b730cdd16cbf68247d48b89c2f53c0da92286209329d41dc6eab764b107ea248af65e2f0866054d3dc4fbd8ab953c12c39847a55f6ac1559b77c87469af69d228d0ac7942d2aee268f072a2d805621da445d3b8256f6072e6681e3da1364555034d26c9f3a39e2d65d1fb267ce48a705a1d7f88e32e433263a00ebb490703cf9da5407587bebadd680e47e06fad881a08a28f8009a649c6a474b9cec32d4446344c168ede4718fca4900ec60ed75d8a382bfccd496ce508b2404f65e04c2ed297fcc450", 0x1de}], 0x7, 0x0) 8.464535573s ago: executing program 3 (id=29): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="18050000000000000000000000000000851000000000000018100000", @ANYRES32, @ANYBLOB="00000dc33458e12adf06bab7469154d700000700cabf43db3113cd790db4503bfa2e6715c018c0189f3b77d1d0fd8c0d5e87ae64454be1b668d898335107a084636a5bf63d48a234c9fe9a8b8e4990da3cf5e5c15985db71adcfdef265f231c61d6d3299944b671a69ba83f906586d540ff02a384177764676d4c205a7f3e10a51026190daf5ce7769cd5842e347c2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000300)={0xe0001}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, &(0x7f00000000c0)="f20f239ac4c285adb00c0000000f01c9660f73fd02362e260f01cf0f063e0f69d82667360f38cbf028751e3e0fc7a89db7d3f8", 0x33}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff1}}}, 0x24}}, 0x810) r5 = socket$can_raw(0x1d, 0x3, 0x1) unshare(0x22020400) setsockopt$sock_attach_bpf(r5, 0x10d, 0xa, 0x0, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000d507df08c410448200dc0102030109021200010000000009048000000300"], 0x0) ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, &(0x7f00000000c0)) read$FUSE(0xffffffffffffffff, &(0x7f0000001c00)={0x2020}, 0x2020) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)=""/142, 0x8e}], 0x1, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x6) sendmsg$netlink(r7, &(0x7f0000006f40)={0x0, 0x0, &(0x7f0000004e80)=[{&(0x7f00000010c0)={0x10, 0x15, 0x7601, 0x3}, 0x10}], 0x1}, 0x0) read(0xffffffffffffffff, &(0x7f0000001b00)=""/194, 0xc2) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000380)={0x48, 0x2, r8}) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB='@`\x00\b\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0xffffff1c, &(0x7f0000000a80)=[{&(0x7f0000000500)="87d2a9f5c1e1c9958d6dbc7bc1e6522c925d6f4d4d640d0cf40948f344b8c5847d2bc18f07437fda658400fab6d53ee5a2cc8af4bed64edefa7de65770a4469278dcb509dc9f5d8b0939d36d18b94746a09674ab8ea3e889010100004d8b04701173945d0498a19e", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3000000}, 0x1c, &(0x7f0000000980)=[{&(0x7f0000000580)="caa49ce0bfe9271501fcc2b1f90029648d7a4cf0ed0e4d5ca6cba365457639358d793d786ccd821eb16f1bf0abbb3ca624e6fe26da820920c3591c1f962583f3a8293c0fd025f864ff17a3dc61d711ff2aedd1c911c029b5cf7ee62b3913faf38dad2f76ada128e9fd650515717a783fc124f8b44228e77cccbfdc8bd71bbca520390dcef2814f96c7e98fce39b5edf7725a1f0625cc9c53954b5ca2aac6caafb969c72f5c9b06b62f02149e88a6ba1024523e9de3df85c500ef967b1010d75e9c7a7ba68297e7b77e4bb5811d8dda620f839562a2d123c9040b17039d75", 0x1}], 0x1}}], 0x2, 0x24008005) shutdown(r0, 0x1) 8.379396966s ago: executing program 1 (id=30): socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x400, 0xfffffffe}) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) kcmp(0x0, r1, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) 7.267882139s ago: executing program 4 (id=31): sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007ce7c810d804300a47ce0102030109022400010000000009040000020de67a0009050402ecffffffff08058102", @ANYRES64], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) pwritev2(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000001c0)=0x3, 0x4) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000f00)=@deltfilter={0xd20, 0x2d, 0x800, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x8}, {0x0, 0xb}, {0x9, 0xffe0}}, [@f_rsvp6={{0xa}, {0xcf0, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0xb, 0x8}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x0, 0x0, 0x7fff}, {0x3, 0xfab, 0x8001}, 0x73, 0x91, 0xdc}}, @TCA_RSVP_ACT={0x4}, @TCA_RSVP_POLICE={0xc3c, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x8, 0xfffffff6, 0x5, 0x1, 0x8, 0x1, 0x6, 0xa, 0x14000, 0x9, 0x2, 0x17d4, 0x93, 0x0, 0x3, 0xc, 0xfffffff9, 0x8, 0x8, 0xffffffff, 0x5, 0x8, 0x891, 0x9, 0x9, 0x8, 0xffffff04, 0x7, 0x100, 0xa, 0x7, 0x2, 0x80000000, 0x5, 0x6, 0x8, 0xa25, 0x8, 0x7, 0x0, 0x101, 0x17, 0x3, 0x6, 0x6, 0xa, 0x8, 0x2, 0x1, 0x7, 0x1, 0x2, 0x91dc, 0x8, 0x0, 0x2, 0x80000001, 0x1, 0x4, 0x8, 0x7, 0xef99, 0xb7bd, 0x7, 0xfffffffc, 0x8001, 0x40, 0xd31a, 0xfffffffe, 0x410, 0x9, 0x6, 0x1, 0x9a7, 0x7, 0x273c7bd6, 0xffff, 0x7, 0x10001, 0xc, 0x9, 0x1, 0x9, 0xff800, 0x7fffffff, 0x80, 0x8, 0x3800, 0xffff7fff, 0x6, 0x4b2, 0x664, 0x7, 0x6, 0x8, 0x1, 0x2, 0x4, 0x4, 0x7fff, 0x2, 0x2, 0x12f, 0xff, 0x7, 0x4, 0xfff, 0xffffff59, 0x9, 0x3, 0xfffffffc, 0x2, 0x8, 0xfffffffd, 0x240000, 0x6, 0xfffff2af, 0x8, 0x4, 0x5, 0x2, 0xffffffc0, 0x3, 0x6, 0x6, 0x80000000, 0x3, 0x620d9452, 0x9, 0x5, 0x7, 0x6, 0x7ff, 0x9, 0x8, 0xa0000, 0x5, 0x1b, 0x3, 0x1, 0xfffffffd, 0x3, 0x6, 0xdde, 0x800, 0x1d89c67f, 0x2, 0x8, 0x7c0, 0x5, 0x485, 0xed1, 0x4, 0x0, 0x3, 0x1, 0x7, 0x9, 0xffff7fff, 0xff, 0x7, 0x80000001, 0x6, 0xbd32, 0xf, 0x8, 0x0, 0x9, 0x9, 0xeed, 0x4, 0x80000001, 0xffffffff, 0x7fffffff, 0x10000005, 0x10001, 0x1, 0x200, 0x2, 0x3, 0x2, 0x9, 0x5a26, 0x8000, 0x33, 0x5, 0x1, 0x3d, 0x5, 0x2, 0xfffffffe, 0x8001, 0x7, 0x3, 0x9, 0x400, 0x3, 0x8, 0x9, 0x9, 0xe3d6, 0x227e, 0x6f5, 0x2, 0x6, 0x1, 0x8001, 0x8, 0x9, 0x27d0, 0x10, 0x5, 0xe960, 0x9, 0x3, 0x3, 0x401, 0x9b69, 0xa0d41f9, 0x7fffffff, 0x100, 0x400, 0x3, 0xffffffff, 0x40, 0xb0e, 0x56c, 0xfffffffd, 0x31, 0x8, 0x40, 0x4, 0x1, 0x5, 0x9, 0x4f3, 0x10001, 0x9, 0x7, 0x0, 0x1f, 0x7fff, 0x80, 0x3c, 0x5, 0x4, 0xa76, 0x4, 0x1000, 0xcf5, 0x1, 0x9, 0x1, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8f, 0x5, 0xc1ca, 0xffffb0fa, 0x1, 0x7, 0x8001, 0x6, 0x7, 0x800, 0x7, 0x3, 0x9, 0x5, 0x5, 0x0, 0x7, 0xe, 0x5, 0x9, 0x80, 0x5, 0x7, 0x0, 0x1, 0x7fee, 0x2, 0x10001, 0x8, 0x7, 0x7, 0x90000000, 0x9, 0x10000, 0x8, 0x4933b6c8, 0xffffff8e, 0xa, 0x5, 0x0, 0x100, 0x2, 0x8001, 0x9, 0xd, 0x3ff, 0x0, 0x80000001, 0x2, 0x1, 0x0, 0x1, 0xffffffff, 0x9, 0x6, 0x84, 0xa, 0x0, 0x7, 0xe, 0x4, 0x2, 0x0, 0x3, 0x9, 0x2, 0x800, 0x3, 0xfff, 0x1, 0xda3, 0x2, 0x7, 0x55f, 0x80000000, 0xffff, 0x9, 0x81, 0x1, 0x1, 0xb, 0x2, 0x8, 0x1000, 0x80000000, 0xfffffff8, 0xc, 0x0, 0xffffff01, 0x3, 0x4, 0x1, 0x5, 0x200, 0xa0d, 0x2, 0xfffff001, 0x1, 0x8001, 0x3, 0xfffeffff, 0x4, 0x0, 0x8001, 0x80, 0x80000001, 0x4, 0x7, 0x45, 0x0, 0x0, 0x0, 0x5626, 0x902, 0x8, 0x8, 0x1, 0x5f, 0xe, 0x81, 0x10, 0x3, 0xfd3, 0x3, 0x7, 0x4, 0x9, 0x9, 0x7, 0x6, 0x6, 0x3e4e, 0xf, 0x4, 0x3, 0x5, 0x21, 0x1, 0x3ff, 0x8, 0x6, 0x9, 0x2, 0x7, 0x80000000, 0xffff3775, 0x1, 0x2, 0x5, 0x7ff, 0x1, 0x3, 0x1000, 0xf, 0x0, 0x6, 0x0, 0x1, 0x1, 0x5b, 0xffffffff, 0x8, 0xa881, 0x4, 0x1, 0xfe, 0x2, 0x4, 0xc, 0xfffffff9, 0x3, 0xffff, 0x7, 0xffffffbd, 0xffff, 0x3, 0x7, 0x10000, 0xa, 0x81, 0x4, 0x100, 0x8, 0x3104, 0xd, 0x401, 0x67fb4ff2, 0x9, 0x7, 0xb, 0x8, 0xb61, 0x5, 0x8, 0x3, 0x1baa, 0x2, 0x6, 0x9, 0x2, 0x400, 0x1000, 0x1, 0x620, 0x9, 0x8, 0xff, 0x8, 0x0, 0x7, 0xb5, 0x9, 0x80000001, 0x101, 0x7, 0x1000, 0x1, 0x40, 0x224, 0xfca, 0xe, 0x9, 0x7, 0x8, 0xb, 0x80, 0x7, 0x2, 0x0, 0xa, 0x1, 0xfff, 0x5, 0x7fff, 0x4, 0x3, 0xfffffff8, 0x9, 0x7ff, 0x124, 0x7, 0x5, 0x1, 0x0, 0x4, 0x8, 0x401, 0x1, 0x9, 0x1, 0x7, 0x9, 0x9054, 0x2, 0x8, 0x7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x5, 0x2, 0x3, 0xe, 0x3, 0x8, 0x5, 0x1, 0x8001, 0x2, 0x9, 0x2, 0x7, 0xeefa, 0x0, 0x5, 0x0, 0x3, 0x10001, 0x0, 0x0, 0xffffffec, 0x9, 0x3ff, 0x4, 0xf1b4, 0x60, 0x0, 0x2, 0x991, 0xfffffc00, 0x5, 0xff9, 0x1, 0x27ec, 0x8cf, 0x80000000, 0x9, 0x34cc1300, 0x7, 0x8, 0x8, 0x6, 0x4, 0x91, 0x800, 0x1b83, 0x8, 0x6, 0x2, 0x1, 0xed25, 0xfffffffb, 0xb44, 0x721, 0x0, 0x8, 0x200, 0xfffffffb, 0xffffffff, 0x3, 0x9, 0xffff, 0x5, 0x9, 0x113e, 0x0, 0x3ff, 0x10001, 0x0, 0x7, 0x6, 0x62d, 0x2, 0x206, 0x0, 0xd, 0x3, 0x6, 0xffffff61, 0x82cf, 0x7, 0x3f80000, 0xfffffffe, 0x8, 0x1, 0x9, 0x6, 0xfff, 0xd, 0x80000000, 0x6, 0x2, 0x1, 0x5, 0x8, 0x8, 0x5, 0xd, 0xf, 0x6, 0xb, 0x227d, 0x4, 0xc1, 0x9268, 0xe, 0x8, 0x23, 0x1, 0xa, 0x1, 0xa6, 0xfffffb1d, 0x9, 0x0, 0x5, 0x2, 0x5b, 0xd, 0x1, 0x16efc85b, 0xc, 0x8, 0x11, 0x3, 0x3, 0x3, 0x5, 0x10000, 0x7, 0x7, 0x2, 0x6, 0x10000, 0x1, 0x9, 0x2, 0x5, 0x4, 0x43e, 0x27, 0x51c, 0x20000003, 0x1, 0x3, 0x1, 0x400, 0x20000, 0x3, 0x6, 0x3, 0x1, 0xd7400000, 0x1, 0x3c22, 0x80000000, 0x3, 0xa, 0x7d03, 0x3, 0x968, 0x6, 0x9, 0xb744, 0xff, 0xe, 0x7, 0xbd, 0xfffffffb, 0x6, 0x4, 0x8000, 0xffff, 0x1, 0x19d5, 0x54, 0x10, 0x7fff, 0x6, 0x4, 0x200, 0x80000000, 0xff, 0x8, 0x3, 0x9, 0x1, 0x6, 0x1, 0xeace, 0x3, 0x2a, 0x1, 0x2, 0x28, 0x7fffffff, 0x7, 0x5, 0x80000000, 0x100, 0x2, 0x3, 0x6d, 0x10, 0x7, 0x7, 0x80, 0xf, 0x7f, 0xa0000, 0x5c, 0x5, 0x401, 0x5, 0x8, 0x3, 0x1, 0x7f, 0xa3, 0x5f7, 0x5, 0x4, 0x8, 0x8, 0xd6, 0x13, 0x7, 0x5, 0x9, 0x94f, 0x1, 0x2, 0x3, 0x1000, 0x3, 0x8, 0xe, 0x0, 0x10001, 0x8, 0x1, 0x80, 0x5, 0x4, 0x1, 0x1, 0x7, 0x25, 0x1ff, 0x9, 0xda84, 0x6, 0x4, 0xfffffffa]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x888}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xc}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffffa}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}]}, @TCA_RSVP_ACT={0x84, 0x6, [@m_pedit={0x80, 0x1b, 0x0, 0x0, {{0xa}, {0x4}, {0x51, 0x6, "2910ac64666659360637ae628bda538a62c976fe5bc2f26306a32f44623ccecac8105d55b87d9def9371d39dd0a543fbceb6d8f20661629cb65a17c495b1fc9f4b6f97179bb53e0f32298309ea"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xd20}}, 0x4000000) 4.931118382s ago: executing program 4 (id=33): socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1f, 0x4, 0x0, 0x0, 0x7c, 0x2000, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x4, 0x0, 0x0, 0x9}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x658}, {@broadcast}, {@remote, 0x96}, {@private=0xa010100}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x13, 0x0, [@remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) write$uinput_user_dev(r2, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, 0x45c) 1.569871143s ago: executing program 2 (id=34): socket$alg(0x26, 0x5, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x2, 0x300) socket(0x10, 0x803, 0x0) socket(0x1, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000001100)={0x1478, 0x3a, 0x8, 0x70bd2c, 0x25dfdbfc, {0x1e}, [@nested={0x1317, 0x58, 0x0, 0x1, [@generic="759ab59b911f2140a1ed45846425776d1f78fb55929e3dd795ae828f9153e953b4de7caaff9800335d06356e12be60413854b4bb9cc85df5e84607819e948ae8b6c05b115061258efd754c110d789785d09d203f26f0407a1f94edd4cb63c80e298c63bbbe41f226ac4f1960b6705cea7bb385b8dbb4d52317ea48c0552afcac70ee17741a322eb24616f924b166a0f9c1d0ac286dc17c3a680152be7403fca2d1b20195a0c822be466ca60fb59cbbacceada5e5b093b5ff6475ef993025e0a514001e0995ba6fdaa5f9d8111e52f3cc28868ff57e4196c740916491a95369a32e53d7b587fd4819b1da2a8b37643ea129fb", @generic="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", @typed={0x8, 0x51, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic="821d4afea2f6fb3b47b6bba72d547fb3846ff5da99dfe8f0be8bdce95e9cd1a87d1808f331", @typed={0x1c, 0x21, 0x0, 0x0, @str='/dev/infiniband/rdma_cm\x00'}, @generic="f0fbdf11db4ab9bc6ed60603bcfc3da67abc48a872120005e9ff88f299dc77f5560d340a380889c94e469aa75125351ef6420ec61da2c507a1ad870cf601450798084902fe1e01dc0de92ecbde8612a9f9d4308554e05cc4deed60d3423c5f32b025d40e40f3575c9530e8d1e108d9b85afb1107dd830062c62e3ddbcf2e5271ec4dce8c857146b1cc8aa9bfbb01bdab", @generic="0c9bdee444c35ecc7a0717d3672b97fd546518630a357122f8629019198658371f7d7099e9e8ba8658b8575159fc652c8bcc4de3368dc7668c87774cee2b", @generic="75a561835159fc6bcfae1d613926196d75da84287991c60a06172eee2d0e2039db62d0ff2fd8509cfb11c9fe43fa2363b67275d9344317a4f172ef250357bc1e5cd9591a6d5e36babd3f056f18b2d15fc1a1203975087218ec93081fc4b196ee3826d869d9508fd0d9bb669b099b24c22a72c7108e559892e7c04a69da6a38ed75727a28868030d5ec3015e8ccf45809817e438f955f77f77800124bd32a2ee211bdf75c98c43994979347be1ec4af73f8272795f0f108f6ce", @typed={0x8, 0xa7, 0x0, 0x0, @fd=r1}, @generic="14b18e7dda757e3da24d29118223c4c73e0eb2bd59a44ab242ca06aa78f51da4826b3e6c9f7c6a8e90c80e00af2e1644f64a2e7e7f5c0b07cbb92297a3154f90038e79125722f71629"]}, @nested={0x11d, 0x90, 0x0, 0x1, [@generic="58de4ff6d8", @typed={0xfd, 0x142, 0x0, 0x0, @binary="b8958b8ddf02bd6fb73105623ac94203d56a96b87465f0d542c27c7a48647c4e7f9c8ba8345cb43a40b6ce6e798c1521d3bde4fe4cb2cc7cf8de508d7f4cd5f780e6f25982013a3c291ee02731962c62aaa2aa2415e0ff513a64ba7b13372f2ee8fe8c84ecd229d690a4149dcb1b82842c8e1d5211d3eff66958073466ea9a8645a2336c8abaccb13d002d8bcd15be2ec84277fefef813c6555661aa0b9090c15815fce6d48b5cbeaa62ae60ca5f99662b16725565012670bfd79268e53e0a9f5f37924ad6257d3bc63a7da659ee8ff38f3d3e8bfe459668367c4d0ce17c4e7d85ac4063d0514eae37c05063bdd5fa6ddcb3a50dadf730df3f"}, @typed={0xc, 0x144, 0x0, 0x0, @u64=0x7ff}, @typed={0x4, 0xad}, @typed={0x4, 0x45}]}, @typed={0x16, 0x12e, 0x0, 0x0, @str='cpuacct.usage_sys\x00'}, @generic="3e9b6584ee0464e0baa906fe8968e11cd4"]}, 0x1478}, 0x1, 0x0, 0x0, 0x10}, 0x40) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000d00)={"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"}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r2}) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64], 0x20) 0s ago: executing program 1 (id=35): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) write(r0, &(0x7f0000000040)="3de44be7f6bab9765ac9b5da4ef36fd538865b53518abb144b0c130c759a1029c3854b", 0x23) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000400)) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x34, r3, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x34}}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000100)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005020524", @ANYRES8=r1, @ANYBLOB="05"], 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.74' (ED25519) to the list of known hosts. [ 50.894071][ T5217] cgroup: Unknown subsys name 'net' [ 50.999405][ T5217] cgroup: Unknown subsys name 'cpuset' [ 51.007161][ T5217] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.255009][ T5217] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 56.380845][ T5233] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 56.389636][ T5233] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 56.406629][ T5233] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 56.414321][ T5233] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 56.433917][ T5237] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 56.443740][ T5238] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 56.453617][ T5237] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 56.457051][ T5233] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 56.468598][ T5233] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 56.471678][ T5240] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 56.479087][ T5233] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 56.483840][ T5240] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 56.490437][ T5233] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 56.498791][ T5240] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 56.511920][ T5237] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 56.511973][ T5233] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 56.519574][ T5237] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 56.527790][ T5233] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 56.535768][ T5237] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 56.541670][ T5233] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 56.546972][ T5240] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 56.554029][ T5243] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 56.561711][ T5237] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 56.568871][ T5243] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 56.576071][ T5237] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 56.586014][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 56.607122][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 56.614983][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 56.636304][ T5237] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 56.644819][ T5237] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 57.059990][ T5248] chnl_net:caif_netlink_parms(): no params data found [ 57.073664][ T5247] chnl_net:caif_netlink_parms(): no params data found [ 57.134279][ T5246] chnl_net:caif_netlink_parms(): no params data found [ 57.180107][ T5245] chnl_net:caif_netlink_parms(): no params data found [ 57.227587][ T5248] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.234738][ T5248] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.243295][ T5248] bridge_slave_0: entered allmulticast mode [ 57.250193][ T5248] bridge_slave_0: entered promiscuous mode [ 57.268849][ T5249] chnl_net:caif_netlink_parms(): no params data found [ 57.292704][ T5248] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.300154][ T5248] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.307425][ T5248] bridge_slave_1: entered allmulticast mode [ 57.313918][ T5248] bridge_slave_1: entered promiscuous mode [ 57.403378][ T5247] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.410776][ T5247] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.418429][ T5247] bridge_slave_0: entered allmulticast mode [ 57.424910][ T5247] bridge_slave_0: entered promiscuous mode [ 57.433741][ T5248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.475151][ T5247] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.482359][ T5247] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.489578][ T5247] bridge_slave_1: entered allmulticast mode [ 57.496169][ T5247] bridge_slave_1: entered promiscuous mode [ 57.512228][ T5248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.572182][ T5248] team0: Port device team_slave_0 added [ 57.591209][ T5249] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.598910][ T5249] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.606837][ T5249] bridge_slave_0: entered allmulticast mode [ 57.613374][ T5249] bridge_slave_0: entered promiscuous mode [ 57.622320][ T5247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.633745][ T5247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.645261][ T5248] team0: Port device team_slave_1 added [ 57.651634][ T5246] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.658910][ T5246] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.666259][ T5246] bridge_slave_0: entered allmulticast mode [ 57.672808][ T5246] bridge_slave_0: entered promiscuous mode [ 57.681063][ T5246] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.688255][ T5246] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.695410][ T5246] bridge_slave_1: entered allmulticast mode [ 57.702344][ T5246] bridge_slave_1: entered promiscuous mode [ 57.715029][ T5249] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.722434][ T5249] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.729855][ T5249] bridge_slave_1: entered allmulticast mode [ 57.736792][ T5249] bridge_slave_1: entered promiscuous mode [ 57.770248][ T5245] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.777644][ T5245] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.784784][ T5245] bridge_slave_0: entered allmulticast mode [ 57.792329][ T5245] bridge_slave_0: entered promiscuous mode [ 57.827728][ T5247] team0: Port device team_slave_0 added [ 57.834287][ T5248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.841438][ T5248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.867426][ T5248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.885350][ T5245] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.892846][ T5245] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.900031][ T5245] bridge_slave_1: entered allmulticast mode [ 57.907225][ T5245] bridge_slave_1: entered promiscuous mode [ 57.924573][ T5249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.937707][ T5249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.948327][ T5247] team0: Port device team_slave_1 added [ 57.963300][ T5248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.970785][ T5248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.997524][ T5248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.015434][ T5246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.027983][ T5246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.067360][ T5249] team0: Port device team_slave_0 added [ 58.082429][ T5245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.094586][ T5245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.114521][ T5249] team0: Port device team_slave_1 added [ 58.144809][ T5247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.152068][ T5247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.178422][ T5247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.218782][ T5248] hsr_slave_0: entered promiscuous mode [ 58.224897][ T5248] hsr_slave_1: entered promiscuous mode [ 58.233982][ T5246] team0: Port device team_slave_0 added [ 58.241516][ T5246] team0: Port device team_slave_1 added [ 58.255740][ T5247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.262727][ T5247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.289087][ T5247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.304534][ T5249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.312258][ T5249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.338410][ T5249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.351051][ T5249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.358104][ T5249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.384158][ T5249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.407802][ T5245] team0: Port device team_slave_0 added [ 58.444431][ T5245] team0: Port device team_slave_1 added [ 58.488339][ T5246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.495313][ T5246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.521795][ T5246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.544826][ T5249] hsr_slave_0: entered promiscuous mode [ 58.551224][ T5249] hsr_slave_1: entered promiscuous mode [ 58.557882][ T5249] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.565656][ T5249] Cannot create hsr debugfs directory [ 58.574255][ T5247] hsr_slave_0: entered promiscuous mode [ 58.581207][ T5247] hsr_slave_1: entered promiscuous mode [ 58.587993][ T5247] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.595549][ T5247] Cannot create hsr debugfs directory [ 58.616467][ T5246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.623421][ T5246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.650042][ T5246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.662192][ T5245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.669673][ T5245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.678530][ T5237] Bluetooth: hci1: command tx timeout [ 58.699913][ T5238] Bluetooth: hci3: command tx timeout [ 58.702647][ T5237] Bluetooth: hci2: command tx timeout [ 58.706977][ T5238] Bluetooth: hci0: command tx timeout [ 58.717775][ T5245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.717837][ T4623] Bluetooth: hci4: command tx timeout [ 58.734608][ T5245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.742150][ T5245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.768593][ T5245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.877497][ T5246] hsr_slave_0: entered promiscuous mode [ 58.883562][ T5246] hsr_slave_1: entered promiscuous mode [ 58.890242][ T5246] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.898042][ T5246] Cannot create hsr debugfs directory [ 58.953335][ T5245] hsr_slave_0: entered promiscuous mode [ 58.959708][ T5245] hsr_slave_1: entered promiscuous mode [ 58.965602][ T5245] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.973693][ T5245] Cannot create hsr debugfs directory [ 59.203185][ T5248] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.217140][ T5248] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.228590][ T5248] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.238653][ T5248] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.296799][ T5249] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.312681][ T5249] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.323935][ T5249] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.337945][ T5249] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.391489][ T5247] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.408169][ T5247] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.423051][ T5247] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.433066][ T5247] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.495261][ T5245] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.505018][ T5245] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.518291][ T5248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.532257][ T5245] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.552829][ T5245] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.618048][ T5248] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.650691][ T5246] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.669328][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.676702][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.703301][ T5246] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.715296][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.722394][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.744958][ T5246] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.765336][ T5249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.781637][ T5246] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.843082][ T5249] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.878194][ T5247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.889608][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.896831][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.917745][ T5245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.942566][ T3996] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.949754][ T3996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.973783][ T5248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.991481][ T5247] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.009863][ T5245] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.024884][ T2512] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.031999][ T2512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.068822][ T3996] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.075935][ T3996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.086808][ T3996] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.093904][ T3996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.123151][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.130284][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.191608][ T5249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.224160][ T5247] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.235266][ T5247] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.260559][ T5246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.272555][ T5248] veth0_vlan: entered promiscuous mode [ 60.291930][ T5248] veth1_vlan: entered promiscuous mode [ 60.340358][ T5249] veth0_vlan: entered promiscuous mode [ 60.373360][ T5246] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.384030][ T5249] veth1_vlan: entered promiscuous mode [ 60.394402][ T5248] veth0_macvtap: entered promiscuous mode [ 60.415598][ T5245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.431805][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.438956][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.452830][ T2512] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.459977][ T2512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.472538][ T5248] veth1_macvtap: entered promiscuous mode [ 60.492675][ T5247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.519209][ T5249] veth0_macvtap: entered promiscuous mode [ 60.529367][ T5248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.543626][ T5248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.579553][ T5248] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.595241][ T5248] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.604317][ T5248] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.613874][ T5248] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.625102][ T5249] veth1_macvtap: entered promiscuous mode [ 60.660211][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.671454][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.683702][ T5249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.733166][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.748113][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.758141][ T53] Bluetooth: hci1: command tx timeout [ 60.758241][ T5238] Bluetooth: hci3: command tx timeout [ 60.758344][ T4623] Bluetooth: hci2: command tx timeout [ 60.765099][ T5249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.770414][ T53] Bluetooth: hci0: command tx timeout [ 60.786584][ T5238] Bluetooth: hci4: command tx timeout [ 60.791369][ T5249] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.804164][ T5249] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.813169][ T5249] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.822462][ T5249] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.883605][ T5245] veth0_vlan: entered promiscuous mode [ 60.894009][ T5247] veth0_vlan: entered promiscuous mode [ 60.910307][ T5246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.945906][ T5245] veth1_vlan: entered promiscuous mode [ 60.954306][ T765] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.963630][ T5247] veth1_vlan: entered promiscuous mode [ 60.977367][ T765] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.087081][ T3996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.094079][ T5247] veth0_macvtap: entered promiscuous mode [ 61.105312][ T5246] veth0_vlan: entered promiscuous mode [ 61.106625][ T3996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.121681][ T3996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.135163][ T3996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.151869][ T5246] veth1_vlan: entered promiscuous mode [ 61.181949][ T5247] veth1_macvtap: entered promiscuous mode [ 61.208411][ T2512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.208874][ T5245] veth0_macvtap: entered promiscuous mode [ 61.226993][ T2512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.252321][ T5248] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 61.273024][ T5246] veth0_macvtap: entered promiscuous mode [ 61.287811][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.299457][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.312089][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.323277][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.335193][ T5247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.346897][ T5245] veth1_macvtap: entered promiscuous mode [ 61.361312][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.377166][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.391712][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.428101][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.440344][ T5247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.462268][ T5246] veth1_macvtap: entered promiscuous mode [ 61.475575][ T5247] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.488809][ T5247] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.497791][ T5247] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.506986][ T5247] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.519299][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.536516][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.548456][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.560186][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.570400][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.581251][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.592928][ T5245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.628995][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.640999][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.647865][ T5291] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 61.653568][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.672699][ T57] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 61.686515][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.703458][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.716168][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.729780][ T5245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.765369][ T5245] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.774427][ T5245] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.783835][ T5245] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.795014][ T5245] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.818742][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.832562][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.843140][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.847138][ T57] usb 3-1: Using ep0 maxpacket: 8 [ 61.857113][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.868753][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.869782][ T57] usb 3-1: unable to get BOS descriptor or descriptor too short [ 61.879213][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.879232][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.879247][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.880582][ T5246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.911136][ T57] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.920179][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.946732][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.948457][ T57] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.956909][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.956929][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.956941][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.956955][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.956968][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.956981][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.959237][ T5246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.007683][ T57] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 62.066134][ T5246] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.075753][ T57] usb 3-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.40 [ 62.075987][ T5246] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.085699][ T57] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.101127][ T5246] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.103113][ T57] usb 3-1: Product: syz [ 62.115090][ T57] usb 3-1: Manufacturer: syz [ 62.115833][ T5246] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.120865][ T57] usb 3-1: SerialNumber: syz [ 62.176391][ T5280] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 62.210232][ T57] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input5 [ 62.238060][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.252565][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.342334][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.365138][ T5280] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 62.378817][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.380215][ T5280] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 62.399067][ T2512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.414992][ T5280] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 62.435004][ T2512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.442908][ T5280] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 62.500718][ T5280] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 62.514953][ T2512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.532295][ T2512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.542824][ T5280] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 62.558359][ T5280] usb 5-1: Manufacturer: syz [ 62.571885][ T5280] usb 5-1: config 0 descriptor?? [ 62.604744][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.647821][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.711643][ T4670] bcm5974 3-1:1.0: could not read from device [ 62.727609][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.746436][ T4670] bcm5974 3-1:1.0: could not read from device [ 62.769084][ T57] usb 3-1: USB disconnect, device number 2 [ 62.773361][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.836824][ T4623] Bluetooth: hci2: command tx timeout [ 62.847238][ T5238] Bluetooth: hci4: command tx timeout [ 62.852715][ T5238] Bluetooth: hci0: command tx timeout [ 62.858736][ T4623] Bluetooth: hci3: command tx timeout [ 62.864189][ T4623] Bluetooth: hci1: command tx timeout [ 62.913859][ T5307] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 62.998104][ T5309] program syz.3.7 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 63.007523][ T5280] rc_core: IR keymap rc-hauppauge not found [ 63.016537][ T5280] Registered IR keymap rc-empty [ 63.025125][ T5280] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 63.066448][ T5280] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 63.097236][ T5280] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 63.133253][ T5280] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input6 [ 63.167705][ T5280] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 63.186745][ T5280] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 63.217366][ T5280] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 63.257328][ T5280] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 63.288456][ T5280] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 63.326533][ T5280] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 63.356378][ T5280] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 63.367252][ T5302] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 63.376881][ T5280] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 63.408247][ T5280] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 63.436941][ T5280] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 63.489561][ T5280] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 63.498791][ T5296] IPVS: starting estimator thread 0... [ 63.504514][ T5280] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 63.526636][ T5302] usb 4-1: Using ep0 maxpacket: 16 [ 63.545753][ T5302] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.558306][ T5302] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.569175][ T5302] usb 4-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 63.579058][ T5302] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.594507][ T5302] usb 4-1: config 0 descriptor?? [ 63.607717][ T5325] IPVS: using max 22 ests per chain, 52800 per kthread [ 64.042647][ T5302] lenovo 0003:17EF:6009.0001: hidraw0: USB HID v0.00 Device [HID 17ef:6009] on usb-dummy_hcd.3-1/input0 [ 64.287680][ T5309] lenovo 0003:17EF:6009.0001: pid 5309 passed too short report [ 64.716238][ T5282] usb 5-1: USB disconnect, device number 2 [ 64.916647][ T53] Bluetooth: hci1: command tx timeout [ 64.916767][ T4623] Bluetooth: hci3: command tx timeout [ 64.923112][ T53] Bluetooth: hci2: command tx timeout [ 64.928266][ T5238] Bluetooth: hci4: command tx timeout [ 65.406811][ T4623] Bluetooth: hci0: command 0x0c1a tx timeout [ 65.410906][ T5317] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 65.486856][ T5282] usb 4-1: reset high-speed USB device number 2 using dummy_hcd [ 66.274903][ T5317] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 66.285325][ T5317] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 66.295736][ T5317] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 66.302064][ T5317] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 66.311248][ T5317] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 66.321363][ T5317] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 66.328189][ T5317] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 66.335740][ T5317] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 66.344827][ T5317] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 66.350969][ T5317] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 66.360091][ T5317] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 66.370226][ T5317] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 66.380086][ T5317] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 66.387247][ T5317] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 66.499802][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.633255][ T5341] capability: warning: `syz.1.15' uses deprecated v2 capabilities in a way that may be insecure [ 66.706848][ T5281] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 66.857987][ T5281] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 66.868270][ T5281] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.878259][ T5281] usb 5-1: config 0 descriptor?? [ 66.891793][ T5281] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 66.906425][ T5283] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 66.966395][ T5280] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 67.046244][ T5283] usb 1-1: device descriptor read/64, error -71 [ 67.131254][ T5280] usb 2-1: Using ep0 maxpacket: 16 [ 67.144804][ T5280] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 67.165776][ T5280] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 67.186885][ T5281] gp8psk: usb in 128 operation failed. [ 67.188594][ T5280] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 67.208209][ T5280] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.209146][ T5281] gp8psk: usb in 137 operation failed. [ 67.221014][ T5280] usb 2-1: Product: syz [ 67.225132][ T5281] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 67.228940][ T5280] usb 2-1: Manufacturer: syz [ 67.257075][ T5281] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 67.260701][ T5280] usb 2-1: SerialNumber: syz [ 67.275074][ T5281] usb 5-1: media controller created [ 67.282821][ T5280] usb 2-1: config 0 descriptor?? [ 67.301510][ T9] usb 4-1: USB disconnect, device number 2 [ 67.318195][ T5283] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 67.353372][ T5280] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 67.362397][ T5281] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 67.422192][ T5281] gp8psk_fe: Frontend attached [ 67.428356][ T5281] usb 5-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 67.438408][ T5281] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 67.476658][ T4623] Bluetooth: hci0: command 0x0c1a tx timeout [ 67.479415][ T5283] usb 1-1: device descriptor read/64, error -71 [ 67.611440][ T3996] usb 2-1: Failed to submit usb control message: -71 [ 67.613750][ T5281] gp8psk: usb in 138 operation failed. [ 67.622744][ T3996] usb 2-1: unable to send the bmi data to the device: -71 [ 67.624500][ T5281] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 67.631626][ T3996] usb 2-1: unable to get target info from device [ 67.641050][ T5281] gp8psk: found Genpix USB device pID = 203 (hex) [ 67.652002][ T5281] usb 5-1: USB disconnect, device number 3 [ 67.662521][ T5283] usb usb1-port1: attempt power cycle [ 67.668213][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.676808][ T9] usb 2-1: USB disconnect, device number 2 [ 67.693648][ T3996] usb 2-1: could not get target info (-71) [ 67.706118][ T3996] usb 2-1: could not probe fw (-71) [ 67.785235][ T5281] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 68.042794][ T5283] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 68.296365][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 68.360176][ T4623] Bluetooth: hci3: command 0x0c1a tx timeout [ 68.367006][ T5237] Bluetooth: hci1: command 0x0c1a tx timeout [ 68.374860][ T5238] Bluetooth: hci2: command 0x0c1a tx timeout [ 68.438158][ T5238] Bluetooth: hci4: command 0x0c1a tx timeout [ 68.686278][ T5280] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 68.846247][ T5280] usb 2-1: Using ep0 maxpacket: 32 [ 68.863457][ T5280] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.881293][ T5280] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.895732][ T5280] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 68.914359][ T5280] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.017241][ T5280] usb 2-1: config 0 descriptor?? [ 69.037880][ T5280] hub 2-1:0.0: USB hub found [ 69.102485][ T5377] ptrace attach of "./syz-executor exec"[5248] was attempted by "./syz-executor exec"[5377] [ 69.235441][ T5280] hub 2-1:0.0: 1 port detected [ 69.557122][ T5238] Bluetooth: hci0: command 0x0c1a tx timeout [ 69.883319][ T5280] hub 2-1:0.0: activate --> -90 [ 70.196100][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 70.206217][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 70.343794][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 70.352629][ T0] NOHZ tick-stop error: local softirq work is pending, handler #148!!! [ 70.426076][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 70.436312][ T5238] Bluetooth: hci2: command 0x0c1a tx timeout [ 70.442413][ T5238] Bluetooth: hci3: command 0x0c1a tx timeout [ 70.448979][ T4623] Bluetooth: hci1: command 0x0c1a tx timeout [ 70.466089][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 70.506082][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 70.516268][ T5238] Bluetooth: hci4: command 0x0c1a tx timeout [ 70.524462][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 71.506065][ C0] sched: DL replenish lagged too much [ 71.562210][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.946207][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.222855][ C1] raw-gadget.2 gadget.1: ignoring, device is not running [ 72.276443][ C1] raw-gadget.2 gadget.1: ignoring, device is not running [ 72.284373][ T5280] hub 2-1:0.0: hub_ext_port_status failed (err = -32) [ 72.516237][ T5238] Bluetooth: hci3: command 0x0c1a tx timeout [ 72.522303][ T5238] Bluetooth: hci2: command 0x0c1a tx timeout [ 72.529065][ T4623] Bluetooth: hci1: command 0x0c1a tx timeout [ 72.596180][ T5238] Bluetooth: hci4: command 0x0c1a tx timeout [ 74.580087][ T5283] usb 1-1: device descriptor read/8, error -71 [ 74.926462][ T5302] usb 2-1: USB disconnect, device number 3 [ 75.094662][ T5302] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 75.139703][ T5302] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 76.816237][ T5302] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 76.976232][ T5302] usb 5-1: Using ep0 maxpacket: 16 [ 76.990182][ T5237] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 76.999174][ T5237] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 77.011003][ T5237] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 77.021527][ T5237] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 77.029970][ T5237] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 77.037659][ T5237] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 77.072477][ T5302] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 77.090429][ T5302] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 77.122540][ T5302] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 77.159674][ T5302] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 1024 [ 77.191867][ T5302] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 77.225764][ T5302] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 77.252032][ T5302] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.272750][ T5302] usb 5-1: Product: syz [ 77.287667][ T5302] usb 5-1: Manufacturer: syz [ 77.303351][ T5302] usb 5-1: SerialNumber: syz [ 77.325281][ T5302] usb 5-1: config 0 descriptor?? [ 77.354267][ T5404] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 77.376661][ T5404] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 77.464872][ T5302] mcba_usb 5-1:0.0: Microchip CAN BUS Analyzer connected [ 77.465058][ C1] mcba_usb 5-1:0.0 can0: Tx URB aborted (-71) [ 77.465135][ C1] mcba_usb 5-1:0.0 can0: Tx URB aborted (-71) [ 77.562790][ T5407] chnl_net:caif_netlink_parms(): no params data found [ 77.811262][ T5284] usb 5-1: USB disconnect, device number 4 [ 77.829599][ T5284] mcba_usb 5-1:0.0 can0: device disconnected [ 79.076353][ T5237] Bluetooth: hci5: command tx timeout [ 79.734918][ T8] cfg80211: failed to load regulatory.db [ 81.156224][ T5237] Bluetooth: hci5: command tx timeout [ 83.236217][ T5237] Bluetooth: hci5: command tx timeout [ 84.156296][ T5280] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 84.331996][ T5280] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.345785][ T5280] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 84.365917][ T5280] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 84.383603][ T5280] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 84.392496][ T5280] usb 2-1: SerialNumber: syz [ 84.639191][ T5280] usb 2-1: 0:2 : does not exist [ 84.680943][ T5280] usb 2-1: USB disconnect, device number 4 [ 84.743939][ T5437] udevd[5437]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 85.319505][ T5237] Bluetooth: hci5: command tx timeout [ 86.793150][ T5238] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.801826][ T5238] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.810373][ T5238] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.818791][ T5238] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.828709][ T5238] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.839724][ T5238] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.916329][ T5237] Bluetooth: hci3: command tx timeout [ 89.875687][ T5238] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 89.884851][ T5238] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 89.893484][ T5238] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 89.902311][ T5238] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 89.913543][ T5238] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 89.921257][ T5238] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 90.996398][ T5237] Bluetooth: hci3: command tx timeout [ 91.956490][ T5237] Bluetooth: hci6: command tx timeout [ 92.748486][ T5238] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 92.757738][ T5238] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 92.765537][ T5238] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 92.777943][ T5238] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 92.788222][ T5238] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 92.799483][ T5238] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 93.077190][ T5238] Bluetooth: hci3: command tx timeout [ 94.036638][ T5238] Bluetooth: hci6: command tx timeout [ 94.321101][ T5237] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 94.337756][ T5237] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 94.346483][ T5237] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 94.354961][ T5237] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 94.362881][ T5237] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 94.373909][ T5237] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 94.836377][ T5237] Bluetooth: hci7: command tx timeout [ 95.156297][ T5237] Bluetooth: hci3: command tx timeout [ 96.116353][ T5237] Bluetooth: hci6: command tx timeout [ 96.436247][ T5237] Bluetooth: hci8: command tx timeout [ 96.916275][ T5237] Bluetooth: hci7: command tx timeout [ 98.196384][ T5237] Bluetooth: hci6: command tx timeout [ 98.516380][ T5237] Bluetooth: hci8: command tx timeout [ 98.996299][ T5237] Bluetooth: hci7: command tx timeout [ 100.596275][ T5237] Bluetooth: hci8: command tx timeout [ 101.076413][ T5237] Bluetooth: hci7: command tx timeout [ 102.676236][ T5237] Bluetooth: hci8: command tx timeout [ 133.006534][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.012956][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.928180][ T5238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 138.944677][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 138.952734][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 138.961843][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 138.971273][ T5238] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 138.978941][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 140.996369][ T5237] Bluetooth: hci2: command tx timeout [ 143.076236][ T5237] Bluetooth: hci2: command tx timeout [ 145.156227][ T5237] Bluetooth: hci2: command tx timeout [ 147.236929][ T5237] Bluetooth: hci2: command tx timeout [ 147.578576][ T5238] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 147.588263][ T5238] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 147.602152][ T5238] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 147.611285][ T5238] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 147.621932][ T5238] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 147.629357][ T5238] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 149.716429][ T5237] Bluetooth: hci4: command tx timeout [ 150.654838][ T5238] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 150.663785][ T5238] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 150.678870][ T5238] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 150.702212][ T5238] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 150.709998][ T5238] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 150.718032][ T5238] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 151.796398][ T5237] Bluetooth: hci4: command tx timeout [ 152.756452][ T5237] Bluetooth: hci9: command tx timeout [ 153.789880][ T5238] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 153.800719][ T5238] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 153.809395][ T5238] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 153.817509][ T5238] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 153.825385][ T5238] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 153.833255][ T5238] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 153.876546][ T5237] Bluetooth: hci4: command tx timeout [ 154.824311][ T5238] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 154.834433][ T5238] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 154.842055][ T4623] Bluetooth: hci9: command tx timeout [ 154.848688][ T5238] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 154.857293][ T5238] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 154.868452][ T5238] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 154.875875][ T5238] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 155.876414][ T5238] Bluetooth: hci10: command tx timeout [ 155.956874][ T5238] Bluetooth: hci4: command tx timeout [ 156.917792][ T5238] Bluetooth: hci9: command tx timeout [ 156.996735][ T5238] Bluetooth: hci11: command tx timeout [ 157.956168][ T5238] Bluetooth: hci10: command tx timeout [ 158.996320][ T5238] Bluetooth: hci9: command tx timeout [ 159.076346][ T5238] Bluetooth: hci11: command tx timeout [ 160.036377][ T5238] Bluetooth: hci10: command tx timeout [ 161.156349][ T5238] Bluetooth: hci11: command tx timeout [ 162.116180][ T5238] Bluetooth: hci10: command tx timeout [ 163.236291][ T5238] Bluetooth: hci11: command tx timeout [ 194.445532][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.451995][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.933489][ T4623] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 199.988784][ T4623] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 200.023733][ T4623] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 200.117584][ T4623] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 200.177655][ T4623] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 200.215436][ T4623] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 201.637592][ T5237] Bluetooth: hci5: command 0x0406 tx timeout [ 202.436279][ T5237] Bluetooth: hci12: command tx timeout [ 204.516321][ T5237] Bluetooth: hci12: command tx timeout [ 206.596173][ T5237] Bluetooth: hci12: command tx timeout [ 208.130232][ T4623] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 208.139049][ T4623] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 208.147209][ T4623] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 208.157456][ T4623] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 208.165162][ T4623] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 208.173611][ T4623] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 208.676286][ T4623] Bluetooth: hci12: command tx timeout [ 211.766346][ T5243] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 211.775126][ T5243] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 211.787013][ T5243] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 211.797736][ T5243] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 211.805458][ T5243] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 211.812967][ T5243] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 211.884642][ T5243] Bluetooth: hci3: command 0x0406 tx timeout [ 214.758243][ T5235] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 214.768504][ T5235] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 214.776667][ T5235] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 214.788643][ T5235] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 214.796827][ T5235] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 214.805638][ T5235] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 215.816569][ T5229] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 215.826385][ T5229] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 215.841439][ T5229] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 215.849707][ T5229] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 215.858489][ T5229] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 215.865953][ T5229] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 216.996532][ T5514] Bluetooth: hci7: command 0x0406 tx timeout [ 217.002659][ T5514] Bluetooth: hci6: command 0x0406 tx timeout [ 217.024294][ T5514] Bluetooth: hci8: command 0x0406 tx timeout [ 217.956432][ T5233] Bluetooth: hci16: command tx timeout [ 219.636300][ T5233] Bluetooth: hci14: command tx timeout [ 219.642367][ T5233] Bluetooth: hci13: command tx timeout [ 219.796479][ T5233] Bluetooth: hci15: command tx timeout [ 220.036541][ T5233] Bluetooth: hci16: command tx timeout [ 221.716238][ T5240] Bluetooth: hci14: command tx timeout [ 221.723403][ T5233] Bluetooth: hci13: command tx timeout [ 221.876350][ T5233] Bluetooth: hci15: command tx timeout [ 222.116253][ T5233] Bluetooth: hci16: command tx timeout [ 223.796290][ T5233] Bluetooth: hci13: command tx timeout [ 223.801850][ T5233] Bluetooth: hci14: command tx timeout [ 223.956370][ T5233] Bluetooth: hci15: command tx timeout [ 224.196273][ T5233] Bluetooth: hci16: command tx timeout [ 225.886399][ T5240] Bluetooth: hci13: command tx timeout [ 225.892712][ T5233] Bluetooth: hci14: command tx timeout [ 226.036432][ T5233] Bluetooth: hci15: command tx timeout [ 235.396500][ T30] INFO: task syz.3.29:5397 blocked for more than 143 seconds. [ 235.404268][ T30] Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 235.458137][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 235.505529][ T30] task:syz.3.29 state:D stack:26144 pid:5397 tgid:5396 ppid:5247 flags:0x00004006 [ 235.599153][ T30] Call Trace: [ 235.602485][ T30] [ 235.605438][ T30] __schedule+0x1895/0x4b30 [ 235.664166][ T30] ? __pfx___schedule+0x10/0x10 [ 235.694032][ T30] ? __pfx_lock_release+0x10/0x10 [ 235.712633][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 235.733325][ T30] ? schedule+0x90/0x320 [ 235.773052][ T30] schedule+0x14b/0x320 [ 235.812474][ T30] schedule_preempt_disabled+0x13/0x30 [ 235.843483][ T30] __mutex_lock+0x6a7/0xd70 [ 235.866203][ T30] ? __mutex_lock+0x52a/0xd70 [ 235.870948][ T30] ? raw_release+0x1b8/0x8b0 [ 235.875566][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 235.944937][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 235.973053][ T30] raw_release+0x1b8/0x8b0 [ 236.002930][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 236.023803][ T30] sock_close+0xbc/0x240 [ 236.044280][ T30] ? __pfx_sock_close+0x10/0x10 [ 236.066282][ T30] __fput+0x23f/0x880 [ 236.070339][ T30] task_work_run+0x24f/0x310 [ 236.074966][ T30] ? __pfx_task_work_run+0x10/0x10 [ 236.132149][ T30] ? switch_task_namespaces+0xe4/0x110 [ 236.146100][ T30] do_exit+0xa2f/0x28e0 [ 236.150321][ T30] ? __pfx_do_exit+0x10/0x10 [ 236.176399][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 236.181872][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 236.234714][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 236.252087][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 236.273252][ T30] do_group_exit+0x207/0x2c0 [ 236.286292][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 236.291551][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 236.332640][ T30] get_signal+0x16a3/0x1740 [ 236.356583][ T30] ? __pfx_get_signal+0x10/0x10 [ 236.361511][ T30] arch_do_signal_or_restart+0x96/0x860 [ 236.397928][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 236.404154][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 236.456091][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 236.461882][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 236.500109][ T30] do_syscall_64+0x100/0x230 [ 236.504765][ T30] ? clear_bhb_loop+0x35/0x90 [ 236.528568][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.534538][ T30] RIP: 0033:0x7fa4ff77dff9 [ 236.559082][ T30] RSP: 002b:00007fa4ff1ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 236.577165][ T30] RAX: 0000000000000000 RBX: 00007fa4ff935f80 RCX: 00007fa4ff77dff9 [ 236.585192][ T30] RDX: 0000000020000400 RSI: 000000004020ae46 RDI: 0000000000000008 [ 236.617933][ T30] RBP: 00007fa4ff7f0296 R08: 0000000000000000 R09: 0000000000000000 [ 236.625960][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.661011][ T30] R13: 0000000000000000 R14: 00007fa4ff935f80 R15: 00007fa4ffa5fa28 [ 236.674184][ T30] [ 236.681084][ T30] INFO: task syz-executor:5407 blocked for more than 144 seconds. [ 236.692815][ T30] Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 236.704142][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 236.724171][ T30] task:syz-executor state:D stack:21728 pid:5407 tgid:5407 ppid:1 flags:0x00000004 [ 236.745263][ T30] Call Trace: [ 236.752271][ T30] [ 236.755246][ T30] __schedule+0x1895/0x4b30 [ 236.764616][ T30] ? __pfx___schedule+0x10/0x10 [ 236.772778][ T30] ? __pfx_lock_release+0x10/0x10 [ 236.783833][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 236.791936][ T30] ? schedule+0x90/0x320 [ 236.800927][ T30] schedule+0x14b/0x320 [ 236.805135][ T30] schedule_preempt_disabled+0x13/0x30 [ 236.813342][ T30] __mutex_lock+0x6a7/0xd70 [ 236.822626][ T30] ? __mutex_lock+0x52a/0xd70 [ 236.831431][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 236.841893][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 236.851194][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 236.860988][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 236.869274][ T30] ? __lock_acquire+0x1384/0x2050 [ 236.874351][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 236.885902][ T30] netlink_rcv_skb+0x1e3/0x430 [ 236.893363][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 236.903594][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 236.911516][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 236.922892][ T30] netlink_unicast+0x7f6/0x990 [ 236.930466][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 236.935796][ T30] ? __virt_addr_valid+0x183/0x530 [ 236.945748][ T30] ? __check_object_size+0x48e/0x900 [ 236.954977][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 236.966403][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.971790][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 236.984711][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.990352][ T30] __sock_sendmsg+0x221/0x270 [ 236.995070][ T30] __sys_sendto+0x39b/0x4f0 [ 237.006424][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 237.011507][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 237.024929][ T30] ? blkcg_maybe_throttle_current+0x1ab/0xb80 [ 237.031321][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 237.044353][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 237.051080][ T30] __x64_sys_sendto+0xde/0x100 [ 237.057398][ T30] do_syscall_64+0xf3/0x230 [ 237.061936][ T30] ? clear_bhb_loop+0x35/0x90 [ 237.077117][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.083347][ T30] RIP: 0033:0x7f8f1a97fe8c [ 237.096348][ T30] RSP: 002b:00007f8f1ac5f650 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 237.104807][ T30] RAX: ffffffffffffffda RBX: 00007f8f1b664620 RCX: 00007f8f1a97fe8c [ 237.121188][ T30] RDX: 000000000000006c RSI: 00007f8f1b664670 RDI: 0000000000000003 [ 237.131868][ T30] RBP: 0000000000000000 R08: 00007f8f1ac5f6a4 R09: 000000000000000c [ 237.146313][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 237.154324][ T30] R13: 0000000000000000 R14: 00007f8f1b664670 R15: 0000000000000000 [ 237.183000][ T30] [ 237.193694][ T30] INFO: task syz-executor:5459 blocked for more than 145 seconds. [ 237.201947][ T30] Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 237.218071][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 237.232722][ T30] task:syz-executor state:D stack:25872 pid:5459 tgid:5459 ppid:1 flags:0x00004004 [ 237.253974][ T30] Call Trace: [ 237.257395][ T30] [ 237.261460][ T30] __schedule+0x1895/0x4b30 [ 237.274453][ T30] ? __pfx___schedule+0x10/0x10 [ 237.279449][ T30] ? __pfx_lock_release+0x10/0x10 [ 237.284549][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 237.296671][ T30] ? schedule+0x90/0x320 [ 237.300957][ T30] schedule+0x14b/0x320 [ 237.305147][ T30] schedule_preempt_disabled+0x13/0x30 [ 237.320316][ T30] __mutex_lock+0x6a7/0xd70 [ 237.325236][ T30] ? __mutex_lock+0x52a/0xd70 [ 237.335220][ T30] ? register_nexthop_notifier+0x84/0x290 [ 237.343663][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 237.354020][ T30] ? __asan_memset+0x23/0x50 [ 237.361284][ T30] register_nexthop_notifier+0x84/0x290 [ 237.375176][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 237.381381][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 237.395271][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 237.401939][ T30] ? __asan_memset+0x23/0x50 [ 237.413533][ T30] ops_init+0x31e/0x590 [ 237.418307][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 237.423940][ T30] setup_net+0x287/0x9e0 [ 237.436079][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 237.441677][ T30] ? __pfx_setup_net+0x10/0x10 [ 237.453641][ T30] copy_net_ns+0x33f/0x570 [ 237.458381][ T30] create_new_namespaces+0x425/0x7b0 [ 237.464796][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 237.478885][ T30] ksys_unshare+0x57d/0xa70 [ 237.483513][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 237.496017][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 237.502491][ T30] ? do_syscall_64+0x100/0x230 [ 237.514709][ T30] __x64_sys_unshare+0x38/0x40 [ 237.519839][ T30] do_syscall_64+0xf3/0x230 [ 237.524375][ T30] ? clear_bhb_loop+0x35/0x90 [ 237.536076][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.542019][ T30] RIP: 0033:0x7f3e6517f7f7 [ 237.553158][ T30] RSP: 002b:00007f3e6545ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 237.563421][ T30] RAX: ffffffffffffffda RBX: 00007f3e651f1a85 RCX: 00007f3e6517f7f7 [ 237.576068][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 237.584075][ T30] RBP: 0000000000000000 R08: 00007f3e65e67d60 R09: 0000000000000000 [ 237.601095][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 237.612837][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 237.624540][ T30] [ 237.631300][ T30] INFO: task syz-executor:5463 blocked for more than 145 seconds. [ 237.647760][ T30] Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 237.655418][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 237.670267][ T30] task:syz-executor state:D stack:26528 pid:5463 tgid:5463 ppid:1 flags:0x00004004 [ 237.685562][ T30] Call Trace: [ 237.690729][ T30] [ 237.693692][ T30] __schedule+0x1895/0x4b30 [ 237.704362][ T30] ? __pfx___schedule+0x10/0x10 [ 237.709589][ T30] ? __pfx_lock_release+0x10/0x10 [ 237.714664][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 237.726527][ T30] ? schedule+0x90/0x320 [ 237.730817][ T30] schedule+0x14b/0x320 [ 237.735000][ T30] schedule_preempt_disabled+0x13/0x30 [ 237.749007][ T30] __mutex_lock+0x6a7/0xd70 [ 237.753611][ T30] ? __mutex_lock+0x52a/0xd70 [ 237.764690][ T30] ? register_nexthop_notifier+0x84/0x290 [ 237.773074][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 237.785149][ T30] ? __asan_memset+0x23/0x50 [ 237.791378][ T30] register_nexthop_notifier+0x84/0x290 [ 237.803695][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 237.811085][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 237.823227][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 237.830900][ T30] ? __asan_memset+0x23/0x50 [ 237.835533][ T30] ops_init+0x31e/0x590 [ 237.847080][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 237.852502][ T30] setup_net+0x287/0x9e0 [ 237.863072][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 237.870508][ T30] ? __pfx_setup_net+0x10/0x10 [ 237.882552][ T30] copy_net_ns+0x33f/0x570 [ 237.889480][ T30] create_new_namespaces+0x425/0x7b0 [ 237.894820][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 237.906460][ T30] ksys_unshare+0x57d/0xa70 [ 237.911014][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 237.922745][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 237.929446][ T30] ? do_syscall_64+0x100/0x230 [ 237.934250][ T30] __x64_sys_unshare+0x38/0x40 [ 237.946280][ T30] do_syscall_64+0xf3/0x230 [ 237.950839][ T30] ? clear_bhb_loop+0x35/0x90 [ 237.955540][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.968450][ T30] RIP: 0033:0x7f84e417f7f7 [ 237.972913][ T30] RSP: 002b:00007f84e445ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 237.990095][ T30] RAX: ffffffffffffffda RBX: 00007f84e41f1a85 RCX: 00007f84e417f7f7 [ 238.003450][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 238.016078][ T30] RBP: 0000000000000000 R08: 00007f84e4e67d60 R09: 0000000000000000 [ 238.024090][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 238.038767][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 238.053360][ T30] [ 238.059019][ T30] [ 238.059019][ T30] Showing all locks held in the system: [ 238.071679][ T30] 3 locks held by kworker/0:0/8: [ 238.080427][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 238.100705][ T30] #1: ffffc900000d7d00 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 238.116320][ T30] #2: ffffffff8fcd2b88 (rtnl_mutex){+.+.}-{3:3}, at: regdb_fw_cb+0x82/0x1c0 [ 238.125195][ T30] 7 locks held by kworker/0:1/9: [ 238.137633][ T30] 1 lock held by khungtaskd/30: [ 238.142517][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 238.158919][ T30] 3 locks held by kworker/u8:5/765: [ 238.164145][ T30] #0: ffff88814bb58948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 238.180799][ T30] #1: ffffc9000344fd00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 238.200198][ T30] #2: ffffffff8fcd2b88 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 238.228867][ T30] 3 locks held by kworker/u8:6/2512: [ 238.234188][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 238.254621][ T30] #1: ffffc90009097d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 238.266167][ T30] #2: ffffffff8fcd2b88 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 238.275206][ T30] 2 locks held by getty/4988: [ 238.286502][ T30] #0: ffff8880334da0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 238.309898][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 238.325246][ T30] 1 lock held by syz-executor/5247: [ 238.333092][ T30] #0: ffffffff8fcd2b88 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 238.347015][ T30] 1 lock held by syz-executor/5249: [ 238.352243][ T30] #0: ffffffff8fcd2b88 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 238.366217][ T30] 2 locks held by kworker/0:4/5281: [ 238.371443][ T30] 7 locks held by kworker/0:6/5283: [ 238.383148][ T30] 3 locks held by kworker/1:4/5284: [ 238.389783][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 238.411117][ T30] #1: ffffc90004387d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 238.424892][ T30] #2: ffffffff8fcd2b88 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 238.439784][ T30] 6 locks held by kworker/0:7/5293: [ 238.445015][ T30] 1 lock held by syz.0.14/5338: [ 238.453902][ T30] 2 locks held by syz.3.29/5397: [ 238.463653][ T30] #0: ffff8880234e5008 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 238.480986][ T30] #1: ffffffff8fcd2b88 (rtnl_mutex){+.+.}-{3:3}, at: raw_release+0x1b8/0x8b0 [ 238.492520][ T30] 1 lock held by syz-executor/5407: [ 238.504856][ T30] #0: ffffffff8fcd2b88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 238.516699][ T30] 1 lock held by syz.2.34/5451: [ 238.521576][ T30] #0: ffffffff8fcd2b88 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 238.540375][ T30] 1 lock held by syz.1.35/5455: [ 238.545248][ T30] #0: ffffffff8fcd2b88 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 238.558236][ T30] 2 locks held by syz-executor/5459: [ 238.563544][ T30] #0: ffffffff8fcc6090 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 238.576068][ T30] #1: ffffffff8fcd2b88 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 238.595152][ T30] 2 locks held by syz-executor/5463: [ 238.601873][ T30] #0: ffffffff8fcc6090 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 238.619142][ T30] #1: ffffffff8fcd2b88 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 238.632917][ T30] 2 locks held by syz-executor/5471: [ 238.642988][ T30] #0: ffffffff8fcc6090 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 238.656146][ T30] #1: ffffffff8fcd2b88 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 238.672787][ T30] 2 locks held by syz-executor/5474: [ 238.678386][ T30] #0: ffffffff8fcc6090 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 238.696069][ T30] #1: ffffffff8fcd2b88 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 238.713000][ T30] 2 locks held by syz-executor/5480: [ 238.718621][ T30] #0: ffffffff8fcc6090 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 238.737281][ T30] #1: ffffffff8fcd2b88 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 238.754433][ T30] 2 locks held by syz-executor/5485: [ 238.760732][ T30] #0: ffffffff8fcc6090 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 238.776348][ T30] #1: ffffffff8fcd2b88 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 238.796636][ T30] 2 locks held by syz-executor/5488: [ 238.801955][ T30] #0: ffffffff8fcc6090 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 238.816074][ T30] #1: ffffffff8fcd2b88 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 238.835164][ T30] 2 locks held by syz-executor/5491: [ 238.840811][ T30] #0: ffffffff8fcc6090 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 238.856077][ T30] #1: ffffffff8fcd2b88 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 238.873960][ T30] 2 locks held by syz-executor/5494: [ 238.879585][ T30] #0: ffffffff8fcc6090 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 238.897236][ T30] #1: ffffffff8fcd2b88 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 238.913748][ T30] 2 locks held by syz-executor/5497: [ 238.921829][ T30] #0: ffffffff8fcc6090 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 238.938577][ T30] #1: ffffffff8fcd2b88 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 238.953034][ T30] 2 locks held by syz-executor/5506: [ 238.961573][ T30] #0: ffffffff8fcc6090 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 238.976119][ T30] #1: ffffffff8fcd2b88 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 238.992846][ T30] 2 locks held by syz-executor/5510: [ 239.002728][ T30] #0: ffffffff8fcc6090 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 239.021212][ T30] #1: ffffffff8fcd2b88 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 239.035260][ T30] 2 locks held by syz-executor/5513: [ 239.044212][ T30] #0: ffffffff8fcc6090 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 239.060879][ T30] #1: ffffffff8fcd2b88 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 239.073587][ T30] 2 locks held by syz-executor/5517: [ 239.084702][ T30] #0: ffffffff8fcc6090 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 239.095729][ T30] #1: ffffffff8fcd2b88 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 239.114501][ T30] [ 239.117212][ T30] ============================================= [ 239.117212][ T30] [ 239.125648][ T30] NMI backtrace for cpu 1 [ 239.130000][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 239.140529][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 239.150602][ T30] Call Trace: [ 239.153900][ T30] [ 239.156848][ T30] dump_stack_lvl+0x241/0x360 [ 239.161553][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 239.166791][ T30] ? __pfx__printk+0x10/0x10 [ 239.171411][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 239.176379][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 239.181858][ T30] ? _printk+0xd5/0x120 [ 239.186029][ T30] ? __pfx__printk+0x10/0x10 [ 239.190632][ T30] ? __wake_up_klogd+0xcc/0x110 [ 239.195513][ T30] ? __pfx__printk+0x10/0x10 [ 239.200125][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 239.205177][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 239.211180][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 239.217202][ T30] watchdog+0xff4/0x1040 [ 239.221481][ T30] ? watchdog+0x1ea/0x1040 [ 239.225932][ T30] ? __pfx_watchdog+0x10/0x10 [ 239.230636][ T30] kthread+0x2f0/0x390 [ 239.234722][ T30] ? __pfx_watchdog+0x10/0x10 [ 239.239422][ T30] ? __pfx_kthread+0x10/0x10 [ 239.244029][ T30] ret_from_fork+0x4b/0x80 [ 239.248470][ T30] ? __pfx_kthread+0x10/0x10 [ 239.253090][ T30] ret_from_fork_asm+0x1a/0x30 [ 239.257889][ T30] [ 239.261740][ T30] Sending NMI from CPU 1 to CPUs 0: [ 239.267390][ C0] NMI backtrace for cpu 0 [ 239.267403][ C0] CPU: 0 UID: 0 PID: 5293 Comm: kworker/0:7 Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 239.267422][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 239.267431][ C0] Workqueue: wg-crypt-wg1 wg_packet_decrypt_worker [ 239.267456][ C0] RIP: 0010:preempt_count_add+0x140/0x190 [ 239.267477][ C0] Code: 5c ff ff ff 48 c7 c1 40 09 3d 9a 80 e1 07 80 c1 03 38 c1 0f 8c fe fe ff ff 48 c7 c7 40 09 3d 9a e8 15 5d 9b 00 e9 ed fe ff ff <48> c7 c1 40 09 3d 9a 80 e1 07 80 c1 03 38 c1 0f 8c 07 ff ff ff 48 [ 239.267494][ C0] RSP: 0018:ffffc90000006a50 EFLAGS: 00000202 [ 239.267508][ C0] RAX: 0000000000000004 RBX: 0000000000000001 RCX: ffffffff9a3d0903 [ 239.267519][ C0] RDX: dffffc0000000000 RSI: ffffffff81608e00 RDI: 0000000000000001 [ 239.267530][ C0] RBP: ffffc90000006b78 R08: 0000000000000016 R09: ffffc90000006c30 [ 239.267542][ C0] R10: ffffc90000006b90 R11: ffffffff8180a0e0 R12: dffffc0000000000 [ 239.267554][ C0] R13: ffffc90000006b40 R14: ffffffff81608e00 R15: dffffc0000000000 [ 239.267566][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 239.267579][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 239.267591][ C0] CR2: 0000001b32a0bff8 CR3: 000000000e734000 CR4: 00000000003526f0 [ 239.267604][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 239.267614][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 239.267624][ C0] Call Trace: [ 239.267630][ C0] [ 239.267636][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 239.267655][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 239.267677][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 239.267695][ C0] ? nmi_handle+0x2a/0x5a0 [ 239.267717][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 239.267736][ C0] ? nmi_handle+0x14f/0x5a0 [ 239.267751][ C0] ? nmi_handle+0x2a/0x5a0 [ 239.267767][ C0] ? preempt_count_add+0x140/0x190 [ 239.267785][ C0] ? default_do_nmi+0x63/0x160 [ 239.267803][ C0] ? exc_nmi+0x123/0x1f0 [ 239.267820][ C0] ? end_repeat_nmi+0xf/0x53 [ 239.267835][ C0] ? kthread+0x2f0/0x390 [ 239.267850][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 239.267870][ C0] ? kthread+0x2f0/0x390 [ 239.267884][ C0] ? preempt_count_add+0x140/0x190 [ 239.267902][ C0] ? preempt_count_add+0x140/0x190 [ 239.267920][ C0] ? preempt_count_add+0x140/0x190 [ 239.267938][ C0] [ 239.267943][ C0] [ 239.267949][ C0] ? kthread+0x2f0/0x390 [ 239.267963][ C0] unwind_next_frame+0xb0/0x22d0 [ 239.267982][ C0] ? worker_thread+0x870/0xd30 [ 239.268003][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 239.268021][ C0] arch_stack_walk+0x11c/0x150 [ 239.268039][ C0] ? kthread+0x2f0/0x390 [ 239.268055][ C0] stack_trace_save+0x118/0x1d0 [ 239.268072][ C0] ? stack_trace_save+0x118/0x1d0 [ 239.268088][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 239.268106][ C0] ? __asan_memset+0x23/0x50 [ 239.268126][ C0] ? unwind_next_frame+0x193b/0x22d0 [ 239.268144][ C0] kasan_save_track+0x3f/0x80 [ 239.268158][ C0] ? kasan_save_track+0x3f/0x80 [ 239.268172][ C0] ? __kasan_slab_alloc+0x66/0x80 [ 239.268187][ C0] ? kmem_cache_alloc_node_noprof+0x16b/0x320 [ 239.268205][ C0] ? __alloc_skb+0x1c3/0x440 [ 239.268220][ C0] ? synproxy_send_client_synack+0x1ba/0xf30 [ 239.268245][ C0] ? nft_synproxy_eval_v4+0x3ca/0x610 [ 239.268265][ C0] ? nft_synproxy_do_eval+0x362/0xa60 [ 239.268283][ C0] ? nft_do_chain+0x4ad/0x1da0 [ 239.268297][ C0] ? nft_do_chain_inet+0x418/0x6b0 [ 239.268316][ C0] ? nf_hook_slow+0xc3/0x220 [ 239.268334][ C0] ? NF_HOOK+0x29e/0x450 [ 239.268350][ C0] ? NF_HOOK+0x3a4/0x450 [ 239.268365][ C0] ? __netif_receive_skb+0x2bf/0x650 [ 239.268382][ C0] ? process_backlog+0x662/0x15b0 [ 239.268399][ C0] ? __napi_poll+0xcb/0x490 [ 239.268415][ C0] ? net_rx_action+0x89b/0x1240 [ 239.268432][ C0] ? handle_softirqs+0x2c5/0x980 [ 239.268449][ C0] ? do_softirq+0x11b/0x1e0 [ 239.268466][ C0] ? __local_bh_enable_ip+0x1bb/0x200 [ 239.268483][ C0] ? wg_packet_decrypt_worker+0xcde/0xd80 [ 239.268502][ C0] ? process_scheduled_works+0xa63/0x1850 [ 239.268521][ C0] ? worker_thread+0x870/0xd30 [ 239.268538][ C0] ? kthread+0x2f0/0x390 [ 239.268568][ C0] __kasan_slab_alloc+0x66/0x80 [ 239.268583][ C0] ? __alloc_skb+0x1c3/0x440 [ 239.268598][ C0] kmem_cache_alloc_node_noprof+0x16b/0x320 [ 239.268619][ C0] __alloc_skb+0x1c3/0x440 [ 239.268636][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 239.268655][ C0] synproxy_send_client_synack+0x1ba/0xf30 [ 239.268677][ C0] ? kasan_quarantine_put+0xdc/0x230 [ 239.268691][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 239.268707][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 239.268728][ C0] ? synproxy_pernet+0x45/0x270 [ 239.268749][ C0] nft_synproxy_eval_v4+0x3ca/0x610 [ 239.268772][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 239.268791][ C0] ? validate_chain+0x11e/0x5920 [ 239.268807][ C0] ? nf_ip_checksum+0x13a/0x500 [ 239.268824][ C0] nft_synproxy_do_eval+0x362/0xa60 [ 239.268846][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 239.268869][ C0] ? __pfx_validate_chain+0x10/0x10 [ 239.268889][ C0] nft_do_chain+0x4ad/0x1da0 [ 239.268910][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 239.268924][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 239.268954][ C0] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 239.268973][ C0] nft_do_chain_inet+0x418/0x6b0 [ 239.268993][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 239.269012][ C0] ? ipt_do_table+0x312/0x1860 [ 239.269039][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 239.269057][ C0] nf_hook_slow+0xc3/0x220 [ 239.269076][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 239.269093][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 239.269110][ C0] NF_HOOK+0x29e/0x450 [ 239.269127][ C0] ? NF_HOOK+0x9a/0x450 [ 239.269143][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 239.269160][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 239.269179][ C0] ? ip_rcv_finish+0x406/0x560 [ 239.269197][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 239.269213][ C0] NF_HOOK+0x3a4/0x450 [ 239.269228][ C0] ? __lock_acquire+0x1384/0x2050 [ 239.269255][ C0] ? NF_HOOK+0x9a/0x450 [ 239.269270][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 239.269286][ C0] ? ip_rcv_core+0x801/0xd10 [ 239.269302][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 239.269323][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 239.269339][ C0] __netif_receive_skb+0x2bf/0x650 [ 239.269358][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 239.269377][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 239.269394][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 239.269414][ C0] ? __pfx_lock_release+0x10/0x10 [ 239.269433][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 239.269458][ C0] process_backlog+0x662/0x15b0 [ 239.269478][ C0] ? process_backlog+0x33b/0x15b0 [ 239.269500][ C0] ? __pfx_process_backlog+0x10/0x10 [ 239.269518][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 239.269539][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 239.269557][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 239.269578][ C0] __napi_poll+0xcb/0x490 [ 239.269597][ C0] net_rx_action+0x89b/0x1240 [ 239.269625][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 239.269644][ C0] ? sched_balance_domains+0x91b/0xa90 [ 239.269667][ C0] ? sched_balance_domains+0x1b2/0xa90 [ 239.269684][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 239.269708][ C0] handle_softirqs+0x2c5/0x980 [ 239.269728][ C0] ? do_softirq+0x11b/0x1e0 [ 239.269747][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 239.269769][ C0] do_softirq+0x11b/0x1e0 [ 239.269786][ C0] [ 239.269791][ C0] [ 239.269797][ C0] ? __pfx_do_softirq+0x10/0x10 [ 239.269814][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 239.269834][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 239.269853][ C0] ? rcu_is_watching+0x15/0xb0 [ 239.269870][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 239.269889][ C0] ? wg_packet_decrypt_worker+0xcde/0xd80 [ 239.269908][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 239.269927][ C0] ? wg_packet_decrypt_worker+0x8b3/0xd80 [ 239.269948][ C0] wg_packet_decrypt_worker+0xcde/0xd80 [ 239.269975][ C0] ? __pfx_wg_packet_decrypt_worker+0x10/0x10 [ 239.270029][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 239.270050][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 239.270074][ C0] ? process_scheduled_works+0x976/0x1850 [ 239.270093][ C0] process_scheduled_works+0xa63/0x1850 [ 239.270124][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 239.270146][ C0] ? assign_work+0x364/0x3d0 [ 239.270166][ C0] worker_thread+0x870/0xd30 [ 239.270188][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 239.270209][ C0] ? __kthread_parkme+0x169/0x1d0 [ 239.270230][ C0] ? __pfx_worker_thread+0x10/0x10 [ 239.270253][ C0] kthread+0x2f0/0x390 [ 239.270267][ C0] ? __pfx_worker_thread+0x10/0x10 [ 239.270285][ C0] ? __pfx_kthread+0x10/0x10 [ 239.270299][ C0] ret_from_fork+0x4b/0x80 [ 239.270318][ C0] ? __pfx_kthread+0x10/0x10 [ 239.270332][ C0] ret_from_fork_asm+0x1a/0x30 [ 239.270358][ C0] [ 240.205195][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 240.212097][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc3-syzkaller-00044-g2f87d0916ce0 #0 [ 240.222612][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 240.232681][ T30] Call Trace: [ 240.235971][ T30] [ 240.238917][ T30] dump_stack_lvl+0x241/0x360 [ 240.243624][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 240.248845][ T30] ? __pfx__printk+0x10/0x10 [ 240.253453][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 240.259462][ T30] ? vscnprintf+0x5d/0x90 [ 240.263814][ T30] panic+0x349/0x880 [ 240.267730][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 240.273907][ T30] ? __pfx_panic+0x10/0x10 [ 240.278340][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 240.283730][ T30] ? __irq_work_queue_local+0x137/0x410 [ 240.289297][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 240.294689][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 240.300863][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 240.307040][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 240.313216][ T30] watchdog+0x1033/0x1040 [ 240.317581][ T30] ? watchdog+0x1ea/0x1040 [ 240.322021][ T30] ? __pfx_watchdog+0x10/0x10 [ 240.326719][ T30] kthread+0x2f0/0x390 [ 240.330803][ T30] ? __pfx_watchdog+0x10/0x10 [ 240.335498][ T30] ? __pfx_kthread+0x10/0x10 [ 240.340102][ T30] ret_from_fork+0x4b/0x80 [ 240.344543][ T30] ? __pfx_kthread+0x10/0x10 [ 240.349162][ T30] ret_from_fork_asm+0x1a/0x30 [ 240.353959][ T30] [ 240.357246][ T30] Kernel Offset: disabled [ 240.361564][ T30] Rebooting in 86400 seconds..