last executing test programs: 27.431057133s ago: executing program 4 (id=32): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000240)=""/214, 0x62}, {&(0x7f0000001140)=""/4055, 0xfd7}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000007c0)=""/191, 0xbf}, {&(0x7f0000000040)=""/20, 0x14}, {&(0x7f00000000c0)=""/42, 0x2a}, {&(0x7f0000000b00)=""/210, 0xd2}, {&(0x7f0000002340)=""/31, 0x1f}, {&(0x7f0000000940)=""/183, 0xb7}, {&(0x7f0000000c00)=""/130, 0x82}, {&(0x7f0000000180)=""/59, 0x3b}, {&(0x7f0000000140)=""/60, 0x36}, {&(0x7f00000003c0)=""/68, 0x44}], 0xd}, 0x0) 26.983761615s ago: executing program 4 (id=34): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001200ff"], 0x2c}}, 0x0) 26.468430071s ago: executing program 4 (id=36): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'erspan0\x00'}) ioctl(r0, 0x8b1b, &(0x7f0000000040)) 26.249674511s ago: executing program 2 (id=37): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x62) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000680003010000000000000000000000000000000006000300000000001400020000000002"], 0x34}}, 0x0) 26.092633367s ago: executing program 4 (id=39): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f00000027c0)={0x40, 0x14, 0x0, 0x0, 0x0, 0x1, 0x0}) 25.872081785s ago: executing program 2 (id=40): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001280)='/proc/slabinfo\x00', 0x0, 0x0) read$hiddev(r0, &(0x7f00000000c0)=""/4092, 0xffc) preadv(r0, &(0x7f00000012c0)=[{&(0x7f0000001800)=""/250, 0xfa}], 0x1, 0x40000004, 0x0) 25.595859355s ago: executing program 4 (id=42): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x40, 0x1, 0x1, 0x4002, 0x0, 0x5, 0x0}) 25.303741384s ago: executing program 2 (id=44): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x64, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xa}, @NFTA_COUNTER_PACKETS]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_ID={0x8}]}], {0x14}}, 0x8c}}, 0x0) 25.020097462s ago: executing program 4 (id=46): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x260c0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0x10) open$dir(&(0x7f0000000000)='./file0\x00', 0x490a80, 0x0) ppoll(&(0x7f00000000c0)=[{r3, 0x856d}, {r4, 0x0, 0x64}], 0x2, 0x0, 0x0, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0xb, &(0x7f0000000040), 0x4) r6 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r6, 0x47f9, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) recvmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r5, &(0x7f0000002e80)={&(0x7f0000002d40)={0x2, 0x0, @local}, 0x10, &(0x7f0000002dc0)=[{&(0x7f0000002d80)='.', 0x1}], 0x1, 0x0, 0x0, 0x1f000004}, 0x0) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000040)) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='timers\x00') read$FUSE(r9, &(0x7f0000000540)={0x2020}, 0x2020) lseek(r9, 0x3, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 24.008458092s ago: executing program 2 (id=50): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4038ae7a, &(0x7f0000000240)={[{0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}]}) 19.493333159s ago: executing program 2 (id=55): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="c7"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000001c0)=0x10000) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}]}, &(0x7f0000000300)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x0, 0x0, {0x7, 0x0, 0x0, r7}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000240)={0x18, &(0x7f0000000000)={0x40, 0x11, 0xa0, {0xa0, 0x24, "eeea55f06b901c8de91ac1e45e4bbee261097f52d01a9cac1440edbd5e67eff11297b427e2dc1a81a0b202c9c27806cdf2621019e66a343d37071b4a289ed2ac485aec15f6b027e31987919e1e45a5f267b650047f23c4fd0693ebd9bcb9490b35b1b4d5047516dca36dae0257d716619d234832cf8f7c29a1e4500695669374d097edd33e22f9355bf6e7c6ed92813d4fe55ca396f8dbc7a53789a40f90"}}, &(0x7f00000000c0)={0x0, 0x3, 0xb3, @string={0xb3, 0x3, "0b06342e4dd2478cec7199491514e6738195f7796fe5a7051b0cfd660fed021216f7d25f54933e5db8a58d2ddb451cf379bccee529b217f592aa47831626fae7b74fd78b21c2754caca4c625ae36067102f0fdceda81ac9c0ec62b58cc38122c92e36ebe27443b9b6c6e077869289d50095b0f576d5e2ffab2998e683623d9ab3680744ded9f379b4e6a4388e21b9b6e05a6a2f8e26b5605e3cc04a88993ce8895d75f545897984d33ae5cf7096ae594a0"}}, &(0x7f0000000180)={0x0, 0xf, 0x20, {0x5, 0xf, 0x20, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0xf, 0x3, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "fc42b6de6843f8d811678c8864b43482"}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x18, 0x8, 0x5, "22c965de", "e6157e3c"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x4, 0x4c, 0x0, 0x8, 0x1, 0x1a5c}}}, &(0x7f0000000700)={0x44, &(0x7f0000000280)={0x40, 0x15, 0x3f, "4a6fce94bdaccaa08593efd90809f263ff6a4374d4e9612f5b728d3edd6b5d6ce54611187767e6729f2b24cb8041a866d0d5cbb3260b2477b940ded8bca05f"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x6}, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0xa0, 0x4, [0xff]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x5a}, &(0x7f0000000480)={0x40, 0xb, 0x2, "a389"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x200}, &(0x7f0000000500)={0x40, 0x13, 0x6, @local}, &(0x7f0000000540)={0x40, 0x17, 0x6, @link_local}, &(0x7f0000000580)={0x40, 0x19, 0x2, "9993"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2, 0x6}, 0x0, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x5}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x4}}) syz_usb_disconnect(0xffffffffffffffff) 18.196633143s ago: executing program 0 (id=57): r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) 17.044869368s ago: executing program 1 (id=58): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x3a}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000080)="27050200590200000600", 0xa}, {&(0x7f00000009c0)="807fe08d7b077433fed4bc347bd6d6a0250dab620c15883e23d25e3f6d5291ee04bca317bc8f8bed62614ae19ef0e96a73b84f583263992c2783b573ae87fa04c7079aa2db4d0e235a30c8bd925b12b15936e482f4b180fda88f983fe400992099821f8d0a0ac60d833b2669a8579db2d6bb782cc01737a68ec4f6f56ccb1756f74d6a82a528b76fcc673cca6850d0ca68940fbd19ee9f2ea5392741a41517556eac7cbee4a3d4b2c1847770197a2f05fabc6c27d94385c808e97bf7ea874a84df63ed71dd7b177eb81eaebf3d59d85c974242a862707a5337da1a7093ca8ee2b45a3dc7021fdcb41e69b581f8a53e2c108bf791b0cf5a2d5d150219347bd67226fae4d391d708dca0af550625a583c9dcdf76d9ac86015870a960fe807a6b0a7e356bea85ae375e68c9682e09f83204f360e69c3225a251f9d7b71cc567a4c64aadf6a378dd9bc61e97de80db86567fef141e095e8ed1836fd18ba374df9800abb896ad97c1fcee4498e5b05babb801e3b72fc931cf7e60b8e40f295343384e425c931fd745222f48b280c815adea1389f53cab6e9b60a0ef3dbdf4f9f311af5f61a2fd55e7cfe550293fd782e74a585005c429f9918e3db2a9f28bb8fb4e2287674b217d52874408e309b2183edead87ef90ce4f026d01c918ea9e1e04311b4e6c4b817befdfdfb86db67edb72c746431826eeb26cb1f0972019ef007a45e129ef715b93a18edb29b997d57f60ed5b7845f4a98615e90aeab50095d01d65ce510c459c79d728d338a1bf8ef4b3e74dae65489a773588bc878339160e3e311033dbf730d2164ae22c9f802e47f93215cd6ad000ec3750b9f7", 0x259}, {&(0x7f00000001c0)="d9abc9626d0064bfded91026bfd8e15d474ee6f97de0ad7c815f1ee000", 0x1d}], 0x3}, 0x0) 16.372213201s ago: executing program 0 (id=59): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40404}, 0x100) 13.451409974s ago: executing program 0 (id=62): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0xd8}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local, @random="1d5da714014a", @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x0, 0x0, 0x0, 0x2, 0x3}}}}}}}, 0x0) 13.450865317s ago: executing program 1 (id=63): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='cmdline\x00') flock(r0, 0x2) syz_open_procfs(0x0, &(0x7f00000004c0)='cmdline\x00') 13.450252352s ago: executing program 2 (id=64): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) 12.092632848s ago: executing program 3 (id=65): unshare(0x2a020400) r0 = socket(0x10, 0x3, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000040)) 12.067288237s ago: executing program 0 (id=66): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000e40)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c000}, 0x4000000) 12.012295376s ago: executing program 1 (id=67): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000003380)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003740)=ANY=[@ANYBLOB="14000000150a0102000000000000000001"], 0x14}}, 0x0) 11.427706311s ago: executing program 0 (id=68): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9f"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000080)=""/157) 11.323506371s ago: executing program 1 (id=69): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x214400, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee01}}, 0x1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100766574680000000004000280080029000ced0100080028"], 0x44}}, 0x0) 11.260273466s ago: executing program 3 (id=70): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000a00)={0x38, r1, 0x5, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x38}}, 0x0) 10.512960277s ago: executing program 1 (id=71): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0), 0x208102, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r5, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x27) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000b705000008"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) syz_usb_connect(0x1, 0x75, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x9a, 0x0, 0x22, 0x8, 0x5c6, 0x9062, 0xa310, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x1, 0x62, 0x5, 0x10, 0x2, [{{0x9, 0x4, 0x6, 0x3, 0x3, 0x0, 0x41, 0xc0, 0x13, [@uac_as={[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7, 0x3, 0x5, 0x7, "a3d0", "daf6"}]}], [{{0x9, 0x5, 0xf, 0x3, 0x8, 0x1, 0x5, 0x92, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x2}]}}, {{0x9, 0x5, 0x1, 0x1, 0x10, 0x3, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x4}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x10, 0x7, 0x4, [@generic={0x1c, 0x3, "6942a818ad7e22491674e6266ff20b0cf7ff175427dcddeab4a0"}]}}]}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0xa5, 0x3, 0xc8, 0x10, 0x1}, 0x3f, &(0x7f00000001c0)={0x5, 0xf, 0x3f, 0x1, [@generic={0x3a, 0x10, 0x3, "fd6e946d05be52b5d28a46ab7f6e025a82b5f107b9afd778be691e0b2bd3dcdb08b27ca313cb36710fd6a155683b6896905d39b415223e"}]}, 0x3, [{0x64, &(0x7f00000004c0)=@string={0x64, 0x3, "c294f44c043430e2ce577f85a58d39c362d4888b962f234cfd4403b30ba5b7f1ddb85a9d0da88ca4e5beb9478565e289050f82a97c94c84a041f5afcc46dd255f40459caaacdcb10ca67fb81bdf5d058f511632398964c70374716bc33255e895f5d"}}, {0x9, &(0x7f0000000200)=@string={0x9, 0x3, "4fbf52bf6fc018"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x2809}}]}) syz_usb_control_io$hid(r4, &(0x7f0000000680)={0x14, &(0x7f0000000380)={0x0, 0x2, 0x5b, {0x5b, 0x23, "20ff760f26973e113ea00b423b3673f35a44bfad187bef63ee32b1effefca97e5d809be88b234234f46603c131b1488ecd54028869f142956ad75fe0adfedb1c41e663fc818971e5508283d1a9308472583e6c3c136afe8108"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}, &(0x7f0000000600)={0x0, 0x22, 0x17, {[@local=@item_4={0x3, 0x2, 0x0, "efbaeec6"}, @local=@item_012={0x0, 0x2, 0x2}, @local=@item_4={0x3, 0x2, 0x4, "be052e57"}, @main=@item_012={0x0, 0x0, 0x9}, @global=@item_4={0x3, 0x1, 0xa, "8eb4d7ec"}, @main=@item_012={0x0, 0x0, 0x9}, @global=@item_4={0x3, 0x1, 0xa, "9e20e934"}]}}, &(0x7f0000000640)={0x0, 0x21, 0x9, {0x9, 0x21, 0xfff, 0x5b, 0x1, {0x22, 0xb3e}}}}, &(0x7f0000000940)={0x18, &(0x7f0000000b40)=ANY=[], 0x0, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000900)={0x20, 0x3, 0x1, 0x1}}) r9 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_BINDTODEVICE_wg(r9, 0x1, 0x19, &(0x7f0000000000)='wg1\x00', 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x100010, 0xffffffffffffffff, 0x0) getsockopt(r8, 0x9, 0x0, &(0x7f0000000980)=""/188, &(0x7f0000000a40)=0xbc) socketpair$unix(0x1, 0x2, 0x0, 0x0) 10.442745592s ago: executing program 0 (id=72): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x260c0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0x10) open$dir(&(0x7f0000000000)='./file0\x00', 0x490a80, 0x0) ppoll(&(0x7f00000000c0)=[{r3, 0x856d}, {r4, 0x0, 0x64}], 0x2, 0x0, 0x0, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0xb, &(0x7f0000000040), 0x4) r6 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r6, 0x47f9, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000500)}], 0x1}, 0x0) recvmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r5, &(0x7f0000002e80)={&(0x7f0000002d40)={0x2, 0x0, @local}, 0x10, &(0x7f0000002dc0)=[{&(0x7f0000002d80)='.', 0x1}], 0x1, 0x0, 0x0, 0x1f000004}, 0x0) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000040)) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='timers\x00') read$FUSE(r9, &(0x7f0000000540)={0x2020}, 0x2020) lseek(r9, 0x3, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 10.328114695s ago: executing program 3 (id=73): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="c7"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000001c0)=0x10000) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}]}, &(0x7f0000000300)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x0, 0x0, {0x7, 0x0, 0x0, r7}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000240)={0x18, &(0x7f0000000000)={0x40, 0x11, 0xa0, {0xa0, 0x24, "eeea55f06b901c8de91ac1e45e4bbee261097f52d01a9cac1440edbd5e67eff11297b427e2dc1a81a0b202c9c27806cdf2621019e66a343d37071b4a289ed2ac485aec15f6b027e31987919e1e45a5f267b650047f23c4fd0693ebd9bcb9490b35b1b4d5047516dca36dae0257d716619d234832cf8f7c29a1e4500695669374d097edd33e22f9355bf6e7c6ed92813d4fe55ca396f8dbc7a53789a40f90"}}, &(0x7f00000000c0)={0x0, 0x3, 0xb3, @string={0xb3, 0x3, "0b06342e4dd2478cec7199491514e6738195f7796fe5a7051b0cfd660fed021216f7d25f54933e5db8a58d2ddb451cf379bccee529b217f592aa47831626fae7b74fd78b21c2754caca4c625ae36067102f0fdceda81ac9c0ec62b58cc38122c92e36ebe27443b9b6c6e077869289d50095b0f576d5e2ffab2998e683623d9ab3680744ded9f379b4e6a4388e21b9b6e05a6a2f8e26b5605e3cc04a88993ce8895d75f545897984d33ae5cf7096ae594a0"}}, &(0x7f0000000180)={0x0, 0xf, 0x20, {0x5, 0xf, 0x20, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0xf, 0x3, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "fc42b6de6843f8d811678c8864b43482"}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x18, 0x8, 0x5, "22c965de", "e6157e3c"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x4, 0x4c, 0x0, 0x8, 0x1, 0x1a5c}}}, &(0x7f0000000700)={0x44, &(0x7f0000000280)={0x40, 0x15, 0x3f, "4a6fce94bdaccaa08593efd90809f263ff6a4374d4e9612f5b728d3edd6b5d6ce54611187767e6729f2b24cb8041a866d0d5cbb3260b2477b940ded8bca05f"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x6}, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0xa0, 0x4, [0xff]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x5a}, &(0x7f0000000480)={0x40, 0xb, 0x2, "a389"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x200}, &(0x7f0000000500)={0x40, 0x13, 0x6, @local}, &(0x7f0000000540)={0x40, 0x17, 0x6, @link_local}, &(0x7f0000000580)={0x40, 0x19, 0x2, "9993"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2, 0x6}, 0x0, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x5}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x4}}) syz_usb_disconnect(0xffffffffffffffff) 2.387264689s ago: executing program 3 (id=75): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8, 0x5, 0x1000, 0x3a, 0xfffffffe}, 0x1c) 1.924159886s ago: executing program 3 (id=76): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000003180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000e0030000000e02000000090001007300803000000000080002400000000214000000110001"], 0x50}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000002600)={0x20, 0x7, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x80040}, 0x4058840) 1.828989528s ago: executing program 1 (id=77): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x2c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000000)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x25}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000540)=""/192, 0xfffffffffffffe14}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)) 0s ago: executing program 3 (id=79): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x16, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.28' (ED25519) to the list of known hosts. [ 65.961039][ T5213] cgroup: Unknown subsys name 'net' [ 66.068912][ T5213] cgroup: Unknown subsys name 'cpuset' [ 66.077921][ T5213] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.616624][ T5213] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.909979][ T5230] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.919325][ T5230] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.928434][ T5230] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.936874][ T5230] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.939665][ T5232] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.945402][ T5230] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.960167][ T5230] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.969948][ T5230] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.977881][ T5230] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 69.985582][ T5230] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.989890][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.993532][ T5230] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.006590][ T5238] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.015480][ T5237] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.018788][ T5230] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.030158][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.031082][ T5230] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.038378][ T5238] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.046510][ T5232] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.051863][ T5238] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.059280][ T5232] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 70.067311][ T5238] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.074738][ T5230] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.087269][ T5232] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.089046][ T5230] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 70.096358][ T5232] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 70.103399][ T5230] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.110218][ T5232] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.131547][ T5236] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 70.148179][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.583803][ T5243] chnl_net:caif_netlink_parms(): no params data found [ 70.672369][ T5244] chnl_net:caif_netlink_parms(): no params data found [ 70.745776][ T5241] chnl_net:caif_netlink_parms(): no params data found [ 70.765429][ T5247] chnl_net:caif_netlink_parms(): no params data found [ 70.785855][ T5243] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.793597][ T5243] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.806279][ T5243] bridge_slave_0: entered allmulticast mode [ 70.813993][ T5243] bridge_slave_0: entered promiscuous mode [ 70.851794][ T5243] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.859134][ T5243] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.866867][ T5243] bridge_slave_1: entered allmulticast mode [ 70.873555][ T5243] bridge_slave_1: entered promiscuous mode [ 70.936052][ T5246] chnl_net:caif_netlink_parms(): no params data found [ 70.969548][ T5247] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.977349][ T5247] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.984904][ T5247] bridge_slave_0: entered allmulticast mode [ 70.992687][ T5247] bridge_slave_0: entered promiscuous mode [ 71.010871][ T5243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.086321][ T5247] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.093447][ T5247] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.101276][ T5247] bridge_slave_1: entered allmulticast mode [ 71.108371][ T5247] bridge_slave_1: entered promiscuous mode [ 71.126494][ T5243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.143546][ T5244] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.150881][ T5244] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.158546][ T5244] bridge_slave_0: entered allmulticast mode [ 71.165943][ T5244] bridge_slave_0: entered promiscuous mode [ 71.187232][ T5247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.212486][ T5244] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.223734][ T5244] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.231629][ T5244] bridge_slave_1: entered allmulticast mode [ 71.239494][ T5244] bridge_slave_1: entered promiscuous mode [ 71.255113][ T5247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.281573][ T5241] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.289123][ T5241] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.297058][ T5241] bridge_slave_0: entered allmulticast mode [ 71.304156][ T5241] bridge_slave_0: entered promiscuous mode [ 71.331015][ T5246] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.339249][ T5246] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.346770][ T5246] bridge_slave_0: entered allmulticast mode [ 71.353753][ T5246] bridge_slave_0: entered promiscuous mode [ 71.361883][ T5246] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.370045][ T5246] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.377630][ T5246] bridge_slave_1: entered allmulticast mode [ 71.384386][ T5246] bridge_slave_1: entered promiscuous mode [ 71.393917][ T5243] team0: Port device team_slave_0 added [ 71.402165][ T5243] team0: Port device team_slave_1 added [ 71.408380][ T5241] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.415576][ T5241] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.422754][ T5241] bridge_slave_1: entered allmulticast mode [ 71.429935][ T5241] bridge_slave_1: entered promiscuous mode [ 71.454098][ T5247] team0: Port device team_slave_0 added [ 71.490461][ T5244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.503361][ T5244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.525496][ T5247] team0: Port device team_slave_1 added [ 71.547760][ T5243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.554825][ T5243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.581073][ T5243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.606475][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.612949][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.639982][ T5246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.651697][ T5246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.661439][ T5243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.668611][ T5243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.695302][ T5243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.715727][ T5241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.727827][ T5241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.739164][ T5244] team0: Port device team_slave_0 added [ 71.747860][ T5244] team0: Port device team_slave_1 added [ 71.762794][ T5247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.770854][ T5247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.801092][ T5247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.867523][ T5247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.878326][ T5247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.905125][ T5247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.918899][ T5246] team0: Port device team_slave_0 added [ 71.927212][ T5246] team0: Port device team_slave_1 added [ 71.943186][ T5241] team0: Port device team_slave_0 added [ 71.951558][ T5241] team0: Port device team_slave_1 added [ 71.958130][ T5244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.965287][ T5244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.992198][ T5244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.041472][ T5246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.048757][ T5246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.075362][ T5246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.085947][ T54] Bluetooth: hci3: command tx timeout [ 72.109963][ T5244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.117253][ T5244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.143409][ T5244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.164708][ T4620] Bluetooth: hci2: command tx timeout [ 72.168790][ T5243] hsr_slave_0: entered promiscuous mode [ 72.170609][ T54] Bluetooth: hci1: command tx timeout [ 72.182344][ T5243] hsr_slave_1: entered promiscuous mode [ 72.190258][ T5246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.197597][ T5246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.223754][ T5246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.241284][ T5241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.248605][ T5241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.248657][ T54] Bluetooth: hci4: command tx timeout [ 72.274810][ T4620] Bluetooth: hci0: command tx timeout [ 72.280642][ T5241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.305480][ T5247] hsr_slave_0: entered promiscuous mode [ 72.311970][ T5247] hsr_slave_1: entered promiscuous mode [ 72.318444][ T5247] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.326754][ T5247] Cannot create hsr debugfs directory [ 72.342399][ T5241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.349824][ T5241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.375880][ T5241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.449654][ T5246] hsr_slave_0: entered promiscuous mode [ 72.456065][ T5246] hsr_slave_1: entered promiscuous mode [ 72.462120][ T5246] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.470497][ T5246] Cannot create hsr debugfs directory [ 72.521964][ T5241] hsr_slave_0: entered promiscuous mode [ 72.528741][ T5241] hsr_slave_1: entered promiscuous mode [ 72.535263][ T5241] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.542877][ T5241] Cannot create hsr debugfs directory [ 72.552913][ T5244] hsr_slave_0: entered promiscuous mode [ 72.559639][ T5244] hsr_slave_1: entered promiscuous mode [ 72.566329][ T5244] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.574000][ T5244] Cannot create hsr debugfs directory [ 72.913577][ T5247] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.927411][ T5247] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.941466][ T5247] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.951614][ T5247] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.013787][ T5243] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.038145][ T5243] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.048366][ T5243] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.058505][ T5243] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.109474][ T5244] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.138339][ T5244] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.166043][ T5244] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.177413][ T5241] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.191016][ T5241] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.203194][ T5241] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.215459][ T5244] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.233900][ T5241] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.327246][ T5246] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.341221][ T5246] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.351860][ T5246] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.362629][ T5246] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.402419][ T5247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.483055][ T5247] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.513772][ T5243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.537744][ T1068] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.545329][ T1068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.588434][ T1068] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.595579][ T1068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.653541][ T5243] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.671367][ T5244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.709736][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.716943][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.730064][ T5241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.752498][ T1047] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.759720][ T1047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.803402][ T5241] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.829021][ T5246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.840234][ T5244] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.876875][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.884006][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.902353][ T2925] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.909515][ T2925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.934353][ T5246] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.946722][ T2925] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.953922][ T2925] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.968641][ T5247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.987594][ T2925] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.994834][ T2925] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.004077][ T2925] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.011305][ T2925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.056555][ T2925] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.063764][ T2925] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.140522][ T5243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.165477][ T4620] Bluetooth: hci3: command tx timeout [ 74.199289][ T5241] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.222997][ T5247] veth0_vlan: entered promiscuous mode [ 74.244826][ T4620] Bluetooth: hci1: command tx timeout [ 74.245946][ T54] Bluetooth: hci2: command tx timeout [ 74.300157][ T5247] veth1_vlan: entered promiscuous mode [ 74.324877][ T54] Bluetooth: hci0: command tx timeout [ 74.326051][ T4620] Bluetooth: hci4: command tx timeout [ 74.336864][ T5246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.362369][ T5243] veth0_vlan: entered promiscuous mode [ 74.389319][ T5244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.409127][ T5243] veth1_vlan: entered promiscuous mode [ 74.425849][ T5241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.458770][ T5246] veth0_vlan: entered promiscuous mode [ 74.474315][ T5246] veth1_vlan: entered promiscuous mode [ 74.488311][ T5247] veth0_macvtap: entered promiscuous mode [ 74.510939][ T5247] veth1_macvtap: entered promiscuous mode [ 74.562811][ T5246] veth0_macvtap: entered promiscuous mode [ 74.577966][ T5247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.588476][ T5243] veth0_macvtap: entered promiscuous mode [ 74.612646][ T5246] veth1_macvtap: entered promiscuous mode [ 74.621778][ T5243] veth1_macvtap: entered promiscuous mode [ 74.648047][ T5247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.663450][ T5244] veth0_vlan: entered promiscuous mode [ 74.687781][ T5247] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.697147][ T5247] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.706223][ T5247] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.715458][ T5247] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.736164][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.747194][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.758849][ T5243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.767536][ T5241] veth0_vlan: entered promiscuous mode [ 74.773954][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.786136][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.797321][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.808568][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.820937][ T5246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.831505][ T5244] veth1_vlan: entered promiscuous mode [ 74.850617][ T5241] veth1_vlan: entered promiscuous mode [ 74.863038][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.873916][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.891526][ T5243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.907880][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.920464][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.931414][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.942622][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.954249][ T5246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.982551][ T5243] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.993116][ T5243] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.003751][ T5243] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.012693][ T5243] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.047982][ T5246] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.057217][ T5246] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.066569][ T5246] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.075682][ T5246] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.089925][ T5244] veth0_macvtap: entered promiscuous mode [ 75.122307][ T5244] veth1_macvtap: entered promiscuous mode [ 75.166273][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.177502][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.188116][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.198698][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.210223][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.221335][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.232759][ T5244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.271961][ T2925] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.287594][ T2925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.290962][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.306203][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.316428][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.328658][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.338619][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.349565][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.361140][ T5244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.373227][ T5241] veth0_macvtap: entered promiscuous mode [ 75.411325][ T5241] veth1_macvtap: entered promiscuous mode [ 75.430091][ T5244] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.442571][ T5244] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.453207][ T5244] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.462220][ T5244] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.477524][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.489975][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.538463][ T2925] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.543916][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.559672][ T2925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.567608][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.578813][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.590148][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.600307][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.611285][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.621409][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.632360][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.645110][ T5241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.664333][ T1047] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.688150][ T1047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.707875][ T5247] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.722778][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.737808][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.747789][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.758635][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.769419][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.780199][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.790175][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.801228][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.814097][ T5241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.852582][ T5241] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.861885][ T5241] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.880401][ T5241] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.893454][ T5241] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.919507][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.929866][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.933819][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.964635][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.209961][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.209985][ T1047] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.217895][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.254671][ T4620] Bluetooth: hci3: command tx timeout [ 76.273335][ T1047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.282182][ T1047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.291504][ T1047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.317525][ T1068] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.326531][ T4620] Bluetooth: hci2: command tx timeout [ 76.331992][ T4620] Bluetooth: hci1: command tx timeout [ 76.338759][ T1068] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.405520][ T54] Bluetooth: hci0: command tx timeout [ 76.412113][ T4620] Bluetooth: hci4: command tx timeout [ 76.550851][ T5282] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 76.685464][ T29] audit: type=1326 audit(1727261113.156:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5294 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 76.789154][ T5282] usb 3-1: unable to get BOS descriptor or descriptor too short [ 76.844351][ T5282] usb 3-1: not running at top speed; connect to a high speed hub [ 76.934937][ T5282] usb 3-1: config 129 has an invalid interface number: 135 but max is 0 [ 76.943443][ T5282] usb 3-1: config 129 has an invalid interface number: 5 but max is 0 [ 76.972469][ T29] audit: type=1326 audit(1727261113.156:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5294 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 77.118040][ T5282] usb 3-1: config 129 descriptor has 1 excess byte, ignoring [ 77.160515][ T5304] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 77.205019][ T5282] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 77.278492][ T5282] usb 3-1: config 129 has no interface number 0 [ 77.285181][ T1167] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 77.314593][ T5226] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 77.335064][ T5282] usb 3-1: config 129 has no interface number 1 [ 77.341504][ T5282] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 77.391670][ T5282] usb 3-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 77.413477][ T5282] usb 3-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 77.435657][ T5282] usb 3-1: config 129 interface 135 has no altsetting 0 [ 77.443010][ T5282] usb 3-1: config 129 interface 5 has no altsetting 0 [ 77.485277][ T1167] usb 2-1: Using ep0 maxpacket: 16 [ 77.506493][ T1167] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.524700][ T5226] usb 5-1: Using ep0 maxpacket: 32 [ 77.536738][ T5282] usb 3-1: string descriptor 0 read error: -22 [ 77.561833][ T5282] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 77.578881][ T5226] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.600163][ T1167] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.630900][ T5226] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.642134][ T5282] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.654560][ T5285] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 77.679495][ T1167] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 77.693208][ T5226] usb 5-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 77.722049][ T1167] usb 2-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 77.775533][ T5226] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.787320][ T1167] usb 2-1: Product: syz [ 77.791573][ T1167] usb 2-1: Manufacturer: syz [ 77.799887][ T5282] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 77.834665][ T5285] usb 1-1: Using ep0 maxpacket: 8 [ 77.840741][ T5226] usb 5-1: config 0 descriptor?? [ 77.850364][ T5282] usb 3-1: MIDIStreaming interface descriptor not found [ 77.858719][ T1167] usb 2-1: config 0 descriptor?? [ 77.889102][ T5285] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.972760][ T5285] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 78.148239][ T5285] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 78.306732][ T5282] usb 3-1: USB disconnect, device number 2 [ 78.333863][ T54] Bluetooth: hci3: command tx timeout [ 78.378876][ T5285] usb 1-1: New USB device found, idVendor=058f, idProduct=9410, bcdDevice= 0.00 [ 78.406328][ T54] Bluetooth: hci1: command tx timeout [ 78.411988][ T4620] Bluetooth: hci2: command tx timeout [ 78.485137][ T4620] Bluetooth: hci0: command tx timeout [ 78.491511][ T54] Bluetooth: hci4: command tx timeout [ 78.539835][ T5285] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.573722][ T1167] kovaplus 0003:1E7D:2D50.0001: unknown main item tag 0xd [ 78.597358][ T5226] hkems 0003:2006:0118.0002: bogus close delimiter [ 78.603936][ T5226] hkems 0003:2006:0118.0002: item 0 4 2 10 parsing failed [ 78.646801][ T5285] usb 1-1: config 0 descriptor?? [ 78.746541][ T1167] kovaplus 0003:1E7D:2D50.0001: hidraw0: USB HID v0.07 Device [syz syz] on usb-dummy_hcd.1-1/input0 [ 78.793153][ T5226] hkems 0003:2006:0118.0002: parse failed [ 78.846997][ T5226] hkems 0003:2006:0118.0002: probe with driver hkems failed with error -22 [ 78.954314][ T5226] usb 5-1: USB disconnect, device number 2 [ 78.963044][ T1167] kovaplus 0003:1E7D:2D50.0001: couldn't init struct kovaplus_device [ 79.067076][ T1167] kovaplus 0003:1E7D:2D50.0001: couldn't install mouse [ 79.136443][ T1167] kovaplus 0003:1E7D:2D50.0001: probe with driver kovaplus failed with error -71 [ 79.214246][ T5285] maltron 0003:058F:9410.0003: unknown main item tag 0x0 [ 79.264964][ T1167] usb 2-1: USB disconnect, device number 2 [ 79.271464][ T5285] maltron 0003:058F:9410.0003: unknown main item tag 0x0 [ 79.395479][ T5285] maltron 0003:058F:9410.0003: hidraw0: USB HID v0.00 Device [HID 058f:9410] on usb-dummy_hcd.0-1/input0 [ 79.542663][ T5285] usb 1-1: USB disconnect, device number 2 [ 81.424682][ T5285] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 81.639497][ T5285] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.739296][ T5285] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.780629][ T5285] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 81.854532][ T5285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.911876][ T5285] usb 2-1: config 0 descriptor?? [ 82.045850][ T5361] netlink: 'syz.4.32': attribute type 29 has an invalid length. [ 82.056205][ T5282] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 82.113657][ T5361] netlink: 'syz.4.32': attribute type 29 has an invalid length. [ 82.240207][ T5282] usb 1-1: config 0 interface 0 has no altsetting 0 [ 82.274780][ T5282] usb 1-1: New USB device found, idVendor=056a, idProduct=0309, bcdDevice= 0.00 [ 82.344558][ T5282] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.354309][ T5363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.33'. [ 82.390930][ T5285] arvo 0003:1E7D:30D4.0004: collection stack underflow [ 82.445962][ T5282] usb 1-1: config 0 descriptor?? [ 82.466073][ T5285] arvo 0003:1E7D:30D4.0004: item 0 4 0 12 parsing failed [ 82.510827][ T5285] arvo 0003:1E7D:30D4.0004: parse failed [ 82.534192][ T5366] netlink: 12 bytes leftover after parsing attributes in process `syz.4.34'. [ 82.555053][ T5285] arvo 0003:1E7D:30D4.0004: probe with driver arvo failed with error -22 [ 82.630457][ T5285] usb 2-1: USB disconnect, device number 3 [ 82.902047][ T24] sched: DL replenish lagged too much [ 83.215163][ T5282] usb 1-1: USB disconnect, device number 3 [ 84.263573][ T5394] netlink: 'syz.2.44': attribute type 1 has an invalid length. [ 84.499934][ T5402] netlink: 'syz.3.47': attribute type 10 has an invalid length. [ 84.527561][ T5402] bridge0: port 3(team0) entered blocking state [ 84.545069][ T5402] bridge0: port 3(team0) entered disabled state [ 84.646330][ T5402] team0: entered allmulticast mode [ 84.651968][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.660609][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.668210][ T0] NOHZ tick-stop error: local softirq work is pending, handler #288!!! [ 84.669350][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.685880][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 84.709482][ T0] NOHZ tick-stop error: local softirq work is pending, handler #24a!!! [ 84.724950][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 84.805122][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 84.814945][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 85.205065][ T5402] team_slave_0: entered allmulticast mode [ 85.229949][ T5402] team_slave_1: entered allmulticast mode [ 85.542401][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 85.544950][ T5402] team0: entered promiscuous mode [ 86.164217][ T5402] team_slave_0: entered promiscuous mode [ 86.334849][ T5402] team_slave_1: entered promiscuous mode [ 86.388158][ T5402] bridge0: port 3(team0) entered blocking state [ 86.394772][ T5402] bridge0: port 3(team0) entered forwarding state [ 88.238464][ T937] cfg80211: failed to load regulatory.db [ 91.344670][ T5282] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 92.249629][ T5282] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 92.799860][ T5282] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.929219][ T5282] usb 4-1: Product: syz [ 93.671622][ T5282] usb 4-1: Manufacturer: syz [ 93.705320][ T5282] usb 4-1: SerialNumber: syz [ 93.766876][ T5282] usb 4-1: config 0 descriptor?? [ 93.827449][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 93.836207][ T5282] usb 4-1: can't set config #0, error -32 [ 93.874778][ T5282] usb 4-1: USB disconnect, device number 2 [ 98.612628][ T5461] netlink: 'syz.3.70': attribute type 2 has an invalid length. [ 98.935179][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 98.945839][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 98.953781][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 98.962719][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 98.974188][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 99.014680][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 100.644653][ T5282] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 101.124848][ T54] Bluetooth: hci5: command tx timeout [ 104.417103][ T54] Bluetooth: hci5: command tx timeout [ 106.675259][ T54] Bluetooth: hci5: command tx timeout [ 108.727363][ T54] Bluetooth: hci5: command tx timeout [ 111.286364][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 111.300826][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 111.315051][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 111.333861][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 111.342005][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 111.371721][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 112.750720][ T4620] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 112.762387][ T4620] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 112.774373][ T4620] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 112.782467][ T4620] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 112.790545][ T4620] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 112.798426][ T4620] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 113.246158][ T5503] chnl_net:caif_netlink_parms(): no params data found [ 113.406800][ T5503] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.414048][ T5503] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.429336][ T5503] bridge_slave_0: entered allmulticast mode [ 113.439448][ T5503] bridge_slave_0: entered promiscuous mode [ 113.450153][ T54] Bluetooth: hci1: command tx timeout [ 114.884712][ T54] Bluetooth: hci2: command tx timeout [ 115.525260][ T54] Bluetooth: hci1: command tx timeout [ 116.964664][ T54] Bluetooth: hci2: command tx timeout [ 117.604662][ T54] Bluetooth: hci1: command tx timeout [ 118.125175][ T4620] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 118.140924][ T4620] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 118.149198][ T4620] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 118.157520][ T4620] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 118.169172][ T4620] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 118.176889][ T4620] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 119.044638][ T4620] Bluetooth: hci2: command tx timeout [ 119.684759][ T4620] Bluetooth: hci1: command tx timeout [ 120.180308][ T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 120.194723][ T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 120.205022][ T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 120.215824][ T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 120.223596][ T54] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 120.231181][ T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 120.244965][ T5236] Bluetooth: hci4: command tx timeout [ 121.124947][ T54] Bluetooth: hci2: command tx timeout [ 122.324698][ T4620] Bluetooth: hci4: command tx timeout [ 122.331919][ T54] Bluetooth: hci6: command tx timeout [ 124.404683][ T54] Bluetooth: hci6: command tx timeout [ 124.410170][ T54] Bluetooth: hci4: command tx timeout [ 126.484787][ T4620] Bluetooth: hci6: command tx timeout [ 126.491572][ T54] Bluetooth: hci4: command tx timeout [ 128.564645][ T54] Bluetooth: hci6: command tx timeout [ 133.052085][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.063303][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 156.419159][ T4620] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 156.427995][ T4620] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 156.438761][ T4620] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 156.447385][ T4620] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 156.462919][ T4620] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 156.471073][ T4620] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 158.564699][ T4620] Bluetooth: hci0: command tx timeout [ 160.644830][ T4620] Bluetooth: hci0: command tx timeout [ 162.724581][ T4620] Bluetooth: hci0: command tx timeout [ 164.806071][ T4620] Bluetooth: hci0: command tx timeout [ 167.625282][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 167.634229][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 167.642349][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 167.654203][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 167.661948][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 167.672451][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 169.673676][ T54] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 169.682869][ T54] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 169.692069][ T54] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 169.705527][ T54] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 169.713282][ T54] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 169.722395][ T54] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 169.764995][ T4620] Bluetooth: hci3: command tx timeout [ 170.233299][ T5503] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.274629][ T5503] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.281966][ T5503] bridge_slave_1: entered allmulticast mode [ 170.320723][ T5503] bridge_slave_1: entered promiscuous mode [ 171.767355][ T4620] Bluetooth: hci7: command tx timeout [ 171.845451][ T4620] Bluetooth: hci3: command tx timeout [ 173.844619][ T4620] Bluetooth: hci7: command tx timeout [ 173.924972][ T4620] Bluetooth: hci3: command tx timeout [ 175.925850][ T54] Bluetooth: hci7: command tx timeout [ 176.004920][ T4620] Bluetooth: hci3: command tx timeout [ 178.004619][ T4620] Bluetooth: hci7: command tx timeout [ 178.926329][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 178.937105][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 178.945374][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 178.953463][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 178.965769][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 178.974017][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 181.044592][ T54] Bluetooth: hci1: command tx timeout [ 181.109188][ T4620] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 181.118210][ T4620] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 181.127028][ T4620] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 181.137654][ T4620] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 181.146556][ T4620] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 181.153967][ T4620] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 183.124900][ T4620] Bluetooth: hci1: command tx timeout [ 183.204998][ T4620] Bluetooth: hci2: command tx timeout [ 185.204634][ T4620] Bluetooth: hci1: command tx timeout [ 185.284517][ T4620] Bluetooth: hci2: command tx timeout [ 187.284636][ T4620] Bluetooth: hci1: command tx timeout [ 187.364666][ T4620] Bluetooth: hci2: command tx timeout [ 189.444671][ T4620] Bluetooth: hci2: command tx timeout [ 194.495875][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.502324][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 219.214236][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 219.223184][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 219.231382][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 219.239419][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 219.255658][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 219.264910][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 221.364651][ T54] Bluetooth: hci5: command tx timeout [ 223.444599][ T54] Bluetooth: hci5: command tx timeout [ 225.530337][ T54] Bluetooth: hci5: command tx timeout [ 227.604908][ T54] Bluetooth: hci5: command tx timeout [ 228.696082][ T4620] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 228.706180][ T4620] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 228.714163][ T4620] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 228.732036][ T4620] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 228.740728][ T4620] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 228.749977][ T4620] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 230.758495][ T54] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 230.778218][ T54] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 230.786566][ T54] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 230.796514][ T54] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 230.804272][ T54] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 230.812033][ T5236] Bluetooth: hci8: command tx timeout [ 230.820864][ T5236] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 232.884748][ T5236] Bluetooth: hci8: command tx timeout [ 232.892514][ T4620] Bluetooth: hci9: command tx timeout [ 234.964620][ T5236] Bluetooth: hci8: command tx timeout [ 234.971517][ T4620] Bluetooth: hci9: command tx timeout [ 237.044633][ T4620] Bluetooth: hci9: command tx timeout [ 237.050126][ T4620] Bluetooth: hci8: command tx timeout [ 239.124761][ T4620] Bluetooth: hci9: command tx timeout [ 239.975935][ T5236] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 239.984977][ T5236] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 239.998387][ T5236] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 240.015334][ T5236] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 240.024517][ T5236] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 240.032081][ T5236] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 240.343763][ T5570] chnl_net:caif_netlink_parms(): no params data found [ 240.545301][ T5570] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.561591][ T5570] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.583815][ T5570] bridge_slave_0: entered allmulticast mode [ 240.592858][ T5570] bridge_slave_0: entered promiscuous mode [ 240.609162][ T5570] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.624484][ T5570] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.631779][ T5570] bridge_slave_1: entered allmulticast mode [ 240.645690][ T5570] bridge_slave_1: entered promiscuous mode [ 240.763132][ T5570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.786238][ T5570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.920585][ T5570] team0: Port device team_slave_0 added [ 240.932614][ T5570] team0: Port device team_slave_1 added [ 241.090483][ T5570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.104482][ T5570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.148747][ T5570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.173262][ T5570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.184667][ T5570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.220363][ T5570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.352332][ T5570] hsr_slave_0: entered promiscuous mode [ 241.418645][ T5570] hsr_slave_1: entered promiscuous mode [ 241.455080][ T5570] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 241.462718][ T5570] Cannot create hsr debugfs directory [ 242.084854][ T5230] Bluetooth: hci10: command tx timeout [ 242.135771][ T54] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 242.147143][ T54] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 242.155478][ T54] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 242.163649][ T54] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 242.173326][ T54] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 242.180871][ T54] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 242.654498][ T54] Bluetooth: hci4: command 0x0406 tx timeout [ 242.661744][ T5230] Bluetooth: hci6: command 0x0406 tx timeout [ 244.174762][ T4620] Bluetooth: hci10: command tx timeout [ 244.244628][ T4620] Bluetooth: hci11: command tx timeout [ 246.244646][ T4620] Bluetooth: hci10: command tx timeout [ 246.324829][ T4620] Bluetooth: hci11: command tx timeout [ 248.325241][ T4620] Bluetooth: hci10: command tx timeout [ 248.404588][ T4620] Bluetooth: hci11: command tx timeout [ 250.484551][ T4620] Bluetooth: hci11: command tx timeout [ 255.926477][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.933069][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 275.470485][ T5570] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.194131][ T5236] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 280.202686][ T5236] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 280.214572][ T5236] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 280.225542][ T5236] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 280.234996][ T5236] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 280.243782][ T5236] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 282.324700][ T5236] Bluetooth: hci12: command tx timeout [ 283.614495][ T5236] Bluetooth: hci0: command 0x0406 tx timeout [ 284.404467][ T4620] Bluetooth: hci12: command tx timeout [ 286.484499][ T4620] Bluetooth: hci12: command tx timeout [ 288.575125][ T4620] Bluetooth: hci12: command tx timeout [ 288.916351][ T5236] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 288.928573][ T5236] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 288.939534][ T5236] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 288.947867][ T5236] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 288.956174][ T5236] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 288.963644][ T5236] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 291.040099][ T4620] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 291.047707][ T5230] Bluetooth: hci13: command tx timeout [ 291.056128][ T4620] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 291.068476][ T4620] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 291.077175][ T4620] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 291.089860][ T4620] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 291.097474][ T4620] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 293.124907][ T54] Bluetooth: hci13: command tx timeout [ 293.132289][ T5230] Bluetooth: hci14: command tx timeout [ 293.854482][ T5230] Bluetooth: hci7: command 0x0406 tx timeout [ 293.860584][ T5230] Bluetooth: hci3: command 0x0406 tx timeout [ 295.205095][ T5236] Bluetooth: hci13: command tx timeout [ 295.212316][ T4620] Bluetooth: hci14: command tx timeout [ 297.285253][ T5236] Bluetooth: hci13: command tx timeout [ 297.291234][ T4620] Bluetooth: hci14: command tx timeout [ 299.364527][ T4620] Bluetooth: hci14: command tx timeout [ 300.445059][ T5236] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 300.456169][ T5236] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 300.464734][ T5236] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 300.472843][ T5236] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 300.484043][ T5236] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 300.491756][ T5236] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 302.399771][ T54] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 302.416652][ T54] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 302.427598][ T54] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 302.436757][ T54] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 302.445753][ T54] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 302.453592][ T54] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 302.564592][ T5230] Bluetooth: hci15: command tx timeout [ 304.094580][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 304.100784][ T5230] Bluetooth: hci2: command 0x0406 tx timeout [ 304.484601][ T5236] Bluetooth: hci16: command tx timeout [ 304.644731][ T5236] Bluetooth: hci15: command tx timeout [ 306.564764][ T5236] Bluetooth: hci16: command tx timeout [ 306.724536][ T5236] Bluetooth: hci15: command tx timeout [ 308.644709][ T5236] Bluetooth: hci16: command tx timeout [ 308.804531][ T5236] Bluetooth: hci15: command tx timeout [ 310.724574][ T5236] Bluetooth: hci16: command tx timeout [ 311.604589][ T30] INFO: task kworker/u8:4:62 blocked for more than 143 seconds. [ 311.612486][ T30] Not tainted 6.11.0-syzkaller-10547-g684a64bf32b6 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 311.662503][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 311.724412][ T30] task:kworker/u8:4 state:D stack:21528 pid:62 tgid:62 ppid:2 flags:0x00004000 [ 311.804721][ T30] Workqueue: netns cleanup_net [ 311.843566][ T30] Call Trace: [ 311.852156][ T30] [ 311.889518][ T30] __schedule+0x1895/0x4b30 [ 311.894132][ T30] ? __pfx___schedule+0x10/0x10 [ 311.924935][ T30] ? __pfx_lock_release+0x10/0x10 [ 311.947154][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 311.954816][ T30] ? kthread_data+0x52/0xd0 [ 311.974539][ T30] ? schedule+0x90/0x320 [ 311.978870][ T30] ? wq_worker_sleeping+0x66/0x240 [ 311.984042][ T30] ? schedule+0x90/0x320 [ 311.998933][ T30] schedule+0x14b/0x320 [ 312.003178][ T30] schedule_preempt_disabled+0x13/0x30 [ 312.025003][ T30] __mutex_lock+0x6a7/0xd70 [ 312.029610][ T30] ? __mutex_lock+0x52a/0xd70 [ 312.036176][ T30] ? wg_netns_pre_exit+0x1f/0x1e0 [ 312.041280][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 312.053840][ T30] wg_netns_pre_exit+0x1f/0x1e0 [ 312.063465][ T30] cleanup_net+0x615/0xcc0 [ 312.074682][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 312.079709][ T30] ? process_scheduled_works+0x976/0x1850 [ 312.094790][ T30] process_scheduled_works+0xa63/0x1850 [ 312.100444][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 312.116726][ T30] ? assign_work+0x364/0x3d0 [ 312.121505][ T30] worker_thread+0x870/0xd30 [ 312.133653][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 312.143189][ T30] ? __kthread_parkme+0x169/0x1d0 [ 312.152134][ T30] ? __pfx_worker_thread+0x10/0x10 [ 312.164048][ T30] kthread+0x2f0/0x390 [ 312.171552][ T30] ? __pfx_worker_thread+0x10/0x10 [ 312.184135][ T30] ? __pfx_kthread+0x10/0x10 [ 312.189245][ T30] ret_from_fork+0x4b/0x80 [ 312.193761][ T30] ? __pfx_kthread+0x10/0x10 [ 312.207285][ T30] ret_from_fork_asm+0x1a/0x30 [ 312.212145][ T30] [ 312.220577][ T30] INFO: task syz-executor:5243 blocked for more than 143 seconds. [ 312.234545][ T30] Not tainted 6.11.0-syzkaller-10547-g684a64bf32b6 #0 [ 312.242504][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 312.285760][ T30] task:syz-executor state:D stack:18832 pid:5243 tgid:5243 ppid:1 flags:0x20004006 [ 312.303796][ T30] Call Trace: [ 312.309982][ T30] [ 312.312983][ T30] __schedule+0x1895/0x4b30 [ 312.323802][ T30] ? __pfx___schedule+0x10/0x10 [ 312.334498][ T30] ? __pfx_lock_release+0x10/0x10 [ 312.344472][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 312.350028][ T30] ? schedule+0x90/0x320 [ 312.362765][ T30] schedule+0x14b/0x320 [ 312.377600][ T30] schedule_preempt_disabled+0x13/0x30 [ 312.383231][ T30] __mutex_lock+0x6a7/0xd70 [ 312.394397][ T30] ? __mutex_lock+0x52a/0xd70 [ 312.399164][ T30] ? netdev_run_todo+0x7b2/0x1000 [ 312.404244][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 312.419708][ T30] ? __init_swait_queue_head+0xae/0x150 [ 312.430501][ T30] ? msleep+0xc6/0xe0 [ 312.438372][ T30] netdev_run_todo+0x7b2/0x1000 [ 312.444313][ T30] ? __pfx_netdev_run_todo+0x10/0x10 [ 312.458375][ T30] ? netdev_state_change+0xa8/0x1a0 [ 312.463641][ T30] ? __pfx_netdev_state_change+0x10/0x10 [ 312.480576][ T30] ? tun_chr_close+0x105/0x1b0 [ 312.490082][ T30] ? tun_chr_close+0x105/0x1b0 [ 312.499940][ T30] tun_chr_close+0x137/0x1b0 [ 312.508494][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 312.513687][ T30] __fput+0x23f/0x880 [ 312.524516][ T30] task_work_run+0x24f/0x310 [ 312.529273][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 312.543148][ T30] ? __pfx_task_work_run+0x10/0x10 [ 312.548948][ T30] ? do_exit+0xa2a/0x28e0 [ 312.553333][ T30] ? kmem_cache_free+0x1a2/0x420 [ 312.566031][ T30] ? do_exit+0xa2a/0x28e0 [ 312.570435][ T30] do_exit+0xa2f/0x28e0 [ 312.584382][ T30] ? __pfx_do_exit+0x10/0x10 [ 312.589055][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 312.603851][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 312.610308][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 312.624380][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 312.629581][ T30] do_group_exit+0x207/0x2c0 [ 312.634213][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 312.652021][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 312.662318][ T30] get_signal+0x176f/0x1810 [ 312.669432][ T30] ? security_file_permission+0x74/0x280 [ 312.683816][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 312.691827][ T30] ? __pfx_get_signal+0x10/0x10 [ 312.704165][ T30] ? __pfx_vfs_read+0x10/0x10 [ 312.709342][ T30] arch_do_signal_or_restart+0x96/0x860 [ 312.724104][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 312.740487][ T30] ? ksys_read+0x241/0x2b0 [ 312.754736][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 312.760651][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 312.774961][ T30] __do_fast_syscall_32+0xc4/0x110 [ 312.780170][ T30] ? exc_page_fault+0x590/0x8c0 [ 312.793231][ T30] do_fast_syscall_32+0x34/0x80 [ 312.801215][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 312.814418][ T30] RIP: 0023:0xf7f63579 [ 312.818571][ T30] RSP: 002b:00000000f754fd80 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 312.836314][ T30] RAX: 0000000000000000 RBX: 00000000000000f9 RCX: 00000000f754fe54 [ 312.850336][ T30] RDX: 0000000000000024 RSI: 00000000f73ebff4 RDI: 0000000000000000 [ 312.864201][ T30] RBP: 00000000f754fe54 R08: 0000000000000000 R09: 0000000000000000 [ 312.877270][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 312.894307][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 312.902506][ T30] [ 312.914261][ T30] INFO: task syz-executor:5525 blocked for more than 144 seconds. [ 312.934193][ T30] Not tainted 6.11.0-syzkaller-10547-g684a64bf32b6 #0 [ 312.942590][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 312.959751][ T30] task:syz-executor state:D stack:26560 pid:5525 tgid:5525 ppid:1 flags:0x20004006 [ 312.978588][ T30] Call Trace: [ 312.981950][ T30] [ 312.991754][ T30] __schedule+0x1895/0x4b30 [ 312.999205][ T30] ? __pfx___schedule+0x10/0x10 [ 313.004132][ T30] ? __pfx_lock_release+0x10/0x10 [ 313.014495][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 313.020136][ T30] ? schedule+0x90/0x320 [ 313.034510][ T30] schedule+0x14b/0x320 [ 313.038757][ T30] schedule_preempt_disabled+0x13/0x30 [ 313.044263][ T30] __mutex_lock+0x6a7/0xd70 [ 313.064451][ T30] ? __mutex_lock+0x52a/0xd70 [ 313.069235][ T30] ? register_nexthop_notifier+0x84/0x290 [ 313.082300][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 313.089556][ T30] ? __asan_memset+0x23/0x50 [ 313.094228][ T30] register_nexthop_notifier+0x84/0x290 [ 313.110978][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 313.118591][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 313.133787][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 313.141752][ T30] ? __asan_memset+0x23/0x50 [ 313.154221][ T30] ops_init+0x31e/0x590 [ 313.163335][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 313.174782][ T30] setup_net+0x287/0x9e0 [ 313.179099][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 313.193311][ T30] ? __pfx_setup_net+0x10/0x10 [ 313.198658][ T30] copy_net_ns+0x33f/0x570 [ 313.203150][ T30] create_new_namespaces+0x425/0x7b0 [ 313.215975][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 313.221781][ T30] ksys_unshare+0x619/0xc10 [ 313.234151][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 313.239664][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 313.254480][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 313.262263][ T30] __ia32_sys_unshare+0x37/0x40 [ 313.274430][ T30] __do_fast_syscall_32+0xb4/0x110 [ 313.279641][ T30] ? exc_page_fault+0x590/0x8c0 [ 313.296013][ T30] do_fast_syscall_32+0x34/0x80 [ 313.300961][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 313.316416][ T30] RIP: 0023:0xf745d579 [ 313.320656][ T30] RSP: 002b:00000000f75aff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 313.334434][ T30] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 313.342486][ T30] RDX: 00000000f744bff4 RSI: 00000000f7322a6a RDI: 0000000030000000 [ 313.361035][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 313.374002][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 313.388459][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 313.402968][ T30] [ 313.409982][ T30] INFO: task syz-executor:5531 blocked for more than 145 seconds. [ 313.422848][ T30] Not tainted 6.11.0-syzkaller-10547-g684a64bf32b6 #0 [ 313.434265][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 313.449392][ T30] task:syz-executor state:D stack:26816 pid:5531 tgid:5531 ppid:1 flags:0x20004004 [ 313.463368][ T30] Call Trace: [ 313.473288][ T30] [ 313.479059][ T30] __schedule+0x1895/0x4b30 [ 313.483824][ T30] ? __pfx___schedule+0x10/0x10 [ 313.499224][ T30] ? __pfx_lock_release+0x10/0x10 [ 313.508477][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 313.514027][ T30] ? schedule+0x90/0x320 [ 313.525541][ T30] schedule+0x14b/0x320 [ 313.529796][ T30] schedule_preempt_disabled+0x13/0x30 [ 313.542970][ T30] __mutex_lock+0x6a7/0xd70 [ 313.549177][ T30] ? __mutex_lock+0x52a/0xd70 [ 313.553923][ T30] ? register_nexthop_notifier+0x84/0x290 [ 313.564422][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 313.576263][ T30] ? __asan_memset+0x23/0x50 [ 313.580944][ T30] register_nexthop_notifier+0x84/0x290 [ 313.594452][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 313.601095][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 313.617362][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 313.623631][ T30] ? __asan_memset+0x23/0x50 [ 313.636527][ T30] ops_init+0x31e/0x590 [ 313.640770][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 313.654399][ T30] setup_net+0x287/0x9e0 [ 313.658726][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 313.673810][ T30] ? __pfx_setup_net+0x10/0x10 [ 313.678843][ T30] copy_net_ns+0x33f/0x570 [ 313.683318][ T30] create_new_namespaces+0x425/0x7b0 [ 313.696239][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 313.702189][ T30] ksys_unshare+0x619/0xc10 [ 313.715490][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 313.720624][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 313.734423][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 313.741109][ T30] __ia32_sys_unshare+0x37/0x40 [ 313.755446][ T30] __do_fast_syscall_32+0xb4/0x110 [ 313.760646][ T30] ? exc_page_fault+0x590/0x8c0 [ 313.784219][ T30] do_fast_syscall_32+0x34/0x80 [ 313.789618][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 313.806870][ T30] RIP: 0023:0xf7f30579 [ 313.811022][ T30] RSP: 002b:00000000f751ff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 313.827616][ T30] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 313.841206][ T30] RDX: 00000000f73bbff4 RSI: 00000000f7292a6a RDI: 0000000030000000 [ 313.855447][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 313.863490][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 313.876232][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 313.884303][ T30] [ 313.896759][ T30] [ 313.896759][ T30] Showing all locks held in the system: [ 313.912291][ T30] 1 lock held by khungtaskd/30: [ 313.920041][ T30] #0: ffffffff8e937ee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 313.940933][ T30] 3 locks held by kworker/1:1/51: [ 313.951684][ T30] 3 locks held by kworker/u8:3/52: [ 313.960721][ T30] #0: ffff88802de58948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 313.976361][ T30] #1: ffffc90000bc7d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 313.998786][ T30] #2: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 314.020093][ T30] 4 locks held by kworker/u8:4/62: [ 314.028003][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 314.046994][ T30] #1: ffffc900015d7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 314.066066][ T30] #2: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 314.079139][ T30] #3: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 314.105170][ T30] 4 locks held by kworker/1:2/937: [ 314.110353][ T30] 3 locks held by kworker/u8:5/1047: [ 314.123753][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 314.144270][ T30] #1: ffffc90003fb7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 314.164974][ T30] #2: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 314.174164][ T30] 3 locks held by kworker/0:2/1167: [ 314.189919][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 314.211874][ T30] #1: ffffc90004497d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 314.231692][ T30] #2: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 314.242662][ T30] 2 locks held by getty/4984: [ 314.254374][ T30] #0: ffff88803278a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 314.264280][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 314.285753][ T30] 3 locks held by kworker/1:3/5233: [ 314.291003][ T30] 1 lock held by syz-executor/5243: [ 314.304413][ T30] #0: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: netdev_run_todo+0x7b2/0x1000 [ 314.316429][ T30] 3 locks held by kworker/1:4/5278: [ 314.321689][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 314.342970][ T30] #1: ffffc90003e17d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 314.354661][ T30] #2: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 314.374808][ T30] 3 locks held by kworker/1:5/5279: [ 314.380064][ T30] 3 locks held by kworker/1:6/5280: [ 314.394846][ T30] 3 locks held by kworker/1:9/5364: [ 314.400110][ T30] 1 lock held by syz.4.46/5405: [ 314.413858][ T30] #0: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: netdev_run_todo+0x89e/0x1000 [ 314.424895][ T30] 1 lock held by syz.0.72/5472: [ 314.429791][ T30] #0: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: netdev_run_todo+0x7b2/0x1000 [ 314.444415][ T30] 1 lock held by syz-executor/5470: [ 314.449670][ T30] #0: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 314.466412][ T30] 1 lock held by syz.1.77/5491: [ 314.471318][ T30] #0: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: netdev_run_todo+0x7b2/0x1000 [ 314.489663][ T30] 1 lock held by syz-executor/5498: [ 314.499127][ T30] #0: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 314.518150][ T30] 1 lock held by syz-executor/5503: [ 314.523412][ T30] #0: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 314.543064][ T30] 2 locks held by syz-executor/5515: [ 314.548770][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 314.564422][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 314.574035][ T30] 2 locks held by syz-executor/5518: [ 314.587552][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 314.608936][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 314.628551][ T30] 2 locks held by syz-executor/5525: [ 314.633907][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 314.652040][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 314.672449][ T30] 2 locks held by syz-executor/5531: [ 314.678016][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 314.693571][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 314.709206][ T30] 2 locks held by syz-executor/5534: [ 314.720310][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 314.739956][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 314.752913][ T30] 2 locks held by syz-executor/5539: [ 314.766079][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 314.783094][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 314.793734][ T30] 2 locks held by syz-executor/5543: [ 314.812770][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 314.836818][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 314.854486][ T30] 2 locks held by syz-executor/5547: [ 314.859839][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 314.878502][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 314.894550][ T30] 2 locks held by kworker/u8:8/5550: [ 314.909372][ T30] #0: ffff8880b863ea98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 314.922995][ T30] #1: ffff8880b862c898 (hrtimer_bases.lock){-.-.}-{2:2}, at: hrtimer_start_range_ns+0x109/0xca0 [ 314.940928][ T30] 2 locks held by syz-executor/5554: [ 314.949608][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 314.969077][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 314.984255][ T30] 2 locks held by syz-executor/5561: [ 314.993704][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 315.014432][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 315.033765][ T30] 7 locks held by syz-executor/5570: [ 315.039550][ T30] #0: ffff888032a78420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 315.062433][ T30] #1: ffff88802f7a9088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 315.075253][ T30] #2: ffff888027469d28 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 315.092741][ T30] #3: ffffffff8f570968 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 315.105876][ T30] #4: ffff888061ed00e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 315.126169][ T30] #5: ffff888061ed1250 (&devlink->lock_key#4){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 315.144787][ T30] #6: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: netdev_run_todo+0x7b2/0x1000 [ 315.154308][ T30] 2 locks held by syz-executor/5579: [ 315.167580][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 315.187458][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 315.204064][ T30] 2 locks held by syz-executor/5584: [ 315.214564][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 315.224087][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 315.244884][ T30] 2 locks held by syz-executor/5591: [ 315.250230][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 315.268528][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 315.282639][ T30] 2 locks held by syz-executor/5594: [ 315.294463][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 315.303978][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 315.323697][ T30] 2 locks held by syz-executor/5599: [ 315.329447][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 315.350193][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 315.369335][ T30] 2 locks held by syz-executor/5602: [ 315.379004][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 315.393701][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 315.410701][ T30] [ 315.413078][ T30] ============================================= [ 315.413078][ T30] [ 315.426890][ T30] NMI backtrace for cpu 0 [ 315.431286][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-10547-g684a64bf32b6 #0 [ 315.441495][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 315.451584][ T30] Call Trace: [ 315.454893][ T30] [ 315.457852][ T30] dump_stack_lvl+0x241/0x360 [ 315.462577][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 315.467815][ T30] ? __pfx__printk+0x10/0x10 [ 315.472460][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 315.477456][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 315.483045][ T30] ? _printk+0xd5/0x120 [ 315.487242][ T30] ? __pfx__printk+0x10/0x10 [ 315.491870][ T30] ? __wake_up_klogd+0xcc/0x110 [ 315.496781][ T30] ? __pfx__printk+0x10/0x10 [ 315.501418][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 315.506489][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 315.512512][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 315.518545][ T30] watchdog+0xff4/0x1040 [ 315.522839][ T30] ? watchdog+0x1ea/0x1040 [ 315.527310][ T30] ? __pfx_watchdog+0x10/0x10 [ 315.532033][ T30] kthread+0x2f0/0x390 [ 315.536137][ T30] ? __pfx_watchdog+0x10/0x10 [ 315.540855][ T30] ? __pfx_kthread+0x10/0x10 [ 315.545483][ T30] ret_from_fork+0x4b/0x80 [ 315.549945][ T30] ? __pfx_kthread+0x10/0x10 [ 315.554580][ T30] ret_from_fork_asm+0x1a/0x30 [ 315.559416][ T30] [ 315.563218][ T30] Sending NMI from CPU 0 to CPUs 1: [ 315.568880][ C1] NMI backtrace for cpu 1 [ 315.568895][ C1] CPU: 1 UID: 0 PID: 937 Comm: kworker/1:2 Not tainted 6.11.0-syzkaller-10547-g684a64bf32b6 #0 [ 315.568916][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 315.568928][ C1] Workqueue: events nsim_dev_trap_report_work [ 315.568953][ C1] RIP: 0010:memset_orig+0x75/0xb0 [ 315.568979][ C1] Code: 89 47 30 48 89 47 38 48 8d 7f 40 75 d8 0f 1f 84 00 00 00 00 00 89 d1 83 e1 38 74 14 c1 e9 03 66 0f 1f 44 00 00 ff c9 48 89 07 <48> 8d 7f 08 75 f5 83 e2 07 74 0a ff ca 88 07 48 8d 7f 01 75 f6 4c [ 315.569000][ C1] RSP: 0000:ffffc90000a188a8 EFLAGS: 00000246 [ 315.569015][ C1] RAX: 0000000000000000 RBX: ffffc90000a189b8 RCX: 0000000000000000 [ 315.569027][ C1] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc90000a189d8 [ 315.569039][ C1] RBP: dffffc0000000000 R08: ffffc90000a189df R09: 0000000000000000 [ 315.569051][ C1] R10: ffffc90000a189d0 R11: fffff5200014313c R12: ffffc90003d88000 [ 315.569064][ C1] R13: ffffc90000a18980 R14: ffffffff816054f0 R15: ffffc90000a189d0 [ 315.569078][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 315.569092][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 315.569105][ C1] CR2: 0000000020004018 CR3: 000000000e734000 CR4: 00000000003506f0 [ 315.569119][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 315.569130][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 315.569141][ C1] Call Trace: [ 315.569147][ C1] [ 315.569154][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 315.569186][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 315.569214][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 315.569239][ C1] ? nmi_handle+0x2a/0x5a0 [ 315.569271][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 315.569295][ C1] ? nmi_handle+0x14f/0x5a0 [ 315.569312][ C1] ? nmi_handle+0x2a/0x5a0 [ 315.569329][ C1] ? memset_orig+0x75/0xb0 [ 315.569351][ C1] ? default_do_nmi+0x63/0x160 [ 315.569377][ C1] ? exc_nmi+0x123/0x1f0 [ 315.569402][ C1] ? end_repeat_nmi+0xf/0x53 [ 315.569424][ C1] ? kthread+0x2f0/0x390 [ 315.569444][ C1] ? memset_orig+0x75/0xb0 [ 315.569467][ C1] ? memset_orig+0x75/0xb0 [ 315.569490][ C1] ? memset_orig+0x75/0xb0 [ 315.569512][ C1] [ 315.569517][ C1] [ 315.569523][ C1] unwind_next_frame+0xcfb/0x22d0 [ 315.569554][ C1] ? worker_thread+0x870/0xd30 [ 315.569580][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 315.569602][ C1] arch_stack_walk+0x11c/0x150 [ 315.569622][ C1] ? kthread+0x2f0/0x390 [ 315.569640][ C1] stack_trace_save+0x118/0x1d0 [ 315.569660][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 315.569686][ C1] ref_tracker_free+0x105/0x7e0 [ 315.569713][ C1] ? __pfx_ref_tracker_free+0x10/0x10 [ 315.569743][ C1] ? dst_destroy+0x171/0x460 [ 315.569764][ C1] ? rcu_core+0xaaa/0x17a0 [ 315.569780][ C1] ? handle_softirqs+0x2c5/0x980 [ 315.569802][ C1] ? do_softirq+0x11b/0x1e0 [ 315.569822][ C1] ? __local_bh_enable_ip+0x1bb/0x200 [ 315.569843][ C1] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 315.569860][ C1] ? process_scheduled_works+0xa63/0x1850 [ 315.569882][ C1] ? worker_thread+0x870/0xd30 [ 315.569908][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 315.569932][ C1] ? __pfx_ipv4_dst_destroy+0x10/0x10 [ 315.569954][ C1] dst_destroy+0x171/0x460 [ 315.569975][ C1] ? rcu_core+0xa37/0x17a0 [ 315.569991][ C1] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 315.570012][ C1] rcu_core+0xaaa/0x17a0 [ 315.570036][ C1] ? __pfx_rcu_core+0x10/0x10 [ 315.570068][ C1] handle_softirqs+0x2c5/0x980 [ 315.570093][ C1] ? do_softirq+0x11b/0x1e0 [ 315.570115][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 315.570139][ C1] ? rcu_is_watching+0x15/0xb0 [ 315.570159][ C1] do_softirq+0x11b/0x1e0 [ 315.570184][ C1] [ 315.570190][ C1] [ 315.570196][ C1] ? __pfx_do_softirq+0x10/0x10 [ 315.570217][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 315.570244][ C1] ? rcu_is_watching+0x15/0xb0 [ 315.570263][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 315.570285][ C1] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 315.570305][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 315.570329][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 315.570351][ C1] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 315.570372][ C1] nsim_dev_trap_report_work+0x75d/0xaa0 [ 315.570397][ C1] ? process_scheduled_works+0x976/0x1850 [ 315.570421][ C1] process_scheduled_works+0xa63/0x1850 [ 315.570458][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 315.570485][ C1] ? assign_work+0x364/0x3d0 [ 315.570510][ C1] worker_thread+0x870/0xd30 [ 315.570537][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 315.570559][ C1] ? __kthread_parkme+0x169/0x1d0 [ 315.570585][ C1] ? __pfx_worker_thread+0x10/0x10 [ 315.570609][ C1] kthread+0x2f0/0x390 [ 315.570624][ C1] ? __pfx_worker_thread+0x10/0x10 [ 315.570647][ C1] ? __pfx_kthread+0x10/0x10 [ 315.570663][ C1] ret_from_fork+0x4b/0x80 [ 315.570687][ C1] ? __pfx_kthread+0x10/0x10 [ 315.570703][ C1] ret_from_fork_asm+0x1a/0x30 [ 315.570735][ C1] [ 316.131700][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 316.138710][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-10547-g684a64bf32b6 #0 [ 316.148920][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 316.159019][ T30] Call Trace: [ 316.162342][ T30] [ 316.165351][ T30] dump_stack_lvl+0x241/0x360 [ 316.170090][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 316.175333][ T30] ? __pfx__printk+0x10/0x10 [ 316.180048][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 316.186078][ T30] ? vscnprintf+0x5d/0x90 [ 316.190451][ T30] panic+0x349/0x880 [ 316.194389][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 316.200589][ T30] ? __pfx_panic+0x10/0x10 [ 316.205065][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 316.210586][ T30] ? __irq_work_queue_local+0x137/0x410 [ 316.216175][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 316.221583][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 316.227784][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 316.233987][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 316.240195][ T30] watchdog+0x1033/0x1040 [ 316.244568][ T30] ? watchdog+0x1ea/0x1040 [ 316.249031][ T30] ? __pfx_watchdog+0x10/0x10 [ 316.253749][ T30] kthread+0x2f0/0x390 [ 316.257850][ T30] ? __pfx_watchdog+0x10/0x10 [ 316.262573][ T30] ? __pfx_kthread+0x10/0x10 [ 316.267202][ T30] ret_from_fork+0x4b/0x80 [ 316.271659][ T30] ? __pfx_kthread+0x10/0x10 [ 316.276286][ T30] ret_from_fork_asm+0x1a/0x30 [ 316.281112][ T30] [ 316.284509][ T30] Kernel Offset: disabled [ 316.288937][ T30] Rebooting in 86400 seconds..