last executing test programs: 8.79632464s ago: executing program 0 (id=1): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)}, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000001000"/15, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800c0001006d6163766c616e001800028004000580ae442be9ec0f27fe30f5acf9cfef54d568e76d01db82bfef6965e45bebab74f55027d960580f75c8515cde379a77b3b1f749cbdbd06724850afbc10b84da03a43c86285b12e9d661b278a3aea1e05d4d2e3b24a51c79b5b283612c606f06b22da5c3497833f165c5dc34edfb778c3e56f2e6b3f666a3497107fd4a7113e1"], 0x38}}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x70, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xfffa}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x70}}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000600", 0x33fe0}], 0x1}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a24000000000a01010000000000000000050000000900010073797a30000000000400060070000000030a01030000000000000000050000000900010073797a30000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000080001400000000014000300766c616e3000"/167], 0xd0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x0, 0xa005}, @sack_perm]}}}}}}}, 0x0) 8.586701757s ago: executing program 1 (id=2): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5603, 0x0) read$char_usb(r1, &(0x7f0000000180)=""/97, 0x61) write$char_usb(r1, &(0x7f0000000240)="8b", 0x1) r3 = socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{0x0}], 0x1, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) sendmsg$key(r3, &(0x7f00000001c0)={0x500, 0x0, 0x0}, 0x0) r5 = openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = dup(r5) flock(0xffffffffffffffff, 0xa556a814575266ed) ioctl$TCSETSW2(r6, 0x402c542c, 0x0) ioctl$TIOCMBIS(r6, 0x5416, &(0x7f0000000100)=0x7) r7 = socket$inet(0x2, 0x3, 0x8d) r8 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_msfilter(r8, 0x0, 0x8, &(0x7f0000000280)=ANY=[], 0x1) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, r9}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x3, 0x0, r4, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x3, 0x0, @void, @value, @void, @value}, 0x48) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f00000001c0)) syz_usb_disconnect(r0) 8.001570529s ago: executing program 2 (id=3): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)}, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000001000"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800c0001006d6163766c616e001800028004000580ae442be9ec0f27fe30f5acf9cfef54d568e76d01db82bfef6965e45bebab74f55027d960580f75c8515cde379a77b3b1f749cbdbd06724850afbc10b84da03a43c86285b12e9d661b278a3aea1e05d4d2e3b24a51c79b5b283612c606f06b22da5c3497833f165c5dc34edfb778c3e56f2e6b3f666a3497107fd4a7113e1"], 0x38}}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x60, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x60}}, 0x0) sendmsg$kcm(r3, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a24000000000a01010000000000000000050000000900010073797a30000000000400060070000000030a01030000000000000000050000000900010073797a30000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000080001400000000014000300766c616e3000"/167], 0xd0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x0, 0xa005}, @sack_perm]}}}}}}}, 0x0) 7.999947041s ago: executing program 3 (id=4): socket(0x1e, 0x1, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r5, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d8000000400cc000800054001000000140004"], 0x58}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000cc0)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB], 0x54}}, 0x0) listen(r1, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, 0x0, 0x0) r9 = dup3(r0, r0, 0x80000) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES32, @ANYRESOCT=r9], 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io(r10, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r11 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r11, 0x4018480c, &(0x7f00000000c0)={0x2}) r12 = accept(r1, 0x0, 0x0) sendmsg$nl_route(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[], 0xfffffdef}}, 0x200040c0) close_range(r0, 0xffffffffffffffff, 0x0) 7.825454418s ago: executing program 0 (id=6): socket(0x1e, 0x1, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r5, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d8000000400cc000800054001000000140004"], 0x58}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000cc0)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB], 0x54}}, 0x0) listen(r1, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, 0x0, 0x0) r9 = dup3(r0, r0, 0x80000) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES32, @ANYRESOCT=r9], 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io(r10, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r11 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r11, 0x4018480c, &(0x7f00000000c0)={0x2}) r12 = accept(r1, 0x0, 0x0) sendmsg$nl_route(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[], 0xfffffdef}}, 0x200040c0) close_range(r0, 0xffffffffffffffff, 0x0) 7.614232781s ago: executing program 4 (id=5): socket(0x1e, 0x1, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x58}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r6, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d8000000400cc000800054001000000140004"], 0x58}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000cc0)={'wlan0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB='%\b\x00z\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=r7, @ANYBLOB], 0x54}}, 0x0) listen(r1, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r10 = dup3(r0, r0, 0x80000) r11 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES32, @ANYRESOCT=r10], 0x0) syz_usb_control_io$hid(r11, 0x0, 0x0) syz_usb_control_io(r11, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r12 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r12, 0x4018480c, &(0x7f00000000c0)={0x2}) r13 = accept(r1, 0x0, 0x0) sendmsg$nl_route(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[], 0xfffffdef}}, 0x200040c0) close_range(r0, 0xffffffffffffffff, 0x0) 7.118589112s ago: executing program 2 (id=7): r0 = epoll_create1(0x0) epoll_create1(0x0) r1 = getpid() kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r0, 0x0) 6.921551199s ago: executing program 2 (id=8): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001280)={&(0x7f00000001c0)=ANY=[@ANYRES8=r0], 0x20}, 0x1, 0x0, 0x0, 0x40008d5}, 0x40094) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0xc5) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff06, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c064001000009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) r3 = openat$uinput(0xffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_GET_VERSION(r3, 0x8004552d, 0x0) ioctl$UI_GET_VERSION(r3, 0x8004552d, &(0x7f0000001380)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) close(r5) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') preadv(r7, &(0x7f0000000000)=[{&(0x7f0000000240)=""/135, 0x87}], 0x1, 0x0, 0x0) r8 = socket$pptp(0x18, 0x1, 0x2) getsockopt$sock_buf(r8, 0x1, 0x2e, &(0x7f0000000240)=""/4096, &(0x7f0000001240)=0x1000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r6, 0xc01c64a3, &(0x7f0000000040)={0x3, r10, 0x0, 0x80000001, 0xb, 0x1fd, 0x1}) 5.953613881s ago: executing program 3 (id=9): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="2c0000001a0001ff8000000000f61e000a000000000000000000000006001d000000000008001e"], 0x2c}}, 0x0) 5.921578085s ago: executing program 2 (id=10): socket(0x1e, 0x1, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r5, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d8000000400cc000800054001000000140004"], 0x58}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000cc0)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYBLOB='%\b\x00z\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=r6, @ANYBLOB], 0x54}}, 0x0) listen(r1, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r9 = dup3(r0, r0, 0x80000) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES32, @ANYRESOCT=r9], 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io(r10, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r11 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r11, 0x4018480c, &(0x7f00000000c0)={0x2}) r12 = accept(r1, 0x0, 0x0) sendmsg$nl_route(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[], 0xfffffdef}}, 0x200040c0) close_range(r0, 0xffffffffffffffff, 0x0) 5.825490462s ago: executing program 3 (id=11): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b00011100000009040000019569", @ANYRES32], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/bpf', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000001000"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800c0001006d6163766c616e001800028004000580ae442be9ec0f27fe30f5acf9cfef54d568e76d01db82bfef6965e45bebab74f55027d960580f75c8515cde379a77b3b1f749cbdbd06724850afbc10b84da03a43c86285b12e9d661b278a3aea1e05d4d2e3b24a51c79b5b283612c606f06b22da5c3497833f165c5dc34edfb778c3e56f2e6b3f666a3497107fd4a7113e1"], 0x38}}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x70, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xfffa}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x70}}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000600", 0x33fe0}], 0x1}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r6, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a24000000000a01010000000000000000050000000900010073797a30000000000400060070000000030a01030000000000000000050000000900010073797a30000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000080001400000000014000300766c616e3000"/167], 0xd0}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x0, 0xa005}, @sack_perm]}}}}}}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 5.795791496s ago: executing program 1 (id=12): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)}, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000001000"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800c0001006d6163766c616e001800028004000580ae442be9ec0f27fe30f5acf9cfef54d568e76d01db82bfef6965e45bebab74f55027d960580f75c8515cde379a77b3b1f749cbdbd06724850afbc10b84da03a43c86285b12e9d661b278a3aea1e05d4d2e3b24a51c79b5b283612c606f06b22da5c3497833f165c5dc34edfb778c3e56f2e6b3f666a3497107fd4a7113e1"], 0x38}}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x68, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xfffa}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}]}, 0x68}}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000600", 0x33fe0}], 0x1}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a24000000000a01010000000000000000050000000900010073797a30000000000400060070000000030a01030000000000000000050000000900010073797a30000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000080001400000000014000300766c616e3000"/167], 0xd0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x0, 0xa005}, @sack_perm]}}}}}}}, 0x0) 5.783792805s ago: executing program 0 (id=13): syz_emit_ethernet(0x60, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60000000002a3afffe8000000096285600000000000000000000bbff020000000000000000000000000001890090780000000020010000000200"/96], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0xfffffffffffffff9) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) eventfd(0x83) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000240)=0x2, 0x4) 5.632185598s ago: executing program 4 (id=14): socket(0x1e, 0x1, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r5, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d8000000400cc000800054001000000140004"], 0x58}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000cc0)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYBLOB='%\b\x00z\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\b', @ANYRES32=r6, @ANYBLOB], 0x54}}, 0x0) listen(r1, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r9 = dup3(r0, r0, 0x80000) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES32, @ANYRESOCT=r9], 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io(r10, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r11 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r11, 0x4018480c, &(0x7f00000000c0)={0x2}) r12 = accept(r1, 0x0, 0x0) sendmsg$nl_route(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[], 0xfffffdef}}, 0x200040c0) close_range(r0, 0xffffffffffffffff, 0x0) 5.137622098s ago: executing program 1 (id=15): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001280)={&(0x7f00000001c0)=ANY=[@ANYRES8=r0], 0x20}, 0x1, 0x0, 0x0, 0x40008d5}, 0x40094) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0xc5) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff06, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c064001000009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) r3 = openat$uinput(0xffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_GET_VERSION(r3, 0x8004552d, 0x0) ioctl$UI_GET_VERSION(r3, 0x8004552d, &(0x7f0000001380)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000340012800e0001006970366772657461700000002000028014000700feffffff000000"], 0x54}}, 0x0) r5 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) close(r5) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') preadv(r7, 0x0, 0x0, 0x0, 0x0) r8 = socket$pptp(0x18, 0x1, 0x2) getsockopt$sock_buf(r8, 0x1, 0x2e, &(0x7f0000000240)=""/4096, &(0x7f0000001240)=0x1000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r6, 0xc01c64a3, &(0x7f0000000040)={0x3, r10, 0x0, 0x80000001, 0xb, 0x1fd, 0x1}) 0s ago: executing program 0 (id=16): syz_emit_ethernet(0x60, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60000000002a3afffe8000000096285600000000000000000000bbff020000000000000000000000000001890090780000000020010000000200"/96], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0xfffffffffffffff9) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) eventfd(0x83) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000240)=0x2, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.12' (ED25519) to the list of known hosts. [ 51.036057][ T5216] cgroup: Unknown subsys name 'net' [ 51.162217][ T5216] cgroup: Unknown subsys name 'cpuset' [ 51.170234][ T5216] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.499161][ T5216] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 54.555227][ T5230] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 54.581390][ T5234] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.597521][ T5236] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.601722][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 54.606523][ T5236] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 54.613848][ T5238] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.621616][ T5236] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 54.628475][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 54.635128][ T5236] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 54.641608][ T5238] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.649011][ T5236] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 54.655234][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 54.670572][ T5238] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.670857][ T5236] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.678598][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 54.685360][ T5236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.693766][ T5238] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 54.701015][ T5236] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 54.711118][ T5238] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.716430][ T4620] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 54.727693][ T4620] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.736820][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 54.745323][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 54.754170][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 54.758923][ T5240] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 54.770583][ T5238] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.788453][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 54.798618][ T5229] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 54.806263][ T5229] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 54.814335][ T5229] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 55.082876][ T5246] chnl_net:caif_netlink_parms(): no params data found [ 55.272709][ T5246] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.279969][ T5246] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.287513][ T5246] bridge_slave_0: entered allmulticast mode [ 55.294487][ T5246] bridge_slave_0: entered promiscuous mode [ 55.304923][ T5247] chnl_net:caif_netlink_parms(): no params data found [ 55.324270][ T5246] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.331793][ T5246] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.339384][ T5246] bridge_slave_1: entered allmulticast mode [ 55.346033][ T5246] bridge_slave_1: entered promiscuous mode [ 55.427126][ T5245] chnl_net:caif_netlink_parms(): no params data found [ 55.447707][ T5246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.465567][ T5248] chnl_net:caif_netlink_parms(): no params data found [ 55.489093][ T5246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.549200][ T5244] chnl_net:caif_netlink_parms(): no params data found [ 55.583373][ T5246] team0: Port device team_slave_0 added [ 55.591721][ T5246] team0: Port device team_slave_1 added [ 55.667967][ T5248] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.675303][ T5248] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.684299][ T5248] bridge_slave_0: entered allmulticast mode [ 55.691630][ T5248] bridge_slave_0: entered promiscuous mode [ 55.701707][ T5247] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.708957][ T5247] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.716667][ T5247] bridge_slave_0: entered allmulticast mode [ 55.723697][ T5247] bridge_slave_0: entered promiscuous mode [ 55.731870][ T5247] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.739258][ T5247] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.746414][ T5247] bridge_slave_1: entered allmulticast mode [ 55.753166][ T5247] bridge_slave_1: entered promiscuous mode [ 55.760376][ T5246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.767363][ T5246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.794116][ T5246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.819581][ T5248] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.826740][ T5248] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.834087][ T5248] bridge_slave_1: entered allmulticast mode [ 55.840673][ T5248] bridge_slave_1: entered promiscuous mode [ 55.854053][ T5246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.861415][ T5246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.887614][ T5246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.945794][ T5245] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.953364][ T5245] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.964118][ T5245] bridge_slave_0: entered allmulticast mode [ 55.971071][ T5245] bridge_slave_0: entered promiscuous mode [ 55.978026][ T5244] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.986442][ T5244] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.993861][ T5244] bridge_slave_0: entered allmulticast mode [ 56.000882][ T5244] bridge_slave_0: entered promiscuous mode [ 56.021717][ T5247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.037633][ T5245] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.047891][ T5245] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.056122][ T5245] bridge_slave_1: entered allmulticast mode [ 56.065636][ T5245] bridge_slave_1: entered promiscuous mode [ 56.073204][ T5244] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.080433][ T5244] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.087695][ T5244] bridge_slave_1: entered allmulticast mode [ 56.094520][ T5244] bridge_slave_1: entered promiscuous mode [ 56.102525][ T5248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.114133][ T5248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.124693][ T5247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.143948][ T5246] hsr_slave_0: entered promiscuous mode [ 56.152081][ T5246] hsr_slave_1: entered promiscuous mode [ 56.195891][ T5247] team0: Port device team_slave_0 added [ 56.225237][ T5248] team0: Port device team_slave_0 added [ 56.243455][ T5247] team0: Port device team_slave_1 added [ 56.254374][ T5245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.265550][ T5244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.280193][ T5248] team0: Port device team_slave_1 added [ 56.287543][ T5244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.321288][ T5245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.349086][ T5247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.356052][ T5247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.386280][ T5247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.420453][ T5244] team0: Port device team_slave_0 added [ 56.430980][ T5247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.437941][ T5247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.464236][ T5247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.485981][ T5248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.495696][ T5248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.522071][ T5248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.535816][ T5244] team0: Port device team_slave_1 added [ 56.560228][ T5245] team0: Port device team_slave_0 added [ 56.566620][ T5248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.573888][ T5248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.601108][ T5248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.626714][ T5245] team0: Port device team_slave_1 added [ 56.645105][ T5244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.652267][ T5244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.678484][ T5244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.714416][ T5245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.721525][ T5245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.747942][ T5245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.761841][ T5244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.769327][ T5244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.796417][ T5229] Bluetooth: hci3: command tx timeout [ 56.797441][ T5244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.802235][ T5230] Bluetooth: hci1: command tx timeout [ 56.802402][ T5229] Bluetooth: hci2: command tx timeout [ 56.825953][ T5247] hsr_slave_0: entered promiscuous mode [ 56.833066][ T5247] hsr_slave_1: entered promiscuous mode [ 56.839845][ T5247] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.847573][ T5247] Cannot create hsr debugfs directory [ 56.867510][ T5245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.874856][ T5229] Bluetooth: hci0: command tx timeout [ 56.880392][ T5238] Bluetooth: hci4: command tx timeout [ 56.880590][ T5245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.912356][ T5245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.959460][ T5248] hsr_slave_0: entered promiscuous mode [ 56.965602][ T5248] hsr_slave_1: entered promiscuous mode [ 56.975072][ T5248] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.983154][ T5248] Cannot create hsr debugfs directory [ 57.057747][ T5244] hsr_slave_0: entered promiscuous mode [ 57.064673][ T5244] hsr_slave_1: entered promiscuous mode [ 57.071448][ T5244] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.079650][ T5244] Cannot create hsr debugfs directory [ 57.097785][ T5245] hsr_slave_0: entered promiscuous mode [ 57.104326][ T5245] hsr_slave_1: entered promiscuous mode [ 57.111024][ T5245] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.118931][ T5245] Cannot create hsr debugfs directory [ 57.309466][ T5246] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.320100][ T5246] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.337379][ T5246] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.359615][ T5246] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.434898][ T5247] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.451414][ T5247] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.476863][ T5247] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.488834][ T5247] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.533861][ T5245] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.545363][ T5245] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.573555][ T5245] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.584060][ T5245] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.659375][ T5244] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 57.675757][ T5244] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 57.687335][ T5244] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 57.698045][ T5244] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 57.778066][ T5248] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.806888][ T5248] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.817969][ T5248] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.843790][ T5246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.851645][ T5248] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.895534][ T5246] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.930526][ T5247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.947444][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.956111][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.986107][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.993923][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.043739][ T5245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.075077][ T5247] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.092272][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.100155][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.133077][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.140205][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.156781][ T5245] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.175768][ T5246] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.198470][ T2979] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.205624][ T2979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.254594][ T2979] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.261844][ T2979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.291727][ T5248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.323846][ T5248] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.347802][ T5246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.364960][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.372077][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.386103][ T5244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.421855][ T2979] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.429026][ T2979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.476515][ T5244] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.499768][ T5246] veth0_vlan: entered promiscuous mode [ 58.525622][ T5247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.537924][ T5246] veth1_vlan: entered promiscuous mode [ 58.553696][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.560834][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.572423][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.579549][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.635499][ T5248] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.696174][ T5245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.717785][ T5247] veth0_vlan: entered promiscuous mode [ 58.745855][ T5246] veth0_macvtap: entered promiscuous mode [ 58.762224][ T5247] veth1_vlan: entered promiscuous mode [ 58.774087][ T5248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.785192][ T5246] veth1_macvtap: entered promiscuous mode [ 58.816862][ T5245] veth0_vlan: entered promiscuous mode [ 58.846010][ T5246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.865224][ T5245] veth1_vlan: entered promiscuous mode [ 58.870953][ T5238] Bluetooth: hci2: command tx timeout [ 58.871393][ T5230] Bluetooth: hci3: command tx timeout [ 58.884397][ T5229] Bluetooth: hci1: command tx timeout [ 58.908938][ T5246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.939664][ T5248] veth0_vlan: entered promiscuous mode [ 58.948937][ T5229] Bluetooth: hci0: command tx timeout [ 58.949046][ T5230] Bluetooth: hci4: command tx timeout [ 58.962826][ T5246] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.973100][ T5246] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.982324][ T5246] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.991476][ T5246] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.002551][ T5247] veth0_macvtap: entered promiscuous mode [ 59.012832][ T5247] veth1_macvtap: entered promiscuous mode [ 59.024231][ T5244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.051538][ T5245] veth0_macvtap: entered promiscuous mode [ 59.075396][ T5248] veth1_vlan: entered promiscuous mode [ 59.085078][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.096871][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.107972][ T5247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.142280][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.156607][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.171385][ T5247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.191938][ T5245] veth1_macvtap: entered promiscuous mode [ 59.211488][ T5247] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.223605][ T5247] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.233354][ T5247] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.242371][ T5247] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.310141][ T2979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.310425][ T5248] veth0_macvtap: entered promiscuous mode [ 59.318091][ T2979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.334141][ T5248] veth1_macvtap: entered promiscuous mode [ 59.352937][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.363838][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.373971][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.384843][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.395919][ T5245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.445965][ T5244] veth0_vlan: entered promiscuous mode [ 59.470035][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.481726][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.492329][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.503908][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.514935][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.525866][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.537517][ T5248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.546648][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.556192][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.567060][ T5244] veth1_vlan: entered promiscuous mode [ 59.580401][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.592628][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.602952][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.613725][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.628808][ T5245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.641942][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.652471][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.663331][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.674531][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.684756][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.695543][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.706459][ T5248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.731696][ T5248] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.742358][ T5248] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.752961][ T5248] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.762523][ T5248] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.782150][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.792788][ T5245] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.809939][ T5246] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 59.810625][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.833886][ T5245] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.843185][ T5245] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.853028][ T5245] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.927316][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.944131][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.002334][ T5244] veth0_macvtap: entered promiscuous mode [ 60.011719][ T5286] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1'. [ 60.034029][ T5244] veth1_macvtap: entered promiscuous mode [ 60.043258][ T5286] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 60.130927][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.162403][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.168621][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.197330][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.207789][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.222509][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.233364][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.244351][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.254282][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.264954][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.280884][ T5244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.322869][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.335273][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.346292][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.357883][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.368288][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.380493][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.391616][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.405539][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.417167][ T5244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.429104][ T2930] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.437886][ T2930] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.445901][ T5284] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 60.463117][ T5244] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.472713][ T5244] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.481642][ T5244] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.490693][ T5244] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.503323][ T2930] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.512677][ T2930] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.562646][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.571834][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.612336][ T5284] usb 2-1: Using ep0 maxpacket: 8 [ 60.646261][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.682958][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.736035][ T5284] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 60.745725][ T5284] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 60.757345][ T5284] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 60.799522][ T5293] netlink: 'syz.3.4': attribute type 11 has an invalid length. [ 60.818635][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 60.827837][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 60.857500][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.881659][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.902291][ T5297] netlink: 'syz.0.6': attribute type 11 has an invalid length. [ 60.913063][ T5284] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 60.952382][ T5230] Bluetooth: hci3: command tx timeout [ 60.953099][ T5229] Bluetooth: hci1: command tx timeout [ 60.957833][ T5230] Bluetooth: hci2: command tx timeout [ 60.983594][ T5284] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 61.024696][ T5284] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 61.030111][ T5229] Bluetooth: hci0: command tx timeout [ 61.037742][ T5230] Bluetooth: hci4: command tx timeout [ 61.056748][ T5284] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 61.071389][ T5284] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 61.098643][ T5287] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 61.114330][ T5284] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 61.127517][ T5284] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 61.134380][ T5301] netlink: 'syz.4.5': attribute type 11 has an invalid length. [ 61.143592][ T5284] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 61.157884][ T5284] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 61.171467][ T5284] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 61.184679][ T5284] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 61.199509][ T5302] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5'. [ 61.208425][ T5282] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 61.218836][ T5284] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 61.235482][ T5284] usb 2-1: string descriptor 0 read error: -22 [ 61.242038][ T5284] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 61.251263][ T5284] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.260681][ T5287] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 61.284090][ T5287] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 61.289980][ T5284] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 61.313339][ T5287] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 61.334736][ T5287] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 61.344713][ T5287] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.360409][ T5282] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 61.372472][ T5287] usb 4-1: config 0 descriptor?? [ 61.377853][ T5282] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 61.390176][ T5293] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 61.391842][ T5282] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 61.414746][ T5282] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 61.424778][ T5282] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.435998][ T5282] usb 1-1: config 0 descriptor?? [ 61.445384][ T5297] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 61.478584][ T5283] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 61.628518][ C0] hrtimer: interrupt took 421148 ns [ 61.644631][ T5283] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 61.658865][ T5283] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 61.710117][ T5283] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 61.732578][ T5283] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 61.743060][ T5283] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.762984][ T5283] usb 5-1: config 0 descriptor?? [ 61.781993][ T5301] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 61.837024][ T5287] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 61.873806][ T5287] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 61.903595][ T5308] syz.1.2(5308): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 61.935318][ T5282] plantronics 0003:047F:FFFF.0002: unknown main item tag 0xd [ 61.946338][ T5311] netlink: 'syz.2.8': attribute type 6 has an invalid length. [ 61.949346][ T5287] plantronics 0003:047F:FFFF.0001: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 61.982190][ T5311] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.8'. [ 61.997388][ T5306] usb 2-1: Couldn't submit interrupt_out_urb -19 [ 61.998684][ T8] usb 2-1: USB disconnect, device number 2 [ 62.017432][ T5282] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 62.077942][ T5282] plantronics 0003:047F:FFFF.0002: hiddev2,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 62.114780][ T5287] usb 4-1: USB disconnect, device number 2 [ 62.155542][ T5282] usb 1-1: USB disconnect, device number 2 [ 62.221573][ T5283] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd [ 62.236889][ T5283] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 62.314220][ T5283] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 62.506299][ T8] usb 5-1: USB disconnect, device number 2 [ 62.844498][ T5318] netlink: 'syz.2.10': attribute type 11 has an invalid length. [ 62.927640][ T5322] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.12'. [ 62.940299][ T5322] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 63.008460][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.028533][ T5230] Bluetooth: hci1: command tx timeout [ 63.029076][ T5229] Bluetooth: hci3: command tx timeout [ 63.033949][ T5230] Bluetooth: hci2: command tx timeout [ 63.098528][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.108810][ T5283] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 63.116400][ T5229] Bluetooth: hci0: command tx timeout [ 63.122184][ T5238] Bluetooth: hci4: command tx timeout [ 63.128374][ T5279] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 63.196200][ T5327] netlink: 'syz.4.14': attribute type 11 has an invalid length. [ 63.288613][ T5283] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 63.302834][ T5279] usb 4-1: config 17 has an invalid descriptor of length 255, skipping remainder of the config [ 63.325735][ T5283] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 63.337434][ T5279] usb 4-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 63.356210][ T5283] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 63.376927][ T5279] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 63.400799][ T5279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.410793][ T5283] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 63.416158][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 63.434968][ T5283] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.460351][ T5283] usb 3-1: config 0 descriptor?? [ 63.466502][ T5318] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 63.488403][ T5284] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 63.498510][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.592551][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 63.602072][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 63.611610][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 63.665707][ T5320] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.11'. [ 63.683133][ T5320] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 63.693211][ T5330] netlink: 'syz.1.15': attribute type 6 has an invalid length. [ 63.702911][ T5330] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.15'. [ 63.716001][ T5284] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 63.739605][ T5284] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 63.757858][ T5284] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 63.777360][ T5284] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 63.807990][ T5284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.843477][ T5284] usb 5-1: config 0 descriptor?? [ 63.867109][ T5327] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 63.905949][ T5283] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xd [ 64.948883][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 71.128179][ C1] sched: DL replenish lagged too much [ 71.270846][ T5279] usb 4-1: string descriptor 0 read error: -32 [ 71.291840][ T5283] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 74.009391][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 74.015929][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 74.233245][ T5279] aiptek 4-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 80.309673][ T938] cfg80211: failed to load regulatory.db [ 84.988513][ T5287] usb 4-1: USB disconnect, device number 3 [ 85.098818][ T5238] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 85.119306][ T5283] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 85.385314][ T5283] usb 3-1: USB disconnect, device number 2 [ 85.401398][ T5238] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 85.468570][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 85.478944][ T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 85.598399][ T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 85.724663][ T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 85.848536][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 86.074999][ T54] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 86.102293][ T5240] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 86.110660][ T5240] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 86.118408][ T5240] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 86.125586][ T5240] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 86.155950][ T5240] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 86.163971][ T5240] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 86.171377][ T5240] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 86.228901][ T5242] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 86.236638][ T5240] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 86.253049][ T5242] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 86.261510][ T5240] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 86.272484][ T5234] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 86.318578][ T5240] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 86.342670][ T5230] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 86.378490][ T5240] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 86.412078][ T5229] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 92.585496][ T5238] Bluetooth: hci7: command tx timeout [ 92.591927][ T54] Bluetooth: hci6: command tx timeout [ 92.597955][ T54] Bluetooth: hci5: command tx timeout [ 92.603820][ T5229] Bluetooth: hci8: command tx timeout [ 95.158258][ T54] Bluetooth: hci5: command tx timeout [ 95.163772][ T54] Bluetooth: hci8: command tx timeout [ 95.174297][ T5229] Bluetooth: hci7: command tx timeout [ 95.179846][ T5238] Bluetooth: hci6: command tx timeout [ 109.319477][ T5284] usbhid 5-1:0.0: can't add hid device: -71 [ 109.325526][ T5284] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 111.138236][ T5238] Bluetooth: hci5: command tx timeout [ 111.143705][ T5238] Bluetooth: hci7: command tx timeout [ 111.149231][ T5238] Bluetooth: hci8: command tx timeout [ 111.154671][ T5238] Bluetooth: hci6: command tx timeout [ 112.849002][ T5238] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 112.906721][ T5238] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 112.917924][ T5238] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 112.928837][ T5238] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 112.936547][ T5238] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 112.944848][ T5238] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 113.193836][ T5238] Bluetooth: hci6: command tx timeout [ 113.199484][ T54] Bluetooth: hci8: command tx timeout [ 113.204942][ T54] Bluetooth: hci7: command tx timeout [ 113.213948][ T5240] Bluetooth: hci5: command tx timeout [ 115.830375][ T5238] Bluetooth: hci9: command tx timeout [ 117.908432][ T5238] Bluetooth: hci9: command tx timeout [ 118.963154][ T5284] usb 5-1: USB disconnect, device number 3 [ 119.991415][ T5238] Bluetooth: hci9: command tx timeout [ 122.068569][ T5238] Bluetooth: hci9: command tx timeout [ 133.111371][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.117706][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 141.072108][ T5229] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 141.081129][ T5229] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 141.089605][ T5229] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 141.097650][ T5229] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 141.105737][ T5229] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 141.119047][ T5229] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 143.188532][ T5229] Bluetooth: hci0: command tx timeout [ 145.268381][ T5229] Bluetooth: hci0: command tx timeout [ 146.312086][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 146.320910][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 146.330596][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 146.339793][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 146.348066][ T5238] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 146.365283][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 146.375633][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 146.383653][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 146.391856][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 146.399560][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 146.415722][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 146.448505][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 147.332255][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 147.342274][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 147.349999][ T5229] Bluetooth: hci0: command tx timeout [ 147.356585][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 147.365666][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 147.374919][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 147.385957][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 147.494936][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 147.504482][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 147.513133][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 147.521775][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 147.529914][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 147.537564][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 148.470015][ T54] Bluetooth: hci1: command tx timeout [ 148.548627][ T54] Bluetooth: hci2: command tx timeout [ 149.430129][ T5238] Bluetooth: hci0: command tx timeout [ 149.436455][ T54] Bluetooth: hci3: command tx timeout [ 149.588488][ T54] Bluetooth: hci4: command tx timeout [ 150.553908][ T54] Bluetooth: hci1: command tx timeout [ 150.635489][ T54] Bluetooth: hci2: command tx timeout [ 151.510892][ T54] Bluetooth: hci3: command tx timeout [ 151.668508][ T54] Bluetooth: hci4: command tx timeout [ 152.628477][ T54] Bluetooth: hci1: command tx timeout [ 152.710611][ T54] Bluetooth: hci2: command tx timeout [ 153.589621][ T54] Bluetooth: hci3: command tx timeout [ 153.748524][ T54] Bluetooth: hci4: command tx timeout [ 154.708559][ T54] Bluetooth: hci1: command tx timeout [ 154.788714][ T54] Bluetooth: hci2: command tx timeout [ 155.674597][ T54] Bluetooth: hci3: command tx timeout [ 155.828459][ T54] Bluetooth: hci4: command tx timeout [ 194.553938][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.560395][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.415726][ T5238] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 203.450645][ T5238] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 203.469552][ T5238] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 203.566094][ T5238] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 203.640813][ T5238] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 203.671120][ T5238] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 205.828563][ T54] Bluetooth: hci10: command tx timeout [ 207.028308][ T5238] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 207.038043][ T5238] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 207.047052][ T5238] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 207.055269][ T5238] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 207.065354][ T5238] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 207.073686][ T5238] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 207.290623][ T54] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 207.306270][ T54] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 207.315224][ T54] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 207.329925][ T54] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 207.339032][ T54] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 207.346690][ T54] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 207.908363][ T54] Bluetooth: hci10: command tx timeout [ 208.090682][ T5238] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 208.101983][ T5238] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 208.111428][ T5238] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 208.120184][ T5238] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 208.129156][ T5238] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 208.136973][ T5238] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 208.217632][ T54] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 208.227077][ T54] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 208.235561][ T54] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 208.244422][ T54] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 208.253039][ T54] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 208.260850][ T54] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 209.118752][ T54] Bluetooth: hci11: command tx timeout [ 209.428366][ T54] Bluetooth: hci12: command tx timeout [ 209.988405][ T54] Bluetooth: hci10: command tx timeout [ 210.228268][ T54] Bluetooth: hci13: command tx timeout [ 210.308349][ T54] Bluetooth: hci14: command tx timeout [ 211.189690][ T54] Bluetooth: hci11: command tx timeout [ 211.508216][ T54] Bluetooth: hci12: command tx timeout [ 212.007131][ T54] Bluetooth: hci8: command 0x0406 tx timeout [ 212.013302][ T5230] Bluetooth: hci5: command 0x0406 tx timeout [ 212.019479][ T5234] Bluetooth: hci6: command 0x0406 tx timeout [ 212.025594][ T5234] Bluetooth: hci7: command 0x0406 tx timeout [ 212.068440][ T5240] Bluetooth: hci10: command tx timeout [ 212.308375][ T5238] Bluetooth: hci13: command tx timeout [ 212.388303][ T5238] Bluetooth: hci14: command tx timeout [ 213.268396][ T5238] Bluetooth: hci11: command tx timeout [ 213.588413][ T5238] Bluetooth: hci12: command tx timeout [ 214.388443][ T5238] Bluetooth: hci13: command tx timeout [ 214.468241][ T5238] Bluetooth: hci14: command tx timeout [ 215.348297][ T5238] Bluetooth: hci11: command tx timeout [ 215.668423][ T5238] Bluetooth: hci12: command tx timeout [ 216.468696][ T5238] Bluetooth: hci13: command tx timeout [ 216.548268][ T5238] Bluetooth: hci14: command tx timeout [ 234.869324][ T30] INFO: task kworker/R-wg-cr:5271 blocked for more than 143 seconds. [ 234.877703][ T30] Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 234.924710][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 234.978256][ T30] task:kworker/R-wg-cr state:D stack:27736 pid:5271 tgid:5271 ppid:2 flags:0x00004000 [ 235.074935][ T30] Call Trace: [ 235.086045][ T30] [ 235.121887][ T30] __schedule+0x1895/0x4b30 [ 235.126504][ T30] ? __pfx___schedule+0x10/0x10 [ 235.175315][ T30] ? __pfx_lock_release+0x10/0x10 [ 235.198201][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 235.203733][ T30] ? kthread_data+0x52/0xd0 [ 235.241589][ T30] ? schedule+0x90/0x320 [ 235.245896][ T30] ? wq_worker_sleeping+0x66/0x240 [ 235.298204][ T30] ? schedule+0x90/0x320 [ 235.302617][ T30] schedule+0x14b/0x320 [ 235.306810][ T30] schedule_preempt_disabled+0x13/0x30 [ 235.406388][ T30] __mutex_lock+0x6a7/0xd70 [ 235.428784][ T30] ? __mutex_lock+0x52a/0xd70 [ 235.433626][ T30] ? rescuer_thread+0xaf5/0x10a0 [ 235.478280][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 235.483379][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 235.528269][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 235.533539][ T30] rescuer_thread+0xaf5/0x10a0 [ 235.578339][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 235.584747][ T30] ? rescuer_thread+0x119/0x10a0 [ 235.608143][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 235.613429][ T30] ? __kthread_parkme+0x169/0x1d0 [ 235.655810][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 235.678330][ T30] kthread+0x2f0/0x390 [ 235.682474][ T30] ? __pfx_rescuer_thread+0x10/0x10 [ 235.687705][ T30] ? __pfx_kthread+0x10/0x10 [ 235.736888][ T30] ret_from_fork+0x4b/0x80 [ 235.758187][ T30] ? __pfx_kthread+0x10/0x10 [ 235.763593][ T30] ret_from_fork_asm+0x1a/0x30 [ 235.788265][ T30] [ 235.800507][ T30] [ 235.800507][ T30] Showing all locks held in the system: [ 235.837810][ T30] 1 lock held by init/1: [ 235.857984][ T30] #0: ffff8880b863ea98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 235.886079][ T30] 3 locks held by kworker/0:1/9: [ 235.900331][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 235.934446][ T30] #1: ffffc900000e7d00 (reg_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 235.962100][ T30] #2: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: reg_todo+0x1c/0x8d0 [ 235.986657][ T30] 1 lock held by khungtaskd/30: [ 236.002485][ T30] #0: ffffffff8e937ee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 236.033820][ T30] 4 locks held by kworker/u8:3/52: [ 236.041873][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 236.083749][ T30] #1: ffffc90000bd7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 236.105521][ T30] #2: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 236.132534][ T30] #3: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 236.156563][ T30] 3 locks held by kworker/u8:4/69: [ 236.176007][ T30] #0: ffff88814b9f5148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 236.201613][ T30] #1: ffffc900015e7d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 236.243509][ T30] #2: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 236.268169][ T30] 3 locks held by kworker/u8:8/2930: [ 236.284041][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 236.323629][ T30] #1: ffffc9000996fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 236.365580][ T30] #2: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 236.385242][ T30] 1 lock held by klogd/4672: [ 236.402750][ T30] 2 locks held by getty/4994: [ 236.407496][ T30] #0: ffff8880330820a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 236.445482][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 236.474288][ T30] 3 locks held by kworker/u9:7/5238: [ 236.490442][ T30] #0: ffff8880479f1948 ((wq_completion)hci9){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 236.515987][ T30] #1: ffffc90003c6fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 236.544408][ T30] #2: ffff88807c6b4d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 236.565143][ T30] 1 lock held by syz-executor/5245: [ 236.582194][ T30] #0: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 236.610835][ T30] 2 locks held by syz-executor/5246: [ 236.616177][ T30] #0: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 236.645349][ T30] #1: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 236.678160][ T30] 1 lock held by kworker/R-wg-cr/5268: [ 236.684466][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xaf5/0x10a0 [ 236.713128][ T30] 1 lock held by kworker/R-wg-cr/5270: [ 236.733359][ T30] 1 lock held by kworker/R-wg-cr/5271: [ 236.753664][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xaf5/0x10a0 [ 236.778172][ T30] 1 lock held by kworker/R-wg-cr/5274: [ 236.783872][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: rescuer_thread+0xaf5/0x10a0 [ 236.817215][ T30] 4 locks held by kworker/1:5/5284: [ 236.833654][ T30] 3 locks held by kworker/0:7/5287: [ 236.853727][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 236.877927][ T30] #1: ffffc90003f8fd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 236.905089][ T30] #2: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 236.934592][ T30] 5 locks held by kworker/1:7/5334: [ 236.945404][ T30] 2 locks held by syz-executor/5346: [ 236.963701][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 236.987707][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x602/0x9e0 [ 237.007568][ T30] 2 locks held by syz-executor/5347: [ 237.025547][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 237.051549][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 237.078156][ T30] 2 locks held by syz-executor/5348: [ 237.083583][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 237.116935][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 237.141896][ T30] 2 locks held by syz-executor/5349: [ 237.147232][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 237.166470][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 237.184953][ T30] 2 locks held by syz-executor/5356: [ 237.206284][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 237.228214][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 237.237843][ T30] 2 locks held by syz-executor/5366: [ 237.265168][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 237.293627][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 237.333101][ T30] 2 locks held by syz-executor/5375: [ 237.358123][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 237.367657][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 237.403271][ T30] 2 locks held by syz-executor/5376: [ 237.417703][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 237.437287][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 237.449440][ T30] 2 locks held by syz-executor/5381: [ 237.454776][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 237.470861][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 237.484570][ T30] 2 locks held by syz-executor/5383: [ 237.494922][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 237.508693][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 237.525015][ T30] 2 locks held by syz-executor/5389: [ 237.532139][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 237.549244][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 237.565745][ T30] 2 locks held by syz-executor/5393: [ 237.571495][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 237.585479][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 237.597379][ T5229] Bluetooth: hci9: command 0x0406 tx timeout [ 237.610222][ T30] 2 locks held by syz-executor/5395: [ 237.616179][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 237.633592][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 237.645389][ T30] 2 locks held by syz-executor/5399: [ 237.655445][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 237.666496][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 237.684264][ T30] 2 locks held by syz-executor/5401: [ 237.692173][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 237.708250][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 237.726163][ T30] [ 237.729078][ T30] ============================================= [ 237.729078][ T30] [ 237.737548][ T30] NMI backtrace for cpu 0 [ 237.741909][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 237.752387][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 237.763622][ T30] Call Trace: [ 237.767127][ T30] [ 237.770194][ T30] dump_stack_lvl+0x241/0x360 [ 237.774916][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 237.780246][ T30] ? __pfx__printk+0x10/0x10 [ 237.785304][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 237.790295][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 237.795785][ T30] ? _printk+0xd5/0x120 [ 237.800232][ T30] ? __pfx__printk+0x10/0x10 [ 237.805033][ T30] ? __wake_up_klogd+0xcc/0x110 [ 237.809911][ T30] ? __pfx__printk+0x10/0x10 [ 237.814626][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 237.819883][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 237.827108][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 237.833736][ T30] watchdog+0xff4/0x1040 [ 237.838089][ T30] ? watchdog+0x1ea/0x1040 [ 237.842558][ T30] ? __pfx_watchdog+0x10/0x10 [ 237.847350][ T30] kthread+0x2f0/0x390 [ 237.851444][ T30] ? __pfx_watchdog+0x10/0x10 [ 237.856146][ T30] ? __pfx_kthread+0x10/0x10 [ 237.860759][ T30] ret_from_fork+0x4b/0x80 [ 237.865290][ T30] ? __pfx_kthread+0x10/0x10 [ 237.869900][ T30] ret_from_fork_asm+0x1a/0x30 [ 237.874704][ T30] [ 237.878686][ T30] Sending NMI from CPU 0 to CPUs 1: [ 237.883969][ C1] NMI backtrace for cpu 1 [ 237.883983][ C1] CPU: 1 UID: 0 PID: 5334 Comm: kworker/1:7 Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 237.884002][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 237.884013][ C1] Workqueue: events nsim_dev_trap_report_work [ 237.884037][ C1] RIP: 0010:preempt_count_sub+0x14/0x170 [ 237.884059][ C1] Code: ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 56 53 89 fb 48 c7 c0 40 f9 3b 9a 48 c1 e8 03 <49> be 00 00 00 00 00 fc ff df 42 0f b6 04 30 84 c0 0f 85 d0 00 00 [ 237.884078][ C1] RSP: 0018:ffffc90000a177d8 EFLAGS: 00000a06 [ 237.884091][ C1] RAX: 1ffffffff3477f28 RBX: 0000000000000001 RCX: ffffc90000a17a48 [ 237.884103][ C1] RDX: dffffc0000000000 RSI: ffffc90000a11000 RDI: 0000000000000001 [ 237.884115][ C1] RBP: ffffc90000a178c0 R08: ffffc90000a17a30 R09: 0000000000000000 [ 237.884126][ C1] R10: ffffc90000a17910 R11: fffff52000142f24 R12: dffffc0000000000 [ 237.884137][ C1] R13: ffffc90000a178c0 R14: ffffc90000a11000 R15: ffffc90000a17a40 [ 237.884150][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 237.884163][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 237.884174][ C1] CR2: 0000001b32a09ff8 CR3: 000000000e734000 CR4: 00000000003506f0 [ 237.884188][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 237.884197][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 237.884207][ C1] Call Trace: [ 237.884214][ C1] [ 237.884220][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 237.884243][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 237.884267][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 237.884289][ C1] ? nmi_handle+0x2a/0x5a0 [ 237.884311][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 237.884336][ C1] ? nmi_handle+0x14f/0x5a0 [ 237.884352][ C1] ? nmi_handle+0x2a/0x5a0 [ 237.884367][ C1] ? preempt_count_sub+0x14/0x170 [ 237.884386][ C1] ? default_do_nmi+0x63/0x160 [ 237.884409][ C1] ? exc_nmi+0x123/0x1f0 [ 237.884431][ C1] ? end_repeat_nmi+0xf/0x53 [ 237.884455][ C1] ? preempt_count_sub+0x14/0x170 [ 237.884475][ C1] ? preempt_count_sub+0x14/0x170 [ 237.884494][ C1] ? preempt_count_sub+0x14/0x170 [ 237.884513][ C1] [ 237.884518][ C1] [ 237.884524][ C1] unwind_next_frame+0x18e6/0x22d0 [ 237.884551][ C1] ? stack_trace_save+0x118/0x1d0 [ 237.884570][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 237.884588][ C1] arch_stack_walk+0x11c/0x150 [ 237.884606][ C1] ? ref_tracker_alloc+0x188/0x490 [ 237.884631][ C1] stack_trace_save+0x118/0x1d0 [ 237.884649][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 237.884667][ C1] ? __kasan_kmalloc+0x98/0xb0 [ 237.884683][ C1] ? ref_tracker_alloc+0x14b/0x490 [ 237.884704][ C1] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 237.884727][ C1] ref_tracker_alloc+0x188/0x490 [ 237.884750][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 237.884781][ C1] dst_init+0xee/0x490 [ 237.884799][ C1] ? kmem_cache_alloc_noprof+0x185/0x2a0 [ 237.884820][ C1] dst_alloc+0x14f/0x190 [ 237.884840][ C1] ip_route_output_key_hash_rcu+0x13cc/0x2390 [ 237.884864][ C1] ip_route_output_key_hash+0x193/0x2b0 [ 237.884882][ C1] ? ip_route_output_key_hash+0xdf/0x2b0 [ 237.884898][ C1] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 237.884917][ C1] ? __pfx_lock_release+0x10/0x10 [ 237.884938][ C1] ? kthread+0x2f0/0x390 [ 237.884957][ C1] ip_route_output_flow+0x29/0x140 [ 237.884973][ C1] ip_route_me_harder+0x80d/0x1300 [ 237.885002][ C1] ? __pfx_ip_route_me_harder+0x10/0x10 [ 237.885028][ C1] ? trace_kmalloc+0x1f/0xd0 [ 237.885045][ C1] ? __kmalloc_node_track_caller_noprof+0x242/0x440 [ 237.885075][ C1] synproxy_send_tcp+0x356/0x6c0 [ 237.885095][ C1] synproxy_send_client_synack+0x8b8/0xf30 [ 237.885117][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 237.885135][ C1] ? synproxy_pernet+0x45/0x270 [ 237.885154][ C1] nft_synproxy_eval_v4+0x3ca/0x610 [ 237.885175][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 237.885191][ C1] ? validate_chain+0x11e/0x5920 [ 237.885209][ C1] ? nf_ip_checksum+0x13a/0x500 [ 237.885230][ C1] nft_synproxy_do_eval+0x362/0xa60 [ 237.885250][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 237.885270][ C1] ? __pfx_validate_chain+0x10/0x10 [ 237.885291][ C1] nft_do_chain+0x4ad/0x1da0 [ 237.885316][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 237.885338][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 237.885370][ C1] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 237.885392][ C1] nft_do_chain_inet+0x418/0x6b0 [ 237.885411][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 237.885428][ C1] ? ipt_do_table+0x312/0x1860 [ 237.885452][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 237.885468][ C1] nf_hook_slow+0xc3/0x220 [ 237.885484][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 237.885505][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 237.885526][ C1] NF_HOOK+0x29e/0x450 [ 237.885548][ C1] ? NF_HOOK+0x9a/0x450 [ 237.885568][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 237.885587][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 237.885611][ C1] ? ip_rcv_finish+0x406/0x560 [ 237.885633][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 237.885653][ C1] NF_HOOK+0x3a4/0x450 [ 237.885673][ C1] ? __lock_acquire+0x1384/0x2050 [ 237.885695][ C1] ? NF_HOOK+0x9a/0x450 [ 237.885715][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 237.885735][ C1] ? ip_rcv_core+0x801/0xd10 [ 237.885756][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 237.885780][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 237.885801][ C1] __netif_receive_skb+0x2bf/0x650 [ 237.885825][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 237.885846][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 237.885868][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 237.885889][ C1] ? __pfx_lock_release+0x10/0x10 [ 237.885911][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 237.885933][ C1] process_backlog+0x662/0x15b0 [ 237.885950][ C1] ? process_backlog+0x33b/0x15b0 [ 237.885969][ C1] ? __pfx_process_backlog+0x10/0x10 [ 237.885983][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 237.886007][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 237.886030][ C1] __napi_poll+0xcb/0x490 [ 237.886054][ C1] net_rx_action+0x89b/0x1240 [ 237.886078][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 237.886095][ C1] ? sched_clock+0x4a/0x70 [ 237.886120][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 237.886146][ C1] handle_softirqs+0x2c5/0x980 [ 237.886168][ C1] ? do_softirq+0x11b/0x1e0 [ 237.886188][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 237.886209][ C1] ? rcu_is_watching+0x15/0xb0 [ 237.886227][ C1] do_softirq+0x11b/0x1e0 [ 237.886245][ C1] [ 237.886250][ C1] [ 237.886256][ C1] ? __pfx_do_softirq+0x10/0x10 [ 237.886275][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 237.886298][ C1] ? rcu_is_watching+0x15/0xb0 [ 237.886315][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 237.886339][ C1] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 237.886356][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 237.886375][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 237.886394][ C1] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 237.886413][ C1] nsim_dev_trap_report_work+0x75d/0xaa0 [ 237.886435][ C1] ? process_scheduled_works+0x976/0x1850 [ 237.886456][ C1] process_scheduled_works+0xa63/0x1850 [ 237.886488][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 237.886512][ C1] ? assign_work+0x364/0x3d0 [ 237.886533][ C1] worker_thread+0x870/0xd30 [ 237.886557][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 237.886576][ C1] ? __kthread_parkme+0x169/0x1d0 [ 237.886598][ C1] ? __pfx_worker_thread+0x10/0x10 [ 237.886618][ C1] kthread+0x2f0/0x390 [ 237.886632][ C1] ? __pfx_worker_thread+0x10/0x10 [ 237.886653][ C1] ? __pfx_kthread+0x10/0x10 [ 237.886667][ C1] ret_from_fork+0x4b/0x80 [ 237.886688][ C1] ? __pfx_kthread+0x10/0x10 [ 237.886702][ C1] ret_from_fork_asm+0x1a/0x30 [ 237.886730][ C1] [ 238.762506][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 238.769427][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 238.779915][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 238.790603][ T30] Call Trace: [ 238.794161][ T30] [ 238.798410][ T30] dump_stack_lvl+0x241/0x360 [ 238.803476][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 238.808836][ T30] ? __pfx__printk+0x10/0x10 [ 238.813453][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 238.819570][ T30] ? vscnprintf+0x5d/0x90 [ 238.823943][ T30] panic+0x349/0x880 [ 238.827874][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 238.834081][ T30] ? __pfx_panic+0x10/0x10 [ 238.838624][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 238.844120][ T30] ? __irq_work_queue_local+0x137/0x410 [ 238.849722][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 238.855741][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 238.861938][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 238.869011][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 238.875226][ T30] watchdog+0x1033/0x1040 [ 238.879618][ T30] ? watchdog+0x1ea/0x1040 [ 238.884084][ T30] ? __pfx_watchdog+0x10/0x10 [ 238.888825][ T30] kthread+0x2f0/0x390 [ 238.892935][ T30] ? __pfx_watchdog+0x10/0x10 [ 238.897634][ T30] ? __pfx_kthread+0x10/0x10 [ 238.902244][ T30] ret_from_fork+0x4b/0x80 [ 238.907134][ T30] ? __pfx_kthread+0x10/0x10 [ 238.912360][ T30] ret_from_fork_asm+0x1a/0x30 [ 238.917303][ T30] [ 238.920744][ T30] Kernel Offset: disabled [ 238.925980][ T30] Rebooting in 86400 seconds..