last executing test programs: 53.811850039s ago: executing program 2 (id=3): r0 = socket(0xa, 0x1, 0x0) close(r0) socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000006cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x20}], 0x1, 0x10) 53.555732207s ago: executing program 2 (id=14): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x9c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x9c}}, 0x0) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1], 0x0, [0x8, 0x4], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) 53.33838963s ago: executing program 2 (id=15): io_uring_setup(0x1de0, &(0x7f0000000440)={0x0, 0x0, 0x800}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0xfecc) mkdir(0x0, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) epoll_create1(0x0) syz_open_dev$video(0x0, 0x7, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) futex_waitv(&(0x7f0000000280)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(0x0, 0x2, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r3, 0x0) accept4(r3, 0x0, 0x0, 0x0) 31.205483282s ago: executing program 3 (id=79): r0 = epoll_create(0x10000e9) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={r2, 0x0, 0x0, 0x1000}) r4 = fcntl$dupfd(r3, 0x0, r0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000200)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r4, &(0x7f00000000c0)={0xa0002015}) ppoll(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 27.405069414s ago: executing program 3 (id=83): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f00000065c0)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}}, 0x1c, 0x0, 0x0, 0x0, 0x22}}], 0x1, 0x0) rt_sigprocmask(0x5, &(0x7f0000000000)={[0x80000000]}, 0x0, 0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003780)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cf84ded40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c86e00f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec231fed44da4928b30142ba11de6c5d50b83c6e613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038d0100a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b17680100969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06de269e97fbb0776bf56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105cfdf8be5877050c91301bb997316dbf17866fb84d4173731efe895012f1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f01000080000000004febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60133641a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d37261774cc5a3bf6b466cb72812da518ff602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d50a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2e9a20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1015ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846899c6b23c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33694f40000000000005d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b95bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953f88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = fsopen(&(0x7f0000000040)='sockfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 26.164057857s ago: executing program 3 (id=85): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000001140102000000080001000000110008000100000000000800010001000000080001"], 0x38}}, 0x0) 25.675724708s ago: executing program 3 (id=87): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 25.159604735s ago: executing program 3 (id=90): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x1df67, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002004000b7080000000000007b8af8ff00000000b7080000000200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x7fff, 0x6}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000340)=[{0x0, 0x3, 0xa, 0xb}, {0x2, 0x2, 0xf, 0x7}, {0x5, 0x2, 0x13, 0x2}, {0x5, 0x1, 0x5, 0x9}], 0x10, 0x35, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) kcmp(r1, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r5, &(0x7f00000004c0)}) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xd0}}, 0x1c) io_uring_enter(0xffffffffffffffff, 0x3f70, 0x0, 0x0, 0x0, 0x0) 23.868350422s ago: executing program 3 (id=92): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) add_key(&(0x7f0000000280)='encrypted\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000380), 0x0, 0xfffffffffffffff8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) unshare(0x22020400) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x91, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x607}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x883}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x40}, @TCA_FQ_QUANTUM={0x8, 0xf}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) 12.637204218s ago: executing program 0 (id=114): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0xfffffffffffff800}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_RESET(0xffffffffffffffff, 0x4141, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000001a00850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x100000, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) 11.921667565s ago: executing program 4 (id=117): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(0xffffffffffffffff, &(0x7f0000000140)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 11.747600197s ago: executing program 1 (id=118): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) socket$rds(0x15, 0x5, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000300)) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x30, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100), 0x8) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={0xffffffffffffffff, r4, 0x4, r3}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000003c0)=""/75, 0x0}) r5 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r5}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, &(0x7f0000000680)={0xff}, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8], 0x3c}}, 0x0) 11.240241928s ago: executing program 4 (id=119): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}}, 0x4000000) 11.073099334s ago: executing program 4 (id=120): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000000) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="010000020c00fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x0, 0x100000, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x3c}}, 0x48080) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x28, r5, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}]}, 0x28}}, 0x0) 10.915925238s ago: executing program 0 (id=121): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 10.686793006s ago: executing program 0 (id=122): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000300)=""/175, 0xaf) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r6, 0x0, 0xb) splice(r7, 0x0, r8, 0x0, 0xf3a, 0x0) splice(r5, 0x0, r8, 0x0, 0x80, 0x4) timer_settime(r4, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r6) 10.206429631s ago: executing program 1 (id=123): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x80402) ppoll(&(0x7f0000000540)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x12c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) capset(&(0x7f0000000080), 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0xfffffffffffffe0d) socket$nl_generic(0x10, 0x3, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000380), 0x4) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) open(0x0, 0x0, 0x14) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="e00000001300", @ANYRES64], 0xe0}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@ccm_128={{0x303}, "8e44c05de5b300", "591f44ef0756020a9e48a600", "3f0f817c", "51eb071129f5da07"}, 0x28) 10.08254611s ago: executing program 4 (id=124): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x1df67, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002004000b7080000000000007b8af8ff00000000b7080000000200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x7fff, 0x6}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000340)=[{0x0, 0x3, 0xa, 0xb}, {0x2, 0x2, 0xf, 0x7}, {0x5, 0x2, 0x13, 0x2}, {0x5, 0x1, 0x5, 0x9}], 0x10, 0x35, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) kcmp(r1, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) socket(0x10, 0x3, 0x0) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000500)={0x0, 0x40000, 0x0, 0xfffffffc, 0x356}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000004c0)}) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xd0}}, 0x1c) io_uring_enter(r5, 0x3f70, 0x0, 0x0, 0x0, 0x0) 8.323645492s ago: executing program 0 (id=125): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x100, 0x65, 0x8, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xffe0, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0xba41}, @filter_kind_options=@f_u32={{0x8}, {0x24, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x67}, @TCA_U32_HASH={0x8, 0x2, 0xdb87}, @TCA_U32_DIVISOR={0x8, 0x4, 0x84}, @TCA_U32_HASH={0x8, 0x2, 0x5}]}}, @filter_kind_options=@f_bpf={{0x8}, {0xa0, 0x2, [@TCA_BPF_POLICE={0x7c, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x4, 0x80000001, 0xee31, 0x7, {0xf9, 0x2, 0x8, 0x1ff, 0x7, 0x4}, {0x5, 0x1, 0x1, 0x4, 0x4, 0x2}, 0x1, 0x1, 0x7fff}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x0, 0x5, 0x2, 0x4, {0x2e, 0x1, 0x43, 0x2, 0x2, 0x6}, {0x8, 0x1, 0x7fff, 0x151, 0x4, 0xf}, 0x2, 0x6, 0xa7}}]}, @TCA_BPF_FD={0x8}, @TCA_BPF_POLICE={0xc, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x6}]}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x100}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {0x0}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf, 0xb00}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 8.070086045s ago: executing program 4 (id=126): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) readahead(r3, 0x1, 0xe) 7.455511742s ago: executing program 4 (id=127): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 7.19028022s ago: executing program 1 (id=128): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}}, 0x4000000) 6.996816341s ago: executing program 1 (id=129): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0xfffffffffffff800}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_RESET(0xffffffffffffffff, 0x4141, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000001a00850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x100000, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) 5.849253836s ago: executing program 1 (id=130): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffffbd) r3 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty, 0xa}, 0x1c) ftruncate(r3, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80003, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001880)={0x10001b, 0x1000fb}, 0x20) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x24) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0) write$tcp_mem(r6, &(0x7f0000000100)={0x0, 0x2d, 0x0, 0xa, 0x0, 0x2c}, 0x48) 4.119752621s ago: executing program 1 (id=131): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) socket$rds(0x15, 0x5, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000300)) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x30, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100), 0x8) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={0xffffffffffffffff, r4, 0x4, r3}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000003c0)=""/75, 0x0}) r5 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r5}) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, &(0x7f0000000680)={0xff}, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8], 0x3c}}, 0x0) 391.096386ms ago: executing program 0 (id=132): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000000) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="010000020c00fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x0, 0x100000, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x3c}}, 0x48080) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x28, r5, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}]}, 0x28}}, 0x0) 0s ago: executing program 0 (id=133): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x80402) ppoll(&(0x7f0000000540)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x12c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) capset(&(0x7f0000000080), 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0xfffffffffffffe0d) socket$nl_generic(0x10, 0x3, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000380), 0x4) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="e00000001300", @ANYRES64], 0xe0}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@ccm_128={{0x303}, "8e44c05de5b300", "591f44ef0756020a9e48a600", "3f0f817c", "51eb071129f5da07"}, 0x28) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.131' (ED25519) to the list of known hosts. [ 67.238277][ T5209] cgroup: Unknown subsys name 'net' [ 67.346451][ T5209] cgroup: Unknown subsys name 'cpuset' [ 67.355225][ T5209] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.955818][ T5209] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.765349][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.771818][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.877791][ T5231] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.886229][ T5231] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.895588][ T5231] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.901696][ T5233] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.904072][ T5231] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.918194][ T5231] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.926393][ T5231] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.935040][ T5231] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.943039][ T5231] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.945134][ T5237] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.952010][ T5231] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.960386][ T5237] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.972791][ T5233] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 72.973116][ T5231] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 72.980275][ T5233] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.988239][ T5231] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.995030][ T5237] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.003724][ T5231] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.010872][ T5237] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.023779][ T5237] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 73.031187][ T5238] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.043746][ T5233] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 73.050994][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.058511][ T5233] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.066321][ T5235] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.075185][ T5235] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.083923][ T5233] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.095303][ T5238] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.103601][ T5238] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 73.112089][ T5238] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.546702][ T5220] chnl_net:caif_netlink_parms(): no params data found [ 73.562449][ T5227] chnl_net:caif_netlink_parms(): no params data found [ 73.675332][ T5236] chnl_net:caif_netlink_parms(): no params data found [ 73.709574][ T5223] chnl_net:caif_netlink_parms(): no params data found [ 73.790510][ T5219] chnl_net:caif_netlink_parms(): no params data found [ 73.822678][ T5220] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.833529][ T5220] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.841166][ T5220] bridge_slave_0: entered allmulticast mode [ 73.849209][ T5220] bridge_slave_0: entered promiscuous mode [ 73.861875][ T5227] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.869399][ T5227] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.876740][ T5227] bridge_slave_0: entered allmulticast mode [ 73.884127][ T5227] bridge_slave_0: entered promiscuous mode [ 73.899006][ T5220] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.906542][ T5220] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.914100][ T5220] bridge_slave_1: entered allmulticast mode [ 73.921210][ T5220] bridge_slave_1: entered promiscuous mode [ 73.954999][ T5227] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.962355][ T5227] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.972254][ T5227] bridge_slave_1: entered allmulticast mode [ 73.980018][ T5227] bridge_slave_1: entered promiscuous mode [ 74.039869][ T5220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.080092][ T5220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.091467][ T5227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.105836][ T5227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.170879][ T5236] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.179088][ T5236] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.186963][ T5236] bridge_slave_0: entered allmulticast mode [ 74.193958][ T5236] bridge_slave_0: entered promiscuous mode [ 74.201225][ T5223] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.209093][ T5223] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.216464][ T5223] bridge_slave_0: entered allmulticast mode [ 74.223524][ T5223] bridge_slave_0: entered promiscuous mode [ 74.231440][ T5223] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.238754][ T5223] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.246874][ T5223] bridge_slave_1: entered allmulticast mode [ 74.254109][ T5223] bridge_slave_1: entered promiscuous mode [ 74.286643][ T5236] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.295448][ T5236] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.302609][ T5236] bridge_slave_1: entered allmulticast mode [ 74.310384][ T5236] bridge_slave_1: entered promiscuous mode [ 74.334380][ T5219] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.341529][ T5219] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.349154][ T5219] bridge_slave_0: entered allmulticast mode [ 74.356020][ T5219] bridge_slave_0: entered promiscuous mode [ 74.365354][ T5219] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.372518][ T5219] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.379922][ T5219] bridge_slave_1: entered allmulticast mode [ 74.387270][ T5219] bridge_slave_1: entered promiscuous mode [ 74.396684][ T5220] team0: Port device team_slave_0 added [ 74.407786][ T5227] team0: Port device team_slave_0 added [ 74.426174][ T5223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.437687][ T5223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.464415][ T5220] team0: Port device team_slave_1 added [ 74.472621][ T5219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.492541][ T5227] team0: Port device team_slave_1 added [ 74.536673][ T5219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.565777][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.572955][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.599424][ T5227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.614279][ T5236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.624937][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.631914][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.658373][ T5227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.697046][ T5236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.717936][ T5223] team0: Port device team_slave_0 added [ 74.724725][ T5220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.732134][ T5220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.759436][ T5220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.773370][ T5220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.780641][ T5220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.807113][ T5220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.821240][ T5219] team0: Port device team_slave_0 added [ 74.829932][ T5219] team0: Port device team_slave_1 added [ 74.853736][ T5223] team0: Port device team_slave_1 added [ 74.924009][ T5219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.931037][ T5219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.957581][ T5219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.979240][ T5236] team0: Port device team_slave_0 added [ 74.987757][ T5236] team0: Port device team_slave_1 added [ 74.995213][ T5223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.002473][ T5223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.029123][ T5223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.043241][ T5238] Bluetooth: hci1: command tx timeout [ 75.043759][ T5231] Bluetooth: hci0: command tx timeout [ 75.055468][ T5220] hsr_slave_0: entered promiscuous mode [ 75.062450][ T5220] hsr_slave_1: entered promiscuous mode [ 75.070313][ T5219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.077593][ T5219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.103629][ T5219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.122551][ T5227] hsr_slave_0: entered promiscuous mode [ 75.129263][ T5227] hsr_slave_1: entered promiscuous mode [ 75.135589][ T5231] Bluetooth: hci2: command tx timeout [ 75.143281][ T5227] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.151144][ T5227] Cannot create hsr debugfs directory [ 75.166490][ T5223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.173625][ T5223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.200236][ T5223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.213180][ T5231] Bluetooth: hci3: command tx timeout [ 75.213204][ T5238] Bluetooth: hci4: command tx timeout [ 75.275718][ T5236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.283494][ T5236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.310557][ T5236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.323352][ T5236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.330538][ T5236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.357433][ T5236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.420844][ T5219] hsr_slave_0: entered promiscuous mode [ 75.430640][ T5219] hsr_slave_1: entered promiscuous mode [ 75.437878][ T5219] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.445551][ T5219] Cannot create hsr debugfs directory [ 75.508088][ T5223] hsr_slave_0: entered promiscuous mode [ 75.518000][ T5223] hsr_slave_1: entered promiscuous mode [ 75.524439][ T5223] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.532036][ T5223] Cannot create hsr debugfs directory [ 75.640235][ T5236] hsr_slave_0: entered promiscuous mode [ 75.646979][ T5236] hsr_slave_1: entered promiscuous mode [ 75.657115][ T5236] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.665105][ T5236] Cannot create hsr debugfs directory [ 75.863760][ T5220] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.874932][ T5220] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.889396][ T5220] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.910628][ T5220] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.994632][ T5227] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.019246][ T5227] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.040556][ T5227] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.067713][ T5227] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.098790][ T5223] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.136309][ T5223] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.167704][ T5223] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.182417][ T5223] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.196507][ T5219] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 76.223085][ T5219] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 76.237441][ T5219] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 76.248042][ T5219] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 76.346423][ T5236] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.359844][ T5236] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.369770][ T5236] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.395531][ T5236] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.452050][ T5220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.510539][ T5227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.528909][ T5220] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.565662][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.573000][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.591898][ T5227] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.617080][ T5219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.642205][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.649407][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.659624][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.666903][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.705937][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.713106][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.737515][ T5219] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.755167][ T5223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.792563][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.799748][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.810841][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.818034][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.869460][ T5223] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.912054][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.919320][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.957782][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.965065][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.989806][ T5236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.061961][ T5236] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.121358][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.128589][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.133422][ T5238] Bluetooth: hci0: command tx timeout [ 77.141264][ T5238] Bluetooth: hci1: command tx timeout [ 77.147953][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.155170][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.214177][ T5238] Bluetooth: hci2: command tx timeout [ 77.234569][ T5223] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.283082][ T5238] Bluetooth: hci3: command tx timeout [ 77.288662][ T5238] Bluetooth: hci4: command tx timeout [ 77.362145][ T5236] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 77.399936][ T5236] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.424102][ T5220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.565843][ T5227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.615998][ T5220] veth0_vlan: entered promiscuous mode [ 77.625237][ T5223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.648376][ T5219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.671106][ T5220] veth1_vlan: entered promiscuous mode [ 77.741890][ T5220] veth0_macvtap: entered promiscuous mode [ 77.804441][ T5220] veth1_macvtap: entered promiscuous mode [ 77.818795][ T5223] veth0_vlan: entered promiscuous mode [ 77.869104][ T5227] veth0_vlan: entered promiscuous mode [ 77.881104][ T5236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.900269][ T5223] veth1_vlan: entered promiscuous mode [ 77.913239][ T5227] veth1_vlan: entered promiscuous mode [ 77.923820][ T5220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.967253][ T5220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.019156][ T5227] veth0_macvtap: entered promiscuous mode [ 78.044483][ T5220] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.057102][ T5220] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.066763][ T5220] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.076077][ T5220] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.098634][ T5227] veth1_macvtap: entered promiscuous mode [ 78.131994][ T5223] veth0_macvtap: entered promiscuous mode [ 78.145369][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.157662][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.169792][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.200132][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.211387][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.227891][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.242745][ T5223] veth1_macvtap: entered promiscuous mode [ 78.270865][ T5236] veth0_vlan: entered promiscuous mode [ 78.278615][ T5227] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.289212][ T5227] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.298070][ T5227] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.306941][ T5227] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.328325][ T5219] veth0_vlan: entered promiscuous mode [ 78.350700][ T5236] veth1_vlan: entered promiscuous mode [ 78.360308][ T5219] veth1_vlan: entered promiscuous mode [ 78.387511][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.399024][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.411337][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.422122][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.435552][ T5223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.468686][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.485325][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.497450][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.508256][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.519882][ T5223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.549433][ T5223] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.559533][ T5223] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.568791][ T5223] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.580117][ T5223] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.622665][ T5236] veth0_macvtap: entered promiscuous mode [ 78.646954][ T5219] veth0_macvtap: entered promiscuous mode [ 78.671512][ T1115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.687710][ T1115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.693013][ T5236] veth1_macvtap: entered promiscuous mode [ 78.715573][ T1115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.729469][ T1115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.753129][ T5219] veth1_macvtap: entered promiscuous mode [ 78.823591][ T1115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.833521][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.846501][ T1115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.853350][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.867437][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.878665][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.890389][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.904798][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.917265][ T5236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.946270][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.957564][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.969838][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.981577][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.991831][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.002529][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.015099][ T5236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.027375][ T5219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.038975][ T5219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.051881][ T5219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.063043][ T5219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.073067][ T5219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.085466][ T5219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.096194][ T5219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.108264][ T5219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.120365][ T5219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.163152][ T5236] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.171935][ T5236] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.181884][ T5236] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.197433][ T5220] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 79.198774][ T5236] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.219891][ T5238] Bluetooth: hci1: command tx timeout [ 79.221884][ T5231] Bluetooth: hci0: command tx timeout [ 79.237948][ T5219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.248686][ T5219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.260064][ T5219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.271320][ T5219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.281565][ T5219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.292430][ T5219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.292758][ T5231] Bluetooth: hci2: command tx timeout [ 79.310806][ T5219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.321484][ T5219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.334762][ T5219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.347102][ T1115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.356874][ T1115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.365526][ T5231] Bluetooth: hci4: command tx timeout [ 79.368495][ T5238] Bluetooth: hci3: command tx timeout [ 79.372601][ T1115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.385362][ T1115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.416281][ T5219] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.425733][ T5219] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.435016][ T5219] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.445823][ T5219] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.558044][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.566641][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.786508][ T1115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.030105][ T1115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.989241][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.997554][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.345529][ T5238] Bluetooth: hci0: command tx timeout [ 81.351706][ T5238] Bluetooth: hci1: command tx timeout [ 81.379586][ T5238] Bluetooth: hci2: command tx timeout [ 81.446194][ T5238] Bluetooth: hci4: command tx timeout [ 81.452288][ T5231] Bluetooth: hci3: command tx timeout [ 81.536514][ T5320] veth1_macvtap: left promiscuous mode [ 81.542206][ T5320] macsec0: entered promiscuous mode [ 81.548662][ T5320] macsec0: entered allmulticast mode [ 81.592672][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.629355][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.661681][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.697197][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.941704][ T5328] ceph: No mds server is up or the cluster is laggy [ 81.950662][ T25] libceph: connect (1)[c::]:6789 error -101 [ 81.955104][ T5332] tmpfs: Bad value for 'mpol' [ 81.977604][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 82.520483][ T5345] capability: warning: `syz.4.5' uses deprecated v2 capabilities in a way that may be insecure [ 84.314538][ T5369] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.433669][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.443803][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.453208][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 84.543013][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 84.551741][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 84.913017][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.960826][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 85.164485][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 85.369341][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 85.813985][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.058334][ T5391] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 86.444516][ T5396] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.27'. [ 87.086256][ T9] libceph: connect (1)[c::]:6789 error -101 [ 87.093153][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 87.115681][ T5402] futex_wake_op: syz.0.29 tries to shift op by 144; fix this program [ 87.134825][ T46] cfg80211: failed to load regulatory.db [ 87.354354][ T9] libceph: connect (1)[c::]:6789 error -101 [ 87.360723][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 87.871706][ T5398] ceph: No mds server is up or the cluster is laggy [ 87.896985][ T9] libceph: connect (1)[c::]:6789 error -101 [ 87.917853][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 90.188491][ T5433] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 91.296043][ T5444] netlink: 28 bytes leftover after parsing attributes in process `syz.0.41'. [ 91.350950][ T5444] bond1 (unregistering): Released all slaves [ 91.842469][ T9] libceph: connect (1)[c::]:6789 error -101 [ 91.848675][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 92.113190][ T9] libceph: connect (1)[c::]:6789 error -101 [ 92.119364][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 92.397857][ T5450] ceph: No mds server is up or the cluster is laggy [ 92.853224][ T5231] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 92.913071][ T5231] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 92.922115][ T5231] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 92.930003][ T5231] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 92.938767][ T5231] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 92.947126][ T5231] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 93.355002][ T5273] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 94.154947][ T5478] netlink: 48 bytes leftover after parsing attributes in process `syz.1.49'. [ 94.270366][ T5273] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 94.280599][ T5273] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 94.306454][ T5478] netlink: 'syz.1.49': attribute type 10 has an invalid length. [ 94.317521][ T5273] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 94.340241][ T5273] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 94.355225][ T5478] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.363286][ T5478] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.384004][ T5273] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 94.435564][ T5273] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 94.445945][ T5273] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 94.459388][ T5478] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.459443][ T5273] usb 4-1: Product: syz [ 94.466719][ T5478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.467865][ T5478] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.484359][ T5273] usb 4-1: Manufacturer: syz [ 94.486014][ T5478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.531617][ T5478] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 94.548680][ T5273] cdc_wdm 4-1:1.0: skipping garbage [ 94.561133][ T5273] cdc_wdm 4-1:1.0: skipping garbage [ 94.654998][ T5273] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 94.688840][ T5273] cdc_wdm 4-1:1.0: Unknown control protocol [ 94.742570][ T5273] usb 4-1: USB disconnect, device number 2 [ 95.032928][ T5271] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 95.202913][ T5238] Bluetooth: hci5: command tx timeout [ 95.447277][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.031202][ T5271] usb 5-1: Using ep0 maxpacket: 8 [ 96.126999][ T5271] usb 5-1: config 0 has no interfaces? [ 96.138138][ T5271] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 96.148067][ T5271] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.182886][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 96.198452][ T5271] usb 5-1: config 0 descriptor?? [ 96.416749][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.479183][ T5494] netlink: 28 bytes leftover after parsing attributes in process `syz.1.53'. [ 96.518155][ T5464] chnl_net:caif_netlink_parms(): no params data found [ 96.545338][ T9] usb 4-1: device not accepting address 3, error -71 [ 96.843665][ T5495] bond1 (unregistering): Released all slaves [ 96.886583][ T5498] netlink: 28 bytes leftover after parsing attributes in process `syz.1.53'. [ 97.061653][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.124341][ T5272] libceph: connect (1)[c::]:6789 error -101 [ 97.175785][ T5272] libceph: mon0 (1)[c::]:6789 connect error [ 97.295664][ T5271] usb 5-1: USB disconnect, device number 2 [ 97.302352][ T5238] Bluetooth: hci5: command tx timeout [ 97.416007][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.483701][ T5272] libceph: connect (1)[c::]:6789 error -101 [ 97.490010][ T5272] libceph: mon0 (1)[c::]:6789 connect error [ 97.560442][ T5511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.57'. [ 97.638701][ T5464] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.649505][ T5464] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.661461][ T5464] bridge_slave_0: entered allmulticast mode [ 97.671668][ T5464] bridge_slave_0: entered promiscuous mode [ 97.691418][ T5464] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.698945][ T5464] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.707130][ T5464] bridge_slave_1: entered allmulticast mode [ 97.714875][ T5464] bridge_slave_1: entered promiscuous mode [ 97.858084][ T5517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.59'. [ 97.868879][ T5501] ceph: No mds server is up or the cluster is laggy [ 97.889746][ T5464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.005097][ T5464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.598941][ T12] bridge_slave_1: left allmulticast mode [ 98.670819][ T12] bridge_slave_1: left promiscuous mode [ 99.112867][ T5532] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.354410][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.629869][ T5238] Bluetooth: hci5: command tx timeout [ 100.290518][ T12] bridge_slave_0: left allmulticast mode [ 100.296851][ T12] bridge_slave_0: left promiscuous mode [ 100.304444][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.323298][ T5238] Bluetooth: hci5: command tx timeout [ 102.424005][ T5560] ceph: No mds server is up or the cluster is laggy [ 102.465925][ T5302] libceph: connect (1)[c::]:6789 error -101 [ 102.473700][ T5302] libceph: mon0 (1)[c::]:6789 connect error [ 103.303252][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.382184][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.434917][ T12] bond0 (unregistering): Released all slaves [ 104.490351][ T5464] team0: Port device team_slave_0 added [ 105.191190][ T5464] team0: Port device team_slave_1 added [ 106.664211][ T5238] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 106.674099][ T5238] Bluetooth: hci3: Injecting HCI hardware error event [ 106.682630][ T5238] Bluetooth: hci3: hardware error 0x00 [ 108.457776][ T5608] ubi0: attaching mtd0 [ 108.467743][ T5608] ubi0: scanning is finished [ 108.472540][ T5608] ubi0: empty MTD device detected [ 110.042055][ T5608] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 110.051166][ T5608] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 110.073023][ T5608] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 110.080330][ T5608] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 110.111507][ T5464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.130384][ T5608] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 110.139537][ T5464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.168064][ T5608] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 110.188225][ T5608] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3861015896 [ 110.201744][ T5608] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 110.211099][ T5628] syz.3.87 uses obsolete (PF_INET,SOCK_PACKET) [ 110.234110][ T5464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.282919][ T5464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.302326][ T5464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.361566][ T5625] ubi0: background thread "ubi_bgt0d" started, PID 5625 [ 110.440862][ T5464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.645886][ T5238] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 112.630481][ T5464] hsr_slave_0: entered promiscuous mode [ 112.943564][ T5464] hsr_slave_1: entered promiscuous mode [ 113.199062][ T5464] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.229440][ T5464] Cannot create hsr debugfs directory [ 114.849588][ T5659] ======================================================= [ 114.849588][ T5659] WARNING: The mand mount option has been deprecated and [ 114.849588][ T5659] and is ignored by this kernel. Remove the mand [ 114.849588][ T5659] option from the mount to silence this warning. [ 114.849588][ T5659] ======================================================= [ 115.040332][ T12] hsr_slave_0: left promiscuous mode [ 115.156828][ T12] hsr_slave_1: left promiscuous mode [ 115.267349][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.393428][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.666674][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.739869][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.875360][ T12] veth1_macvtap: left promiscuous mode [ 115.881403][ T12] veth0_macvtap: left promiscuous mode [ 115.932924][ T12] veth1_vlan: left promiscuous mode [ 115.939240][ T12] veth0_vlan: left promiscuous mode [ 119.770916][ T12] team0 (unregistering): Port device team_slave_1 removed [ 119.822405][ T12] team0 (unregistering): Port device team_slave_0 removed [ 119.866344][ T5720] xt_hashlimit: Unknown mode mask 100000, kernel too old? [ 120.534244][ T5663] netlink: 76 bytes leftover after parsing attributes in process `syz.3.92'. [ 121.661072][ T5741] netlink: 36 bytes leftover after parsing attributes in process `syz.0.110'. [ 121.673898][ T5741] netlink: 16 bytes leftover after parsing attributes in process `syz.0.110'. [ 121.685534][ T5741] netlink: 36 bytes leftover after parsing attributes in process `syz.0.110'. [ 121.694061][ T5736] loop2: detected capacity change from 0 to 7 [ 121.694717][ T5741] netlink: 36 bytes leftover after parsing attributes in process `syz.0.110'. [ 121.755057][ T5736] Dev loop2: unable to read RDB block 7 [ 121.761185][ T5736] loop2: unable to read partition table [ 121.791573][ T5736] loop2: partition table beyond EOD, truncated [ 121.828901][ T5736] loop_reread_partitions: partition scan of loop2 (þ被) failed (rc=-5) [ 124.364655][ T5231] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 124.385612][ T5231] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 124.396421][ T5231] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 124.407986][ T5231] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 124.419413][ T5789] xt_hashlimit: Unknown mode mask 100000, kernel too old? [ 124.432055][ T5231] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 124.442496][ T5231] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 125.034737][ T5809] netlink: 36 bytes leftover after parsing attributes in process `syz.4.120'. [ 125.056975][ T5809] netlink: 16 bytes leftover after parsing attributes in process `syz.4.120'. [ 125.075183][ T5809] netlink: 36 bytes leftover after parsing attributes in process `syz.4.120'. [ 125.117107][ T5809] netlink: 36 bytes leftover after parsing attributes in process `syz.4.120'. [ 125.293220][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.452387][ T5238] Bluetooth: hci3: command tx timeout [ 129.522917][ T5238] Bluetooth: hci3: command tx timeout [ 129.596646][ T5850] xt_hashlimit: Unknown mode mask 100000, kernel too old? [ 131.604330][ T5238] Bluetooth: hci3: command tx timeout [ 133.207954][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.215884][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.682920][ T5238] Bluetooth: hci3: command tx timeout [ 135.199733][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.446197][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.500225][ T5844] syzkaller1: entered promiscuous mode [ 135.511145][ T5844] syzkaller1: entered allmulticast mode [ 135.551763][ T5863] netlink: 36 bytes leftover after parsing attributes in process `syz.0.132'. [ 135.595709][ T5863] netlink: 16 bytes leftover after parsing attributes in process `syz.0.132'. [ 135.636256][ T5863] netlink: 36 bytes leftover after parsing attributes in process `syz.0.132'. [ 135.669541][ T5863] netlink: 36 bytes leftover after parsing attributes in process `syz.0.132'. [ 135.692439][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.692545][ T0] sched: DL replenish lagged too much [ 142.804595][ C0] Illegal XDP return value 16128 on prog (id 17) dev hsr_slave_1, expect packet loss! [ 155.010670][ T12] bridge_slave_1: left allmulticast mode [ 155.050271][ T12] bridge_slave_1: left promiscuous mode [ 155.100381][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.413537][ T12] bridge_slave_0: left allmulticast mode [ 155.419264][ T12] bridge_slave_0: left promiscuous mode [ 155.529653][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.883530][ T5233] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 156.915809][ T5233] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 156.924768][ T5233] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 156.935905][ T5233] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 156.955125][ T5233] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 156.962623][ T5233] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 156.975918][ T5231] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 157.002852][ T5231] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 157.011969][ T5231] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 157.041840][ T5231] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 157.051479][ T5231] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 157.060859][ T5231] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 157.136679][ T5238] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 157.146395][ T5238] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 157.157377][ T5238] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 157.172252][ T5233] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 157.182334][ T5233] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 157.203526][ T5233] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 157.211870][ T5233] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 157.225602][ T5233] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 157.235051][ T5233] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 157.258130][ T5231] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 157.267746][ T5231] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 157.276324][ T5231] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 159.043151][ T5238] Bluetooth: hci2: command tx timeout [ 159.123126][ T5238] Bluetooth: hci1: command tx timeout [ 159.363000][ T5231] Bluetooth: hci4: command tx timeout [ 159.371242][ T5238] Bluetooth: hci6: command tx timeout [ 161.122943][ T5238] Bluetooth: hci2: command tx timeout [ 161.205139][ T5238] Bluetooth: hci1: command tx timeout [ 161.443045][ T5231] Bluetooth: hci4: command tx timeout [ 161.449644][ T5238] Bluetooth: hci6: command tx timeout [ 163.202813][ T5238] Bluetooth: hci2: command tx timeout [ 163.284309][ T5238] Bluetooth: hci1: command tx timeout [ 163.523013][ T5231] Bluetooth: hci4: command tx timeout [ 163.529877][ T5238] Bluetooth: hci6: command tx timeout [ 165.287810][ T5238] Bluetooth: hci2: command tx timeout [ 165.379922][ T5238] Bluetooth: hci1: command tx timeout [ 165.603040][ T5238] Bluetooth: hci6: command tx timeout [ 165.608528][ T5238] Bluetooth: hci4: command tx timeout [ 166.219000][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.250743][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.269685][ T12] bond0 (unregistering): Released all slaves [ 184.029646][ T5231] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 184.041414][ T5231] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 184.050593][ T5231] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 184.059149][ T5231] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 184.074224][ T5231] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 184.093075][ T5231] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 186.165411][ T5231] Bluetooth: hci0: command tx timeout [ 188.243003][ T5231] Bluetooth: hci0: command tx timeout [ 190.322865][ T5231] Bluetooth: hci0: command tx timeout [ 192.402970][ T5231] Bluetooth: hci0: command tx timeout [ 194.649646][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.656118][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 217.218805][ T5238] Bluetooth: hci5: command 0x0406 tx timeout [ 218.113021][ T5238] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 218.122546][ T5238] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 218.131531][ T5238] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 218.140202][ T5238] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 218.165295][ T5238] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 218.173438][ T5238] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 218.361175][ T5231] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 218.373430][ T5231] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 218.381734][ T5231] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 218.399270][ T5231] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 218.418908][ T5231] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 218.427735][ T5231] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 218.498904][ T5231] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 218.511645][ T5231] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 218.520211][ T5231] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 218.528666][ T5231] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 218.536804][ T5231] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 218.544822][ T5231] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 218.619548][ T5238] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 218.633155][ T5238] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 218.641377][ T5238] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 218.650105][ T5238] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 218.658134][ T5238] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 218.676176][ T5238] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 220.248042][ T5238] Bluetooth: hci7: command tx timeout [ 220.488792][ T5238] Bluetooth: hci8: command tx timeout [ 220.643744][ T5238] Bluetooth: hci9: command tx timeout [ 220.722885][ T5238] Bluetooth: hci10: command tx timeout [ 222.322828][ T5238] Bluetooth: hci7: command tx timeout [ 222.562808][ T5238] Bluetooth: hci8: command tx timeout [ 222.722880][ T5238] Bluetooth: hci9: command tx timeout [ 222.802912][ T5238] Bluetooth: hci10: command tx timeout [ 224.402888][ T5238] Bluetooth: hci7: command tx timeout [ 224.642869][ T5238] Bluetooth: hci8: command tx timeout [ 224.802858][ T5238] Bluetooth: hci9: command tx timeout [ 224.882870][ T5238] Bluetooth: hci10: command tx timeout [ 226.482907][ T5238] Bluetooth: hci7: command tx timeout [ 226.722763][ T5238] Bluetooth: hci8: command tx timeout [ 226.882839][ T5238] Bluetooth: hci9: command tx timeout [ 226.962897][ T5238] Bluetooth: hci10: command tx timeout [ 244.690842][ T5231] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 244.706814][ T5231] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 244.715248][ T5231] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 244.734131][ T5231] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 244.744781][ T5231] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 244.753583][ T5231] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 246.811144][ T5238] Bluetooth: hci11: command tx timeout [ 247.928862][ T5238] Bluetooth: hci3: command 0x0406 tx timeout [ 248.891152][ T5231] Bluetooth: hci11: command tx timeout [ 250.962990][ T5231] Bluetooth: hci11: command tx timeout [ 253.042815][ T5231] Bluetooth: hci11: command tx timeout [ 256.085327][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.091779][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 278.642207][ T5238] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 278.654771][ T5238] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 278.663307][ T5238] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 278.672442][ T5238] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 278.703402][ T5238] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 278.712163][ T5238] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 278.923537][ T5231] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 278.937433][ T5231] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 278.953509][ T5231] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 278.962185][ T5231] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 278.973489][ T5231] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 278.981021][ T5231] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 279.273558][ T5238] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 279.283685][ T5238] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 279.294097][ T5238] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 279.302313][ T5238] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 279.310715][ T5238] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 279.321500][ T5238] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 279.393087][ T5238] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 279.402466][ T5238] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 279.413954][ T5238] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 279.424739][ T5238] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 279.433080][ T5238] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 279.440554][ T5238] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 280.802786][ T5238] Bluetooth: hci12: command tx timeout [ 281.043044][ T5238] Bluetooth: hci13: command tx timeout [ 281.379176][ T5238] Bluetooth: hci14: command tx timeout [ 281.522785][ T5238] Bluetooth: hci15: command tx timeout [ 282.882787][ T5235] Bluetooth: hci12: command tx timeout [ 283.122857][ T5235] Bluetooth: hci13: command tx timeout [ 283.442895][ T5235] Bluetooth: hci14: command tx timeout [ 283.602907][ T5235] Bluetooth: hci15: command tx timeout [ 283.780037][ T5224] Bluetooth: hci6: command 0x0406 tx timeout [ 283.786226][ T5237] Bluetooth: hci1: command 0x0406 tx timeout [ 283.792287][ T5237] Bluetooth: hci4: command 0x0406 tx timeout [ 283.804159][ T5235] Bluetooth: hci2: command 0x0406 tx timeout [ 284.962764][ T5231] Bluetooth: hci12: command tx timeout [ 285.202858][ T5231] Bluetooth: hci13: command tx timeout [ 285.522753][ T5231] Bluetooth: hci14: command tx timeout [ 285.682926][ T5231] Bluetooth: hci15: command tx timeout [ 287.042768][ T5231] Bluetooth: hci12: command tx timeout [ 287.282970][ T5231] Bluetooth: hci13: command tx timeout [ 287.602822][ T5231] Bluetooth: hci14: command tx timeout [ 287.762943][ T5231] Bluetooth: hci15: command tx timeout [ 305.118647][ T5238] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 305.143297][ T5238] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 305.154242][ T5238] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 305.164122][ T5238] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 305.172392][ T5238] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 305.180691][ T5238] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 307.289639][ T5238] Bluetooth: hci16: command tx timeout [ 309.369238][ T5238] Bluetooth: hci16: command tx timeout [ 309.375424][ T5228] Bluetooth: hci0: command 0x0406 tx timeout [ 311.442776][ T5231] Bluetooth: hci16: command tx timeout [ 313.522812][ T5231] Bluetooth: hci16: command tx timeout [ 317.528773][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.542678][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 333.522802][ T30] INFO: task kworker/u8:1:12 blocked for more than 143 seconds. [ 333.530513][ T30] Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 333.608071][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 333.642760][ T30] task:kworker/u8:1 state:D stack:19896 pid:12 tgid:12 ppid:2 flags:0x00004000 [ 333.752708][ T30] Workqueue: netns cleanup_net [ 333.757632][ T30] Call Trace: [ 333.761036][ T30] [ 333.858082][ T30] __schedule+0x1843/0x4ae0 [ 333.902664][ T30] ? __pfx___schedule+0x10/0x10 [ 333.907627][ T30] ? __pfx_lock_release+0x10/0x10 [ 333.947633][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 333.972662][ T30] ? kthread_data+0x52/0xd0 [ 333.977287][ T30] ? schedule+0x90/0x320 [ 333.981593][ T30] ? wq_worker_sleeping+0x66/0x240 [ 334.047191][ T30] ? schedule+0x90/0x320 [ 334.051558][ T30] schedule+0x14b/0x320 [ 334.101776][ T30] schedule_preempt_disabled+0x13/0x30 [ 334.128190][ T30] __mutex_lock+0x6a7/0xd70 [ 334.137399][ T30] ? __mutex_lock+0x52a/0xd70 [ 334.142167][ T30] ? ieee80211_unregister_hw+0x55/0x2c0 [ 334.192412][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 334.216521][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 334.222555][ T30] ? rcu_is_watching+0x15/0xb0 [ 334.237553][ T30] ieee80211_unregister_hw+0x55/0x2c0 [ 334.280139][ T30] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 334.302851][ T30] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 334.309981][ T30] hwsim_exit_net+0x5c1/0x670 [ 334.348538][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 334.362833][ T30] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 334.368911][ T30] cleanup_net+0x802/0xcc0 [ 334.432823][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 334.437875][ T30] ? process_scheduled_works+0x976/0x1850 [ 334.468369][ T30] process_scheduled_works+0xa63/0x1850 [ 334.488572][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 334.499687][ T30] ? assign_work+0x364/0x3d0 [ 334.512697][ T30] worker_thread+0x870/0xd30 [ 334.517393][ T30] ? __kthread_parkme+0x169/0x1d0 [ 334.522489][ T30] ? __pfx_worker_thread+0x10/0x10 [ 334.552757][ T30] kthread+0x2f0/0x390 [ 334.556997][ T30] ? __pfx_worker_thread+0x10/0x10 [ 334.562211][ T30] ? __pfx_kthread+0x10/0x10 [ 334.591504][ T30] ret_from_fork+0x4b/0x80 [ 334.600591][ T30] ? __pfx_kthread+0x10/0x10 [ 334.622861][ T30] ret_from_fork_asm+0x1a/0x30 [ 334.627739][ T30] [ 334.642820][ T30] INFO: task dhcpcd:4887 blocked for more than 144 seconds. [ 334.650241][ T30] Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 334.688558][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 334.712633][ T30] task:dhcpcd state:D stack:20608 pid:4887 tgid:4887 ppid:4886 flags:0x00000002 [ 334.737220][ T30] Call Trace: [ 334.740572][ T30] [ 334.757142][ T30] __schedule+0x1843/0x4ae0 [ 334.761827][ T30] ? __pfx___schedule+0x10/0x10 [ 334.782795][ T30] ? __pfx_lock_release+0x10/0x10 [ 334.787913][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 334.816262][ T30] ? schedule+0x90/0x320 [ 334.820613][ T30] schedule+0x14b/0x320 [ 334.834989][ T30] schedule_preempt_disabled+0x13/0x30 [ 334.840550][ T30] __mutex_lock+0x6a7/0xd70 [ 334.862701][ T30] ? __mutex_lock+0x52a/0xd70 [ 334.867474][ T30] ? rtnl_dumpit+0x99/0x200 [ 334.872047][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 334.898649][ T30] ? __alloc_skb+0x28f/0x440 [ 334.910676][ T30] ? __pfx___alloc_skb+0x10/0x10 [ 334.926892][ T30] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 334.932366][ T30] rtnl_dumpit+0x99/0x200 [ 334.949687][ T30] netlink_dump+0x647/0xd80 [ 334.971034][ T30] ? __pfx_netlink_dump+0x10/0x10 [ 334.982652][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 334.987783][ T30] __netlink_dump_start+0x5a2/0x790 [ 335.010322][ T30] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 335.028170][ T30] rtnetlink_rcv_msg+0xb3d/0xcf0 [ 335.039034][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 335.057780][ T30] ? __pfx_rtnl_dumpit+0x10/0x10 [ 335.071868][ T30] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 335.087791][ T30] netlink_rcv_skb+0x1e3/0x430 [ 335.099898][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 335.112696][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 335.118091][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 335.148599][ T30] netlink_unicast+0x7f6/0x990 [ 335.159903][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 335.179997][ T30] ? __virt_addr_valid+0x183/0x530 [ 335.190971][ T30] ? __check_object_size+0x48e/0x900 [ 335.200734][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 335.226470][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 335.231863][ T30] ? __might_fault+0xaa/0x120 [ 335.251071][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 335.269481][ T30] __sock_sendmsg+0x221/0x270 [ 335.282822][ T30] __sys_sendto+0x39b/0x4f0 [ 335.287415][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 335.292519][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 335.316071][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 335.322508][ T30] __x64_sys_sendto+0xde/0x100 [ 335.343858][ T30] do_syscall_64+0xf3/0x230 [ 335.348451][ T30] ? clear_bhb_loop+0x35/0x90 [ 335.371461][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.406302][ T30] RIP: 0033:0x7fb752ad5ad7 [ 335.410811][ T30] RSP: 002b:00007ffc3326f4d8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 335.452645][ T30] RAX: ffffffffffffffda RBX: 00007ffc33270600 RCX: 00007fb752ad5ad7 [ 335.460792][ T30] RDX: 0000000000000014 RSI: 00007ffc33270520 RDI: 000000000000000e [ 335.498693][ T30] RBP: 00007ffc33270590 R08: 00007ffc33270504 R09: 000000000000000c [ 335.512809][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000012 [ 335.520852][ T30] R13: 00007ffc33270504 R14: 00007ffc33270520 R15: 0000000000000105 [ 335.562651][ T30] [ 335.579776][ T30] INFO: task kworker/1:4:5272 blocked for more than 145 seconds. [ 335.599922][ T30] Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 335.619818][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 335.642531][ T30] task:kworker/1:4 state:D stack:22032 pid:5272 tgid:5272 ppid:2 flags:0x00004000 [ 335.672644][ T30] Workqueue: events_power_efficient reg_check_chans_work [ 335.679779][ T30] Call Trace: [ 335.702767][ T30] [ 335.705783][ T30] __schedule+0x1843/0x4ae0 [ 335.710342][ T30] ? try_to_wake_up+0x98b/0x14b0 [ 335.737835][ T30] ? schedule+0x90/0x320 [ 335.742188][ T30] ? __pfx___schedule+0x10/0x10 [ 335.766157][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 335.772240][ T30] ? __pfx_lock_release+0x10/0x10 [ 335.791472][ T30] ? kick_pool+0x45c/0x620 [ 335.805506][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 335.810790][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 335.832198][ T30] ? schedule+0x90/0x320 [ 335.848776][ T30] schedule+0x14b/0x320 [ 335.866311][ T30] schedule_preempt_disabled+0x13/0x30 [ 335.871874][ T30] __mutex_lock+0x6a7/0xd70 [ 335.892643][ T30] ? __mutex_lock+0x52a/0xd70 [ 335.897404][ T30] ? reg_check_chans_work+0x99/0xfd0 [ 335.922530][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 335.927891][ T30] ? process_scheduled_works+0x976/0x1850 [ 335.946184][ T30] reg_check_chans_work+0x99/0xfd0 [ 335.951403][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 335.974466][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 335.980548][ T30] ? __pfx_reg_check_chans_work+0x10/0x10 [ 336.012694][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 336.019135][ T30] ? process_scheduled_works+0x976/0x1850 [ 336.041776][ T30] process_scheduled_works+0xa63/0x1850 [ 336.059727][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 336.078529][ T30] ? assign_work+0x364/0x3d0 [ 336.088814][ T30] worker_thread+0x870/0xd30 [ 336.102696][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 336.108680][ T30] ? __kthread_parkme+0x169/0x1d0 [ 336.132721][ T30] ? __pfx_worker_thread+0x10/0x10 [ 336.137922][ T30] kthread+0x2f0/0x390 [ 336.142037][ T30] ? __pfx_worker_thread+0x10/0x10 [ 336.171161][ T30] ? __pfx_kthread+0x10/0x10 [ 336.186204][ T30] ret_from_fork+0x4b/0x80 [ 336.190712][ T30] ? __pfx_kthread+0x10/0x10 [ 336.218578][ T30] ret_from_fork_asm+0x1a/0x30 [ 336.228265][ T30] [ 336.232830][ T30] INFO: task kworker/1:6:5302 blocked for more than 146 seconds. [ 336.268616][ T30] Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 336.287258][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 336.305512][ T30] task:kworker/1:6 state:D stack:23928 pid:5302 tgid:5302 ppid:2 flags:0x00004000 [ 336.319918][ T30] Workqueue: events reg_todo [ 336.329810][ T30] Call Trace: [ 336.335991][ T30] [ 336.338986][ T30] __schedule+0x1843/0x4ae0 [ 336.348894][ T30] ? try_to_wake_up+0x98b/0x14b0 [ 336.358199][ T30] ? schedule+0x90/0x320 [ 336.362556][ T30] ? __pfx___schedule+0x10/0x10 [ 336.371915][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 336.381077][ T30] ? __pfx_lock_release+0x10/0x10 [ 336.391761][ T30] ? kick_pool+0x45c/0x620 [ 336.399147][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 336.408295][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 336.416363][ T30] ? schedule+0x90/0x320 [ 336.420694][ T30] schedule+0x14b/0x320 [ 336.429010][ T30] schedule_preempt_disabled+0x13/0x30 [ 336.438501][ T30] __mutex_lock+0x6a7/0xd70 [ 336.446940][ T30] ? __mutex_lock+0x52a/0xd70 [ 336.451712][ T30] ? reg_todo+0x1c/0x8d0 [ 336.460539][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 336.470883][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 336.478960][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 336.493559][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 336.499980][ T30] ? process_scheduled_works+0x976/0x1850 [ 336.513375][ T30] reg_todo+0x1c/0x8d0 [ 336.517703][ T30] ? process_scheduled_works+0x976/0x1850 [ 336.529768][ T30] process_scheduled_works+0xa63/0x1850 [ 336.535934][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 336.542003][ T30] ? assign_work+0x364/0x3d0 [ 336.552720][ T30] worker_thread+0x870/0xd30 [ 336.559886][ T30] ? __kthread_parkme+0x169/0x1d0 [ 336.571473][ T30] ? __pfx_worker_thread+0x10/0x10 [ 336.578480][ T30] kthread+0x2f0/0x390 [ 336.587727][ T30] ? __pfx_worker_thread+0x10/0x10 [ 336.595783][ T30] ? __pfx_kthread+0x10/0x10 [ 336.600449][ T30] ret_from_fork+0x4b/0x80 [ 336.610739][ T30] ? __pfx_kthread+0x10/0x10 [ 336.617085][ T30] ret_from_fork_asm+0x1a/0x30 [ 336.622120][ T30] [ 336.630646][ T30] INFO: task syz-executor:5790 blocked for more than 146 seconds. [ 336.641449][ T30] Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 336.652647][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 336.668932][ T30] task:syz-executor state:D stack:23224 pid:5790 tgid:5790 ppid:1 flags:0x00004006 [ 336.681366][ T30] Call Trace: [ 336.691193][ T30] [ 336.694512][ T30] __schedule+0x1843/0x4ae0 [ 336.699114][ T30] ? __pfx___schedule+0x10/0x10 [ 336.710585][ T30] ? __pfx_lock_release+0x10/0x10 [ 336.717886][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 336.730242][ T30] ? schedule+0x90/0x320 [ 336.734903][ T30] schedule+0x14b/0x320 [ 336.739143][ T30] schedule_preempt_disabled+0x13/0x30 [ 336.751076][ T30] __mutex_lock+0x6a7/0xd70 [ 336.757371][ T30] ? __mutex_lock+0x52a/0xd70 [ 336.771374][ T30] ? wg_netns_pre_exit+0x1f/0x1e0 [ 336.776926][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 336.782221][ T30] wg_netns_pre_exit+0x1f/0x1e0 [ 336.792700][ T30] setup_net+0x570/0x9e0 [ 336.798006][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 336.810066][ T30] ? __pfx_setup_net+0x10/0x10 [ 336.816579][ T30] copy_net_ns+0x33f/0x570 [ 336.821083][ T30] create_new_namespaces+0x425/0x7b0 [ 336.832209][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 336.840774][ T30] ksys_unshare+0x57d/0xa70 [ 336.850374][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 336.857099][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 336.870015][ T30] ? do_syscall_64+0x100/0x230 [ 336.876509][ T30] __x64_sys_unshare+0x38/0x40 [ 336.881499][ T30] do_syscall_64+0xf3/0x230 [ 336.892723][ T30] ? clear_bhb_loop+0x35/0x90 [ 336.897556][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.908821][ T30] RIP: 0033:0x7f927937f7f7 [ 336.913696][ T30] RSP: 002b:00007fffa0747558 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 336.922174][ T30] RAX: ffffffffffffffda RBX: 00007f9279535f40 RCX: 00007f927937f7f7 [ 336.937973][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 336.948160][ T30] RBP: 00007f9279536a38 R08: 0000000000000000 R09: 0000000000000000 [ 336.964741][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 336.979375][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 336.989222][ T30] [ 336.992361][ T30] INFO: task syz-executor:5875 blocked for more than 146 seconds. [ 337.008907][ T30] Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 337.018159][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 337.032253][ T30] task:syz-executor state:D stack:24128 pid:5875 tgid:5875 ppid:1 flags:0x00000004 [ 337.051946][ T30] Call Trace: [ 337.055683][ T30] [ 337.058665][ T30] __schedule+0x1843/0x4ae0 [ 337.071556][ T30] ? __pfx___schedule+0x10/0x10 [ 337.077492][ T30] ? __pfx_lock_release+0x10/0x10 [ 337.090183][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 337.096061][ T30] ? schedule+0x90/0x320 [ 337.100372][ T30] schedule+0x14b/0x320 [ 337.110989][ T30] schedule_preempt_disabled+0x13/0x30 [ 337.116884][ T30] __mutex_lock+0x6a7/0xd70 [ 337.121457][ T30] ? __mutex_lock+0x52a/0xd70 [ 337.133960][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 337.139169][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 337.150706][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 337.156223][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 337.161403][ T30] ? __lock_acquire+0x1384/0x2050 [ 337.171409][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 337.182220][ T30] netlink_rcv_skb+0x1e3/0x430 [ 337.189179][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 337.200227][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 337.209714][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 337.220097][ T30] netlink_unicast+0x7f6/0x990 [ 337.226606][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 337.232139][ T30] ? __virt_addr_valid+0x183/0x530 [ 337.242471][ T30] ? __check_object_size+0x48e/0x900 [ 337.250719][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 337.260638][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 337.267721][ T30] ? __might_fault+0xaa/0x120 [ 337.272487][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 337.293607][ T30] __sock_sendmsg+0x221/0x270 [ 337.298484][ T30] __sys_sendto+0x39b/0x4f0 [ 337.309936][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 337.315511][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 337.321585][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 337.332860][ T30] __x64_sys_sendto+0xde/0x100 [ 337.337709][ T30] do_syscall_64+0xf3/0x230 [ 337.342356][ T30] ? clear_bhb_loop+0x35/0x90 [ 337.353392][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.359412][ T30] RIP: 0033:0x7fc365f7fe8c [ 337.374549][ T30] RSP: 002b:00007ffd2351d2d0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 337.390797][ T30] RAX: ffffffffffffffda RBX: 00007fc366c64620 RCX: 00007fc365f7fe8c [ 337.399873][ T30] RDX: 000000000000002c RSI: 00007fc366c64670 RDI: 0000000000000003 [ 337.415447][ T30] RBP: 0000000000000000 R08: 00007ffd2351d324 R09: 000000000000000c [ 337.427409][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 337.438160][ T30] R13: 0000000000000000 R14: 00007fc366c64670 R15: 0000000000000000 [ 337.450340][ T30] [ 337.457364][ T30] INFO: task syz-executor:5876 blocked for more than 147 seconds. [ 337.469155][ T30] Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 337.481474][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 337.494226][ T30] task:syz-executor state:D stack:24128 pid:5876 tgid:5876 ppid:1 flags:0x00000004 [ 337.510229][ T30] Call Trace: [ 337.516229][ T30] [ 337.519221][ T30] __schedule+0x1843/0x4ae0 [ 337.527813][ T30] ? __pfx___schedule+0x10/0x10 [ 337.541396][ T30] ? __pfx_lock_release+0x10/0x10 [ 337.551629][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 337.562298][ T30] ? schedule+0x90/0x320 [ 337.568338][ T30] schedule+0x14b/0x320 [ 337.578959][ T30] schedule_preempt_disabled+0x13/0x30 [ 337.587278][ T30] __mutex_lock+0x6a7/0xd70 [ 337.591865][ T30] ? __mutex_lock+0x52a/0xd70 [ 337.601928][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 337.608668][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 337.620569][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 337.627172][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 337.632359][ T30] ? __lock_acquire+0x1384/0x2050 [ 337.643986][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 337.649539][ T30] netlink_rcv_skb+0x1e3/0x430 [ 337.661747][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 337.667648][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 337.679120][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 337.686233][ T30] netlink_unicast+0x7f6/0x990 [ 337.691086][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 337.704678][ T30] ? __virt_addr_valid+0x183/0x530 [ 337.709871][ T30] ? __check_object_size+0x48e/0x900 [ 337.719234][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 337.727270][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 337.737666][ T30] ? __might_fault+0xaa/0x120 [ 337.742423][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 337.750749][ T30] __sock_sendmsg+0x221/0x270 [ 337.759519][ T30] __sys_sendto+0x39b/0x4f0 [ 337.766946][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 337.772056][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 337.782632][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 337.791446][ T30] __x64_sys_sendto+0xde/0x100 [ 337.801392][ T30] do_syscall_64+0xf3/0x230 [ 337.807861][ T30] ? clear_bhb_loop+0x35/0x90 [ 337.816396][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.822360][ T30] RIP: 0033:0x7effac77fe8c [ 337.830907][ T30] RSP: 002b:00007fffc9379e20 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 337.842624][ T30] RAX: ffffffffffffffda RBX: 00007effad464620 RCX: 00007effac77fe8c [ 337.850669][ T30] RDX: 000000000000002c RSI: 00007effad464670 RDI: 0000000000000003 [ 337.865175][ T30] RBP: 0000000000000000 R08: 00007fffc9379e74 R09: 000000000000000c [ 337.878287][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 337.889513][ T30] R13: 0000000000000000 R14: 00007effad464670 R15: 0000000000000000 [ 337.902690][ T30] [ 337.905776][ T30] INFO: task syz-executor:5879 blocked for more than 147 seconds. [ 337.918978][ T30] Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 337.927081][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 337.943401][ T30] task:syz-executor state:D stack:24128 pid:5879 tgid:5879 ppid:1 flags:0x00004006 [ 337.960294][ T30] Call Trace: [ 337.963978][ T30] [ 337.966991][ T30] __schedule+0x1843/0x4ae0 [ 337.971573][ T30] ? __pfx___schedule+0x10/0x10 [ 337.984184][ T30] ? __pfx_lock_release+0x10/0x10 [ 337.989302][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 338.002647][ T30] ? schedule+0x90/0x320 [ 338.007253][ T30] schedule+0x14b/0x320 [ 338.011480][ T30] schedule_preempt_disabled+0x13/0x30 [ 338.027358][ T30] __mutex_lock+0x6a7/0xd70 [ 338.031946][ T30] ? __mutex_lock+0x52a/0xd70 [ 338.039460][ T30] ? register_nexthop_notifier+0x84/0x290 [ 338.049156][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 338.057035][ T30] ? __asan_memset+0x23/0x50 [ 338.061695][ T30] register_nexthop_notifier+0x84/0x290 [ 338.072676][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 338.078564][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 338.094276][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 338.100522][ T30] ? __asan_memset+0x23/0x50 [ 338.113047][ T30] ops_init+0x31e/0x590 [ 338.117284][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 338.129224][ T30] setup_net+0x287/0x9e0 [ 338.133896][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 338.139508][ T30] ? __pfx_setup_net+0x10/0x10 [ 338.152182][ T30] copy_net_ns+0x33f/0x570 [ 338.157069][ T30] create_new_namespaces+0x425/0x7b0 [ 338.162442][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 338.173144][ T30] ksys_unshare+0x57d/0xa70 [ 338.177743][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 338.190087][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 338.198381][ T30] ? do_syscall_64+0x100/0x230 [ 338.209563][ T30] __x64_sys_unshare+0x38/0x40 [ 338.215387][ T30] do_syscall_64+0xf3/0x230 [ 338.219974][ T30] ? clear_bhb_loop+0x35/0x90 [ 338.232429][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.238719][ T30] RIP: 0033:0x7f4d6057f7f7 [ 338.250624][ T30] RSP: 002b:00007ffe11061108 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 338.259553][ T30] RAX: ffffffffffffffda RBX: 00007f4d60735f40 RCX: 00007f4d6057f7f7 [ 338.272687][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 338.280816][ T30] RBP: 00007f4d60736a38 R08: 0000000000000000 R09: 0000000000000000 [ 338.294814][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 338.309600][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 338.320520][ T30] [ 338.339417][ T30] INFO: task syz-executor:5880 blocked for more than 148 seconds. [ 338.349373][ T30] Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 338.362630][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 338.371358][ T30] task:syz-executor state:D stack:24128 pid:5880 tgid:5880 ppid:1 flags:0x00004006 [ 338.387781][ T30] Call Trace: [ 338.391130][ T30] [ 338.397498][ T30] __schedule+0x1843/0x4ae0 [ 338.404072][ T30] ? __pfx___schedule+0x10/0x10 [ 338.409001][ T30] ? __pfx_lock_release+0x10/0x10 [ 338.421790][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 338.427725][ T30] ? schedule+0x90/0x320 [ 338.432032][ T30] schedule+0x14b/0x320 [ 338.444108][ T30] schedule_preempt_disabled+0x13/0x30 [ 338.449647][ T30] __mutex_lock+0x6a7/0xd70 [ 338.460668][ T30] ? __mutex_lock+0x52a/0xd70 [ 338.465759][ T30] ? register_nexthop_notifier+0x84/0x290 [ 338.471568][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 338.482999][ T30] ? __asan_memset+0x23/0x50 [ 338.487667][ T30] register_nexthop_notifier+0x84/0x290 [ 338.499108][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 338.507385][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 338.521335][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 338.527958][ T30] ? __asan_memset+0x23/0x50 [ 338.539057][ T30] ops_init+0x31e/0x590 [ 338.543694][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 338.549143][ T30] setup_net+0x287/0x9e0 [ 338.561043][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 338.572097][ T30] ? __pfx_setup_net+0x10/0x10 [ 338.582651][ T30] copy_net_ns+0x33f/0x570 [ 338.587158][ T30] create_new_namespaces+0x425/0x7b0 [ 338.592511][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 338.607268][ T30] ksys_unshare+0x57d/0xa70 [ 338.611957][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 338.625283][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 338.631699][ T30] ? do_syscall_64+0x100/0x230 [ 338.643042][ T30] __x64_sys_unshare+0x38/0x40 [ 338.647878][ T30] do_syscall_64+0xf3/0x230 [ 338.652444][ T30] ? clear_bhb_loop+0x35/0x90 [ 338.663108][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.669123][ T30] RIP: 0033:0x7f622177f7f7 [ 338.680866][ T30] RSP: 002b:00007ffcf03bc4f8 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 338.689725][ T30] RAX: ffffffffffffffda RBX: 00007f6221935f40 RCX: 00007f622177f7f7 [ 338.702920][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 338.715187][ T30] RBP: 00007f6221936a38 R08: 0000000000000000 R09: 0000000000000000 [ 338.729361][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000c [ 338.739057][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 338.752387][ T30] [ 338.758189][ T30] INFO: task syz-executor:5886 blocked for more than 148 seconds. [ 338.771196][ T30] Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 338.780435][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 338.792626][ T30] task:syz-executor state:D stack:24128 pid:5886 tgid:5886 ppid:1 flags:0x00000004 [ 338.811441][ T30] Call Trace: [ 338.815102][ T30] [ 338.818081][ T30] __schedule+0x1843/0x4ae0 [ 338.827192][ T30] ? __pfx___schedule+0x10/0x10 [ 338.832121][ T30] ? __pfx_lock_release+0x10/0x10 [ 338.841321][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 338.850717][ T30] ? schedule+0x90/0x320 [ 338.857785][ T30] schedule+0x14b/0x320 [ 338.862027][ T30] schedule_preempt_disabled+0x13/0x30 [ 338.871479][ T30] __mutex_lock+0x6a7/0xd70 [ 338.880164][ T30] ? __mutex_lock+0x52a/0xd70 [ 338.888927][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 338.896763][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 338.901878][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 338.910839][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 338.921433][ T30] ? __lock_acquire+0x1384/0x2050 [ 338.930597][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 338.938875][ T30] netlink_rcv_skb+0x1e3/0x430 [ 338.948118][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 338.957546][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 338.966833][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 338.972119][ T30] netlink_unicast+0x7f6/0x990 [ 338.979750][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 338.989081][ T30] ? __virt_addr_valid+0x183/0x530 [ 338.996967][ T30] ? __check_object_size+0x48e/0x900 [ 339.002328][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 339.012256][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.021791][ T30] ? __might_fault+0xaa/0x120 [ 339.030694][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.040001][ T30] __sock_sendmsg+0x221/0x270 [ 339.048605][ T30] __sys_sendto+0x39b/0x4f0 [ 339.056308][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 339.061431][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 339.071437][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 339.081682][ T30] ? exc_page_fault+0x590/0x8c0 [ 339.090406][ T30] __x64_sys_sendto+0xde/0x100 [ 339.097994][ T30] do_syscall_64+0xf3/0x230 [ 339.102561][ T30] ? clear_bhb_loop+0x35/0x90 [ 339.111305][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.121461][ T30] RIP: 0033:0x7facc6b7fe8c [ 339.132683][ T30] RSP: 002b:00007ffe1015fef0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 339.141170][ T30] RAX: ffffffffffffffda RBX: 00007facc7864620 RCX: 00007facc6b7fe8c [ 339.154980][ T30] RDX: 0000000000000028 RSI: 00007facc7864670 RDI: 0000000000000003 [ 339.168603][ T30] RBP: 0000000000000000 R08: 00007ffe1015ff44 R09: 000000000000000c [ 339.179378][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 339.191271][ T30] R13: 0000000000000000 R14: 00007facc7864670 R15: 0000000000000000 [ 339.202237][ T30] [ 339.210344][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 339.223702][ T30] [ 339.223702][ T30] Showing all locks held in the system: [ 339.231473][ T30] 4 locks held by kworker/u8:1/12: [ 339.242390][ T30] #0: ffff88801baeb148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 339.260646][ T30] #1: ffffc90000117d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 339.271695][ T30] #2: ffffffff8fcb3c10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 339.288016][ T30] #3: ffffffff8fcc0708 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 339.301257][ T30] 1 lock held by khungtaskd/30: [ 339.312429][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 339.325545][ T30] 3 locks held by kworker/u8:3/52: [ 339.330737][ T30] #0: ffff88814c3a3148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 339.348974][ T30] #1: ffffc90000bd7d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 339.380265][ T30] #2: ffffffff8fcc0708 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 339.390848][ T30] 3 locks held by kworker/u8:7/1129: [ 339.402390][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 339.421745][ T30] #1: ffffc9000414fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 339.440819][ T30] #2: ffffffff8fcc0708 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 339.458639][ T30] 2 locks held by dhcpcd/4887: [ 339.463869][ T30] #0: ffff8880632376c8 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: __netlink_dump_start+0x119/0x790 [ 339.480563][ T30] #1: ffffffff8fcc0708 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_dumpit+0x99/0x200 [ 339.491130][ T30] 2 locks held by getty/4980: [ 339.502648][ T30] #0: ffff888031fca0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 339.512524][ T30] #1: ffffc90002efe2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 339.531279][ T30] 4 locks held by kworker/1:3/5221: [ 339.542875][ T30] 3 locks held by kworker/1:4/5272: [ 339.548141][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 339.567303][ T30] #1: ffffc9000407fd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 339.581377][ T30] #2: ffffffff8fcc0708 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 339.596292][ T30] 3 locks held by kworker/1:6/5302: [ 339.601546][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 339.624259][ T30] #1: ffffc900040ffd00 (reg_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 339.640845][ T30] #2: ffffffff8fcc0708 (rtnl_mutex){+.+.}-{3:3}, at: reg_todo+0x1c/0x8d0 [ 339.651152][ T30] 7 locks held by syz-executor/5464: [ 339.661553][ T30] #0: ffff888032378420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 339.673314][ T30] #1: ffff88807e1a3888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 339.689510][ T30] #2: ffff888144b3c878 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 339.702466][ T30] #3: ffffffff8f55e808 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: new_device_store+0x1b4/0x890 [ 339.719313][ T30] #4: ffff8880715f50e8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 339.735920][ T30] #5: ffff888012450250 (&devlink->lock_key#6){+.+.}-{3:3}, at: nsim_drv_probe+0xcb/0xb80 [ 339.750573][ T30] #6: ffffffff8fcc0708 (rtnl_mutex){+.+.}-{3:3}, at: unregister_netdevice_notifier_net+0x89/0x3a0 [ 339.765615][ T30] 2 locks held by syz-executor/5790: [ 339.770948][ T30] #0: ffffffff8fcb3c10 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 339.784730][ T30] #1: ffffffff8fcc0708 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 339.799282][ T30] 2 locks held by syz.4.127/5842: [ 339.805983][ T30] #0: ffffffff8fcc0708 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 339.820170][ T30] #1: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 339.836152][ T30] 1 lock held by syz-executor/5875: [ 339.841411][ T30] #0: ffffffff8fcc0708 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 339.858042][ T30] 1 lock held by syz-executor/5876: [ 339.866125][ T30] #0: ffffffff8fcc0708 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 339.879561][ T30] 2 locks held by syz-executor/5879: [ 339.887679][ T30] #0: ffffffff8fcb3c10 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 339.902213][ T30] #1: ffffffff8fcc0708 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 339.915236][ T30] 2 locks held by syz-executor/5880: [ 339.920666][ T30] #0: ffffffff8fcb3c10 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 339.932705][ T30] #1: ffffffff8fcc0708 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 339.951723][ T30] 1 lock held by syz-executor/5886: [ 339.957320][ T30] #0: ffffffff8fcc0708 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 339.973648][ T30] 1 lock held by syz-executor/5897: [ 339.978903][ T30] #0: ffffffff8fcc0708 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 339.996081][ T30] 1 lock held by syz-executor/5900: [ 340.001339][ T30] #0: ffffffff8fcc0708 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 340.012626][ T30] 1 lock held by syz-executor/5902: [ 340.017876][ T30] #0: ffffffff8fcc0708 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 340.033964][ T30] 1 lock held by syz-executor/5904: [ 340.040888][ T30] #0: ffffffff8fcc0708 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 340.056998][ T30] 1 lock held by syz-executor/5907: [ 340.062249][ T30] #0: ffffffff8fcc0708 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 340.074627][ T30] 1 lock held by syz-executor/5917: [ 340.079880][ T30] #0: ffffffff8fcc0708 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 340.096420][ T30] 1 lock held by syz-executor/5921: [ 340.101682][ T30] #0: ffffffff8fcc0708 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 340.114120][ T30] 1 lock held by syz-executor/5923: [ 340.119458][ T30] #0: ffffffff8fcc0708 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 340.133125][ T30] 1 lock held by syz-executor/5925: [ 340.138463][ T30] #0: ffffffff8fcc0708 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 340.157266][ T30] 1 lock held by syz-executor/5929: [ 340.162520][ T30] #0: ffffffff8fcc0708 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 340.180849][ T30] [ 340.185983][ T30] ============================================= [ 340.185983][ T30] [ 340.200452][ T30] NMI backtrace for cpu 0 [ 340.204855][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 340.215414][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 340.225515][ T30] Call Trace: [ 340.228836][ T30] [ 340.231800][ T30] dump_stack_lvl+0x241/0x360 [ 340.236528][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 340.241817][ T30] ? __pfx__printk+0x10/0x10 [ 340.246546][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 340.251559][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 340.257149][ T30] ? _printk+0xd5/0x120 [ 340.261391][ T30] ? __pfx__printk+0x10/0x10 [ 340.266025][ T30] ? __wake_up_klogd+0xcc/0x110 [ 340.270926][ T30] ? __pfx__printk+0x10/0x10 [ 340.275557][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 340.280632][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 340.286670][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 340.292762][ T30] watchdog+0xff4/0x1040 [ 340.297064][ T30] ? watchdog+0x1ea/0x1040 [ 340.301539][ T30] ? __pfx_watchdog+0x10/0x10 [ 340.306274][ T30] kthread+0x2f0/0x390 [ 340.310400][ T30] ? __pfx_watchdog+0x10/0x10 [ 340.315124][ T30] ? __pfx_kthread+0x10/0x10 [ 340.319758][ T30] ret_from_fork+0x4b/0x80 [ 340.324238][ T30] ? __pfx_kthread+0x10/0x10 [ 340.328890][ T30] ret_from_fork_asm+0x1a/0x30 [ 340.333724][ T30] [ 340.337711][ T30] Sending NMI from CPU 0 to CPUs 1: [ 340.343542][ C1] NMI backtrace for cpu 1 [ 340.343556][ C1] CPU: 1 UID: 0 PID: 5221 Comm: kworker/1:3 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 340.343577][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 340.343589][ C1] Workqueue: events nsim_dev_trap_report_work [ 340.343618][ C1] RIP: 0010:check_preemption_disabled+0x4b/0x120 [ 340.343643][ C1] Code: 8b 05 c1 f2 45 74 a9 ff ff ff 7f 74 26 65 48 8b 04 25 28 00 00 00 48 3b 44 24 08 0f 85 ce 00 00 00 89 d8 48 83 c4 10 5b 41 5c <41> 5e 41 5f c3 cc cc cc cc 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 [ 340.343662][ C1] RSP: 0018:ffffc90000a179c8 EFLAGS: 00000286 [ 340.343676][ C1] RAX: 0000000000000001 RBX: ffffc90000a17a60 RCX: 0000000000a17a03 [ 340.343689][ C1] RDX: 0000000000000100 RSI: ffffffff8c602d00 RDI: ffffffff8c602cc0 [ 340.343701][ C1] RBP: ffffc90000a17ad0 R08: ffffffff898984ff R09: 1ffffffff2037a45 [ 340.343714][ C1] R10: dffffc0000000000 R11: fffffbfff2037a46 R12: 1ffff92000142f40 [ 340.343727][ C1] R13: ffff888036af6640 R14: dffffc0000000000 R15: ffffc90000a17a40 [ 340.343741][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 340.343756][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 340.343768][ C1] CR2: 000000110c3758ac CR3: 000000000e734000 CR4: 00000000003526f0 [ 340.343784][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 340.343794][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 340.343805][ C1] Call Trace: [ 340.343811][ C1] [ 340.343818][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 340.343842][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 340.343870][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 340.343892][ C1] ? nmi_handle+0x2a/0x5a0 [ 340.343918][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 340.343942][ C1] ? nmi_handle+0x14f/0x5a0 [ 340.343960][ C1] ? nmi_handle+0x2a/0x5a0 [ 340.343978][ C1] ? check_preemption_disabled+0x4b/0x120 [ 340.343998][ C1] ? default_do_nmi+0x63/0x160 [ 340.344030][ C1] ? exc_nmi+0x123/0x1f0 [ 340.344053][ C1] ? end_repeat_nmi+0xf/0x53 [ 340.344073][ C1] ? netif_rx_internal+0xff/0x630 [ 340.344092][ C1] ? check_preemption_disabled+0x4b/0x120 [ 340.344112][ C1] ? check_preemption_disabled+0x4b/0x120 [ 340.344134][ C1] ? check_preemption_disabled+0x4b/0x120 [ 340.344154][ C1] [ 340.344160][ C1] [ 340.344166][ C1] netif_rx_internal+0x16d/0x630 [ 340.344185][ C1] ? __pfx_netif_rx_internal+0x10/0x10 [ 340.344206][ C1] ? rcu_is_watching+0x15/0xb0 [ 340.344228][ C1] __netif_rx+0x78/0xc0 [ 340.344248][ C1] loopback_xmit+0x454/0x6b0 [ 340.344271][ C1] ? validate_xmit_skb+0x9f9/0x1120 [ 340.344294][ C1] dev_hard_start_xmit+0x27a/0x7e0 [ 340.344321][ C1] __dev_queue_xmit+0x1b11/0x3ed0 [ 340.344348][ C1] ? __dev_queue_xmit+0x2da/0x3ed0 [ 340.344368][ C1] ? __lock_acquire+0x1384/0x2050 [ 340.344396][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 340.344427][ C1] ? mark_lock+0x9a/0x360 [ 340.344446][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 340.344476][ C1] ? ip_finish_output2+0xa14/0x1390 [ 340.344496][ C1] ? ip_finish_output2+0x45f/0x1390 [ 340.344513][ C1] ip_finish_output2+0xd41/0x1390 [ 340.344531][ C1] ? ip_finish_output2+0x45f/0x1390 [ 340.344553][ C1] ? __pfx_ip_finish_output2+0x10/0x10 [ 340.344572][ C1] ? ip_skb_dst_mtu+0x6ba/0x9b0 [ 340.344589][ C1] ? __ip_finish_output+0x349/0x400 [ 340.344608][ C1] synproxy_send_client_synack+0x8b8/0xf30 [ 340.344641][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 340.344669][ C1] ? synproxy_pernet+0x45/0x270 [ 340.344688][ C1] nft_synproxy_eval_v4+0x3ca/0x610 [ 340.344708][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 340.344725][ C1] ? seqcount_lockdep_reader_access+0x1c1/0x220 [ 340.344748][ C1] ? nf_ip_checksum+0x13a/0x500 [ 340.344768][ C1] nft_synproxy_do_eval+0x362/0xa60 [ 340.344788][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 340.344809][ C1] ? __pfx_validate_chain+0x10/0x10 [ 340.344827][ C1] ? ktime_get+0x9b/0xb0 [ 340.344855][ C1] nft_do_chain+0x4ad/0x1da0 [ 340.344883][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 340.344901][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 340.344943][ C1] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 340.344969][ C1] nft_do_chain_inet+0x418/0x6b0 [ 340.344991][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 340.345016][ C1] ? ipt_do_table+0x312/0x1860 [ 340.345046][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 340.345065][ C1] nf_hook_slow+0xc3/0x220 [ 340.345095][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 340.345121][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 340.345147][ C1] NF_HOOK+0x29e/0x450 [ 340.345173][ C1] ? NF_HOOK+0x9a/0x450 [ 340.345198][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 340.345221][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 340.345250][ C1] ? ip_rcv_finish+0x406/0x560 [ 340.345276][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 340.345301][ C1] NF_HOOK+0x3a4/0x450 [ 340.345325][ C1] ? __lock_acquire+0x1384/0x2050 [ 340.345357][ C1] ? NF_HOOK+0x9a/0x450 [ 340.345381][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 340.345404][ C1] ? ip_rcv_core+0x801/0xd10 [ 340.345430][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 340.345460][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 340.345486][ C1] __netif_receive_skb+0x2bf/0x650 [ 340.345516][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 340.345546][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 340.345572][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 340.345603][ C1] ? __pfx_lock_release+0x10/0x10 [ 340.345633][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 340.345664][ C1] process_backlog+0x662/0x15b0 [ 340.345691][ C1] ? process_backlog+0x33b/0x15b0 [ 340.345720][ C1] ? __pfx_process_backlog+0x10/0x10 [ 340.345743][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 340.345772][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 340.345800][ C1] __napi_poll+0xcb/0x490 [ 340.345825][ C1] net_rx_action+0x89b/0x1240 [ 340.345860][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 340.345885][ C1] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 340.345927][ C1] handle_softirqs+0x2c5/0x980 [ 340.345952][ C1] ? do_softirq+0x11b/0x1e0 [ 340.345976][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 340.346010][ C1] do_softirq+0x11b/0x1e0 [ 340.346031][ C1] [ 340.346037][ C1] [ 340.346043][ C1] ? __pfx_do_softirq+0x10/0x10 [ 340.346066][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 340.346094][ C1] ? rcu_is_watching+0x15/0xb0 [ 340.346114][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 340.346138][ C1] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 340.346160][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 340.346184][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 340.346207][ C1] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 340.346231][ C1] nsim_dev_trap_report_work+0x75d/0xaa0 [ 340.346260][ C1] ? process_scheduled_works+0x976/0x1850 [ 340.346285][ C1] process_scheduled_works+0xa63/0x1850 [ 340.346322][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 340.346351][ C1] ? assign_work+0x364/0x3d0 [ 340.346377][ C1] worker_thread+0x870/0xd30 [ 340.346408][ C1] ? __kthread_parkme+0x169/0x1d0 [ 340.346436][ C1] ? __pfx_worker_thread+0x10/0x10 [ 340.346460][ C1] kthread+0x2f0/0x390 [ 340.346476][ C1] ? __pfx_worker_thread+0x10/0x10 [ 340.346500][ C1] ? __pfx_kthread+0x10/0x10 [ 340.346517][ C1] ret_from_fork+0x4b/0x80 [ 340.346543][ C1] ? __pfx_kthread+0x10/0x10 [ 340.346559][ C1] ret_from_fork_asm+0x1a/0x30 [ 340.346591][ C1] [ 341.129067][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 341.135989][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 341.146534][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 341.156721][ T30] Call Trace: [ 341.160055][ T30] [ 341.163035][ T30] dump_stack_lvl+0x241/0x360 [ 341.167853][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 341.173114][ T30] ? __pfx__printk+0x10/0x10 [ 341.177743][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 341.183787][ T30] ? vscnprintf+0x5d/0x90 [ 341.188165][ T30] panic+0x349/0x880 [ 341.192101][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 341.198301][ T30] ? __pfx_panic+0x10/0x10 [ 341.202751][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 341.208164][ T30] ? __irq_work_queue_local+0x137/0x410 [ 341.213762][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 341.219185][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 341.225389][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 341.231610][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 341.237830][ T30] watchdog+0x1033/0x1040 [ 341.242597][ T30] ? watchdog+0x1ea/0x1040 [ 341.247073][ T30] ? __pfx_watchdog+0x10/0x10 [ 341.251804][ T30] kthread+0x2f0/0x390 [ 341.255913][ T30] ? __pfx_watchdog+0x10/0x10 [ 341.260671][ T30] ? __pfx_kthread+0x10/0x10 [ 341.265307][ T30] ret_from_fork+0x4b/0x80 [ 341.269776][ T30] ? __pfx_kthread+0x10/0x10 [ 341.274402][ T30] ret_from_fork_asm+0x1a/0x30 [ 341.279229][ T30] [ 341.282678][ T30] Kernel Offset: disabled [ 341.287016][ T30] Rebooting in 86400 seconds..