last executing test programs: 5.916009827s ago: executing program 0 (id=10): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d6163736563000014000280050009000100000005000a0001"], 0x44}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) syz_emit_ethernet(0x42, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @broadcast, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x4, @local, @mcast2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote}}}}, &(0x7f0000000080)={0x0, 0x2, [0x923, 0x8c4, 0xb80, 0x8fd]}) 5.839260631s ago: executing program 1 (id=2): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xb, &(0x7f0000000000)=0xb, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000020c0)=ANY=[@ANYBLOB="20c300bc90c3777167ad35c7a9d3d326a7000000", @ANYBLOB="01000000000000000000250000000c0017010000000000000000"], 0x20}}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002140), 0x20000, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x1) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1000005, 0x110, 0xffffffffffffffff, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000002200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r2, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r4, 0x3ba0, &(0x7f0000002180)={0x48, 0x7, r3, 0x0, 0x1, 0x0, 0x9, 0x7}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r3, 0x0, 0x1, 0x0, 0x0, 0x3, 0x20ffa000}) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet6(0xa, 0x5, 0xfffffffb) bind$inet6(r5, &(0x7f0000002100)={0xa, 0x4ea1, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f0000000040), 0x4) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2021) write$FUSE_OPEN(r6, &(0x7f0000002080)={0x20, 0x0, r7}, 0x20) r8 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[], 0x1c}}, 0x0) r10 = fcntl$dupfd(r8, 0x2, 0xffffffffffffffff) splice(r6, 0x0, r10, 0x0, 0x2000, 0x0) r11 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x41, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000067c6fb106d04210847570102030109022f00010000007f21040000000e01a8"], 0x0) 5.692102066s ago: executing program 0 (id=12): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'erspan0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2c, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x1000, 0x5, 0x0, 0x3f, 0x8]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x0, [{@private, 0xffffff14}, {@remote}, {@remote}, {@dev, 0x659}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd200}, {@private}]}, @timestamp_prespec={0x44, 0x1c, 0x2c, 0x3, 0x0, [{@dev}, {@private=0x20000000}, {@rand_addr=0x64010101}]}, @noop, @noop, @lsrr={0x83, 0x7, 0x0, [@multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @local, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.406381063s ago: executing program 4 (id=5): pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x80ffff) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000008880)='ns/mnt\x00') setns(r0, 0x0) (fail_nth: 2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) read$FUSE(0xffffffffffffffff, &(0x7f0000002180)={0x2020}, 0x2020) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe0000002) writev(0xffffffffffffffff, &(0x7f0000000140), 0x0) unshare(0x64000600) socket(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001800dd8d00000000000000000200000400000006"], 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) 5.290611407s ago: executing program 2 (id=14): socket$nl_generic(0x10, 0x3, 0x10) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'geneve0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r3}, 0x14) close(r1) 5.168633291s ago: executing program 2 (id=15): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0xff, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000140)=0x8) openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) io_setup(0xb48, 0x0) r2 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ff8000/0x4000)=nil) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000001540)=""/66) r3 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r3, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500009e0474648000000000003552bde5c064c6", 0x15}, {&(0x7f0000000d00)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}}], 0x1, 0x0) close(0xffffffffffffffff) r4 = gettid() mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x10, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e24, 0xfffffff8, @empty, 0x5}}, 0x0, 0x0, 0x7, 0x0, "869ff8cad5ad3e46f5dba8244265c3914fe866e97bc1c7a9ea8824965b1995521da56a58b8596ad8070de47378591852b33ae9fc9554bad346809b5932f7ccee718163ce3fea32aeefcf1b458d8adaa7"}, 0xd8) r6 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r6, &(0x7f0000000c80)=[{{&(0x7f0000000280)=@un=@abs, 0x80, &(0x7f0000000680)=[{&(0x7f00000004c0)=""/149, 0x95}, {&(0x7f0000000300)=""/15, 0xf}, {&(0x7f0000000580)=""/255, 0xff}, {&(0x7f0000000340)=""/28, 0x1c}, {&(0x7f00000003c0)=""/61, 0x3d}, {&(0x7f0000000740)=""/236, 0xec}, {&(0x7f0000002740)=""/4096, 0x1000}, {&(0x7f0000000840)=""/137, 0x89}], 0x8}, 0x3}, {{&(0x7f0000000900)=@isdn, 0x80, &(0x7f0000000b00)=[{&(0x7f0000003740)=""/4096, 0x1000}, {&(0x7f0000000980)=""/94, 0x5e}, {&(0x7f0000004740)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/77, 0x4d}, {&(0x7f0000000a80)=""/93, 0x5d}], 0x5, &(0x7f0000000b80)=""/196, 0xc4}, 0x7}], 0x2, 0x0, &(0x7f0000002700)) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 4.622206765s ago: executing program 0 (id=17): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0xff, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000480)={r2, 0xb, 0x3}, 0x8) 4.543950361s ago: executing program 4 (id=18): r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = landlock_create_ruleset(&(0x7f0000006f80)={0x8099}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r3, 0x2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = dup(r4) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000020000008304"]) socket$can_bcm(0x1d, 0x2, 0x2) socket$tipc(0x1e, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@newsa={0x148, 0x10, 0x713, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@private}, {@in=@empty, 0x0, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @empty}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_val={0x10}]}, 0x148}, 0x1, 0x0, 0x0, 0x40000001}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003b150000000000000000000048", @ANYRES32=0x0, @ANYBLOB, @ANYBLOB, @ANYRES64], 0x40}}, 0x4004040) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r2}], 0x1, 0x0, 0x0, 0x0) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x13) 4.002430966s ago: executing program 2 (id=19): creat(0x0, 0xd931d3864d39dcca) syz_open_dev$usbfs(0x0, 0x800000001fe, 0x82) r0 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b300000000002a002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03000000110000000d60390170f74f9ef4"], 0xd8) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x102a) 3.932603194s ago: executing program 3 (id=20): unshare(0x20000400) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) shutdown(r0, 0x1) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x0, 0x0, &(0x7f0000000480)={{0x0, 0x0, 0x8}}, 0x0, 0x0}}) 3.648290186s ago: executing program 2 (id=21): syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030023000b63d25a80648c2594f90124fc600400214002000003053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000200)=@id, &(0x7f0000000240)=0x10) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) pipe(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, &(0x7f00000000c0)={{0x2}, {0x2}, 0x0, 0x7}) gettid() prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001300)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fec000/0x12000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x0, 0x0, r1}, 0x68) r4 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x0, 0x800}, &(0x7f0000000240)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, 0x0, 0x0, 0x4) r6 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_PEC(r6, 0x708, 0x6) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000040)={0x0, 0x4, 0x7, &(0x7f0000000100)={0x0, "fd5a44512b7e1b00200500000001002700"}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001540)={&(0x7f0000001400)=ANY=[@ANYBLOB="05000000", @ANYRES16=0x0, @ANYBLOB="20002bbd7000ffdbdf251100000008000300", @ANYRES32=0x0, @ANYRES16, @ANYRES32=r7, @ANYBLOB="060014010800000005001900020000002400810005000200090000000500020002000000050001000600000005000100f80000000c0043000b000000010000000600b50011000000"], 0x6c}, 0x1, 0x0, 0x0, 0x4040400}, 0x20000000) syz_io_uring_submit(r5, 0x0, 0x0) io_uring_enter(r4, 0x47f9, 0x0, 0x0, 0x0, 0x0) r8 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000040)='vcan0\x00', 0x10) setsockopt$inet_opts(r8, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) connect$inet(r8, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 3.497680623s ago: executing program 1 (id=22): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') setns(r0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x1b) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x15) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x0) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002a80)={0x24, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}]}, 0x24}}, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0xca942, 0x0) r9 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000002, 0x4052, r9, 0x0) mlock2(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) mlock2(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x0) ptrace$ARCH_SHSTK_DISABLE(0x1e, r2, 0x0, 0x5002) ptrace$ARCH_SHSTK_ENABLE(0x1e, 0x0, 0x1, 0x5001) ptrace$getregset(0x4204, r2, 0x204, &(0x7f0000000040)={0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$nl_netfilter(0x10, 0x3, 0xc) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) 3.469165532s ago: executing program 0 (id=23): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x6c, 0xeb, 0x85, 0x40, 0x249c, 0x9002, 0xdead, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x24, 0xdf, 0x6d}}]}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0xff, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xed, 0x3, 0x1, 0x4, 0x20, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0xa}, [@mixer_unit={0x6, 0x24, 0x4, 0x6, 0xa6, '9'}, @selector_unit={0x8, 0x24, 0x5, 0x4, 0x2, "6c045f"}, @selector_unit={0x7, 0x24, 0x5, 0x3, 0x6, "3e0e"}, @extension_unit={0xb, 0x24, 0x8, 0x4, 0x2, 0x7, "7d7801c2"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xc, 0x5, 0x3}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xd, 0x1, 0x1, 0x4}, @as_header={0x7, 0x24, 0x1, 0x9, 0x3, 0x5}, @as_header={0x7, 0x24, 0x1, 0x94, 0x8, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x1, 0x8, 0x8, {0x7, 0x25, 0x1, 0x81, 0xe9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x3, 0x1, 0x5, 0x8, "7049a69f"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x6, 0x1, 0x7a, 0x5, 'RO', "d8b78a"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x2, 0x2, 0x4c, 0x6, "db"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x5, 0x1, 0x5, 0x2, "da949d5d767e4849bc"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x4, 0x4, 0xa, 0x1, "3eba4657a24a5ba8"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xe8b2, 0x50, 0x3, "538ce19c0b"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x7f, 0x6, 0x10, {0x7, 0x25, 0x1, 0x1, 0x9, 0x7}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x4, 0xb, 0x2, 0xff, 0x1}, 0x69, &(0x7f00000000c0)={0x5, 0xf, 0x69, 0x5, [@ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0x49, 0x10, 0x2, "24e19c980d3a65243460a2a883c0cd2d405925f5abab667aadaa05928de6928f6228368ee2828c0dea2c03ec0fcfd28a7c70af3f1a6fd86263aa12ac41225ebb7a2b527ff754"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x2, 0xa, 0x800}, @wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0x1, 0xc4, 0x40, 0x8}]}}) syz_usb_control_io$uac1(r1, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xfffffffffffffff7) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004081) 3.343894674s ago: executing program 4 (id=24): r0 = socket(0x0, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f00000000c0)={0x2b, 0x4, 0x0, 0x3, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote]}, 0x28) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)={{0x12, 0x1, 0x0, 0xe2, 0x79, 0x3b, 0x10, 0x5d1, 0x2001, 0x900, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x2f, 0x9c}}]}}]}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet_dccp(0x2, 0x6, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_DPORT={0x6, 0x1d, 0xfffe}, @RTA_SPORT={0x6, 0x1c, 0x4e24}]}, 0x2c}}, 0x0) getsockopt$inet_int(r2, 0x10d, 0xf4, &(0x7f0000000000), &(0x7f00000003c0)=0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0xa0042, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000340)="031f31b1f09d76af21e3b0224966a232dc1f5bfd8a29f730b10a53e756087a1df416fd804b636964220910b05962d95d7fb7873e8a0b7b62d7384dbd12b536f0e55e588092441663f9665e4b39f8eb3430840ac3c6ad014d62", 0x59}, {0x0}], 0x2) ioctl$TCFLSH(r4, 0x540b, 0x2) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00180200a3e98144"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000bc0)={0x4d4, r5, 0x900, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x70}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x2]}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x3e0, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x8}, @device_a, @device_a, @from_mac, {0x0, 0x9}, @value=@ver_80211n={0x0, 0x6, 0x3, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1}}, 0x20, 0xe, @device_b, {0x0, 0x6, @default_ap_ssid}, @val, @val={0x2d, 0x1a, {0x8000, 0x2, 0x4, 0x0, {0x3, 0x5, 0x0, 0x81, 0x0, 0x1, 0x1, 0x2}, 0x400, 0x1, 0xb}}, [{0xdd, 0x5d, "a61816974b8a881107cdf78de9844556deb722ecdb61c237241156afe8f436a74c7b31e7ccee2a5839e3d1ed4d0dcb1bdc6aa3fccdbcaaed1c792eb4d43f49a403b6a9ef5e0dfaa0abc0f18271ae3c128c5a102d469b16d75d6eb3d07e"}, {0xdd, 0x7, "a9ab84faa2c632"}, {0xdd, 0xb6, "c93c89211f28830fb066fe6644d54457756f3fbbfbde8f428554043f3b2c83c51df1feaefedc9188cbb56462583dd69ed16c057b6d3e9a324ea6a8ae08e28e448df6ef186908636070857f6bf9ff89012ae95012000381c6648fc1bad6f6f098ccd6d9526236b9acdb49e18781af4729d4d517fff80f93b347dc6dbff8ba829fdacc1015271e1580562e7da282fe0497e20970472350e2b400ebcce8219a4367865a94f5b1a6ca6072d63665221e225bb470e6b51893"}, {0xdd, 0x46, "3447a7bbadcf4cc62e12c3e6de1ca6914d5c744829389baaba5bbc1b2636c6a454762f7fd896a69e9e459689f4939d5b42b8793654f6e4a862e3e6b1cd7f028e2dbb9067e062"}, {0xdd, 0x35, "ae76fd39536e45fe191d57650bfbbb77fb84cfe976f9d17323dcba5846c1fe52be87a9dbcd917e7a07044440c1a62b2cb30b664a1c"}, {0xdd, 0xf6, "53547f0c97459c525dbe6f03f23455fef0d9ee5505293c75424befd9f0f9d7e9798580fcb255be8c6d5210c5b57228ecb6fd3072c89364c67f87d5ea609adfc10dff26493ae4a220e2af805c64424d65d588c92b186062c71ba93375069650a38d9a1397d58e5e56be44a01ecba606c671f309cf31821e705646b47372e19eb6fdaddc8d3fc9b0d7277f1baf9f433f4d3fe3a0172a7cb1092fd513ee43099741d5769e285ba9aebf4e3e9918a690d8fc14882435c8905343a6c887300ca935a7cd408b3e21ee7291e7293d9085a1ee6a8f7ec88bf2b8654ecae41e4ab5855611ed43769149dde80985c7a0ac541af69e2fcec9d7d175"}, {0xdd, 0xf7, "072cad917780dd8702a5ef01b2289ddaef1ef2a52d32c7e26a2cdd7a4b161acd756219ae772ef8c523fd2da6ce66c696627373e9a060d550bd5ac45328c4fe473bc62d2bf12ab438e68563747e6367722b504400ed288dcd6fad9fbb540dc580ec1f24653dfce70b50a79c50ee1a8fb3e9f613dd6b5770a55651e085b297d6771ccf0e869a9d980077ae68bf4721e42f36c78047ea78fdcd2e0500e873b1fb104348f968fe59f7c3b87c6e1f4e2a7f3e7f5d24b6149ec8d6ae63e61fad0c389e23b70448c11e56f4296f9a3815e45874a3c03db21e07718f7ccca67ca5e43622679d4feae838586e51907f806b0cef5fae99d500000000"}]}}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1db9}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x6, 0x7ff]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x47}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3f000000}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7f}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3ad}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x193}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x23}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}]]}, 0x4d4}, 0x1, 0x0, 0x0, 0x1}, 0x8004) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000340)={0x0, 0x0, 0x2, "8707"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.343566026s ago: executing program 3 (id=25): socket$nl_generic(0x10, 0x3, 0x10) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'geneve0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r3}, 0x14) close(r1) 3.209669386s ago: executing program 3 (id=26): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2, 0xf000000}, 0x0, 0x0, &(0x7f0000000480)={{0x0, 0x0, 0x8}}, 0x0, 0x0}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) 3.088290765s ago: executing program 3 (id=27): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x29, &(0x7f0000000000)=""/108, &(0x7f0000000080)=0x6c) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5400000010000100"/20, @ANYRES32, @ANYBLOB="7240146c00000000340012800c0001006d6163766c616e00240002800800070010000000100009"], 0x54}}, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x100000001) 2.89980493s ago: executing program 3 (id=28): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x17, 0x2, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xe) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x0) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000640)={0x6a8, 0x8, 0x0, 0x1, 0x0, "f99620b9040200000000e76c5db50000526608", 0x4, 0x80}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x16, &(0x7f0000000300)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x200}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x24c3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0xa1}, @map_val={0x18, 0x6, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x8}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffff9}], &(0x7f00000001c0)='GPL\x00', 0x0, 0x4c, &(0x7f00000003c0)=""/76, 0x41100, 0x13, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000240)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0x10, 0x3, 0xb00}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000480)=[r0, r0, r0, r0], &(0x7f00000004c0)=[{0x2, 0x5, 0xa, 0x2}], 0x10, 0x2, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000005c0)={'batadv_slave_1\x00', 0x0}) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000600)={r5, r6, 0x25, 0x1b, @void}, 0x10) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r7, 0xc400941d, &(0x7f0000000a40)={0x0, 0x5, 0xefb8}) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000000c0)={{r1}, {@val={r8}, @max}}) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') write$UHID_INPUT(r9, 0x0, 0x0) r10 = fsopen(&(0x7f0000000040)='efs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000100)='\x00', &(0x7f0000000140)='/dev/net/tun\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r11 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r11, 0x0, 0x0) syz_usb_control_io(r11, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r12 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCSKEYCODE(r12, 0x40084504, &(0x7f0000000040)=[0x0, 0x1ff]) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0xfe, 0x0, 0x0, 0x1c, {[@window={0xe, 0x3, 0x2}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 2.605798737s ago: executing program 2 (id=29): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) msgget$private(0x0, 0x0) msgctl$MSG_STAT_ANY(0x0, 0xd, 0xfffffffffffffffe) socket$inet(0x2, 0x4000000805, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x0, &(0x7f0000000000)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) creat(0x0, 0x0) r1 = socket(0x8000000010, 0x2, 0x0) r2 = syz_open_dev$video(&(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(r2, 0xc0405668, 0x0) write(r1, 0x0, 0x0) socket(0x840000000002, 0x3, 0x100) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x11, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000008000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b6000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r4, 0x1, 0x4d, 0xffffffffffffffff, &(0x7f00000003c0)=0x16) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x20000000, 0x4, {0x0}, {0xee01}, 0xbf, 0xe}) prlimit64(r5, 0x0, &(0x7f0000000040)={0x4, 0x4}, &(0x7f0000000080)) 1.879323297s ago: executing program 0 (id=30): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x38}, 0x2}, 0x0) 1.635977094s ago: executing program 0 (id=31): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b00011100000009040000019569", @ANYRES32], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/bpf', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000001000"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800c0001006d6163766c616e001800028004000580ae442be9ec0f27fe30f5acf9cfef54d568e76d01db82bfef6965e45bebab74f55027d960580f75c8515cde379a77b3b1f749cbdbd06724850afbc10b84da03a43c86285b12e9d661b278a3aea1e05d4d2e3b24a51c79b5b283612c606f06b22da5c3497833f165c5dc34edfb778c3e56f2e6b3f666a3497107fd4a7113e1"], 0x38}}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x70, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xfffa}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x70}}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000600", 0x33fe0}], 0x1}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) preadv(r6, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a24000000000a01010000000000000000050000000900010073797a30000000000400060070000000030a01030000000000000000050000000900010073797a30000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000080001400000000014000300766c616e3000"/167], 0xd0}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x0, 0xa005}, @sack_perm]}}}}}}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.509992858s ago: executing program 2 (id=32): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0xf) lseek(r0, 0xfffffffffffffffd, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001800010000000000000000000a80000000000007000000001400010000000000000000000000ff"], 0x30}}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000400)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={0x0, 0x34}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x73) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000)=0x8, 0x4) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000580)={0x41}, 0xe) recvmmsg(r4, &(0x7f00000007c0), 0x10, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000200001e9ff116ceff68ada07edd44f0000000000000000000200000000000000000000000c00144000000000000000000500160073000000"], 0x30}, 0x1, 0x0, 0x0, 0x6000011}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x19, &(0x7f0000000000)=0x800, 0x4) bind$inet(r8, &(0x7f0000000380)={0x2, 0x200000000004e23, @local}, 0x10) setsockopt$MRT_DEL_VIF(r8, 0x0, 0xcb, &(0x7f00000000c0)={0x0, 0x4, 0x9, 0x27b, @vifc_lcl_ifindex=r7, @multicast1}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) recvmsg(r8, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x200116c0}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) 1.26845395s ago: executing program 3 (id=33): socket$alg(0x26, 0x5, 0x0) r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x1, 'sed\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast1, 0x0, 0x1000002, 'lblcr\x00'}, 0x2c) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000000c0)) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_freeze_timeout', 0x169b82, 0x0) write$cgroup_int(r1, &(0x7f0000000000)=0xffffffffffff7ffc, 0xffffffffffffff25) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x1000}, 0x4) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYRESHEX=0x0], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x3c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) fanotify_init(0x0, 0x0) syz_open_dev$cec(&(0x7f00000004c0), 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x305}, '\x00', "bcbd13b603e0f7b3bfa8909ef43c0aeb", "0000fd9f", "b08068ebca17ab00"}, 0x28) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x80) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000000080)={0x2, 0x1, 0x6}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) 0s ago: executing program 1 (id=34): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x35, 0x4, 0x0, 0x0, 0xd4, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x9, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@dev, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote, 0x1}, {@multicast2}, {@private=0xa0100fe}, {@rand_addr=0x64010100}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xb, 0xdc, [@private=0xa010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000940)={0x0, 0x4e6f}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.123' (ED25519) to the list of known hosts. syzkaller login: [ 51.322466][ T5215] cgroup: Unknown subsys name 'net' [ 51.448767][ T5215] cgroup: Unknown subsys name 'cpuset' [ 51.457453][ T5215] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.865140][ T5215] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 54.929147][ T5229] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.948062][ T5236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 54.958318][ T5236] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 54.966208][ T5236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.973946][ T5236] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.983239][ T5236] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 54.990970][ T5236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.006660][ T5236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.009384][ T5238] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 55.026154][ T5236] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 55.030247][ T5239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 55.042809][ T5238] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.043159][ T5236] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 55.050168][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 55.063434][ T5241] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 55.068155][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 55.075123][ T5236] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 55.081568][ T5238] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 55.089460][ T5236] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 55.096354][ T5238] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 55.100955][ T5240] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 55.109275][ T5238] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 55.123198][ T5238] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 55.123426][ T5236] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 55.131047][ T5238] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 55.146758][ T5238] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 55.154705][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 55.165631][ T5238] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 55.174878][ T5238] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 55.186760][ T5238] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 55.619510][ T5245] chnl_net:caif_netlink_parms(): no params data found [ 55.645127][ T5244] chnl_net:caif_netlink_parms(): no params data found [ 55.741238][ T5243] chnl_net:caif_netlink_parms(): no params data found [ 55.778477][ T5246] chnl_net:caif_netlink_parms(): no params data found [ 55.788666][ T5242] chnl_net:caif_netlink_parms(): no params data found [ 55.858299][ T5244] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.866346][ T5244] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.873928][ T5244] bridge_slave_0: entered allmulticast mode [ 55.881293][ T5244] bridge_slave_0: entered promiscuous mode [ 55.894264][ T5244] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.901471][ T5244] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.908866][ T5244] bridge_slave_1: entered allmulticast mode [ 55.915872][ T5244] bridge_slave_1: entered promiscuous mode [ 55.923352][ T5245] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.930703][ T5245] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.937934][ T5245] bridge_slave_0: entered allmulticast mode [ 55.944500][ T5245] bridge_slave_0: entered promiscuous mode [ 55.997778][ T5245] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.009106][ T5245] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.017483][ T5245] bridge_slave_1: entered allmulticast mode [ 56.024435][ T5245] bridge_slave_1: entered promiscuous mode [ 56.077756][ T5243] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.085537][ T5243] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.092921][ T5243] bridge_slave_0: entered allmulticast mode [ 56.100339][ T5243] bridge_slave_0: entered promiscuous mode [ 56.115150][ T5244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.127035][ T5245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.139528][ T5243] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.146840][ T5243] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.154013][ T5243] bridge_slave_1: entered allmulticast mode [ 56.160831][ T5243] bridge_slave_1: entered promiscuous mode [ 56.187690][ T5244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.206976][ T5245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.228565][ T5243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.268955][ T5243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.293165][ T5246] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.300804][ T5246] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.308124][ T5246] bridge_slave_0: entered allmulticast mode [ 56.314904][ T5246] bridge_slave_0: entered promiscuous mode [ 56.322606][ T5242] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.330485][ T5242] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.338150][ T5242] bridge_slave_0: entered allmulticast mode [ 56.344886][ T5242] bridge_slave_0: entered promiscuous mode [ 56.354875][ T5244] team0: Port device team_slave_0 added [ 56.363200][ T5244] team0: Port device team_slave_1 added [ 56.380891][ T5245] team0: Port device team_slave_0 added [ 56.393862][ T5246] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.401297][ T5246] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.408783][ T5246] bridge_slave_1: entered allmulticast mode [ 56.415537][ T5246] bridge_slave_1: entered promiscuous mode [ 56.429763][ T5242] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.436942][ T5242] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.444259][ T5242] bridge_slave_1: entered allmulticast mode [ 56.451670][ T5242] bridge_slave_1: entered promiscuous mode [ 56.475810][ T5245] team0: Port device team_slave_1 added [ 56.491958][ T5243] team0: Port device team_slave_0 added [ 56.530018][ T5244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.537162][ T5244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.564097][ T5244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.577703][ T5244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.584686][ T5244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.610785][ T5244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.623691][ T5243] team0: Port device team_slave_1 added [ 56.631602][ T5246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.644413][ T5242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.661229][ T5245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.668678][ T5245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.695652][ T5245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.708352][ T5245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.715518][ T5245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.742008][ T5245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.779698][ T5246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.790780][ T5242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.825207][ T5242] team0: Port device team_slave_0 added [ 56.831784][ T5243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.839048][ T5243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.865710][ T5243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.902324][ T5242] team0: Port device team_slave_1 added [ 56.917270][ T5243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.924254][ T5243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.950477][ T5243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.964338][ T5246] team0: Port device team_slave_0 added [ 56.988056][ T5242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.996171][ T5242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.022990][ T5242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.043781][ T5246] team0: Port device team_slave_1 added [ 57.052799][ T5244] hsr_slave_0: entered promiscuous mode [ 57.059406][ T5244] hsr_slave_1: entered promiscuous mode [ 57.075668][ T5242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.082641][ T5242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.109249][ T5242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.137234][ T5245] hsr_slave_0: entered promiscuous mode [ 57.143442][ T5245] hsr_slave_1: entered promiscuous mode [ 57.149850][ T5245] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.157835][ T5245] Cannot create hsr debugfs directory [ 57.165919][ T5231] Bluetooth: hci1: command tx timeout [ 57.193523][ T5243] hsr_slave_0: entered promiscuous mode [ 57.202615][ T5243] hsr_slave_1: entered promiscuous mode [ 57.208933][ T5243] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.219494][ T5243] Cannot create hsr debugfs directory [ 57.245486][ T5246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.252471][ T5246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.255067][ T5231] Bluetooth: hci4: command tx timeout [ 57.283390][ T5233] Bluetooth: hci3: command tx timeout [ 57.284432][ T5231] Bluetooth: hci2: command tx timeout [ 57.290203][ T5233] Bluetooth: hci0: command tx timeout [ 57.296101][ T5246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.313593][ T5246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.320739][ T5246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.347016][ T5246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.377052][ T5242] hsr_slave_0: entered promiscuous mode [ 57.383783][ T5242] hsr_slave_1: entered promiscuous mode [ 57.390289][ T5242] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.398321][ T5242] Cannot create hsr debugfs directory [ 57.524743][ T5246] hsr_slave_0: entered promiscuous mode [ 57.531189][ T5246] hsr_slave_1: entered promiscuous mode [ 57.539270][ T5246] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.546961][ T5246] Cannot create hsr debugfs directory [ 57.789281][ T5244] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.807802][ T5244] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.831505][ T5244] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.851921][ T5244] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.881905][ T5243] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.904739][ T5243] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.928011][ T5243] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.944274][ T5243] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.967936][ T5242] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.981181][ T5242] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.990968][ T5242] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.010401][ T5242] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.099611][ T5246] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.110727][ T5246] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.148633][ T5246] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.161214][ T5246] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.199597][ T5244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.229198][ T5245] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.255898][ T5245] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.266675][ T5245] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.281882][ T5244] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.298155][ T5245] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.331242][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.338591][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.359659][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.366987][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.387770][ T5243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.446498][ T5243] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.478678][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.485848][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.502863][ T5242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.556085][ T2944] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.563216][ T2944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.579709][ T5244] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.618139][ T5242] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.639451][ T1117] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.646669][ T1117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.659453][ T5246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.687579][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.694736][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.734895][ T5246] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.763198][ T5244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.789349][ T2944] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.796522][ T2944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.813550][ T5245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.832682][ T2944] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.840381][ T2944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.906754][ T5245] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.937134][ T1117] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.944347][ T1117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.966578][ T5243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.982731][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.995162][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.068773][ T5242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.079402][ T5244] veth0_vlan: entered promiscuous mode [ 59.104786][ T5244] veth1_vlan: entered promiscuous mode [ 59.143501][ T5246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.157328][ T5245] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.210321][ T5242] veth0_vlan: entered promiscuous mode [ 59.224372][ T5244] veth0_macvtap: entered promiscuous mode [ 59.245686][ T5238] Bluetooth: hci1: command tx timeout [ 59.250438][ T5244] veth1_macvtap: entered promiscuous mode [ 59.263794][ T5242] veth1_vlan: entered promiscuous mode [ 59.281456][ T5243] veth0_vlan: entered promiscuous mode [ 59.321889][ T5244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.329976][ T5233] Bluetooth: hci3: command tx timeout [ 59.330023][ T5233] Bluetooth: hci4: command tx timeout [ 59.330134][ T5238] Bluetooth: hci2: command tx timeout [ 59.338312][ T5238] Bluetooth: hci0: command tx timeout [ 59.351505][ T5243] veth1_vlan: entered promiscuous mode [ 59.377806][ T5245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.391363][ T5244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.403672][ T5244] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.413382][ T5244] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.422508][ T5244] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.432028][ T5244] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.454844][ T5246] veth0_vlan: entered promiscuous mode [ 59.490230][ T5242] veth0_macvtap: entered promiscuous mode [ 59.516782][ T5242] veth1_macvtap: entered promiscuous mode [ 59.540811][ T5246] veth1_vlan: entered promiscuous mode [ 59.589029][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.600587][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.613187][ T5242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.622715][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.635292][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.646972][ T5242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.656323][ T5243] veth0_macvtap: entered promiscuous mode [ 59.674862][ T1117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.694232][ T5242] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.697412][ T1117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.704636][ T5242] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.722128][ T5242] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.732574][ T5242] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.746685][ T5243] veth1_macvtap: entered promiscuous mode [ 59.763518][ T5246] veth0_macvtap: entered promiscuous mode [ 59.812279][ T5246] veth1_macvtap: entered promiscuous mode [ 59.824757][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.836812][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.848814][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.859624][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.871369][ T5243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.901284][ T5245] veth0_vlan: entered promiscuous mode [ 59.909668][ T2944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.919510][ T2944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.943693][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.954730][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.965504][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.981245][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.991698][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.002636][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.014163][ T5246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.027466][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.038963][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.049440][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.060471][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.071496][ T5246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.080360][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.091125][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.101292][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.112114][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.122378][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.134908][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.146583][ T5243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.172957][ T5245] veth1_vlan: entered promiscuous mode [ 60.183196][ T5246] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.192124][ T5246] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.201185][ T5246] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.210270][ T5246] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.223652][ T5243] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.233421][ T5243] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.242737][ T5243] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.251750][ T5243] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.271702][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.289101][ T5244] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 60.289172][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.366234][ T1117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.372107][ T5245] veth0_macvtap: entered promiscuous mode [ 60.374107][ T1117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.384006][ T5245] veth1_macvtap: entered promiscuous mode [ 60.484489][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.492832][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.572826][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.615061][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.631296][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.641912][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.658287][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.680747][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.691660][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.710958][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.736643][ T5245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.771472][ T5292] x_tables: (null)_tables: IDLETIMER.0 target: invalid size 40 (kernel) != (user) 96 [ 60.791213][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.804198][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.808404][ T5292] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 60.814428][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.843862][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.854345][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.865454][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.875383][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.888606][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.901637][ T5245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.923201][ T5245] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.937024][ T5245] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.946573][ T5245] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.959121][ T5245] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.971016][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.985282][ T2925] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.987612][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.010804][ T2925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.110416][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.120002][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.261488][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.273293][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.326443][ T5238] Bluetooth: hci1: command tx timeout [ 61.405743][ T5238] Bluetooth: hci0: command tx timeout [ 61.412980][ T5238] Bluetooth: hci2: command tx timeout [ 61.419011][ T5238] Bluetooth: hci4: command tx timeout [ 61.424448][ T5238] Bluetooth: hci3: command tx timeout [ 61.437068][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.455095][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.841737][ T5304] Zero length message leads to an empty skb [ 61.853966][ T5323] FAULT_INJECTION: forcing a failure. [ 61.853966][ T5323] name failslab, interval 1, probability 0, space 0, times 1 [ 61.928269][ T5323] CPU: 0 UID: 0 PID: 5323 Comm: syz.4.5 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 61.938427][ T5323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 61.948783][ T5323] Call Trace: [ 61.952100][ T5323] [ 61.955505][ T5323] dump_stack_lvl+0x241/0x360 [ 61.960246][ T5323] ? __pfx_dump_stack_lvl+0x10/0x10 [ 61.966589][ T5323] ? __pfx__printk+0x10/0x10 [ 61.972362][ T5323] ? __kmalloc_node_noprof+0xb7/0x440 [ 61.980223][ T5323] ? __pfx___might_resched+0x10/0x10 [ 61.986986][ T5323] should_fail_ex+0x3b0/0x4e0 [ 61.991857][ T5323] should_failslab+0xac/0x100 [ 61.997138][ T5323] __kmalloc_node_noprof+0xdf/0x440 [ 62.003030][ T5323] ? alloc_slab_obj_exts+0x3a/0xa0 [ 62.008670][ T5323] alloc_slab_obj_exts+0x3a/0xa0 [ 62.013923][ T5323] __memcg_slab_post_alloc_hook+0x319/0x7e0 [ 62.021286][ T5323] ? create_new_namespaces+0x34/0x7b0 [ 62.027525][ T5323] kmem_cache_alloc_noprof+0x1de/0x2a0 [ 62.033140][ T5323] create_new_namespaces+0x34/0x7b0 [ 62.038757][ T5323] ? __fget_files+0x29/0x470 [ 62.043572][ T5323] __se_sys_setns+0x2c8/0x1c00 [ 62.048396][ T5323] ? __pfx___se_sys_setns+0x10/0x10 [ 62.053747][ T5323] ? do_syscall_64+0x100/0x230 [ 62.059693][ T5323] ? do_syscall_64+0xb6/0x230 [ 62.064419][ T5323] do_syscall_64+0xf3/0x230 [ 62.069141][ T5323] ? clear_bhb_loop+0x35/0x90 [ 62.073868][ T5323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.079849][ T5323] RIP: 0033:0x7f616f77def9 [ 62.084290][ T5323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.104028][ T5323] RSP: 002b:00007f6170514038 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 62.112654][ T5323] RAX: ffffffffffffffda RBX: 00007f616f935f80 RCX: 00007f616f77def9 [ 62.120832][ T5323] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 62.129098][ T5323] RBP: 00007f6170514090 R08: 0000000000000000 R09: 0000000000000000 [ 62.137200][ T5323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.145298][ T5323] R13: 0000000000000000 R14: 00007f616f935f80 R15: 00007f616fa5fa28 [ 62.153463][ T5323] [ 62.198383][ T5309] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 62.377224][ T5309] usb 2-1: Using ep0 maxpacket: 16 [ 62.395254][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 62.418856][ T5309] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 62.476139][ T5309] usb 2-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice=57.47 [ 62.520702][ T5309] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.605981][ T5309] usb 2-1: Product: syz [ 62.610241][ T5309] usb 2-1: Manufacturer: syz [ 62.635137][ T5309] usb 2-1: SerialNumber: syz [ 62.659886][ T5309] usb 2-1: config 0 descriptor?? [ 62.920605][ T5347] netlink: 32 bytes leftover after parsing attributes in process `syz.4.18'. [ 62.953410][ T1672] usb 2-1: USB disconnect, device number 2 [ 63.415708][ T5231] Bluetooth: hci1: command tx timeout [ 63.486648][ T5231] Bluetooth: hci3: command tx timeout [ 63.492468][ T5231] Bluetooth: hci4: command tx timeout [ 63.498904][ T5238] Bluetooth: hci2: command tx timeout [ 63.504460][ T5238] Bluetooth: hci0: command tx timeout [ 63.860519][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.871704][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 63.966203][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.975336][ T5227] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 63.983136][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 63.992996][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.145319][ T5309] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 64.154541][ T5227] usb 1-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad [ 64.164253][ T5227] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.180129][ T5227] usb 1-1: config 0 descriptor?? [ 64.266791][ T5423] syz.3.28 uses obsolete (PF_INET,SOCK_PACKET) [ 64.325694][ T5309] usb 5-1: Using ep0 maxpacket: 16 [ 64.350908][ T5309] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 64.361241][ T5309] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.373627][ T5309] usb 5-1: Product: syz [ 64.378414][ T5309] usb 5-1: Manufacturer: syz [ 64.385647][ T5309] usb 5-1: SerialNumber: syz [ 64.400152][ T5309] usb 5-1: config 0 descriptor?? [ 64.408779][ T5410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.429491][ T5309] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 64.439751][ T5410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.472998][ T5227] snd-usb-hiface 1-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 64.503179][ T5309] usb 5-1: Detected FT232H [ 64.625238][ T25] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 64.659925][ T5309] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 64.689928][ T8] usb 1-1: USB disconnect, device number 2 [ 64.822052][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.844322][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.860516][ T25] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 64.870263][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.898703][ T5309] ftdi_sio 5-1:0.0: GPIO initialisation failed: -5 [ 64.914046][ T25] usb 4-1: config 0 descriptor?? [ 64.934282][ T5309] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 65.688957][ T25] usbhid 4-1:0.0: can't add hid device: -71 [ 65.711444][ T25] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 65.775857][ T25] usb 4-1: USB disconnect, device number 2 [ 65.822135][ T5437] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 65.830036][ T5437] IPv6: NLM_F_CREATE should be set when creating new route [ 65.837569][ T5437] IPv6: NLM_F_CREATE should be set when creating new route [ 65.845921][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 65.887052][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 65.905693][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 65.914045][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 65.922880][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 65.968913][ T5279] IPVS: starting estimator thread 0... [ 66.008534][ T8] usb 1-1: config 17 has an invalid descriptor of length 255, skipping remainder of the config [ 66.030250][ T8] usb 1-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 66.064430][ T8] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 66.077585][ T5442] IPVS: using max 27 ests per chain, 64800 per kthread [ 66.096563][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.511813][ T5444] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.31'. [ 66.656116][ T5444] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 66.714636][ T5408] coredump: 5(syz.1.22): interrupted: fatal signal pending [ 66.722507][ T5408] coredump: 5(syz.1.22): written to core: VMAs: 40, size 97476608; core: 67900181 bytes, pos 93646848 [ 71.348935][ T16] sched: DL replenish lagged too much [ 74.495326][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 74.505305][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 79.062819][ T51] cfg80211: failed to load regulatory.db [ 79.297467][ T25] usb 5-1: USB disconnect, device number 2 [ 79.671711][ T25] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 79.799790][ T25] ftdi_sio 5-1:0.0: device disconnected [ 80.712385][ T5238] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 80.735176][ T5238] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 80.767358][ T5238] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 80.776374][ T5238] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 80.798547][ T5238] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 80.825113][ T5238] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 89.625170][ T5238] Bluetooth: hci5: command tx timeout [ 93.293050][ T5238] Bluetooth: hci5: command tx timeout [ 95.495687][ T5238] Bluetooth: hci5: command tx timeout [ 95.718676][ T5231] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 95.747254][ T5231] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 95.760521][ T5231] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 95.795548][ T5231] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 95.807245][ T5231] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 95.816338][ T5231] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 97.925119][ T5231] Bluetooth: hci5: command tx timeout [ 103.450991][ T5233] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 103.462449][ T5229] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 103.500705][ T5229] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 103.555952][ T5233] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 103.619746][ T5233] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 103.628683][ T5233] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 103.636009][ T5233] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 103.834275][ T5233] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 103.841539][ T5233] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 103.853875][ T5233] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 103.867272][ T5233] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 103.887113][ T54] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 103.925953][ T5233] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 103.944884][ T5233] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 103.954534][ T5233] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 104.038205][ T5229] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 104.047088][ T5229] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 104.055735][ T5229] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 113.195212][ T5229] Bluetooth: hci6: command tx timeout [ 113.201414][ T5229] Bluetooth: hci9: command tx timeout [ 113.207971][ T5229] Bluetooth: hci8: command tx timeout [ 113.213916][ T5229] Bluetooth: hci7: command tx timeout [ 116.461182][ T5229] Bluetooth: hci7: command tx timeout [ 116.466716][ T5229] Bluetooth: hci8: command tx timeout [ 116.472317][ T5229] Bluetooth: hci9: command tx timeout [ 116.491405][ T5229] Bluetooth: hci6: command tx timeout [ 118.459318][ T5470] chnl_net:caif_netlink_parms(): no params data found [ 118.525469][ T5231] Bluetooth: hci6: command tx timeout [ 118.530935][ T5231] Bluetooth: hci9: command tx timeout [ 118.537022][ T5229] Bluetooth: hci8: command tx timeout [ 118.542553][ T5229] Bluetooth: hci7: command tx timeout [ 118.674548][ T5461] chnl_net:caif_netlink_parms(): no params data found [ 119.231323][ T5470] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.241225][ T5470] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.260795][ T5470] bridge_slave_0: entered allmulticast mode [ 119.276667][ T5470] bridge_slave_0: entered promiscuous mode [ 119.321827][ T5461] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.336732][ T5461] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.344185][ T5461] bridge_slave_0: entered allmulticast mode [ 119.361398][ T5461] bridge_slave_0: entered promiscuous mode [ 119.403298][ T5470] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.413560][ T5470] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.429584][ T5470] bridge_slave_1: entered allmulticast mode [ 119.440741][ T5470] bridge_slave_1: entered promiscuous mode [ 119.468171][ T5461] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.490252][ T5461] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.507034][ T5461] bridge_slave_1: entered allmulticast mode [ 119.522254][ T5461] bridge_slave_1: entered promiscuous mode [ 119.911460][ T5461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.940739][ T5470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.960831][ T5481] chnl_net:caif_netlink_parms(): no params data found [ 119.988881][ T5461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.093936][ T5470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.231125][ T5480] chnl_net:caif_netlink_parms(): no params data found [ 120.377834][ T5484] chnl_net:caif_netlink_parms(): no params data found [ 120.403631][ T5461] team0: Port device team_slave_0 added [ 120.424135][ T5470] team0: Port device team_slave_0 added [ 120.444573][ T5470] team0: Port device team_slave_1 added [ 120.587223][ T5461] team0: Port device team_slave_1 added [ 120.606190][ T5231] Bluetooth: hci9: command tx timeout [ 120.612072][ T5231] Bluetooth: hci7: command tx timeout [ 120.618457][ T5229] Bluetooth: hci8: command tx timeout [ 120.623999][ T5229] Bluetooth: hci6: command tx timeout [ 121.233581][ T5470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.254041][ T5470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.296202][ T5470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.316475][ T5470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.323476][ T5470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.352022][ T5470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.381595][ T5461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.395731][ T5461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.439667][ T5461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.472699][ T5461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.490937][ T5461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.532162][ T5461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.041176][ T5480] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.063552][ T5480] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.082637][ T5480] bridge_slave_0: entered allmulticast mode [ 122.093514][ T5480] bridge_slave_0: entered promiscuous mode [ 122.117226][ T5480] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.124464][ T5480] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.147570][ T5480] bridge_slave_1: entered allmulticast mode [ 122.166071][ T5480] bridge_slave_1: entered promiscuous mode [ 122.274736][ T5481] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.285616][ T5481] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.292953][ T5481] bridge_slave_0: entered allmulticast mode [ 122.313633][ T5481] bridge_slave_0: entered promiscuous mode [ 122.373990][ T5461] hsr_slave_0: entered promiscuous mode [ 122.418105][ T5461] hsr_slave_1: entered promiscuous mode [ 122.464226][ T5461] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.475123][ T5461] Cannot create hsr debugfs directory [ 122.750356][ T5484] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.774444][ T5484] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.796857][ T5484] bridge_slave_0: entered allmulticast mode [ 122.816373][ T5484] bridge_slave_0: entered promiscuous mode [ 122.826395][ T5481] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.833544][ T5481] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.855376][ T5481] bridge_slave_1: entered allmulticast mode [ 122.871689][ T5481] bridge_slave_1: entered promiscuous mode [ 122.978292][ T5480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.018679][ T5480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.050124][ T5470] hsr_slave_0: entered promiscuous mode [ 123.077461][ T5470] hsr_slave_1: entered promiscuous mode [ 123.124077][ T5470] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 123.144536][ T5470] Cannot create hsr debugfs directory [ 123.153871][ T5484] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.175213][ T5484] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.182703][ T5484] bridge_slave_1: entered allmulticast mode [ 123.204124][ T5484] bridge_slave_1: entered promiscuous mode [ 123.620721][ T5481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.649214][ T5481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.723919][ T5480] team0: Port device team_slave_0 added [ 123.749857][ T5484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.778515][ T5484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.898643][ T5480] team0: Port device team_slave_1 added [ 124.277081][ T5484] team0: Port device team_slave_0 added [ 124.287239][ T5480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.294325][ T5480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.337509][ T5480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.367392][ T5481] team0: Port device team_slave_0 added [ 124.389832][ T5481] team0: Port device team_slave_1 added [ 124.520874][ T5484] team0: Port device team_slave_1 added [ 124.550115][ T5480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.565912][ T5480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.634944][ T5480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.115313][ T5484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.122393][ T5484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.163570][ T5484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.265993][ T5481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.273209][ T5481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.330152][ T5481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.462791][ T5484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.480274][ T5484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.533782][ T5484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.569165][ T5480] hsr_slave_0: entered promiscuous mode [ 125.589455][ T5480] hsr_slave_1: entered promiscuous mode [ 125.607225][ T5480] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.626690][ T5480] Cannot create hsr debugfs directory [ 125.635763][ T5481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.645344][ T5481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.683942][ T5481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.049303][ T5461] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.493114][ T5481] hsr_slave_0: entered promiscuous mode [ 126.507277][ T5481] hsr_slave_1: entered promiscuous mode [ 126.525780][ T5481] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 126.533683][ T5481] Cannot create hsr debugfs directory [ 126.603339][ T5484] hsr_slave_0: entered promiscuous mode [ 126.665808][ T5484] hsr_slave_1: entered promiscuous mode [ 126.705449][ T5484] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 126.713178][ T5484] Cannot create hsr debugfs directory [ 133.575542][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.582132][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 141.676518][ T5229] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 141.696887][ T5229] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 141.707343][ T5229] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 141.727176][ T5229] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 141.736575][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 141.744428][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 141.754297][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 141.783083][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 141.792402][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 141.807137][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 141.816020][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 141.823396][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 142.245616][ T5233] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 142.254653][ T5233] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 142.268034][ T5233] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 142.276411][ T5233] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 142.284117][ T5233] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 142.295373][ T5233] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 142.420382][ T5233] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 142.429636][ T5233] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 142.438293][ T5233] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 142.449241][ T5233] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 142.459863][ T5233] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 142.469772][ T5233] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 142.604072][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 142.616325][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 142.628069][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 142.636633][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 142.654052][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 142.662814][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 143.806960][ T54] Bluetooth: hci0: command tx timeout [ 143.893794][ T54] Bluetooth: hci1: command tx timeout [ 144.365359][ T54] Bluetooth: hci2: command tx timeout [ 144.525580][ T54] Bluetooth: hci3: command tx timeout [ 144.775402][ T54] Bluetooth: hci4: command tx timeout [ 145.885329][ T54] Bluetooth: hci0: command tx timeout [ 145.966846][ T54] Bluetooth: hci1: command tx timeout [ 146.445242][ T54] Bluetooth: hci2: command tx timeout [ 146.605707][ T54] Bluetooth: hci3: command tx timeout [ 146.845262][ T54] Bluetooth: hci4: command tx timeout [ 147.967888][ T54] Bluetooth: hci0: command tx timeout [ 148.046301][ T54] Bluetooth: hci1: command tx timeout [ 148.527540][ T54] Bluetooth: hci2: command tx timeout [ 148.685572][ T54] Bluetooth: hci3: command tx timeout [ 148.925320][ T54] Bluetooth: hci4: command tx timeout [ 150.045245][ T54] Bluetooth: hci0: command tx timeout [ 150.127694][ T54] Bluetooth: hci1: command tx timeout [ 150.605412][ T54] Bluetooth: hci2: command tx timeout [ 150.765454][ T54] Bluetooth: hci3: command tx timeout [ 151.005245][ T54] Bluetooth: hci4: command tx timeout [ 195.028037][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.034491][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.474177][ T5233] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 204.490286][ T5233] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 204.499062][ T5233] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 204.515203][ T5233] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 204.526477][ T5233] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 204.535289][ T5233] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 204.938286][ T54] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 204.957778][ T54] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 204.968170][ T54] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 204.978385][ T54] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 204.987175][ T54] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 204.995753][ T54] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 205.102977][ T5233] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 205.112187][ T5233] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 205.121364][ T5233] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 205.129979][ T5233] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 205.138451][ T5233] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 205.146256][ T5233] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 205.224267][ T54] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 205.238372][ T54] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 205.258128][ T54] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 205.275219][ T54] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 205.300650][ T54] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 205.309436][ T54] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 205.566200][ T5233] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 205.576669][ T5233] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 205.584912][ T5233] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 205.595156][ T5233] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 205.602935][ T5233] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 205.611489][ T5233] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 206.605581][ T5233] Bluetooth: hci10: command tx timeout [ 207.093525][ T5233] Bluetooth: hci11: command tx timeout [ 207.245353][ T5233] Bluetooth: hci12: command tx timeout [ 207.329293][ T5233] Bluetooth: hci5: command 0x0406 tx timeout [ 207.405307][ T5231] Bluetooth: hci13: command tx timeout [ 207.645422][ T5231] Bluetooth: hci14: command tx timeout [ 208.685317][ T5231] Bluetooth: hci10: command tx timeout [ 209.173332][ T5231] Bluetooth: hci11: command tx timeout [ 209.325488][ T5231] Bluetooth: hci12: command tx timeout [ 209.485520][ T5231] Bluetooth: hci13: command tx timeout [ 209.728826][ T5231] Bluetooth: hci14: command tx timeout [ 210.765289][ T5231] Bluetooth: hci10: command tx timeout [ 211.245403][ T5231] Bluetooth: hci11: command tx timeout [ 211.405245][ T5231] Bluetooth: hci12: command tx timeout [ 211.565401][ T5231] Bluetooth: hci13: command tx timeout [ 211.805166][ T5231] Bluetooth: hci14: command tx timeout [ 212.845184][ T5231] Bluetooth: hci10: command tx timeout [ 213.333254][ T5231] Bluetooth: hci11: command tx timeout [ 213.485266][ T5231] Bluetooth: hci12: command tx timeout [ 213.645405][ T5231] Bluetooth: hci13: command tx timeout [ 213.885749][ T5231] Bluetooth: hci14: command tx timeout [ 227.823185][ T5238] Bluetooth: hci9: command 0x0406 tx timeout [ 227.833698][ T5231] Bluetooth: hci7: command 0x0406 tx timeout [ 227.839939][ T5238] Bluetooth: hci6: command 0x0406 tx timeout [ 227.846110][ T5231] Bluetooth: hci8: command 0x0406 tx timeout [ 256.447401][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.453774][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 264.760624][ T54] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 264.772879][ T54] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 264.835542][ T54] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 264.865580][ T54] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 264.878084][ T54] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 264.888175][ T54] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 265.116117][ T5233] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 265.127251][ T5233] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 265.136089][ T5233] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 265.156057][ T5233] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 265.163830][ T5233] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 265.172486][ T5233] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 265.308316][ T54] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 265.317390][ T54] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 265.336494][ T54] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 265.344773][ T54] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 265.354120][ T54] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 265.361794][ T54] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 265.493678][ T5236] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 265.504143][ T5236] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 265.513597][ T5236] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 265.522116][ T5236] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 265.533380][ T5236] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 265.542833][ T5236] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 265.550219][ T5229] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 265.566822][ T5236] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3 [ 265.577125][ T5229] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 265.585882][ T5236] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 265.594199][ T5236] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 265.604200][ T5236] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 266.925252][ T5236] Bluetooth: hci15: command tx timeout [ 267.245468][ T5236] Bluetooth: hci16: command tx timeout [ 267.405445][ T5236] Bluetooth: hci17: command tx timeout [ 267.646543][ T5236] Bluetooth: hci19: command tx timeout [ 267.725786][ T5236] Bluetooth: hci18: command tx timeout [ 268.784192][ T5236] Bluetooth: hci3: command 0x0406 tx timeout [ 268.795133][ T5231] Bluetooth: hci2: command 0x0406 tx timeout [ 268.801255][ T5231] Bluetooth: hci0: command 0x0406 tx timeout [ 268.815223][ T4622] Bluetooth: hci1: command 0x0406 tx timeout [ 268.821285][ T4622] Bluetooth: hci4: command 0x0406 tx timeout [ 269.005318][ T5238] Bluetooth: hci15: command tx timeout [ 269.325491][ T5238] Bluetooth: hci16: command tx timeout [ 269.494491][ T5238] Bluetooth: hci17: command tx timeout [ 269.730229][ T5238] Bluetooth: hci19: command tx timeout [ 269.805185][ T5238] Bluetooth: hci18: command tx timeout [ 271.085151][ T5238] Bluetooth: hci15: command tx timeout [ 271.405431][ T5238] Bluetooth: hci16: command tx timeout [ 271.573713][ T5238] Bluetooth: hci17: command tx timeout [ 271.805977][ T5238] Bluetooth: hci19: command tx timeout [ 271.885210][ T5238] Bluetooth: hci18: command tx timeout [ 273.165242][ T5238] Bluetooth: hci15: command tx timeout [ 273.485617][ T5238] Bluetooth: hci16: command tx timeout [ 273.653545][ T5238] Bluetooth: hci17: command tx timeout [ 273.889566][ T5238] Bluetooth: hci19: command tx timeout [ 273.965301][ T5238] Bluetooth: hci18: command tx timeout [ 276.925567][ T30] INFO: task kworker/1:5:5281 blocked for more than 143 seconds. [ 276.945088][ T30] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 276.952434][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 277.035095][ T30] task:kworker/1:5 state:D stack:20816 pid:5281 tgid:5281 ppid:2 flags:0x00004000 [ 277.085139][ T30] Workqueue: events_power_efficient crda_timeout_work [ 277.169289][ T30] Call Trace: [ 277.172716][ T30] [ 277.215146][ T30] __schedule+0x1895/0x4b30 [ 277.219858][ T30] ? __pfx___schedule+0x10/0x10 [ 277.224743][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 277.310164][ T30] ? __pfx_lock_release+0x10/0x10 [ 277.321161][ T30] ? kick_pool+0x1bd/0x620 [ 277.355679][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 277.361038][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 277.377044][ T30] ? schedule+0x90/0x320 [ 277.381358][ T30] schedule+0x14b/0x320 [ 277.398484][ T30] schedule_preempt_disabled+0x13/0x30 [ 277.404011][ T30] __mutex_lock+0x6a7/0xd70 [ 277.415189][ T30] ? __mutex_lock+0x52a/0xd70 [ 277.419936][ T30] ? crda_timeout_work+0x15/0x50 [ 277.424902][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 277.443311][ T30] ? process_scheduled_works+0x976/0x1850 [ 277.453979][ T30] crda_timeout_work+0x15/0x50 [ 277.465117][ T30] process_scheduled_works+0xa63/0x1850 [ 277.470852][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 277.491516][ T30] ? assign_work+0x364/0x3d0 [ 277.503844][ T30] worker_thread+0x870/0xd30 [ 277.513502][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 277.525136][ T30] ? __kthread_parkme+0x169/0x1d0 [ 277.530242][ T30] ? __pfx_worker_thread+0x10/0x10 [ 277.547170][ T30] kthread+0x2f0/0x390 [ 277.551478][ T30] ? __pfx_worker_thread+0x10/0x10 [ 277.566509][ T30] ? __pfx_kthread+0x10/0x10 [ 277.571164][ T30] ret_from_fork+0x4b/0x80 [ 277.587351][ T30] ? __pfx_kthread+0x10/0x10 [ 277.592013][ T30] ret_from_fork_asm+0x1a/0x30 [ 277.612853][ T30] [ 277.616510][ T30] INFO: task kworker/u8:13:5381 blocked for more than 144 seconds. [ 277.624441][ T30] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 277.644603][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 277.666822][ T30] task:kworker/u8:13 state:D stack:22808 pid:5381 tgid:5381 ppid:2 flags:0x00004000 [ 277.692083][ T30] Workqueue: netns cleanup_net [ 277.700529][ T30] Call Trace: [ 277.703858][ T30] [ 277.715706][ T30] __schedule+0x1895/0x4b30 [ 277.720389][ T30] ? __pfx___schedule+0x10/0x10 [ 277.736303][ T30] ? __pfx_lock_release+0x10/0x10 [ 277.741405][ T30] ? kthread_data+0x52/0xd0 [ 277.756426][ T30] ? wq_worker_sleeping+0x66/0x240 [ 277.761616][ T30] ? schedule+0x90/0x320 [ 277.781445][ T30] schedule+0x14b/0x320 [ 277.795393][ T30] schedule_timeout+0xb0/0x310 [ 277.800227][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 277.826884][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 277.832963][ T30] ? wait_for_completion+0x2fe/0x620 [ 277.849201][ T30] ? wait_for_completion+0x2fe/0x620 [ 277.854828][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 277.865887][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 277.871156][ T30] ? wait_for_completion+0x2fe/0x620 [ 277.895189][ T30] wait_for_completion+0x355/0x620 [ 277.900390][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 277.915049][ T30] ? __flush_work+0xe7/0xc50 [ 277.919810][ T30] __flush_work+0xa37/0xc50 [ 277.924501][ T30] ? __flush_work+0xe7/0xc50 [ 277.944000][ T30] ? __pfx___flush_work+0x10/0x10 [ 277.953288][ T30] ? __pfx_wq_barrier_func+0x10/0x10 [ 277.965368][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 277.973011][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 277.996443][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 278.003038][ T30] unregister_netdevice_many_notify+0x87b/0x1da0 [ 278.024076][ T30] ? __mutex_lock+0x9a1/0xd70 [ 278.044102][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 278.050132][ T30] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 278.065153][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 278.070617][ T30] ? __mutex_lock+0x9ab/0xd70 [ 278.087485][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 278.105460][ T30] ? __mutex_lock+0x52a/0xd70 [ 278.110407][ T30] unregister_netdevice_queue+0x303/0x370 [ 278.125428][ T30] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 278.132312][ T30] nsim_destroy+0x180/0x5c0 [ 278.150197][ T30] __nsim_dev_port_del+0x14b/0x1b0 [ 278.163653][ T30] nsim_dev_reload_destroy+0x28a/0x490 [ 278.169701][ T30] nsim_dev_reload_down+0x98/0xd0 [ 278.174789][ T30] devlink_reload+0x18b/0x870 [ 278.193268][ T30] ? __pfx_devlink_reload+0x10/0x10 [ 278.205024][ T30] devlink_pernet_pre_exit+0x1f3/0x440 [ 278.211011][ T30] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 278.229617][ T30] ? class_remove_file_ns+0x121/0x160 [ 278.244233][ T30] cleanup_net+0x615/0xcc0 [ 278.253719][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 278.265094][ T30] ? process_scheduled_works+0x976/0x1850 [ 278.270976][ T30] process_scheduled_works+0xa63/0x1850 [ 278.286963][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 278.293029][ T30] ? assign_work+0x364/0x3d0 [ 278.311448][ T30] worker_thread+0x870/0xd30 [ 278.322441][ T30] ? __kthread_parkme+0x169/0x1d0 [ 278.334824][ T30] ? __pfx_worker_thread+0x10/0x10 [ 278.345433][ T30] kthread+0x2f0/0x390 [ 278.349569][ T30] ? __pfx_worker_thread+0x10/0x10 [ 278.354737][ T30] ? __pfx_kthread+0x10/0x10 [ 278.375192][ T30] ret_from_fork+0x4b/0x80 [ 278.387435][ T30] ? __pfx_kthread+0x10/0x10 [ 278.392220][ T30] ret_from_fork_asm+0x1a/0x30 [ 278.410909][ T30] [ 278.414215][ T30] INFO: task kworker/u8:16:5388 blocked for more than 144 seconds. [ 278.437108][ T30] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 278.444460][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 278.464869][ T30] task:kworker/u8:16 state:D stack:23824 pid:5388 tgid:5388 ppid:2 flags:0x00004000 [ 278.481398][ T30] Workqueue: events_unbound linkwatch_event [ 278.494924][ T30] Call Trace: [ 278.498612][ T30] [ 278.502462][ T30] __schedule+0x1895/0x4b30 [ 278.515179][ T30] ? __pfx___schedule+0x10/0x10 [ 278.524766][ T30] ? __pfx_lock_release+0x10/0x10 [ 278.536771][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 278.542294][ T30] ? kthread_data+0x52/0xd0 [ 278.557818][ T30] ? schedule+0x90/0x320 [ 278.562122][ T30] ? wq_worker_sleeping+0x66/0x240 [ 278.572016][ T30] ? schedule+0x90/0x320 [ 278.587148][ T30] schedule+0x14b/0x320 [ 278.591651][ T30] schedule_preempt_disabled+0x13/0x30 [ 278.610660][ T30] __mutex_lock+0x6a7/0xd70 [ 278.621498][ T30] ? __mutex_lock+0x52a/0xd70 [ 278.632785][ T30] ? linkwatch_event+0xe/0x60 [ 278.646067][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 278.651169][ T30] ? process_scheduled_works+0x976/0x1850 [ 278.668855][ T30] linkwatch_event+0xe/0x60 [ 278.673420][ T30] process_scheduled_works+0xa63/0x1850 [ 278.685365][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 278.691421][ T30] ? assign_work+0x364/0x3d0 [ 278.710520][ T30] worker_thread+0x870/0xd30 [ 278.723378][ T30] ? __kthread_parkme+0x169/0x1d0 [ 278.728969][ T30] ? __pfx_worker_thread+0x10/0x10 [ 278.734123][ T30] kthread+0x2f0/0x390 [ 278.752052][ T30] ? __pfx_worker_thread+0x10/0x10 [ 278.763844][ T30] ? __pfx_kthread+0x10/0x10 [ 278.775228][ T30] ret_from_fork+0x4b/0x80 [ 278.779819][ T30] ? __pfx_kthread+0x10/0x10 [ 278.784445][ T30] ret_from_fork_asm+0x1a/0x30 [ 278.801703][ T30] [ 278.804932][ T30] INFO: task syz-executor:5461 blocked for more than 145 seconds. [ 278.832567][ T30] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 278.865111][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 278.874594][ T30] task:syz-executor state:D stack:21728 pid:5461 tgid:5461 ppid:1 flags:0x00004006 [ 278.897657][ T30] Call Trace: [ 278.901084][ T30] [ 278.904046][ T30] __schedule+0x1895/0x4b30 [ 278.925328][ T30] ? __pfx___schedule+0x10/0x10 [ 278.930281][ T30] ? __pfx_lock_release+0x10/0x10 [ 278.945176][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 278.950739][ T30] ? schedule+0x90/0x320 [ 278.966882][ T30] schedule+0x14b/0x320 [ 278.971132][ T30] schedule_preempt_disabled+0x13/0x30 [ 278.985608][ T30] __mutex_lock+0x6a7/0xd70 [ 278.990202][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 279.007658][ T30] ? __mutex_lock+0x52a/0xd70 [ 279.025899][ T30] ? nsim_destroy+0x71/0x5c0 [ 279.030929][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 279.045170][ T30] ? __pfx_mntput_no_expire+0x10/0x10 [ 279.050666][ T30] ? _raw_spin_unlock+0x28/0x50 [ 279.066747][ T30] ? simple_release_fs+0x9c/0xd0 [ 279.071875][ T30] nsim_destroy+0x71/0x5c0 [ 279.085681][ T30] ? nsim_dev_reload_destroy+0x28a/0x490 [ 279.091717][ T30] __nsim_dev_port_del+0x14b/0x1b0 [ 279.109979][ T30] nsim_dev_reload_destroy+0x28a/0x490 [ 279.125188][ T30] ? __pfx_nsim_bus_remove+0x10/0x10 [ 279.130844][ T30] nsim_drv_remove+0x58/0x160 [ 279.145169][ T30] device_release_driver_internal+0x4a9/0x7c0 [ 279.151431][ T30] bus_remove_device+0x34f/0x420 [ 279.168964][ T30] device_del+0x57a/0x9b0 [ 279.173377][ T30] ? __pfx_device_del+0x10/0x10 [ 279.185144][ T30] device_unregister+0x20/0xc0 [ 279.190158][ T30] del_device_store+0x363/0x480 [ 279.207664][ T30] ? __pfx_del_device_store+0x10/0x10 [ 279.213111][ T30] ? sysfs_kf_write+0x182/0x2a0 [ 279.232555][ T30] ? bus_attr_store+0x4f/0xa0 [ 279.242582][ T30] ? __pfx_sysfs_kf_write+0x10/0x10 [ 279.255245][ T30] kernfs_fop_write_iter+0x3a0/0x500 [ 279.260728][ T30] vfs_write+0xa6d/0xc90 [ 279.276837][ T30] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 279.282727][ T30] ? __pfx_vfs_write+0x10/0x10 [ 279.298974][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 279.304682][ T30] ? __fdget_pos+0x265/0x320 [ 279.319644][ T30] ksys_write+0x1a0/0x2c0 [ 279.324077][ T30] ? __pfx_ksys_write+0x10/0x10 [ 279.338053][ T30] ? do_syscall_64+0x100/0x230 [ 279.342913][ T30] ? do_syscall_64+0xb6/0x230 [ 279.358046][ T30] do_syscall_64+0xf3/0x230 [ 279.362874][ T30] ? clear_bhb_loop+0x35/0x90 [ 279.373562][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.385166][ T30] RIP: 0033:0x7f17f8f7c9df [ 279.390018][ T30] RSP: 002b:00007f17f925f220 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 279.415490][ T30] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f17f8f7c9df [ 279.433932][ T30] RDX: 0000000000000001 RSI: 00007f17f925f270 RDI: 0000000000000005 [ 279.448360][ T30] RBP: 00007f17f8ff1c15 R08: 0000000000000000 R09: 00007f17f925f077 [ 279.465140][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 279.473189][ T30] R13: 00007f17f925f270 R14: 00007f17f9c64620 R15: 0000000000000003 [ 279.492849][ T30] [ 279.501367][ T30] INFO: task syz-executor:5470 blocked for more than 145 seconds. [ 279.515178][ T30] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 279.522536][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 279.549437][ T30] task:syz-executor state:D stack:21728 pid:5470 tgid:5470 ppid:1 flags:0x00000004 [ 279.572551][ T30] Call Trace: [ 279.580068][ T30] [ 279.583065][ T30] __schedule+0x1895/0x4b30 [ 279.595251][ T30] ? __pfx___schedule+0x10/0x10 [ 279.600378][ T30] ? __pfx_lock_release+0x10/0x10 [ 279.615232][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 279.620899][ T30] ? schedule+0x90/0x320 [ 279.637123][ T30] schedule+0x14b/0x320 [ 279.641493][ T30] schedule_preempt_disabled+0x13/0x30 [ 279.660169][ T30] __mutex_lock+0x6a7/0xd70 [ 279.664783][ T30] ? __mutex_lock+0x52a/0xd70 [ 279.675250][ T30] ? del_device_store+0xfc/0x480 [ 279.680292][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 279.697537][ T30] del_device_store+0xfc/0x480 [ 279.702389][ T30] ? __pfx_del_device_store+0x10/0x10 [ 279.718815][ T30] ? sysfs_kf_write+0x182/0x2a0 [ 279.723742][ T30] ? bus_attr_store+0x4f/0xa0 [ 279.742957][ T30] ? __pfx_sysfs_kf_write+0x10/0x10 [ 279.753027][ T30] kernfs_fop_write_iter+0x3a0/0x500 [ 279.765021][ T30] vfs_write+0xa6d/0xc90 [ 279.769351][ T30] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 279.787106][ T30] ? __pfx_vfs_write+0x10/0x10 [ 279.791984][ T30] ? __fdget_pos+0x265/0x320 [ 279.810031][ T30] ksys_write+0x1a0/0x2c0 [ 279.814458][ T30] ? __pfx_ksys_write+0x10/0x10 [ 279.825064][ T30] ? do_syscall_64+0x100/0x230 [ 279.830011][ T30] ? do_syscall_64+0xb6/0x230 [ 279.846337][ T30] do_syscall_64+0xf3/0x230 [ 279.853960][ T30] ? clear_bhb_loop+0x35/0x90 [ 279.865097][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.871265][ T30] RIP: 0033:0x7ff94d37c9df [ 279.896345][ T30] RSP: 002b:00007ff94d65f220 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 279.904856][ T30] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007ff94d37c9df [ 279.930356][ T30] RDX: 0000000000000001 RSI: 00007ff94d65f270 RDI: 0000000000000005 [ 279.948700][ T30] RBP: 00007ff94d3f1c15 R08: 0000000000000000 R09: 00007ff94d65f077 [ 279.964470][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 279.985149][ T30] R13: 00007ff94d65f270 R14: 00007ff94e064620 R15: 0000000000000003 [ 279.993335][ T30] [ 280.005750][ T30] INFO: task syz-executor:5480 blocked for more than 146 seconds. [ 280.013692][ T30] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 280.032972][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 280.057843][ T30] task:syz-executor state:D stack:21728 pid:5480 tgid:5480 ppid:1 flags:0x00000004 [ 280.081718][ T30] Call Trace: [ 280.086775][ T30] [ 280.089756][ T30] __schedule+0x1895/0x4b30 [ 280.094505][ T30] ? __pfx___schedule+0x10/0x10 [ 280.112445][ T30] ? __pfx_lock_release+0x10/0x10 [ 280.122514][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 280.135202][ T30] ? schedule+0x90/0x320 [ 280.152679][ T30] schedule+0x14b/0x320 [ 280.157463][ T30] schedule_preempt_disabled+0x13/0x30 [ 280.162978][ T30] __mutex_lock+0x6a7/0xd70 [ 280.180801][ T30] ? __mutex_lock+0x52a/0xd70 [ 280.192544][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 280.203754][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 280.209548][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 280.214567][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 280.236282][ T30] ? __lock_acquire+0x1384/0x2050 [ 280.245691][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 280.251253][ T30] netlink_rcv_skb+0x1e3/0x430 [ 280.268015][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 280.273563][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 280.285066][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 280.290398][ T30] netlink_unicast+0x7f6/0x990 [ 280.307345][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 280.312711][ T30] ? __virt_addr_valid+0x183/0x530 [ 280.331071][ T30] ? __check_object_size+0x48e/0x900 [ 280.341650][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 280.355308][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.360785][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 280.375214][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.380582][ T30] __sock_sendmsg+0x221/0x270 [ 280.399098][ T30] __sys_sendto+0x398/0x4f0 [ 280.403714][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 280.415250][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 280.420531][ T30] ? blkcg_maybe_throttle_current+0x1ab/0xb80 [ 280.439764][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 280.455254][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 280.465499][ T30] __x64_sys_sendto+0xde/0x100 [ 280.470655][ T30] do_syscall_64+0xf3/0x230 [ 280.487394][ T30] ? clear_bhb_loop+0x35/0x90 [ 280.492163][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.510203][ T30] RIP: 0033:0x7fd8cc97fd8c [ 280.514776][ T30] RSP: 002b:00007fd8ccc5f650 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 280.535207][ T30] RAX: ffffffffffffffda RBX: 00007fd8cd664620 RCX: 00007fd8cc97fd8c [ 280.543349][ T30] RDX: 000000000000006c RSI: 00007fd8cd664670 RDI: 0000000000000003 [ 280.568789][ T30] RBP: 0000000000000000 R08: 00007fd8ccc5f6a4 R09: 000000000000000c [ 280.590335][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 280.604560][ T30] R13: 0000000000000000 R14: 00007fd8cd664670 R15: 0000000000000000 [ 280.619377][ T30] [ 280.622729][ T30] INFO: task syz-executor:5481 blocked for more than 147 seconds. [ 280.635191][ T30] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 280.642630][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 280.666481][ T30] task:syz-executor state:D stack:21728 pid:5481 tgid:5481 ppid:1 flags:0x00000004 [ 280.686952][ T30] Call Trace: [ 280.690292][ T30] [ 280.693245][ T30] __schedule+0x1895/0x4b30 [ 280.709484][ T30] ? __pfx___schedule+0x10/0x10 [ 280.714442][ T30] ? __pfx_lock_release+0x10/0x10 [ 280.725011][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 280.730663][ T30] ? schedule+0x90/0x320 [ 280.734945][ T30] schedule+0x14b/0x320 [ 280.750558][ T30] schedule_preempt_disabled+0x13/0x30 [ 280.771343][ T30] __mutex_lock+0x6a7/0xd70 [ 280.785189][ T30] ? __mutex_lock+0x52a/0xd70 [ 280.790235][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 280.805814][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 280.811119][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 280.825967][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 280.831335][ T30] ? __lock_acquire+0x1384/0x2050 [ 280.851755][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 280.865107][ T30] netlink_rcv_skb+0x1e3/0x430 [ 280.869959][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 280.886650][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 280.892028][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 280.908498][ T30] netlink_unicast+0x7f6/0x990 [ 280.913351][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 280.934818][ T30] ? __virt_addr_valid+0x183/0x530 [ 280.941018][ T30] ? __check_object_size+0x48e/0x900 [ 280.958000][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 280.963338][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.981307][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 280.995255][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.001679][ T30] __sock_sendmsg+0x221/0x270 [ 281.025139][ T30] __sys_sendto+0x398/0x4f0 [ 281.031646][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 281.048900][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 281.060652][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 281.074846][ T30] __x64_sys_sendto+0xde/0x100 [ 281.094523][ T30] do_syscall_64+0xf3/0x230 [ 281.103663][ T30] ? clear_bhb_loop+0x35/0x90 [ 281.115153][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.121118][ T30] RIP: 0033:0x7fb832f7fd8c [ 281.137250][ T30] RSP: 002b:00007fb83325f650 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 281.155809][ T30] RAX: ffffffffffffffda RBX: 00007fb833c64620 RCX: 00007fb832f7fd8c [ 281.175175][ T30] RDX: 0000000000000064 RSI: 00007fb833c64670 RDI: 0000000000000003 [ 281.184943][ T30] RBP: 0000000000000000 R08: 00007fb83325f6a4 R09: 000000000000000c [ 281.203439][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 281.229022][ T30] R13: 0000000000000000 R14: 00007fb833c64670 R15: 0000000000000000 [ 281.245212][ T30] [ 281.248370][ T30] INFO: task syz-executor:5484 blocked for more than 147 seconds. [ 281.266126][ T30] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 281.273640][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 281.298540][ T30] task:syz-executor state:D stack:21728 pid:5484 tgid:5484 ppid:1 flags:0x00000004 [ 281.321259][ T30] Call Trace: [ 281.324609][ T30] [ 281.335148][ T30] __schedule+0x1895/0x4b30 [ 281.339836][ T30] ? __pfx___schedule+0x10/0x10 [ 281.344723][ T30] ? __pfx_lock_release+0x10/0x10 [ 281.360767][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 281.373912][ T30] ? schedule+0x90/0x320 [ 281.385059][ T30] schedule+0x14b/0x320 [ 281.389279][ T30] schedule_preempt_disabled+0x13/0x30 [ 281.402987][ T30] __mutex_lock+0x6a7/0xd70 [ 281.408446][ T30] ? __mutex_lock+0x52a/0xd70 [ 281.413185][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 281.430546][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 281.444534][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 281.455250][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 281.460447][ T30] ? __lock_acquire+0x1384/0x2050 [ 281.475192][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 281.480841][ T30] netlink_rcv_skb+0x1e3/0x430 [ 281.505108][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 281.510663][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 281.525080][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 281.530426][ T30] netlink_unicast+0x7f6/0x990 [ 281.547562][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 281.553017][ T30] ? __virt_addr_valid+0x183/0x530 [ 281.572567][ T30] ? __check_object_size+0x48e/0x900 [ 281.584587][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 281.593756][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.605304][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 281.610327][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.626630][ T30] __sock_sendmsg+0x221/0x270 [ 281.631379][ T30] __sys_sendto+0x398/0x4f0 [ 281.645272][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 281.650381][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 281.665427][ T30] ? blkcg_maybe_throttle_current+0x1ab/0xb80 [ 281.671579][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 281.691139][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 281.703895][ T30] __x64_sys_sendto+0xde/0x100 [ 281.722424][ T30] do_syscall_64+0xf3/0x230 [ 281.733584][ T30] ? clear_bhb_loop+0x35/0x90 [ 281.745108][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.751081][ T30] RIP: 0033:0x7efd3ef7fd8c [ 281.766448][ T30] RSP: 002b:00007efd3f25f650 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 281.787061][ T30] RAX: ffffffffffffffda RBX: 00007efd3fc64620 RCX: 00007efd3ef7fd8c [ 281.805897][ T30] RDX: 0000000000000064 RSI: 00007efd3fc64670 RDI: 0000000000000003 [ 281.814035][ T30] RBP: 0000000000000000 R08: 00007efd3f25f6a4 R09: 000000000000000c [ 281.838882][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 281.855016][ T30] R13: 0000000000000000 R14: 00007efd3fc64670 R15: 0000000000000000 [ 281.863168][ T30] [ 281.875887][ T30] [ 281.875887][ T30] Showing all locks held in the system: [ 281.889261][ T30] 5 locks held by kworker/0:0/8: [ 281.894489][ T30] 1 lock held by khungtaskd/30: [ 281.915167][ T30] #0: ffffffff8e937ee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 281.936902][ T30] 3 locks held by kworker/1:1/51: [ 281.942082][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 281.975343][ T30] #1: ffffc90000bb7d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 282.001772][ T30] #2: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 282.023581][ T30] 6 locks held by kworker/0:2/936: [ 282.032084][ T30] 3 locks held by kworker/u8:9/2944: [ 282.046149][ T30] #0: ffff88802e081148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 282.075214][ T30] #1: ffffc90009a57d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 282.103539][ T30] #2: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 282.116279][ T30] 2 locks held by getty/4983: [ 282.121013][ T30] #0: ffff88814be9f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 282.145613][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 282.165172][ T30] 3 locks held by kworker/1:5/5281: [ 282.170426][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 282.200693][ T30] #1: ffffc900044d7d00 ((crda_timeout).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 282.224261][ T30] #2: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: crda_timeout_work+0x15/0x50 [ 282.236359][ T30] 7 locks held by kworker/u8:13/5381: [ 282.241775][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 282.264817][ T30] #1: ffffc90004a2fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 282.285164][ T30] #2: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 282.305018][ T30] #3: ffff88805e9770e8 (&dev->mutex){....}-{3:3}, at: devlink_pernet_pre_exit+0x13b/0x440 [ 282.329935][ T30] #4: ffff888031088250 (&devlink->lock_key#2){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0x14d/0x440 [ 282.345116][ T30] #5: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 282.354181][ T30] #6: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 282.379122][ T30] 3 locks held by kworker/u8:16/5388: [ 282.384633][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 282.411639][ T30] #1: ffffc90004a9fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 282.436641][ T30] #2: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 282.457744][ T30] 3 locks held by kworker/u8:19/5394: [ 282.463286][ T30] 7 locks held by syz-executor/5461: [ 282.475570][ T30] #0: ffff88802404e420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 282.484654][ T30] #1: ffff88802c81d888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 282.509013][ T30] #2: ffff888025aa8e18 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 282.541339][ T30] #3: ffffffff8f5696c8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 282.563701][ T30] #4: ffff88805ea8e0e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 282.577769][ T30] #5: ffff888030748250 (&devlink->lock_key#3){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 282.596516][ T30] #6: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 282.617307][ T30] 4 locks held by syz-executor/5470: [ 282.622645][ T30] #0: ffff88802404e420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 282.643096][ T30] #1: ffff888026ba0888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 282.665137][ T30] #2: ffff888025aa8e18 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 282.685532][ T30] #3: ffffffff8f5696c8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 282.712149][ T30] 1 lock held by syz-executor/5480: [ 282.719080][ T30] #0: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 282.740985][ T30] 1 lock held by syz-executor/5481: [ 282.752538][ T30] #0: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 282.770424][ T30] 1 lock held by syz-executor/5484: [ 282.781761][ T30] #0: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 282.801456][ T30] 2 locks held by syz-executor/5529: [ 282.815222][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 282.835308][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 282.855193][ T30] 2 locks held by syz-executor/5530: [ 282.860547][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 282.882315][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 282.903052][ T30] 2 locks held by syz-executor/5532: [ 282.910643][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 282.934286][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 282.950629][ T30] 2 locks held by syz-executor/5534: [ 282.964423][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 282.977971][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 283.000689][ T30] 2 locks held by syz-executor/5536: [ 283.025841][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 283.046642][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 283.065477][ T30] 2 locks held by syz-executor/5545: [ 283.070813][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 283.105234][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 283.124815][ T30] 2 locks held by syz-executor/5548: [ 283.135557][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 283.156556][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 283.178822][ T30] 2 locks held by syz-executor/5551: [ 283.184156][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 283.205765][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 283.225143][ T30] 2 locks held by syz-executor/5552: [ 283.230970][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 283.252316][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 283.275026][ T30] 2 locks held by syz-executor/5554: [ 283.280548][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 283.303301][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 283.320038][ T30] 2 locks held by syz-executor/5571: [ 283.329781][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 283.352548][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 283.369805][ T30] 2 locks held by syz-executor/5573: [ 283.382591][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 283.405202][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 283.425039][ T30] 2 locks held by syz-executor/5575: [ 283.430550][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 283.454217][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 283.466105][ T30] 2 locks held by syz-executor/5579: [ 283.471430][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 283.485735][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 283.508411][ T30] 2 locks held by syz-executor/5580: [ 283.513749][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 283.533409][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 283.548797][ T30] [ 283.551163][ T30] ============================================= [ 283.551163][ T30] [ 283.575167][ T30] NMI backtrace for cpu 1 [ 283.579555][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 283.589828][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 283.599996][ T30] Call Trace: [ 283.603292][ T30] [ 283.606240][ T30] dump_stack_lvl+0x241/0x360 [ 283.610950][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 283.616282][ T30] ? __pfx__printk+0x10/0x10 [ 283.620930][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 283.625915][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 283.631407][ T30] ? _printk+0xd5/0x120 [ 283.635670][ T30] ? __pfx__printk+0x10/0x10 [ 283.640285][ T30] ? __wake_up_klogd+0xcc/0x110 [ 283.645159][ T30] ? __pfx__printk+0x10/0x10 [ 283.649767][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 283.654818][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 283.660826][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 283.666851][ T30] watchdog+0xff4/0x1040 [ 283.671297][ T30] ? watchdog+0x1ea/0x1040 [ 283.675743][ T30] ? __pfx_watchdog+0x10/0x10 [ 283.680447][ T30] kthread+0x2f0/0x390 [ 283.684623][ T30] ? __pfx_watchdog+0x10/0x10 [ 283.689323][ T30] ? __pfx_kthread+0x10/0x10 [ 283.693928][ T30] ret_from_fork+0x4b/0x80 [ 283.698378][ T30] ? __pfx_kthread+0x10/0x10 [ 283.702998][ T30] ret_from_fork_asm+0x1a/0x30 [ 283.707903][ T30] [ 283.711803][ T30] Sending NMI from CPU 1 to CPUs 0: [ 283.717624][ C0] NMI backtrace for cpu 0 [ 283.717638][ C0] CPU: 0 UID: 0 PID: 936 Comm: kworker/0:2 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 283.717656][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 283.717667][ C0] Workqueue: wg-crypt-wg2 wg_packet_tx_worker [ 283.717689][ C0] RIP: 0010:kasan_check_range+0x86/0x290 [ 283.717709][ C0] Code: 00 fc ff df 4f 8d 3c 31 4c 89 fd 4c 29 dd 48 83 fd 10 7f 29 48 85 ed 0f 84 3e 01 00 00 4c 89 cd 48 f7 d5 48 01 dd 41 80 3b 00 <0f> 85 c9 01 00 00 49 ff c3 48 ff c5 75 ee e9 1e 01 00 00 45 89 dc [ 283.717722][ C0] RSP: 0018:ffffc900000076e0 EFLAGS: 00000246 [ 283.717735][ C0] RAX: ffffc90000007c01 RBX: 1ffff92000000f0a RCX: ffffffff8141332b [ 283.717748][ C0] RDX: 0000000000000001 RSI: 0000000000000010 RDI: ffffc90000007850 [ 283.717758][ C0] RBP: fffffffffffffffe R08: ffffc9000000785f R09: 1ffff92000000f0b [ 283.717770][ C0] R10: dffffc0000000000 R11: fffff52000000f0a R12: ffffc90000008000 [ 283.717782][ C0] R13: ffffc90000007800 R14: dffffc0000000001 R15: fffff52000000f0c [ 283.717794][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 283.717807][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 283.717818][ C0] CR2: 0000001b3260cff8 CR3: 000000000e734000 CR4: 00000000003506f0 [ 283.717832][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 283.717842][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 283.717852][ C0] Call Trace: [ 283.717857][ C0] [ 283.717865][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 283.717886][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 283.717907][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 283.717927][ C0] ? nmi_handle+0x2a/0x5a0 [ 283.717949][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 283.717967][ C0] ? nmi_handle+0x14f/0x5a0 [ 283.717981][ C0] ? nmi_handle+0x2a/0x5a0 [ 283.717997][ C0] ? kasan_check_range+0x86/0x290 [ 283.718012][ C0] ? default_do_nmi+0x63/0x160 [ 283.718028][ C0] ? exc_nmi+0x123/0x1f0 [ 283.718042][ C0] ? end_repeat_nmi+0xf/0x53 [ 283.718062][ C0] ? unwind_next_frame+0xcfb/0x22d0 [ 283.718083][ C0] ? kasan_check_range+0x86/0x290 [ 283.718099][ C0] ? kasan_check_range+0x86/0x290 [ 283.718116][ C0] ? kasan_check_range+0x86/0x290 [ 283.718132][ C0] [ 283.718137][ C0] [ 283.718144][ C0] __asan_memset+0x23/0x50 [ 283.718163][ C0] ? rcu_core+0xaaa/0x17a0 [ 283.718178][ C0] unwind_next_frame+0xcfb/0x22d0 [ 283.718207][ C0] ? dst_destroy+0x2ac/0x460 [ 283.718227][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 283.718245][ C0] arch_stack_walk+0x11c/0x150 [ 283.718262][ C0] ? rcu_core+0xaaa/0x17a0 [ 283.718279][ C0] stack_trace_save+0x118/0x1d0 [ 283.718296][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 283.718314][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 283.718335][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 283.718356][ C0] kasan_save_track+0x3f/0x80 [ 283.718369][ C0] ? kasan_save_track+0x3f/0x80 [ 283.718382][ C0] ? kasan_save_free_info+0x40/0x50 [ 283.718399][ C0] ? __kasan_slab_free+0x59/0x70 [ 283.718413][ C0] ? kmem_cache_free+0x1a2/0x420 [ 283.718432][ C0] ? dst_destroy+0x2ac/0x460 [ 283.718468][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 283.718489][ C0] kasan_save_free_info+0x40/0x50 [ 283.718506][ C0] __kasan_slab_free+0x59/0x70 [ 283.718521][ C0] ? dst_destroy+0x2ac/0x460 [ 283.718537][ C0] kmem_cache_free+0x1a2/0x420 [ 283.718555][ C0] ? dst_destroy+0x2ac/0x460 [ 283.718574][ C0] dst_destroy+0x2ac/0x460 [ 283.718592][ C0] ? rcu_core+0xa37/0x17a0 [ 283.718606][ C0] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 283.718623][ C0] rcu_core+0xaaa/0x17a0 [ 283.718644][ C0] ? __pfx_rcu_core+0x10/0x10 [ 283.718673][ C0] handle_softirqs+0x2c5/0x980 [ 283.718694][ C0] ? do_softirq+0x11b/0x1e0 [ 283.718713][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 283.718734][ C0] do_softirq+0x11b/0x1e0 [ 283.718751][ C0] [ 283.718756][ C0] [ 283.718762][ C0] ? __pfx_do_softirq+0x10/0x10 [ 283.718779][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 283.718800][ C0] ? rcu_is_watching+0x15/0xb0 [ 283.718817][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 283.718835][ C0] ? wg_packet_tx_worker+0x25f/0x810 [ 283.718849][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 283.718867][ C0] ? rcu_read_lock_bh_held+0x7e/0x120 [ 283.718884][ C0] ? __pfx_rcu_read_lock_bh_held+0x10/0x10 [ 283.718903][ C0] ? wg_packet_tx_worker+0x25f/0x810 [ 283.718918][ C0] wg_packet_tx_worker+0x5ef/0x810 [ 283.718932][ C0] ? wg_packet_tx_worker+0x25f/0x810 [ 283.718948][ C0] ? process_scheduled_works+0x976/0x1850 [ 283.718967][ C0] process_scheduled_works+0xa63/0x1850 [ 283.718997][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 283.719019][ C0] ? assign_work+0x364/0x3d0 [ 283.719039][ C0] worker_thread+0x870/0xd30 [ 283.719061][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 283.719079][ C0] ? __kthread_parkme+0x169/0x1d0 [ 283.719101][ C0] ? __pfx_worker_thread+0x10/0x10 [ 283.719119][ C0] kthread+0x2f0/0x390 [ 283.719139][ C0] ? __pfx_worker_thread+0x10/0x10 [ 283.719161][ C0] ? __pfx_kthread+0x10/0x10 [ 283.719175][ C0] ret_from_fork+0x4b/0x80 [ 283.719194][ C0] ? __pfx_kthread+0x10/0x10 [ 283.719215][ C0] ret_from_fork_asm+0x1a/0x30 [ 283.719251][ C0] [ 284.324414][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 284.331498][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 284.341677][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 284.351848][ T30] Call Trace: [ 284.355161][ T30] [ 284.358200][ T30] dump_stack_lvl+0x241/0x360 [ 284.363080][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 284.368306][ T30] ? __pfx__printk+0x10/0x10 [ 284.372959][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 284.378980][ T30] ? vscnprintf+0x5d/0x90 [ 284.383353][ T30] panic+0x349/0x880 [ 284.387275][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 284.393458][ T30] ? __pfx_panic+0x10/0x10 [ 284.397889][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 284.403455][ T30] ? __irq_work_queue_local+0x137/0x410 [ 284.409112][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 284.414504][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 284.420687][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 284.427396][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 284.433763][ T30] watchdog+0x1033/0x1040 [ 284.438118][ T30] ? watchdog+0x1ea/0x1040 [ 284.442558][ T30] ? __pfx_watchdog+0x10/0x10 [ 284.447255][ T30] kthread+0x2f0/0x390 [ 284.451363][ T30] ? __pfx_watchdog+0x10/0x10 [ 284.456075][ T30] ? __pfx_kthread+0x10/0x10 [ 284.460688][ T30] ret_from_fork+0x4b/0x80 [ 284.465129][ T30] ? __pfx_kthread+0x10/0x10 [ 284.469740][ T30] ret_from_fork_asm+0x1a/0x30 [ 284.474653][ T30] [ 284.478028][ T30] Kernel Offset: disabled [ 284.482382][ T30] Rebooting in 86400 seconds..