last executing test programs: 1m55.947353948s ago: executing program 3 (id=19): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x10) close(0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)={0x64, r1, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) 1m55.223849546s ago: executing program 3 (id=23): r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) 1m54.888025526s ago: executing program 3 (id=24): socket(0x1d, 0x80000, 0xef) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) shutdown(r0, 0x1) 1m54.43189738s ago: executing program 2 (id=27): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004b00000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[], 0x6a) 1m54.197180673s ago: executing program 2 (id=30): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x63dcbf62d8600606, r2, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14) bind$packet(r1, &(0x7f0000000040)={0x11, 0x4, r2}, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[], 0x0) 1m53.597412161s ago: executing program 2 (id=36): unshare(0x20000400) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) sendmmsg$inet6(r1, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0xe6aa0a9f27214269) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x62, &(0x7f00000002c0)=[{}], 0x8, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) unshare(0x100) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fccbdf250900000005000700020000000800010001000000050008"], 0x2c}, 0x1, 0x0, 0x0, 0x24084001}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r7, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) vmsplice(r2, &(0x7f0000000280)=[{0x0}], 0x1, 0x0) 1m53.0928013s ago: executing program 3 (id=38): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c00100006000d0085a168d0bf46d32345653600648d0a00120002000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a", 0x65, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) syz_genetlink_get_family_id$nl802154(0x0, r0) 1m52.92399851s ago: executing program 2 (id=40): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[], 0x6a) 1m52.875060481s ago: executing program 3 (id=41): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000480)='GPL\x00'}, 0x94) 1m52.666625448s ago: executing program 4 (id=42): sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYBLOB="22e2cf8975608d18d91a17cb3776054e081dabffa7f6d27fde1ce1430ce08e97c0b5b8f7c62feaf4d6a382197b0c779680ea688b149c8f8f0743684688243db3cbf65e6217f0"], 0xf0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x34, 0x0, 0x0, 0x2, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x1, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x4, 0xd}]}}}}}}}, 0x0) 1m52.594976083s ago: executing program 2 (id=44): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x4004884) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xa}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x401}}}]}, 0x3c}}, 0x4080) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m52.527913906s ago: executing program 3 (id=45): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r1, 0x0, 0xb9b}, 0x18) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b07, &(0x7f0000000440)={'wlan1\x00', @random="8dffffffebff"}) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) writev(0xffffffffffffffff, &(0x7f0000000040), 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_TP_METER(r4, 0x0, 0x20000000) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, 0x0, 0x800) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r3, 0x2, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) sendto$l2tp6(r2, &(0x7f0000000400)="28d7820168e3e85b18f7dbd5f962e847", 0x10, 0x20000010, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r6, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1m52.436051114s ago: executing program 4 (id=46): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x24000000, 0x0, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) 1m52.116223395s ago: executing program 4 (id=49): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x20014d2}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000002180)=""/4090, 0xffa}, {&(0x7f0000003180)=""/177, 0xb1}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f0000000580)=""/231, 0xe7}, {&(0x7f0000001b00)=""/214, 0xd6}, {&(0x7f00000002c0)=""/88, 0x58}, {&(0x7f0000000340)=""/261, 0x105}, {&(0x7f0000001a40)=""/152, 0x98}, {&(0x7f0000000100)=""/147, 0x93}], 0x9}, 0x81}], 0x3, 0x2140, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 1m51.947909367s ago: executing program 1 (id=50): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x20000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r2, 0x1, 0x70bd2c, 0x25dbdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x54) 1m51.709316152s ago: executing program 1 (id=51): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x3}, 0x8) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)='d', 0x1}], 0x1}, 0x40000851) writev(r0, &(0x7f0000003080)=[{&(0x7f0000002ec0)='=', 0x1}], 0x1) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)=',', 0x34000}], 0x1) 1m51.590315597s ago: executing program 1 (id=52): socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x24004800) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, 0x0, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 1m51.49189227s ago: executing program 4 (id=53): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a40)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2c007d8025008b"], 0x48}}, 0x0) 1m51.331560631s ago: executing program 2 (id=55): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000380), 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="180200"/14, @ANYRES32=r0], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(0xffffffffffffffff, &(0x7f00000024c0)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000800)=""/245, 0xf5}], 0x1}, 0x9}], 0x1, 0x10000, 0x0) 1m51.328532931s ago: executing program 1 (id=56): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="620ac4ff0000000071"], &(0x7f0000000480)='GPL\x00'}, 0x94) 1m51.213571456s ago: executing program 0 (id=57): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x34, 0x0, 0x0, 0x2, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x1, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x4, 0xd}]}}}}}}}, 0x0) 1m51.102773193s ago: executing program 4 (id=58): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000980), &(0x7f0000000a00)=0x68) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x0) 1m50.939703268s ago: executing program 1 (id=59): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x4c}, 0x1, 0xba01}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x70, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x3}, {0x0, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x8065738cbab9bcb1}, @TCA_FLOW_EMATCHES={0x34, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x3, 0x1, 0x8000}, {0x558a, 0x5, 0x71, 0x6, 0x8, 0x1, 0x1}}}, @TCF_EM_IPT={0xc, 0x2, 0x0, 0x0, {{0x875, 0x9, 0x69}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1m50.68942829s ago: executing program 0 (id=60): ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x43}, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x7f, 0x7fff, 0x3f, 0x400, 0xe, 0x40000}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f00000000c0)=0x1, 0x4) connect$rds(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e22, @loopback}, 0x10) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000140)) r3 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMSETDEVNAME(r3, 0x80184947, &(0x7f0000000180)={0x7, 'syz1\x00'}) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f00000001c0)={0x0, "9bb7b008f678c130ad388cacf97a2ac8"}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000011c0)={r4, 0x8, 0x6}) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r1, 0x4002f516, &(0x7f00000015c0)={0x0, 0x6}) r5 = socket$can_raw(0x1d, 0x3, 0x1) poll(&(0x7f0000001680)=[{r5, 0x2402}], 0x1, 0x4) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001840)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1}, 0x50) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001900), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x20, r7, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x2e}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20001894}, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001b00)={r6, &(0x7f0000001a00)="d47695129a88b22ff1b5079ab84ae4749f5088239f56ad564cec6b90098fc23d7807f73c6d149d74f5b0bb2802b88de7fb160e8f00ea06f6542e37b0f9e9df4547c487c471dd791dc01e76abf58b6af4e45d69ceca821958bb230cac6ef44c29a791a281a164bcdb98ea4ddba4c3dc", &(0x7f0000001a80)=""/128, 0x4}, 0x20) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) r8 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000001b40)=0x4a4a, 0x4) connect$netrom(r0, &(0x7f0000001b80)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, [@default, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) getsockopt(r8, 0x0, 0x6, &(0x7f0000001c00)=""/67, &(0x7f0000001c80)=0x43) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001dc0)={@ifindex, 0x22, 0x0, 0x32d0, &(0x7f0000001cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000001d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001d40)=[0x0, 0x0, 0x0], &(0x7f0000001d80)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001e00)={@ifindex, 0xffffffffffffffff, 0x2f, 0xb, r1, @void, @value, @void, @void, r9}, 0x20) 1m50.422408193s ago: executing program 4 (id=61): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002380)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xc, 0x8}, {}, {0xffff, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@gettfilter={0x2c, 0x2e, 0x335, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xc, 0x10}, {0x0, 0xfff1}, {0xfff2, 0x8}}, [{0x8, 0xb, 0x40}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x4041080) 1m50.404487481s ago: executing program 1 (id=62): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x54}}, 0x0) 1m50.079459603s ago: executing program 0 (id=63): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0xfd45}}, 0x0) write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="60800290dd"], 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) close(0x4) 1m49.554328988s ago: executing program 0 (id=64): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x4c}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 1m49.455630794s ago: executing program 0 (id=65): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000640)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000300)={0x2c, r1, 0x901, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x44000) 1m49.303604565s ago: executing program 0 (id=66): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, &(0x7f0000000400)) socket$can_j1939(0x1d, 0x2, 0x7) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003a80)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) sendmsg$netlink(r3, &(0x7f0000003cc0)={&(0x7f0000000200)=@kern={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003940)=[{&(0x7f0000007580)=ANY=[], 0x3858}, {&(0x7f0000000f40)={0x18, 0x1e, 0x400, 0x70bd25, 0x25dfdbfd, "", [@typed={0x8, 0xde, 0x0, 0x0, @pid}]}, 0x18}, {&(0x7f0000003d00)={0x10, 0x41, 0x200, 0x70bd2c, 0x25dfdbff}, 0x10}, {0x0}, {&(0x7f0000000480)=ANY=[@ANYBLOB], 0x74}, {0x0}], 0x6, &(0x7f0000003c00), 0x0, 0x6004}, 0x44000) 1m8.204535867s ago: executing program 32 (id=55): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000380), 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="180200"/14, @ANYRES32=r0], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(0xffffffffffffffff, &(0x7f00000024c0)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000800)=""/245, 0xf5}], 0x1}, 0x9}], 0x1, 0x10000, 0x0) 26.600665535s ago: executing program 33 (id=45): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r1, 0x0, 0xb9b}, 0x18) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b07, &(0x7f0000000440)={'wlan1\x00', @random="8dffffffebff"}) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) writev(0xffffffffffffffff, &(0x7f0000000040), 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_TP_METER(r4, 0x0, 0x20000000) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, 0x0, 0x800) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r3, 0x2, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) sendto$l2tp6(r2, &(0x7f0000000400)="28d7820168e3e85b18f7dbd5f962e847", 0x10, 0x20000010, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r6, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 18.180097233s ago: executing program 34 (id=66): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, &(0x7f0000000400)) socket$can_j1939(0x1d, 0x2, 0x7) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003a80)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) sendmsg$netlink(r3, &(0x7f0000003cc0)={&(0x7f0000000200)=@kern={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003940)=[{&(0x7f0000007580)=ANY=[], 0x3858}, {&(0x7f0000000f40)={0x18, 0x1e, 0x400, 0x70bd25, 0x25dfdbfd, "", [@typed={0x8, 0xde, 0x0, 0x0, @pid}]}, 0x18}, {&(0x7f0000003d00)={0x10, 0x41, 0x200, 0x70bd2c, 0x25dfdbff}, 0x10}, {0x0}, {&(0x7f0000000480)=ANY=[@ANYBLOB], 0x74}, {0x0}], 0x6, &(0x7f0000003c00), 0x0, 0x6004}, 0x44000) 12.814953687s ago: executing program 35 (id=62): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x54}}, 0x0) 0s ago: executing program 36 (id=61): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002380)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xc, 0x8}, {}, {0xffff, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@gettfilter={0x2c, 0x2e, 0x335, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xc, 0x10}, {0x0, 0xfff1}, {0xfff2, 0x8}}, [{0x8, 0xb, 0x40}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x4041080) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.50' (ED25519) to the list of known hosts. [ 82.312515][ T5823] cgroup: Unknown subsys name 'net' [ 82.585289][ T5823] cgroup: Unknown subsys name 'cpuset' [ 82.661068][ T5823] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.262448][ T5823] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.923682][ T1197] cfg80211: failed to load regulatory.db [ 87.109779][ T5855] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.113685][ T5855] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.117047][ T5855] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.118474][ T5855] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.120137][ T5855] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.121095][ T5855] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.127052][ T5855] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.128022][ T5855] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.129592][ T5858] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.130807][ T5858] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.132779][ T5858] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.133038][ T5858] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.134685][ T5856] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.227960][ T5857] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.232054][ T5857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.232921][ T5857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.235135][ T5857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.235895][ T5857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.241174][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.273406][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.281411][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.286246][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.287501][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.314612][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.321633][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.218636][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 88.238981][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 88.278479][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 88.308778][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 88.584091][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 89.141891][ T59] Bluetooth: hci3: command tx timeout [ 89.220425][ T59] Bluetooth: hci4: command tx timeout [ 89.243241][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.244454][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.245238][ T5837] bridge_slave_0: entered allmulticast mode [ 89.246908][ T5837] bridge_slave_0: entered promiscuous mode [ 89.301781][ T59] Bluetooth: hci1: command tx timeout [ 89.380539][ T59] Bluetooth: hci2: command tx timeout [ 89.380546][ T5854] Bluetooth: hci0: command tx timeout [ 89.422772][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.422912][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.423149][ T5839] bridge_slave_0: entered allmulticast mode [ 89.425754][ T5839] bridge_slave_0: entered promiscuous mode [ 89.428997][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.429124][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.429302][ T5837] bridge_slave_1: entered allmulticast mode [ 89.433658][ T5837] bridge_slave_1: entered promiscuous mode [ 89.557723][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.557869][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.558053][ T5836] bridge_slave_0: entered allmulticast mode [ 89.568941][ T5836] bridge_slave_0: entered promiscuous mode [ 89.598380][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.598505][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.598637][ T5839] bridge_slave_1: entered allmulticast mode [ 89.600175][ T5839] bridge_slave_1: entered promiscuous mode [ 89.716762][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.716875][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.716987][ T5838] bridge_slave_0: entered allmulticast mode [ 89.718514][ T5838] bridge_slave_0: entered promiscuous mode [ 89.722464][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.722605][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.722816][ T5836] bridge_slave_1: entered allmulticast mode [ 89.725556][ T5836] bridge_slave_1: entered promiscuous mode [ 89.982815][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.982954][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.983139][ T5838] bridge_slave_1: entered allmulticast mode [ 89.985873][ T5838] bridge_slave_1: entered promiscuous mode [ 90.245043][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.403287][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.403511][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.403711][ T5840] bridge_slave_0: entered allmulticast mode [ 90.406384][ T5840] bridge_slave_0: entered promiscuous mode [ 90.412261][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.416499][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.607043][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.607290][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.607491][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.607667][ T5840] bridge_slave_1: entered allmulticast mode [ 90.620851][ T5840] bridge_slave_1: entered promiscuous mode [ 90.632058][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.764892][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.767893][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.964885][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.158500][ T5837] team0: Port device team_slave_0 added [ 91.220407][ T59] Bluetooth: hci3: command tx timeout [ 91.296452][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.298884][ T5839] team0: Port device team_slave_0 added [ 91.302982][ T5837] team0: Port device team_slave_1 added [ 91.317656][ T59] Bluetooth: hci4: command tx timeout [ 91.380628][ T59] Bluetooth: hci1: command tx timeout [ 91.385531][ T5836] team0: Port device team_slave_0 added [ 91.460503][ T59] Bluetooth: hci2: command tx timeout [ 91.460535][ T59] Bluetooth: hci0: command tx timeout [ 91.466255][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.475127][ T5839] team0: Port device team_slave_1 added [ 91.478209][ T5838] team0: Port device team_slave_0 added [ 91.489407][ T5836] team0: Port device team_slave_1 added [ 92.063636][ T5838] team0: Port device team_slave_1 added [ 92.065885][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.065899][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.065923][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.421948][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.421962][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.421976][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.423761][ T5840] team0: Port device team_slave_0 added [ 92.424823][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.424836][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.424857][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.426245][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.426257][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.426279][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.576030][ T5840] team0: Port device team_slave_1 added [ 92.577268][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.577280][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.577304][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.579519][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.579532][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.579548][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.639624][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.639639][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.639662][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.798069][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.798085][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.798100][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.002982][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.002993][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.003006][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.227370][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.227383][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.227397][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.250087][ T5837] hsr_slave_0: entered promiscuous mode [ 93.252413][ T5837] hsr_slave_1: entered promiscuous mode [ 93.301537][ T5854] Bluetooth: hci3: command tx timeout [ 93.381911][ T5854] Bluetooth: hci4: command tx timeout [ 93.460790][ T5854] Bluetooth: hci1: command tx timeout [ 93.533946][ T5839] hsr_slave_0: entered promiscuous mode [ 93.535010][ T5839] hsr_slave_1: entered promiscuous mode [ 93.535672][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 93.535766][ T5839] Cannot create hsr debugfs directory [ 93.550406][ T5854] Bluetooth: hci0: command tx timeout [ 93.550437][ T5854] Bluetooth: hci2: command tx timeout [ 93.574617][ T5836] hsr_slave_0: entered promiscuous mode [ 93.576395][ T5836] hsr_slave_1: entered promiscuous mode [ 93.577333][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 93.577356][ T5836] Cannot create hsr debugfs directory [ 93.879185][ T5838] hsr_slave_0: entered promiscuous mode [ 93.879987][ T5838] hsr_slave_1: entered promiscuous mode [ 93.881408][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 93.881430][ T5838] Cannot create hsr debugfs directory [ 94.340602][ T5840] hsr_slave_0: entered promiscuous mode [ 94.341919][ T5840] hsr_slave_1: entered promiscuous mode [ 94.342789][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 94.342811][ T5840] Cannot create hsr debugfs directory [ 95.381529][ T59] Bluetooth: hci3: command tx timeout [ 95.461568][ T59] Bluetooth: hci4: command tx timeout [ 95.550506][ T59] Bluetooth: hci1: command tx timeout [ 95.620499][ T59] Bluetooth: hci2: command tx timeout [ 95.620532][ T59] Bluetooth: hci0: command tx timeout [ 95.754221][ T5837] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.804309][ T5837] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.838081][ T5837] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.893968][ T5837] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.059632][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.092429][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.138238][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.173639][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.312721][ T5838] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.357160][ T5838] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.392253][ T5838] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.456444][ T5838] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.620717][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.655202][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.688936][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.742635][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.840018][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.904855][ T5839] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.944414][ T5839] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.978109][ T5839] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.022719][ T5839] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.109353][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.169274][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.169990][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.227952][ T1234] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.228083][ T1234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.252487][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.365166][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.399355][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.429926][ T1234] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.430051][ T1234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.486437][ T1234] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.486715][ T1234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.566298][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.598330][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.637263][ T1116] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.637536][ T1116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.708139][ T1116] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.708754][ T1116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.778466][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.835048][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.873600][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.873815][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.929362][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.929488][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.042755][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.083761][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.085398][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.138289][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.139016][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.182380][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.516592][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.631369][ T5837] veth0_vlan: entered promiscuous mode [ 98.748371][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.771440][ T5837] veth1_vlan: entered promiscuous mode [ 98.968082][ T5836] veth0_vlan: entered promiscuous mode [ 99.013367][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.044719][ T5836] veth1_vlan: entered promiscuous mode [ 99.073142][ T5837] veth0_macvtap: entered promiscuous mode [ 99.103297][ T5837] veth1_macvtap: entered promiscuous mode [ 99.177184][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.289979][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.335640][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.338636][ T5836] veth0_macvtap: entered promiscuous mode [ 99.378865][ T5840] veth0_vlan: entered promiscuous mode [ 99.396659][ T5836] veth1_macvtap: entered promiscuous mode [ 99.409950][ T1116] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.431166][ T1108] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.439264][ T1108] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.447233][ T1108] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.480866][ T5840] veth1_vlan: entered promiscuous mode [ 99.562564][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.643243][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.644128][ T5839] veth0_vlan: entered promiscuous mode [ 99.751453][ T5838] veth0_vlan: entered promiscuous mode [ 99.778920][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.805951][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.837627][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.853892][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.857475][ T5839] veth1_vlan: entered promiscuous mode [ 99.876172][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.876199][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.905987][ T5838] veth1_vlan: entered promiscuous mode [ 99.978570][ T5840] veth0_macvtap: entered promiscuous mode [ 100.048723][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.048742][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.077757][ T5840] veth1_macvtap: entered promiscuous mode [ 100.287261][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.326851][ T1514] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.326871][ T1514] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.366015][ T5839] veth0_macvtap: entered promiscuous mode [ 100.383289][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.426860][ T5838] veth0_macvtap: entered promiscuous mode [ 100.473427][ T5839] veth1_macvtap: entered promiscuous mode [ 100.492700][ T1514] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.494144][ T5838] veth1_macvtap: entered promiscuous mode [ 100.502619][ T1514] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.540492][ T1514] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.562820][ T5958] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 100.567482][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.605998][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.606016][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.958344][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.989369][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.103960][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.122775][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.257142][ T3619] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.277785][ T5962] ieee802154 phy0 wpan0: encryption failed: -22 [ 101.454893][ T3619] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.499775][ T1234] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.525002][ T1234] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.525175][ T1234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.525189][ T1234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.560925][ T3619] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.597148][ T3619] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.605522][ T3619] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.764844][ T3619] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.016633][ T3619] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.016653][ T3619] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.282709][ T5980] tipc: Started in network mode [ 102.282738][ T5980] tipc: Node identity 52647c672754, cluster identity 4711 [ 102.304910][ T5980] tipc: Enabled bearer , priority 0 [ 102.331772][ T5981] syzkaller0: entered promiscuous mode [ 102.331804][ T5981] syzkaller0: entered allmulticast mode [ 102.532301][ T5981] tipc: Resetting bearer [ 102.605379][ T5979] tipc: Resetting bearer [ 102.731149][ T5979] tipc: Disabling bearer [ 102.951862][ T5988] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.102378][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.102399][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.281457][ T1116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.281479][ T1116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.470503][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.470523][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.614948][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.614968][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.103412][ T6019] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 104.778499][ T6030] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 105.123880][ T6040] netlink: 12 bytes leftover after parsing attributes in process `syz.4.26'. [ 106.249698][ T6066] netlink: 'syz.1.35': attribute type 10 has an invalid length. [ 106.467533][ T6066] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 107.270417][ T6092] tipc: Started in network mode [ 107.270446][ T6092] tipc: Node identity 4a998a5a3828, cluster identity 4711 [ 107.270661][ T6092] tipc: Enabled bearer , priority 0 [ 107.282857][ T6092] syzkaller0: entered promiscuous mode [ 107.282886][ T6092] syzkaller0: entered allmulticast mode [ 107.328406][ T6092] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 107.524228][ T6100] tipc: Resetting bearer [ 107.634453][ T6085] syz.1.39 (6085) used greatest stack depth: 18584 bytes left [ 107.646619][ T6090] tipc: Resetting bearer [ 107.855437][ T6090] tipc: Disabling bearer [ 108.164128][ T6116] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 108.210556][ T6116] syz_tun: entered allmulticast mode [ 108.267852][ T6115] syz_tun: left allmulticast mode [ 143.270242][ C1] sched: DL replenish lagged too much [ 143.605149][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.689815][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 179.760860][ T5854] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 181.704140][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 187.121391][ T5854] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 187.125573][ T5854] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 187.126576][ T5854] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 187.129871][ T5854] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 188.341136][ T5854] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 190.860289][ T5854] Bluetooth: hci5: command tx timeout [ 192.916780][ T5854] Bluetooth: hci5: command tx timeout [ 195.117601][ T5850] Bluetooth: hci5: command tx timeout [ 197.239447][ T5854] Bluetooth: hci5: command tx timeout [ 197.700354][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 197.725271][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.354461][ T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 202.358121][ T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 202.359109][ T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 202.368134][ T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 202.368935][ T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 210.122563][ T5858] Bluetooth: hci6: command tx timeout [ 212.772474][ T5857] Bluetooth: hci4: command 0x0406 tx timeout [ 212.772516][ T5857] Bluetooth: hci1: command 0x0406 tx timeout [ 212.772543][ T5857] Bluetooth: hci2: command 0x0406 tx timeout [ 212.772574][ T5857] Bluetooth: hci3: command 0x0406 tx timeout [ 212.772600][ T5857] Bluetooth: hci0: command 0x0406 tx timeout [ 212.772624][ T5857] Bluetooth: hci6: command tx timeout [ 213.981198][ T5856] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 213.988948][ T5856] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 213.989971][ T5856] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 214.932719][ T5856] Bluetooth: hci6: command tx timeout [ 215.049253][ T5855] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 215.050063][ T5855] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 216.996699][ T5855] Bluetooth: hci6: command tx timeout [ 220.116501][ T5856] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 220.148461][ T5856] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 220.150144][ T5856] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 220.351869][ T5856] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 220.352680][ T5856] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 225.906628][ T5856] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 225.907079][ T5856] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 225.907516][ T5856] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 225.911419][ T5856] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 225.912695][ T5856] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 239.939281][ T5846] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 240.003911][ T5846] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 240.006402][ T5846] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 240.007607][ T5846] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 240.008397][ T5846] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 244.972187][ T5858] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 245.057716][ T5858] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 245.108738][ T5858] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 245.165796][ T5858] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 245.167086][ T5858] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 248.964589][ T5857] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 249.933725][ T5857] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 250.011386][ T5857] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 250.936265][ T5846] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 251.109167][ T5846] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 259.009502][ T5857] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 259.022161][ T5857] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 259.022603][ T5857] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 259.023768][ T5857] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 259.024535][ T5857] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 264.574826][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 264.584596][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 287.818028][ T5854] Bluetooth: hci11: Opcode 0x0c03 failed: -110 [ 288.045354][ T38] INFO: task kworker/1:7:5930 blocked for more than 144 seconds. [ 288.045384][ T38] Not tainted syzkaller #0 [ 288.045394][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 288.045405][ T38] task:kworker/1:7 state:D stack:20808 pid:5930 tgid:5930 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 288.045525][ T38] Workqueue: events_power_efficient crda_timeout_work [ 288.045571][ T38] Call Trace: [ 288.045578][ T38] [ 288.045590][ T38] __schedule+0x16f3/0x4c20 [ 288.045628][ T38] ? sched_clock+0x3f/0x60 [ 288.045651][ T38] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 288.045682][ T38] ? __pfx___schedule+0x10/0x10 [ 288.045731][ T38] rt_mutex_schedule+0x77/0xf0 [ 288.045750][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 288.045790][ T38] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 288.045816][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 288.045840][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 288.045862][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 288.045894][ T38] ? crda_timeout_work+0x15/0x50 [ 288.045926][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 288.045954][ T38] ? crda_timeout_work+0x15/0x50 [ 288.045977][ T38] mutex_lock_nested+0x16a/0x1d0 [ 288.045996][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 288.046020][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 288.046044][ T38] crda_timeout_work+0x15/0x50 [ 288.046068][ T38] process_scheduled_works+0xade/0x17b0 [ 288.046121][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 288.046161][ T38] worker_thread+0x8a0/0xda0 [ 288.046187][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 288.046220][ T38] ? __kthread_parkme+0x7b/0x200 [ 288.046254][ T38] kthread+0x70e/0x8a0 [ 288.046282][ T38] ? __pfx_worker_thread+0x10/0x10 [ 288.046303][ T38] ? __pfx_kthread+0x10/0x10 [ 288.046341][ T38] ? __pfx_kthread+0x10/0x10 [ 288.046367][ T38] ret_from_fork+0x439/0x7d0 [ 288.046392][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 288.046422][ T38] ? __switch_to_asm+0x39/0x70 [ 288.046438][ T38] ? __switch_to_asm+0x33/0x70 [ 288.046454][ T38] ? __pfx_kthread+0x10/0x10 [ 288.046480][ T38] ret_from_fork_asm+0x1a/0x30 [ 288.046519][ T38] [ 288.046530][ T38] INFO: task kworker/u8:14:6155 blocked for more than 144 seconds. [ 288.046543][ T38] Not tainted syzkaller #0 [ 288.046552][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 288.046560][ T38] task:kworker/u8:14 state:D stack:22456 pid:6155 tgid:6155 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 288.046632][ T38] Workqueue: events_unbound linkwatch_event [ 288.046652][ T38] Call Trace: [ 288.046658][ T38] [ 288.046670][ T38] __schedule+0x16f3/0x4c20 [ 288.046721][ T38] ? __pfx___schedule+0x10/0x10 [ 288.046764][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 288.046792][ T38] rt_mutex_schedule+0x77/0xf0 [ 288.046809][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 288.046830][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 288.046870][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 288.046893][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 288.046915][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 288.046947][ T38] ? linkwatch_event+0xe/0x60 [ 288.046972][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 288.046998][ T38] ? linkwatch_event+0xe/0x60 [ 288.047014][ T38] mutex_lock_nested+0x16a/0x1d0 [ 288.047033][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 288.047057][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 288.047080][ T38] linkwatch_event+0xe/0x60 [ 288.047098][ T38] process_scheduled_works+0xade/0x17b0 [ 288.047150][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 288.047190][ T38] worker_thread+0x8a0/0xda0 [ 288.047240][ T38] kthread+0x70e/0x8a0 [ 288.047268][ T38] ? __pfx_worker_thread+0x10/0x10 [ 288.047289][ T38] ? __pfx_kthread+0x10/0x10 [ 288.047320][ T38] ? __pfx_kthread+0x10/0x10 [ 288.047353][ T38] ret_from_fork+0x439/0x7d0 [ 288.047379][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 288.047407][ T38] ? __switch_to_asm+0x39/0x70 [ 288.047423][ T38] ? __switch_to_asm+0x33/0x70 [ 288.047439][ T38] ? __pfx_kthread+0x10/0x10 [ 288.047465][ T38] ret_from_fork_asm+0x1a/0x30 [ 288.047500][ T38] [ 288.047535][ T38] [ 288.047535][ T38] Showing all locks held in the system: [ 288.047543][ T38] 4 locks held by kworker/0:0/9: [ 288.047554][ T38] #0: ffff88805b71dd38 ((wq_completion)wg-crypt-wg1#2){+.+.}-{0:0}, at: pr[ 288.047554][ T38] #0: ffff88805b71dd38 ((wq_completion)wg-crypt-wg1#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 288.047604][ T38] #1: ffffc900000e7bc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 288.047650][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 288.047694][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 288.047739][ T38] 6 locks held by kworker/0:1/10: [ 288.047749][ T38] #0: ffff88805bb2b138 ((wq_completion)wg-kex-wg2#8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 288.047797][ T38] #1: ffffc900000f7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 288.047853][ T38] #2: ffff8880353355f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x115/0x970 [ 288.047899][ T38] #3: ffff88805dc6ce20 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x126/0x970 [ 288.047943][ T38] #4: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 288.047987][ T38] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 288.048032][ T38] 5 locks held by kworker/u8:0/12: [ 288.048042][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 288.048087][ T38] #1: ffffc90000117bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 288.048132][ T38] #2: ffff88805f8b0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 288.048178][ T38] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 288.048221][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 288.048266][ T38] 5 locks held by kworker/u8:1/13: [ 288.048275][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 288.048319][ T38] #1: ffffc90000127bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 288.048368][ T38] #2: ffff88805fc40898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 288.048413][ T38] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 288.048457][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 288.048501][ T38] 2 locks held by ksoftirqd/0/15: [ 288.048511][ T38] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 288.048554][ T38] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 288.048600][ T38] 2 locks held by rcuc/0/20: [ 288.048609][ T38] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 288.048653][ T38] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 288.048697][ T38] 2 locks held by rcuc/1/28: [ 288.048707][ T38] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 288.048751][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 288.048795][ T38] 7 locks held by ktimers/1/29: [ 288.048805][ T38] 2 locks held by ksoftirqd/1/30: [ 288.048815][ T38] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 288.048864][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 288.048908][ T38] 4 locks held by kworker/1:0/31: [ 288.048918][ T38] #0: ffff88805b71f138 ((wq_completion)wg-crypt-wg2#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 288.048966][ T38] #1: ffffc90000a5fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 288.078078][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 288.078138][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 288.078186][ T38] 1 lock held by khungtaskd/38: [ 288.078196][ T38] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 288.078240][ T38] 5 locks held by kworker/u8:2/43: [ 288.078250][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 288.078295][ T38] #1: ffffc90000b47bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 288.078347][ T38] #2: ffff88804aec0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 288.078395][ T38] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 288.078438][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 288.078483][ T38] 4 locks held by kworker/1:1/49: [ 288.078493][ T38] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 288.078538][ T38] #1: ffffc90000bb7bc0 ((work_completion)(&(&tbl->managed_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 288.078582][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 288.078626][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 288.078671][ T38] 4 locks held by kworker/u8:3/57: [ 288.078681][ T38] #0: ffff888035ce2938 ((wq_completion)wg-kex-wg0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 288.078725][ T38] #1: ffffc9000123fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 288.078770][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 288.078814][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 288.078859][ T38] 5 locks held by kworker/u9:0/59: [ 288.078869][ T38] #0: ffff88802701c938 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 288.078913][ T38] #1: ffffc9000125fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 288.078957][ T38] #2: ffff8880594d0e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 288.079000][ T38] #3: ffff8880594d00a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 288.079047][ T38] #4: ffffffff8ee3b018 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 288.079102][ T38] 4 locks held by kworker/0:2/989: [ 288.079112][ T38] #0: ffff88805bdcd538 ((wq_completion)wg-crypt-wg0#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 288.079161][ T38] #1: ffffc900044a7bc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 288.079206][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 288.079250][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 288.079296][ T38] 5 locks held by kworker/u8:5/1108: [ 288.079307][ T38] 5 locks held by kworker/u8:6/1116: [ 288.079317][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 288.079368][ T38] #1: ffffc900048d7bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 288.079413][ T38] #2: ffff888060650898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 288.079458][ T38] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 288.079502][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 288.079545][ T38] 5 locks held by kworker/u8:7/1123: [ 288.079555][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 288.079599][ T38] #1: ffffc90004937bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 288.079643][ T38] #2: ffff88805eed0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 288.079689][ T38] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 288.079732][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 288.079777][ T38] 5 locks held by kworker/u8:8/1234: [ 288.079787][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 288.079831][ T38] #1: ffffc90004ce7bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 288.079875][ T38] #2: ffff888060270898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 288.079920][ T38] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 288.079964][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 288.080008][ T38] 2 locks held by aoe_tx0/1324: [ 288.080018][ T38] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 288.080061][ T38] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 288.080105][ T38] 5 locks held by kworker/u8:9/1514: [ 288.080115][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 288.080159][ T38] #1: ffffc90005557bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 288.098616][ T38] #2: ffff88804acf0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 288.098678][ T38] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 288.098724][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 288.098783][ T38] 7 locks held by kworker/R-mld/3225: [ 288.098794][ T38] #0: ffff88814d3bb138 ((wq_completion)mld){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 288.098839][ T38] #1: ffffc9000d07fba0 ((work_completion)(&(&idev->mc_dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 288.098884][ T38] #2: ffff8880367d8628 (&idev->mc_lock){+.+.}-{4:4}, at: mld_dad_work+0x3e/0x490 [ 288.098927][ T38] #3: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: mld_sendpack+0x1de/0xd80 [ 288.098970][ T38] #4: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: ip6_finish_output2+0x710/0x1720 [ 288.099015][ T38] #5: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 288.099059][ T38] #6: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 288.099104][ T38] 4 locks held by kworker/u8:10/3602: [ 288.099114][ T38] #0: ffff88805bed6938 ((wq_completion)wg-kex-wg0#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 288.099163][ T38] #1: ffffc9000d78fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 288.099208][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 288.099251][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 288.099296][ T38] 4 locks held by kworker/u9:1/5154: [ 288.099306][ T38] #0: ffff8880294a5938 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 288.099356][ T38] #1: ffffc9000fdd7bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 288.099400][ T38] #2: ffff8880594cce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 288.099443][ T38] #3: ffff8880594cc0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 288.099490][ T38] 3 locks held by udevd/5205: [ 288.099500][ T38] #0: ffff8880356a6350 (sk_lock-AF_NETLINK){+.+.}-{0:0}, at: netlink_insert+0xd3/0x1370 [ 288.099545][ T38] #1: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 288.099588][ T38] #2: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 288.099634][ T38] 2 locks held by getty/5597: [ 288.099644][ T38] #0: ffff88823bf3e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 288.099692][ T38] #1: ffffc90003e832e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 288.099736][ T38] 2 locks held by dhcpcd/5643: [ 288.099746][ T38] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 288.099790][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 288.099835][ T38] 3 locks held by syz-executor/5823: [ 288.099845][ T38] #0: ffff888037b03110 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_recvmsg+0xd3/0x560 [ 288.099890][ T38] #1: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 288.099933][ T38] #2: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 288.099978][ T38] 2 locks held by kworker/0:4/5843: [ 288.099989][ T38] 5 locks held by kworker/u9:3/5850: [ 288.099998][ T38] #0: ffff88802701c138 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 288.100043][ T38] #1: ffffc90004d87bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 288.100088][ T38] #2: ffff8880594c8e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 288.100130][ T38] #3: ffff8880594c80a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 288.100176][ T38] #4: ffffffff8ee3b018 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 288.100302][ T38] 6 locks held by kworker/u9:4/5853: [ 288.100313][ T38] #0: ffff8880294a6138 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 288.100365][ T38] #1: ffffc90004db7bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 288.100408][ T38] #2: ffff8880594d8e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 288.100450][ T38] #3: ffff8880594d80a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 288.100495][ T38] #4: ffffffff8ee3b018 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 288.100542][ T38] #5: ffff888027019358 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 288.100593][ T38] 4 locks held by kworker/u9:6/5855: [ 288.100602][ T38] #0: ffff88805ee02138 ((wq_completion)hci7#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 288.100651][ T38] #1: ffffc90004df7bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 288.100696][ T38] #2: ffff8880671080a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 288.100739][ T38] #3: ffffffff8ee3b018 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 288.100783][ T38] 4 locks held by kworker/u9:7/5856: [ 288.100793][ T38] #0: ffff88802f90a938 ((wq_completion)hci8#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 288.100841][ T38] #1: ffffc90004e07bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 288.100885][ T38] #2: ffff88806fce40a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 288.100929][ T38] #3: ffffffff8ee3b018 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 288.100973][ T38] 4 locks held by kworker/u9:8/5857: [ 288.100983][ T38] #0: ffff88803979c938 ((wq_completion)hci10#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 288.101031][ T38] #1: ffffc90004e17bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 288.101075][ T38] #2: ffff8880719200a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 288.101118][ T38] #3: ffffffff8ee3b018 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 288.101162][ T38] 4 locks held by kworker/u9:9/5858: [ 288.101172][ T38] #0: ffff888062452138 ((wq_completion)hci9#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 288.101221][ T38] #1: ffffc90004e27bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 288.101265][ T38] #2: ffff88807730c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 288.101308][ T38] #3: ffffffff8ee3b018 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 288.101361][ T38] 4 locks held by kworker/R-wg-cr/5874: [ 288.101371][ T38] #0: ffff88805b7f7138 ((wq_completion)wg-crypt-wg0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 288.101416][ T38] #1: ffffc90004eb7ba0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 288.101472][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 288.101515][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 288.101560][ T38] 4 locks held by kworker/R-wg-cr/5878: [ 288.101570][ T38] #0: ffff88805b71c538 ((wq_completion)wg-crypt-wg1#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 288.101618][ T38] #1: ffffc90004f37ba0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 288.101675][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 288.101719][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 288.101762][ T38] 4 locks held by kworker/R-wg-cr/5883: [ 288.101773][ T38] #0: ffff88805bb29138 ((wq_completion)wg-crypt-wg1#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 288.101821][ T38] #1: ffffc90004f87ba0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 288.101878][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 288.101921][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 288.101966][ T38] 4 locks held by kworker/R-wg-cr/5884: [ 288.101976][ T38] #0: ffff888037707938 ((wq_completion)wg-crypt-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 288.102024][ T38] #1: ffffc90004f97ba0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 288.102080][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 288.102124][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 288.102168][ T38] 4 locks held by kworker/R-wg-cr/5885: [ 288.102178][ T38] #0: ffff88805bb2b538 ((wq_completion)wg-crypt-wg2#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 288.102226][ T38] #1: ffffc900053c7ba0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 288.102271][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 288.102314][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 288.102366][ T38] 4 locks held by kworker/R-wg-cr/5888: [ 288.102376][ T38] #0: ffff88805c1bb938 ((wq_completion)wg-crypt-wg2#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 288.102424][ T38] #1: ffffc900053f7ba0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 288.102480][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 288.102523][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 288.102568][ T38] 2 locks held by napi/wg0-0/5903: [ 288.102578][ T38] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 288.102619][ T38] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 288.102667][ T38] 2 locks held by napi/wg2-0/5926: [ 288.102686][ T38] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 288.102730][ T38] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 288.102774][ T38] 4 locks held by kworker/1:5/5928: [ 288.102784][ T38] #0: ffff88805b71f138 ((wq_completion)wg-crypt-wg2#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 288.102833][ T38] #1: ffffc90005a27bc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 288.102876][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 288.102920][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 288.102964][ T38] 2 locks held by kworker/1:6/5929: [ 288.102974][ T38] 3 locks held by kworker/1:7/5930: [ 288.102984][ T38] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 288.103029][ T38] #1: ffffc90005a47bc0 ((crda_timeout).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 288.103073][ T38] #2: ffffffff8ecd3538 (rtnl_mutex){+.+.}-{4:4}, at: crda_timeout_work+0x15/0x50 [ 288.103122][ T38] 4 locks held by kworker/0:6/6061: [ 288.103132][ T38] #0: ffff88805b71f138 ((wq_completion)wg-crypt-wg2#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 288.103179][ T38] #1: ffffc9000619fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 288.103236][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 288.103280][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 288.103324][ T38] 1 lock held by syz.2.55/6121: [ 288.103339][ T38] #0: ffffffff8ecd3538 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 288.103387][ T38] 1 lock held by syz.4.61/6136: [ 288.103397][ T38] 2 locks held by kworker/1:8/6152: [ 288.103407][ T38] 6 locks held by kworker/u8:13/6154: [ 288.103417][ T38] #0: ffff88805ba19938 ((wq_completion)wg-kex-wg0#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 288.103466][ T38] #1: ffffc90006cc7bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 288.103512][ T38] #2: ffff88805bb6d5f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 288.103557][ T38] #3: ffff88805dc69928 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 288.103601][ T38] #4: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 288.103644][ T38] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 288.103689][ T38] 3 locks held by kworker/u8:14/6155: [ 288.103699][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 288.103744][ T38] #1: ffffc900074d7bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 288.103787][ T38] #2: ffffffff8ecd3538 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 288.103828][ T38] 2 locks held by kworker/u8:15/6156: [ 288.103838][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 288.103882][ T38] #1: ffffc90007ce7bc0 ((reaper_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 288.103926][ T38] 6 locks held by kworker/u8:16/6157: [ 288.103935][ T38] #0: ffff88805bbd4138 ((wq_completion)wg-kex-wg2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 288.103979][ T38] #1: ffffc900080ffbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 288.104024][ T38] #2: ffff8880358b15f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 288.104068][ T38] #3: ffff888039ada3c0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 288.104112][ T38] #4: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 288.104155][ T38] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 288.104200][ T38] 7 locks held by kworker/u8:17/6158: [ 288.104210][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 288.104254][ T38] #1: ffffc900084ffbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 288.104300][ T38] #2: ffff88805dc30300 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 288.104360][ T38] #3: ffff88805d93bd20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 288.104403][ T38] #4: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 288.104443][ T38] #5: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 288.104487][ T38] #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 288.104532][ T38] 6 locks held by kworker/u8:20/6161: [ 288.104542][ T38] #0: ffff88805bbd4938 ((wq_completion)wg-kex-wg0#7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 288.104589][ T38] #1: ffffc90008917bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 288.104634][ T38] #2: ffff8880358b55f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 288.104677][ T38] #3: ffff888039adc388 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 288.104721][ T38] #4: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 288.104764][ T38] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 288.104809][ T38] 7 locks held by kworker/u8:21/6162: [ 288.104819][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 288.104863][ T38] #1: ffffc90008d0fbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 288.104907][ T38] #2: ffff88805dcc5300 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 288.104958][ T38] #3: ffff88805dbffd20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 288.105006][ T38] #4: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 288.105049][ T38] #5: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 288.105092][ T38] #6: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 288.105137][ T38] 4 locks held by kworker/0:7/6163: [ 288.105147][ T38] #0: ffff88805b71d938 ((wq_completion)wg-kex-wg1#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 288.105216][ T38] #1: ffffc90008d1fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 288.105272][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 288.105316][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 288.105366][ T38] 4 locks held by kworker/u8:22/6164: [ 288.105376][ T38] #0: ffff888030b34938 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 288.105421][ T38] #1: ffffc90009117bc0 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 288.105466][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 288.105509][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 288.105554][ T38] 2 locks held by kworker/0:8/6165: [ 288.105565][ T38] 4 locks held by kworker/0:9/6167: [ 288.105575][ T38] #0: ffff88801989a938 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 288.105617][ T38] #1: ffffc9000952fbc0 ((work_completion)(&sdp->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 288.105662][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 288.105705][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 288.105750][ T38] 4 locks held by kworker/0:10/6168: [ 288.105760][ T38] #0: ffff88805bafa938 ((wq_completion)wg-crypt-wg2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 288.105804][ T38] #1: ffffc90009927bc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 288.105849][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 288.105893][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 288.105937][ T38] 2 locks held by kworker/0:11/6169: [ 288.105948][ T38] 6 locks held by kworker/0:12/6170: [ 288.105958][ T38] #0: ffff88805b71ed38 ((wq_completion)wg-kex-wg2#10){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 288.106006][ T38] #1: ffffc90009d2fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 288.106063][ T38] #2: ffff88803cae15f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x115/0x970 [ 288.106107][ T38] #3: ffff888039ca83f8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x126/0x970 [ 288.106151][ T38] #4: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 288.106194][ T38] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 288.106239][ T38] 4 locks held by kworker/0:13/6171: [ 288.106249][ T38] #0: ffff88805b7f7138 ((wq_completion)wg-crypt-wg0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 288.106293][ T38] #1: ffffc9000a137bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 288.106355][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 288.106398][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 288.106442][ T38] 4 locks held by kworker/0:14/6172: [ 288.106452][ T38] #0: ffff88805b712538 ((wq_completion)wg-crypt-wg1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 288.106501][ T38] #1: ffffc9000a52fbc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 288.106545][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 288.106588][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 288.106632][ T38] 4 locks held by kworker/0:15/6173: [ 288.106642][ T38] #0: ffff88805c1b8138 ((wq_completion)wg-kex-wg1#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 288.106691][ T38] #1: ffffc9000a53fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 288.106747][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 288.106790][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 288.106835][ T38] 2 locks held by kworker/u8:24/6175: [ 288.106845][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 288.106889][ T38] #1: ffffc90005f0fbc0 (connector_reaper_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 288.106934][ T38] 5 locks held by kworker/u8:25/6176: [ 288.106945][ T38] 7 locks held by kworker/u8:26/6177: [ 288.106954][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 288.106999][ T38] #1: ffffc9000ad47bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 288.107044][ T38] #2: ffff888036c6c300 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 288.107092][ T38] #3: ffff88805d747520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 288.107139][ T38] #4: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 288.107182][ T38] #5: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 288.107224][ T38] #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 288.107269][ T38] 4 locks held by kworker/u8:27/6179: [ 288.107279][ T38] #0: ffff88805ba1c938 ((wq_completion)wg-kex-wg2#9){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 288.107332][ T38] #1: ffffc9000b13fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 288.107377][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 288.107421][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 288.107466][ T38] 4 locks held by kworker/u8:28/6180: [ 288.107477][ T38] #0: ffff8880600e3938 ((wq_completion)bond1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 288.107521][ T38] #1: ffffc9000b14fbc0 ((work_completion)(&(&bond->ad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 288.107566][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 288.107608][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 288.107652][ T38] 4 locks held by kworker/0:17/6181: [ 288.107663][ T38] #0: ffff88805b712d38 ((wq_completion)wg-crypt-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 288.107712][ T38] #1: ffffc9000b15fbc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 288.107757][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 288.107800][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 288.107844][ T38] 4 locks held by kworker/u8:29/6182: [ 288.107855][ T38] 4 locks held by kworker/0:18/6183: [ 288.107865][ T38] #0: ffff88805bafb538 ((wq_completion)wg-kex-wg0#9){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 288.107913][ T38] #1: ffffc9000b567bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 288.107969][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 288.108013][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 288.108057][ T38] 6 locks held by kworker/u8:30/6184: [ 288.108067][ T38] #0: ffff888031208938 ((wq_completion)wg-kex-wg1#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 288.108116][ T38] #1: ffffc900078dfbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 288.108161][ T38] #2: ffff8880361115f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 288.108204][ T38] #3: ffff88805dc6d8b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 288.108248][ T38] #4: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 288.108292][ T38] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 288.108342][ T38] 5 locks held by dhcpcd/6185: [ 288.108353][ T38] 6 locks held by kworker/u8:31/6191: [ 288.108363][ T38] #0: ffff88805bef8938 ((wq_completion)wg-kex-wg2#7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 288.108411][ T38] #1: ffffc9000bd67bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 288.108456][ T38] #2: ffff8880353355f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 288.108500][ T38] #3: ffff888039ade350 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 288.108544][ T38] #4: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 288.108586][ T38] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 288.108630][ T38] 6 locks held by kworker/u8:32/6192: [ 288.108641][ T38] #0: ffff888035ce6138 ((wq_completion)wg-kex-wg0#8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 288.108689][ T38] #1: ffffc9000bd97bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 288.108733][ T38] #2: ffff88805ba715f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 288.108777][ T38] #3: ffff888023e39928 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 288.108820][ T38] #4: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 288.108864][ T38] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 288.108908][ T38] 3 locks held by kworker/u8:33/6196: [ 288.108917][ T38] #0: ffff88814577c938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 288.108961][ T38] #1: ffffc9000c597bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 288.109007][ T38] #2: ffffffff8ecd3538 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 288.109052][ T38] 1 lock held by syz-executor/6197: [ 288.109062][ T38] #0: ffffffff8ecd3538 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 288.109104][ T38] 4 locks held by kworker/0:20/6198: [ 288.109114][ T38] #0: ffff88805bafb938 ((wq_completion)wg-crypt-wg0#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 288.109162][ T38] #1: ffffc9000c5a7bc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 288.109207][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 288.109251][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 288.109296][ T38] 1 lock held by syz-executor/6202: [ 288.109306][ T38] #0: ffffffff8ecd3538 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 288.109354][ T38] 1 lock held by syz-executor/6207: [ 288.109364][ T38] #0: ffffffff8ecd3538 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 288.109405][ T38] 1 lock held by syz-executor/6210: [ 288.109415][ T38] #0: ffffffff8ecd3538 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 288.109457][ T38] 7 locks held by kworker/u8:34/6216: [ 288.109467][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 288.109511][ T38] #1: ffffc9000c677bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 288.109557][ T38] #2: ffff88805de91300 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 288.109608][ T38] #3: ffff88805ddcf520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 288.109655][ T38] #4: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 288.109698][ T38] #5: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 288.109742][ T38] #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 288.109786][ T38] 1 lock held by syz-executor/6217: [ 288.109796][ T38] #0: ffffffff8ecd3538 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 288.109838][ T38] 6 locks held by kworker/u8:35/6218: [ 288.109848][ T38] #0: ffff88805bed6938 ((wq_completion)wg-kex-wg0#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 288.109896][ T38] #1: ffffc9000c657bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 288.109941][ T38] #2: ffff88805c0e95f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 288.109985][ T38] #3: ffff888039adede8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 288.110029][ T38] #4: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 288.110072][ T38] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 288.110117][ T38] 1 lock held by syz-executor/6222: [ 288.110127][ T38] #0: ffffffff8ecd3538 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 288.110168][ T38] 1 lock held by dhcpcd/6227: [ 288.110178][ T38] #0: ffff888039b48350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 290.370306][ T38] 4 locks held by udevd/6228: [ 290.370318][ T38] #0: ffff88803d3eb878 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 290.370369][ T38] #1: ffffffff8ed378e0 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 290.370424][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 290.370468][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 290.370513][ T38] 4 locks held by kworker/1:9/6230: [ 290.370522][ T38] #0: ffff88805bafa938 ((wq_completion)wg-crypt-wg2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 290.370568][ T38] #1: ffffc9000bd77bc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 290.370613][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 290.370657][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 290.370703][ T38] 3 locks held by udevd/6233: [ 290.370713][ T38] #0: ffff88803d3ec5f8 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 290.370759][ T38] #1: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 290.370803][ T38] #2: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 290.370847][ T38] 3 locks held by syz-executor/6234: [ 290.370857][ T38] #0: ffff888060f0d350 (sk_lock-AF_BLUETOOTH-BTPROTO_HCI){+.+.}-{0:0}, at: hci_sock_ioctl+0x247/0x910 [ 290.370904][ T38] #1: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 290.370946][ T38] #2: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 290.370993][ T38] [ 290.370998][ T38] ============================================= [ 290.370998][ T38] [ 290.371021][ T38] NMI backtrace for cpu 0 [ 290.371046][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 290.371066][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 290.371075][ T38] Call Trace: [ 290.371083][ T38] [ 290.371091][ T38] dump_stack_lvl+0x189/0x250 [ 290.371120][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.371143][ T38] ? __pfx__printk+0x10/0x10 [ 290.371174][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 290.371199][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 290.371223][ T38] ? __pfx__printk+0x10/0x10 [ 290.371247][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 290.371270][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 290.371294][ T38] watchdog+0xf93/0xfe0 [ 290.371321][ T38] ? watchdog+0x1de/0xfe0 [ 290.371349][ T38] kthread+0x70e/0x8a0 [ 290.371376][ T38] ? __pfx_watchdog+0x10/0x10 [ 290.371403][ T38] ? __pfx_kthread+0x10/0x10 [ 290.371433][ T38] ? __pfx_kthread+0x10/0x10 [ 290.371458][ T38] ret_from_fork+0x439/0x7d0 [ 290.371483][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 290.371510][ T38] ? __switch_to_asm+0x39/0x70 [ 290.371526][ T38] ? __switch_to_asm+0x33/0x70 [ 290.371540][ T38] ? __pfx_kthread+0x10/0x10 [ 290.371565][ T38] ret_from_fork_asm+0x1a/0x30 [ 290.371598][ T38] [ 290.371605][ T38] Sending NMI from CPU 0 to CPUs 1: [ 290.371634][ C1] NMI backtrace for cpu 1 [ 290.371647][ C1] CPU: 1 UID: 0 PID: 57 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 290.371664][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 290.371674][ C1] Workqueue: wg-kex-wg0 wg_packet_handshake_send_worker [ 290.371695][ C1] RIP: 0010:unwind_next_frame+0x91/0x2390 [ 290.371716][ C1] Code: 4d 8b 7e 38 4d 89 f4 49 c1 ec 03 41 0f b6 04 2c 84 c0 0f 85 de 1b 00 00 41 8b 06 85 c0 0f 84 32 02 00 00 89 84 24 84 00 00 00 <4c> 89 bc 24 90 00 00 00 e8 a2 10 33 00 4c 8d 3d 00 00 00 00 48 c7 [ 290.371727][ C1] RSP: 0018:ffffc9000123e4f8 EFLAGS: 00000202 [ 290.371740][ C1] RAX: 0000000000000001 RBX: ffffffff893315bc RCX: ab8a8878a1a2a500 [ 290.371751][ C1] RDX: dffffc0000000000 RSI: ffffffff893315bc RDI: ffffc9000123e5c8 [ 290.371762][ C1] RBP: dffffc0000000000 R08: ffffc9000123e690 R09: 0000000000000004 [ 290.371773][ C1] R10: ffffc9000123e618 R11: ffffffff81aaf310 R12: 1ffff92000247cb9 [ 290.371784][ C1] R13: ffffc9000123e600 R14: ffffc9000123e5c8 R15: ffffc9000123ea00 [ 290.371795][ C1] FS: 0000000000000000(0000) GS:ffff8881269bc000(0000) knlGS:0000000000000000 [ 290.371808][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 290.371819][ C1] CR2: 0000558754c818c8 CR3: 0000000035ed4000 CR4: 00000000003526f0 [ 290.371832][ C1] Call Trace: [ 290.371838][ C1] [ 290.371848][ C1] ? unwind_next_frame+0xa5/0x2390 [ 290.371866][ C1] ? __alloc_skb+0x112/0x2d0 [ 290.371888][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 290.371904][ C1] arch_stack_walk+0x11c/0x150 [ 290.371927][ C1] ? synproxy_send_client_synack+0x16c/0xe20 [ 290.371950][ C1] stack_trace_save+0x9c/0xe0 [ 290.371965][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 290.371985][ C1] kasan_save_track+0x3e/0x80 [ 290.372001][ C1] ? kasan_save_track+0x3e/0x80 [ 290.372015][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 290.372031][ C1] ? kmem_cache_alloc_node_noprof+0x14e/0x330 [ 290.372049][ C1] ? __alloc_skb+0x112/0x2d0 [ 290.372066][ C1] ? synproxy_send_client_synack+0x16c/0xe20 [ 290.372110][ C1] __kasan_slab_alloc+0x6c/0x80 [ 290.372127][ C1] ? __alloc_skb+0x112/0x2d0 [ 290.372150][ C1] kmem_cache_alloc_node_noprof+0x14e/0x330 [ 290.372172][ C1] __alloc_skb+0x112/0x2d0 [ 290.372193][ C1] synproxy_send_client_synack+0x16c/0xe20 [ 290.372219][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 290.372237][ C1] ? nft_log_eval+0x350/0xab0 [ 290.372256][ C1] ? synproxy_pernet+0x45/0x270 [ 290.372274][ C1] nft_synproxy_eval_v4+0x36e/0x560 [ 290.372292][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 290.372309][ C1] ? nf_ip_checksum+0x13c/0x510 [ 290.372326][ C1] nft_synproxy_do_eval+0x345/0x570 [ 290.372344][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 290.372360][ C1] ? wg_packet_receive+0x13c6/0x2640 [ 290.372385][ C1] nft_do_chain+0x409/0x1920 [ 290.372398][ C1] ? __udp6_lib_lookup+0x8c4/0xa30 [ 290.372422][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 290.372440][ C1] ? __pfx_wg_receive+0x10/0x10 [ 290.372466][ C1] ? udp6_unicast_rcv_skb+0x229/0x380 [ 290.372486][ C1] nft_do_chain_inet+0x25d/0x340 [ 290.372502][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 290.372516][ C1] ? __lock_acquire+0xab9/0xd20 [ 290.372539][ C1] ? NF_HOOK+0x9a/0x3a0 [ 290.372557][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 290.372573][ C1] nf_hook_slow+0xc2/0x220 [ 290.372594][ C1] NF_HOOK+0x206/0x3a0 [ 290.372612][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 290.372630][ C1] ? NF_HOOK+0x9a/0x3a0 [ 290.372647][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 290.372663][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 290.372683][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 290.372702][ C1] ? skb_dst+0x4f/0xd0 [ 290.372719][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 290.372739][ C1] NF_HOOK+0x30c/0x3a0 [ 290.372757][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 290.372774][ C1] ? NF_HOOK+0x9a/0x3a0 [ 290.372792][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 290.372810][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 290.372833][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 290.372850][ C1] __netif_receive_skb+0x143/0x380 [ 290.372867][ C1] ? rt_spin_unlock+0x65/0x80 [ 290.372886][ C1] ? process_backlog+0x27b/0x900 [ 290.372903][ C1] process_backlog+0x31e/0x900 [ 290.372926][ C1] __napi_poll+0xb3/0x540 [ 290.372945][ C1] net_rx_action+0x707/0xe00 [ 290.372972][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 290.372991][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 290.373014][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 290.373027][ C1] ? __local_bh_enable_ip+0x1b2/0x270 [ 290.373052][ C1] handle_softirqs+0x22f/0x710 [ 290.373074][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 290.373096][ C1] __local_bh_enable_ip+0x179/0x270 [ 290.373113][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 290.373133][ C1] ? rt_read_unlock+0x65/0xa0 [ 290.373156][ C1] ? wg_socket_send_skb_to_peer+0x59/0x200 [ 290.373175][ C1] wg_socket_send_skb_to_peer+0x199/0x200 [ 290.373197][ C1] wg_packet_handshake_send_worker+0x1db/0x320 [ 290.373217][ C1] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 290.373247][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 290.373265][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 290.373282][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 290.373300][ C1] process_scheduled_works+0xade/0x17b0 [ 290.373330][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 290.373355][ C1] worker_thread+0x8a0/0xda0 [ 290.373386][ C1] kthread+0x70e/0x8a0 [ 290.373406][ C1] ? __pfx_worker_thread+0x10/0x10 [ 290.373423][ C1] ? __pfx_kthread+0x10/0x10 [ 290.373445][ C1] ? __pfx_kthread+0x10/0x10 [ 290.373464][ C1] ret_from_fork+0x439/0x7d0 [ 290.373483][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 290.373503][ C1] ? __switch_to_asm+0x39/0x70 [ 290.373516][ C1] ? __switch_to_asm+0x33/0x70 [ 290.373529][ C1] ? __pfx_kthread+0x10/0x10 [ 290.373548][ C1] ret_from_fork_asm+0x1a/0x30 [ 290.373570][ C1] [ 290.373634][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 290.373647][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 290.373667][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 290.373676][ T38] Call Trace: [ 290.373683][ T38] [ 290.373690][ T38] dump_stack_lvl+0x99/0x250 [ 290.373729][ T38] ? __asan_memcpy+0x40/0x70 [ 290.373748][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.373772][ T38] ? __pfx__printk+0x10/0x10 [ 290.373803][ T38] vpanic+0x281/0x750 [ 290.373830][ T38] ? __pfx_vpanic+0x10/0x10 [ 290.373852][ T38] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 290.373870][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 290.373910][ T38] panic+0xb9/0xc0 [ 290.373931][ T38] ? __pfx_panic+0x10/0x10 [ 290.373956][ T38] ? irq_work_queue+0xc3/0x140 [ 290.373982][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 290.374007][ T38] watchdog+0xfd2/0xfe0 [ 290.374033][ T38] ? watchdog+0x1de/0xfe0 [ 290.374060][ T38] kthread+0x70e/0x8a0 [ 290.374088][ T38] ? __pfx_watchdog+0x10/0x10 [ 290.374109][ T38] ? __pfx_kthread+0x10/0x10 [ 290.374138][ T38] ? __pfx_kthread+0x10/0x10 [ 290.374163][ T38] ret_from_fork+0x439/0x7d0 [ 290.374187][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 290.374219][ T38] ? __switch_to_asm+0x39/0x70 [ 290.374234][ T38] ? __switch_to_asm+0x33/0x70 [ 290.374250][ T38] ? __pfx_kthread+0x10/0x10 [ 290.374275][ T38] ret_from_fork_asm+0x1a/0x30 [ 290.374307][ T38] [ 290.374589][ T38] Kernel Offset: disabled