last executing test programs: 15.738571668s ago: executing program 1 (id=2): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000004040)={0x2020}, 0x2020) mmap(&(0x7f0000316000/0x2000)=nil, 0x2000, 0xf, 0x8010, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) recvmmsg(r1, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000045, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = syz_open_dev$media(&(0x7f0000000080), 0x1000, 0x2080) ioctl$MEDIA_IOC_DEVICE_INFO(r3, 0xc1007c00, &(0x7f0000000100)) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90824fc60", 0x14}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000002c0), &(0x7f0000000340)=0x4) syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x10d480) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bind$tipc(r4, &(0x7f0000000540)=@name={0x1e, 0x2, 0x1, {{0x43, 0x1}}}, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f00000009c0), 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = dup(r8) ioctl$KVM_SET_MSRS(r9, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYRES64=r6, @ANYRES64]) 15.671252454s ago: executing program 3 (id=4): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b00011100000009040000019569", @ANYRES32], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/bpf', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000001000"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800c0001006d6163766c616e001800028004000580ae442be9ec0f27fe30f5acf9cfef54d568e76d01db82bfef6965e45bebab74f55027d960580f75c8515cde379a77b3b1f749cbdbd06724850afbc10b84da03a43c86285b12e9d661b278a3aea1e05d4d2e3b24a51c79b5b283612c606f06b22da5c3497833f165c5dc34edfb778c3e56f2e6b3f666a3497107fd4a7113e1"], 0x38}}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x70, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xfffa}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x70}}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000600", 0x33fe0}], 0x1}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r6, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a24000000000a01010000000000000000050000000900010073797a30000000000400060070000000030a01030000000000000000050000000900010073797a30000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000080001400000000014000300766c616e3000"/167], 0xd0}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x0, 0xa005}, @sack_perm]}}}}}}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 15.670426954s ago: executing program 4 (id=5): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) inotify_init() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_STATUS(r1, 0x8001af71, &(0x7f0000000080)) 15.503970238s ago: executing program 2 (id=3): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300000f00000011000000de000000010018000000000005000600000000000a00000000000000fc02000000000000000000000000000000000000000000000200010000000000000002000000000005000500000000000a00000000000000ff0100000000000000000000000000010000000000000000"], 0x78}, 0x1, 0x7}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$l2tp6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/142, 0x8e}}], 0x1, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x48001, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r2, &(0x7f0000001880)=[{&(0x7f000001a8c0)=""/102400, 0x19000}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) socket$inet6_dccp(0xa, 0x6, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/544]}, 0x298) 15.39708829s ago: executing program 4 (id=6): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000d40), 0x0, 0x48844, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000300)='wg2\x00', 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x275a, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r3, &(0x7f0000000380)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"}) r4 = syz_open_pts(r3, 0x0) dup3(r4, r3, 0x0) r5 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfffffd9d) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0xdb42) sendfile(r1, r2, 0x0, 0x8000002b) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) getresgid(0x0, &(0x7f0000000100), &(0x7f0000000140)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r8 = dup2(0xffffffffffffffff, 0xffffffffffffffff) writev(r8, &(0x7f0000000400)=[{&(0x7f00000001c0)="d848aa11ee80a1e8f7d33041fc", 0xd}, {&(0x7f0000000240)="fe8ba6b8618d6af85d99dffda44fb2718ec16e2d6531c85f679c95", 0x1b}], 0x2) r9 = gettid() process_vm_writev(r9, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}, 0x5343}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/56, 0x38}, {&(0x7f0000003800)=""/4092, 0xffc}, {&(0x7f0000000880)=""/151, 0x97}, {&(0x7f00000001c0)=""/85, 0x55}, {&(0x7f0000000a80)=""/195, 0xc3}, {&(0x7f0000000b80)=""/233, 0xe9}, {&(0x7f0000000380)=""/160, 0xa0}, {&(0x7f0000000180)=""/42, 0x2a}, {&(0x7f0000000d80)=""/244, 0xf4}, {&(0x7f00000004c0)=""/151, 0x97}], 0xa}, 0x2}], 0x2, 0x100, 0x0) 15.318141704s ago: executing program 0 (id=1): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000004040)={0x2020}, 0x2020) mmap(&(0x7f0000316000/0x2000)=nil, 0x2000, 0xf, 0x8010, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) recvmmsg(r1, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000045, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = syz_open_dev$media(&(0x7f0000000080), 0x1000, 0x2080) ioctl$MEDIA_IOC_DEVICE_INFO(r3, 0xc1007c00, &(0x7f0000000100)) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90824fc60", 0x14}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000002c0), &(0x7f0000000340)=0x4) syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x10d480) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bind$tipc(r4, &(0x7f0000000540)=@name={0x1e, 0x2, 0x1, {{0x43, 0x1}}}, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f00000009c0), 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = dup(r8) ioctl$KVM_SET_MSRS(r9, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYRES64=r6, @ANYRES64]) 6.196472304s ago: executing program 4 (id=7): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000b40)=[{{&(0x7f0000000ac0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0}}], 0x1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire={0x40046304}], 0x0, 0x0, 0x0}) close(r1) unshare(0x8000400) socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) memfd_create(&(0x7f0000000080)=',}\\)]\x00', 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f00000002c0)=0x4, 0xfd96) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000140)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x2000, 0x2}) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r8, &(0x7f0000000480)={&(0x7f0000000080), 0x10, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="04e00a00001de6771d0000000000434c35d085ea3f35000000000000eb03c7d76f8b2a72f4c5", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000000000009a8a5b1217d93f48"], 0x48}}, 0x0) syz_io_uring_setup(0x73fd, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x0, 0x0) syz_io_uring_setup(0xa94, &(0x7f00000004c0)={0x0, 0x10000000, 0x0, 0x0, 0x371}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000340)={0x2, 0x4, 0x6, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f0000000000)={0x1fe, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x501505, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000280)=0x80) 6.163867266s ago: executing program 2 (id=8): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000500000005000000009000000090000004000000e02000000000000000e0000000000000e0500000001000000040000000000000902000000030000000000000c010000000a0000000000000c010000000f000000000000022a7f81b3000000000030000000"], &(0x7f0000000040)=""/55, 0x71, 0x37, 0x1, 0xff, 0x0, @void, @value}, 0x20) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000000)='asymmetric\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) close(r1) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000440)={r3}, &(0x7f0000000000)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000140), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r7, 0x5452, &(0x7f0000000040)) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003080)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f0000001b40)=[{&(0x7f00000007c0)="451fb88ae975f58b82298dca2a6ee73f3cb4da03d559c14582e34297893c5f4fee2bf9d29330a460441f8cf14b0db1f32807d00c8ebdd96da9b1f10d67bb1302d966b57255173f30cbca9833", 0x4c}, {&(0x7f00000008c0)}, {&(0x7f0000000a40)="13ab3eeee593968811a98ce0eb08018efc054c8faeba6abd27c981fdbba854db371d3ef85fff0c5a815bce21f63166c801401f654ac3fd484338b4ccb726d2eb2e87f4a952aab9c6ab538365407a9b5b3f5d19b4d7d9afc8072d1d259130729a6745080c9db7398d70da7c1db8bc139e937a2a41f903526d5e15b06b01a068396389ed6dde3749593c274c153ecfa407e7aeb7f20f2eb436898fac9f0724b1894b286db08902dee46666f3af3c6a667eefa37e7eba83b8ddf74f0127ef456502cb08b0dcd36ff606a82b01910f", 0xcd}, {0x0}, {&(0x7f0000000440)}, {0x0}], 0x6}}, {{&(0x7f0000002e40)={0xa, 0x0, 0x6, @mcast2, 0x2}, 0x1c, &(0x7f0000002f40)=[{&(0x7f0000002e80)}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="1400000000000000290000000800000000000000000000002e1dcf9d80782b6a2d6fda419b6ab5766ac80f59d18cc593d0936f5261ab4f698145192b622bc513a4d83ef600c1eec8ceabdbe76b95792976fb71e116719f0a18da3bdee9fcb8cd8cc440c07c5ca4f534463fe501b714bbab8475f640"], 0x18}}], 0x3, 0x0) 4.807350954s ago: executing program 2 (id=12): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x7) r4 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000680)) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) quotactl$Q_GETQUOTA(0x0, &(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0xfea7) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000000)={0x20, r7, 0x1, 0x0, 0x0, {0x1d}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r1, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xbfb, 0x7a}}}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x34, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x80000000}, {0x8, 0x0, 0x7fff}, {0x8, 0x0, 0x40c}, {0x8, 0x0, 0x80000001}, {0x8, 0x0, 0x1}, {0x8, 0x0, 0x8001}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) r11 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) preadv(r11, &(0x7f0000000280)=[{&(0x7f0000010300)=""/102386, 0x1901c}, {&(0x7f0000000300)=""/151}, {&(0x7f0000000200)=""/44}], 0x1, 0x0, 0x0) write$cgroup_int(r5, &(0x7f0000000040), 0x12) 467.056729ms ago: executing program 4 (id=13): r0 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) 300.144457ms ago: executing program 2 (id=14): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300000f00000011000000de000000010018000000000005000600000000000a00000000000000fc02000000000000000000000000000000000000000000000200010000000000000002000000000005000500000000000a00000000000000ff0100000000000000000000000000010000000000000000"], 0x78}, 0x1, 0x7}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$l2tp6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) bind$inet(r2, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r2, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/142, 0x8e}}], 0x1, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x48001, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r3, &(0x7f0000001880)=[{&(0x7f000001a8c0)=""/102400, 0x19000}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$inet6_dccp(0xa, 0x6, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/544]}, 0x298) 0s ago: executing program 4 (id=15): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) inotify_init() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_VDPA_GET_STATUS(0xffffffffffffffff, 0x8001af71, &(0x7f0000000080)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.168' (ED25519) to the list of known hosts. [ 51.114515][ T5219] cgroup: Unknown subsys name 'net' [ 51.245978][ T5219] cgroup: Unknown subsys name 'cpuset' [ 51.254301][ T5219] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.569246][ T5219] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 56.140121][ T5232] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 56.167918][ T5235] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 56.177638][ T5235] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 56.196389][ T5239] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 56.203878][ T5242] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 56.204713][ T5239] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 56.212858][ T5242] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 56.218772][ T5239] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 56.226595][ T5242] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 56.239817][ T5242] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 56.240214][ T5239] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 56.248489][ T5242] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 56.262055][ T5242] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 56.269634][ T5242] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 56.272850][ T5239] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 56.288317][ T4619] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 56.288355][ T5244] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 56.296616][ T4619] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 56.310075][ T5239] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 56.312319][ T4619] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 56.317992][ T5244] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 56.325120][ T4619] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 56.332973][ T5244] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 56.338778][ T4619] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 56.354775][ T5234] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 56.361985][ T5234] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 56.369512][ T5246] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 56.376864][ T5234] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 56.383949][ T5244] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 56.392304][ T5246] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 56.757481][ T5250] chnl_net:caif_netlink_parms(): no params data found [ 56.795450][ T5247] chnl_net:caif_netlink_parms(): no params data found [ 56.830245][ T5249] chnl_net:caif_netlink_parms(): no params data found [ 56.917105][ T5251] chnl_net:caif_netlink_parms(): no params data found [ 56.984398][ T5247] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.991624][ T5247] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.000812][ T5247] bridge_slave_0: entered allmulticast mode [ 57.007910][ T5247] bridge_slave_0: entered promiscuous mode [ 57.017387][ T5247] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.024610][ T5247] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.031717][ T5247] bridge_slave_1: entered allmulticast mode [ 57.039828][ T5247] bridge_slave_1: entered promiscuous mode [ 57.053909][ T5250] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.061051][ T5250] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.068368][ T5250] bridge_slave_0: entered allmulticast mode [ 57.075437][ T5250] bridge_slave_0: entered promiscuous mode [ 57.119655][ T5250] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.126875][ T5250] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.134911][ T5250] bridge_slave_1: entered allmulticast mode [ 57.141472][ T5250] bridge_slave_1: entered promiscuous mode [ 57.163279][ T5247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.172740][ T5249] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.179884][ T5249] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.187398][ T5249] bridge_slave_0: entered allmulticast mode [ 57.194196][ T5249] bridge_slave_0: entered promiscuous mode [ 57.200914][ T5252] chnl_net:caif_netlink_parms(): no params data found [ 57.223690][ T5247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.246771][ T5249] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.253956][ T5249] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.261065][ T5249] bridge_slave_1: entered allmulticast mode [ 57.267839][ T5249] bridge_slave_1: entered promiscuous mode [ 57.294004][ T5250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.325895][ T5247] team0: Port device team_slave_0 added [ 57.350917][ T5250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.368946][ T5251] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.376456][ T5251] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.383875][ T5251] bridge_slave_0: entered allmulticast mode [ 57.390422][ T5251] bridge_slave_0: entered promiscuous mode [ 57.399818][ T5247] team0: Port device team_slave_1 added [ 57.407415][ T5249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.438383][ T5251] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.445606][ T5251] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.453878][ T5251] bridge_slave_1: entered allmulticast mode [ 57.460462][ T5251] bridge_slave_1: entered promiscuous mode [ 57.484115][ T5249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.549163][ T5250] team0: Port device team_slave_0 added [ 57.557342][ T5250] team0: Port device team_slave_1 added [ 57.565032][ T5251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.578142][ T5251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.587876][ T5247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.595115][ T5247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.621351][ T5247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.634521][ T5247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.641485][ T5247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.667509][ T5247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.681226][ T5249] team0: Port device team_slave_0 added [ 57.723976][ T5249] team0: Port device team_slave_1 added [ 57.740991][ T5252] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.748407][ T5252] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.756242][ T5252] bridge_slave_0: entered allmulticast mode [ 57.763409][ T5252] bridge_slave_0: entered promiscuous mode [ 57.790544][ T5251] team0: Port device team_slave_0 added [ 57.799160][ T5251] team0: Port device team_slave_1 added [ 57.813366][ T5252] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.820538][ T5252] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.828206][ T5252] bridge_slave_1: entered allmulticast mode [ 57.835015][ T5252] bridge_slave_1: entered promiscuous mode [ 57.842257][ T5250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.852255][ T5250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.878611][ T5250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.890810][ T5250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.897871][ T5250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.923888][ T5250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.982036][ T5251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.989737][ T5251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.016170][ T5251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.027779][ T5249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.034950][ T5249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.060932][ T5249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.073567][ T5249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.080526][ T5249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.106629][ T5249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.135660][ T5247] hsr_slave_0: entered promiscuous mode [ 58.141811][ T5247] hsr_slave_1: entered promiscuous mode [ 58.158456][ T5250] hsr_slave_0: entered promiscuous mode [ 58.164783][ T5250] hsr_slave_1: entered promiscuous mode [ 58.171201][ T5250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.178995][ T5250] Cannot create hsr debugfs directory [ 58.185004][ T5251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.191959][ T5251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.217929][ T5251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.234306][ T5252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.273000][ T5252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.343711][ T5235] Bluetooth: hci0: command tx timeout [ 58.356479][ T5249] hsr_slave_0: entered promiscuous mode [ 58.363084][ T5249] hsr_slave_1: entered promiscuous mode [ 58.369063][ T5249] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.376757][ T5249] Cannot create hsr debugfs directory [ 58.387417][ T5252] team0: Port device team_slave_0 added [ 58.414654][ T5244] Bluetooth: hci4: command tx timeout [ 58.414688][ T5246] Bluetooth: hci1: command tx timeout [ 58.414861][ T5246] Bluetooth: hci3: command tx timeout [ 58.428838][ T5235] Bluetooth: hci2: command tx timeout [ 58.439193][ T5252] team0: Port device team_slave_1 added [ 58.450545][ T5251] hsr_slave_0: entered promiscuous mode [ 58.456929][ T5251] hsr_slave_1: entered promiscuous mode [ 58.463176][ T5251] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.470756][ T5251] Cannot create hsr debugfs directory [ 58.546194][ T5252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.553384][ T5252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.580143][ T5252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.614985][ T5252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.621938][ T5252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.648060][ T5252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.779553][ T5252] hsr_slave_0: entered promiscuous mode [ 58.786368][ T5252] hsr_slave_1: entered promiscuous mode [ 58.792516][ T5252] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.800115][ T5252] Cannot create hsr debugfs directory [ 58.854958][ T5250] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.868071][ T5250] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.888319][ T5250] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.905920][ T5250] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.964351][ T5247] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.979976][ T5247] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.991369][ T5247] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.007497][ T5247] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.058475][ T5249] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.077925][ T5249] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.087777][ T5249] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.096785][ T5249] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.180183][ T5251] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.190089][ T5251] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.225451][ T5251] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.258604][ T5251] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.271942][ T5252] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.281308][ T5252] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.294159][ T5252] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.312286][ T5250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.327359][ T5247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.337575][ T5252] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.375856][ T5247] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.406657][ T5249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.417877][ T713] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.425032][ T713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.462794][ T5250] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.470690][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.477814][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.511220][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.518359][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.538020][ T1831] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.545381][ T1831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.557913][ T5249] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.581925][ T2992] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.589017][ T2992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.627073][ T1831] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.634187][ T1831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.679777][ T5250] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.729069][ T5251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.774330][ T5252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.800025][ T5251] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.809256][ T5250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.829413][ T5247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.851479][ T1831] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.858614][ T1831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.872116][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.879240][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.895832][ T5249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.951332][ T5252] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.982811][ T1831] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.989967][ T1831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.010370][ T1831] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.017523][ T1831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.065757][ T5249] veth0_vlan: entered promiscuous mode [ 60.084064][ T5251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.091123][ T5247] veth0_vlan: entered promiscuous mode [ 60.114940][ T5250] veth0_vlan: entered promiscuous mode [ 60.126141][ T5247] veth1_vlan: entered promiscuous mode [ 60.148539][ T5249] veth1_vlan: entered promiscuous mode [ 60.179200][ T5250] veth1_vlan: entered promiscuous mode [ 60.233478][ T5247] veth0_macvtap: entered promiscuous mode [ 60.251910][ T5252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.268760][ T5250] veth0_macvtap: entered promiscuous mode [ 60.278350][ T5247] veth1_macvtap: entered promiscuous mode [ 60.287788][ T5251] veth0_vlan: entered promiscuous mode [ 60.325652][ T5251] veth1_vlan: entered promiscuous mode [ 60.338448][ T5250] veth1_macvtap: entered promiscuous mode [ 60.345805][ T5249] veth0_macvtap: entered promiscuous mode [ 60.358173][ T5247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.386656][ T5247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.400780][ T5249] veth1_macvtap: entered promiscuous mode [ 60.412937][ T5235] Bluetooth: hci0: command tx timeout [ 60.421956][ T5247] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.431655][ T5247] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.440924][ T5247] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.449689][ T5247] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.473032][ T5250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.486282][ T5250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.496722][ T5235] Bluetooth: hci2: command tx timeout [ 60.502154][ T5235] Bluetooth: hci4: command tx timeout [ 60.507758][ T5246] Bluetooth: hci1: command tx timeout [ 60.507777][ T5232] Bluetooth: hci3: command tx timeout [ 60.520661][ T5250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.559613][ T5252] veth0_vlan: entered promiscuous mode [ 60.578782][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.589559][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.600770][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.614375][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.625442][ T5249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.639207][ T5251] veth0_macvtap: entered promiscuous mode [ 60.648114][ T5250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.659297][ T5250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.670525][ T5250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.687909][ T5251] veth1_macvtap: entered promiscuous mode [ 60.698726][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.709492][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.725146][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.736449][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.747548][ T5249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.757622][ T5250] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.766762][ T5250] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.776233][ T5250] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.785456][ T5250] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.797003][ T5252] veth1_vlan: entered promiscuous mode [ 60.810006][ T5249] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.819247][ T5249] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.831448][ T5249] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.840288][ T5249] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.862899][ T5251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.873382][ T5251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.883785][ T5251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.895469][ T5251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.905618][ T5251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.916083][ T5251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.927743][ T5251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.979410][ T5251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.990625][ T5251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.001070][ T5251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.011964][ T5251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.021856][ T5251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.032654][ T5251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.044394][ T5251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.085053][ T5251] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.097327][ T5251] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.106488][ T5251] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.115958][ T5251] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.143796][ T713] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.151749][ T713] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.154635][ T5252] veth0_macvtap: entered promiscuous mode [ 61.199867][ T2992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.201345][ T5252] veth1_macvtap: entered promiscuous mode [ 61.208685][ T2992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.251919][ T1831] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.267320][ T1831] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.318266][ T1831] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.324101][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.328753][ T1831] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.344608][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.355930][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.367588][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.378547][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.390121][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.401331][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.411863][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.426535][ T5252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.448044][ T713] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.453826][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.467754][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.477955][ T713] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.478428][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.496201][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.507614][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.518118][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.527990][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.538516][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.549975][ T5252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.570464][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.587134][ T5252] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.596716][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.606787][ T5252] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.615930][ T5252] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.624882][ T5252] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.656844][ T5250] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 61.691589][ T1831] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.711314][ T1831] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.754678][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.763086][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.949864][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.957836][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.986032][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.035009][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.242879][ T5291] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 62.264789][ T5305] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 62.307164][ T5309] Zero length message leads to an empty skb [ 62.412009][ T5291] usb 4-1: config 17 has an invalid descriptor of length 255, skipping remainder of the config [ 62.428223][ T5291] usb 4-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 62.462708][ T5291] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 62.471773][ T5291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.492811][ T5246] Bluetooth: hci0: command tx timeout [ 62.576404][ T5246] Bluetooth: hci3: command tx timeout [ 62.582133][ T5246] Bluetooth: hci2: command tx timeout [ 62.589311][ T5246] Bluetooth: hci1: command tx timeout [ 62.596622][ T5246] Bluetooth: hci4: command tx timeout [ 62.777884][ T29] audit: type=1326 audit(1727109180.286:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5306 comm="syz.4.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd78d57def9 code=0x7ffc0000 [ 62.852188][ T29] audit: type=1326 audit(1727109180.326:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5306 comm="syz.4.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd78d57def9 code=0x7ffc0000 [ 62.947209][ T5295] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4'. [ 62.992678][ T5295] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 70.622452][ T5235] Bluetooth: hci0: command tx timeout [ 70.627921][ T5235] Bluetooth: hci4: command tx timeout [ 70.630952][ T5296] sched: DL replenish lagged too much [ 70.642514][ T5235] Bluetooth: hci1: command tx timeout [ 70.648040][ T5235] Bluetooth: hci2: command tx timeout [ 70.653912][ T5246] Bluetooth: hci3: command tx timeout [ 71.300690][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.319341][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 75.056907][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 76.940067][ T938] cfg80211: failed to load regulatory.db [ 76.995916][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 77.099966][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 77.911335][ T5235] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 77.929018][ T5235] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 77.939123][ T5235] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 77.950612][ T5235] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 77.958772][ T5235] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 77.966407][ T5235] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 78.237477][ T5246] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 78.246889][ T5246] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 78.259732][ T5246] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 78.267447][ T5246] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 78.282797][ T5246] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 78.290325][ T5246] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 78.301008][ T5246] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 78.310375][ T5246] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 78.320230][ T5246] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 78.328411][ T5246] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 78.335651][ T5232] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 78.343706][ T5246] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 80.012551][ T5244] Bluetooth: hci5: command tx timeout [ 80.492597][ T5244] Bluetooth: hci6: command tx timeout [ 80.498474][ T5244] Bluetooth: hci7: command tx timeout [ 82.084778][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 82.102532][ T5244] Bluetooth: hci5: command tx timeout [ 82.572575][ T5235] Bluetooth: hci7: command tx timeout [ 82.578059][ T5235] Bluetooth: hci6: command tx timeout [ 88.354755][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 88.355133][ T5246] Bluetooth: hci7: command tx timeout [ 89.895842][ T5235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.906850][ T5235] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.920944][ T5235] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.932283][ T5235] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.940387][ T5235] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 89.948003][ T5235] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.071641][ T5235] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.086161][ T5235] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.098199][ T5235] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.106807][ T5235] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.114868][ T5235] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 90.122307][ T5235] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.412543][ T5246] Bluetooth: hci6: command tx timeout [ 90.418003][ T5246] Bluetooth: hci5: command tx timeout [ 90.425004][ T5235] Bluetooth: hci7: command tx timeout [ 91.119773][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 91.214142][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 91.819316][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 91.865615][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 91.895690][ T0] NOHZ tick-stop error: local softirq work is pending, handler #248!!! [ 92.013181][ T5246] Bluetooth: hci0: command tx timeout [ 92.190540][ T5246] Bluetooth: hci3: command tx timeout [ 92.495788][ T5246] Bluetooth: hci5: command tx timeout [ 92.501238][ T5246] Bluetooth: hci6: command tx timeout [ 94.092529][ T5246] Bluetooth: hci0: command tx timeout [ 94.252582][ T5246] Bluetooth: hci3: command tx timeout [ 96.172481][ T5246] Bluetooth: hci0: command tx timeout [ 96.332508][ T5246] Bluetooth: hci3: command tx timeout [ 98.252506][ T5246] Bluetooth: hci0: command tx timeout [ 98.412570][ T5246] Bluetooth: hci3: command tx timeout [ 132.737346][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.749203][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.732982][ T5235] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 135.757796][ T5235] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 135.765434][ T5235] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 135.774967][ T5235] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 135.782569][ T5235] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 135.789894][ T5235] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 135.905971][ T5235] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 135.915156][ T5235] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 135.924763][ T5235] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 135.943414][ T5235] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 135.950992][ T5235] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 135.958694][ T5235] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 136.099122][ T5246] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 136.112738][ T5246] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 136.121037][ T5246] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 136.129419][ T5246] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 136.139641][ T5246] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 136.147544][ T5246] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 137.853040][ T5235] Bluetooth: hci1: command tx timeout [ 138.022618][ T5235] Bluetooth: hci2: command tx timeout [ 138.172746][ T5235] Bluetooth: hci4: command tx timeout [ 139.932526][ T5235] Bluetooth: hci1: command tx timeout [ 140.092554][ T5235] Bluetooth: hci2: command tx timeout [ 140.252528][ T5235] Bluetooth: hci4: command tx timeout [ 142.000462][ T5291] usb 4-1: string descriptor 0 read error: -32 [ 142.012592][ T5235] Bluetooth: hci1: command tx timeout [ 142.172492][ T5235] Bluetooth: hci2: command tx timeout [ 142.342547][ T5235] Bluetooth: hci4: command tx timeout [ 143.956622][ T5291] aiptek 4-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 144.092559][ T5235] Bluetooth: hci1: command tx timeout [ 144.252606][ T5235] Bluetooth: hci2: command tx timeout [ 144.412576][ T5235] Bluetooth: hci4: command tx timeout [ 150.628798][ T5246] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 150.637049][ T5246] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 150.647858][ T5246] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 150.658485][ T5246] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 150.678866][ T5246] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 150.686317][ T5246] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 150.771284][ T5246] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 150.779320][ T5246] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 150.787658][ T5246] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 150.795613][ T5246] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 150.804021][ T5246] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 150.813278][ T5246] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 152.737607][ T5246] Bluetooth: hci8: command tx timeout [ 152.902621][ T5246] Bluetooth: hci9: command tx timeout [ 154.812468][ T5246] Bluetooth: hci8: command tx timeout [ 154.972504][ T5246] Bluetooth: hci9: command tx timeout [ 156.892560][ T5246] Bluetooth: hci8: command tx timeout [ 157.052533][ T5246] Bluetooth: hci9: command tx timeout [ 158.972547][ T5246] Bluetooth: hci8: command tx timeout [ 159.132537][ T5246] Bluetooth: hci9: command tx timeout [ 194.178594][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.187587][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.161148][ T5235] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 196.169633][ T5235] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 196.177393][ T5235] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 196.185741][ T5235] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 196.195689][ T5235] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 196.203488][ T5235] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 196.709646][ T5235] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 196.719464][ T5235] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 196.732760][ T5235] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 196.741496][ T5235] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 196.749573][ T5235] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 196.758492][ T5235] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 196.818159][ T5235] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 196.826326][ T5235] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 196.834338][ T5235] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 196.843120][ T5235] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 196.850729][ T5235] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 196.860007][ T5235] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 198.252476][ T5235] Bluetooth: hci10: command tx timeout [ 198.817332][ T5235] Bluetooth: hci11: command tx timeout [ 198.892449][ T5235] Bluetooth: hci12: command tx timeout [ 200.332573][ T5235] Bluetooth: hci10: command tx timeout [ 200.897463][ T5235] Bluetooth: hci11: command tx timeout [ 200.972449][ T5235] Bluetooth: hci12: command tx timeout [ 201.386091][ T54] Bluetooth: hci5: command 0x0406 tx timeout [ 201.392149][ T54] Bluetooth: hci7: command 0x0406 tx timeout [ 201.398308][ T5235] Bluetooth: hci6: command 0x0406 tx timeout [ 202.412444][ T5234] Bluetooth: hci10: command tx timeout [ 202.972578][ T5234] Bluetooth: hci11: command tx timeout [ 203.062578][ T5234] Bluetooth: hci12: command tx timeout [ 204.246804][ T5291] usb 4-1: USB disconnect, device number 2 [ 204.492449][ T5232] Bluetooth: hci10: command tx timeout [ 205.062515][ T5232] Bluetooth: hci11: command tx timeout [ 205.132522][ T5232] Bluetooth: hci12: command tx timeout [ 211.279497][ T5246] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 211.291237][ T5246] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 211.299217][ T5246] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 211.307482][ T5246] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 211.315271][ T5246] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 211.332677][ T5246] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 211.391001][ T5232] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 211.401665][ T5232] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 211.409994][ T5232] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 211.418303][ T5232] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 211.426159][ T5232] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 211.435540][ T5232] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 213.452602][ T5232] Bluetooth: hci13: command tx timeout [ 213.460127][ T5246] Bluetooth: hci14: command tx timeout [ 215.532480][ T5244] Bluetooth: hci14: command tx timeout [ 215.538016][ T5244] Bluetooth: hci13: command tx timeout [ 216.738536][ T5244] Bluetooth: hci0: command 0x0406 tx timeout [ 216.744784][ T5234] Bluetooth: hci3: command 0x0406 tx timeout [ 217.612605][ T5232] Bluetooth: hci14: command tx timeout [ 217.619403][ T5246] Bluetooth: hci13: command tx timeout [ 219.692458][ T5232] Bluetooth: hci14: command tx timeout [ 219.698017][ T5246] Bluetooth: hci13: command tx timeout [ 255.612597][ T30] INFO: task kworker/1:2:938 blocked for more than 143 seconds. [ 255.621734][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.632370][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.662538][ T30] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 255.669891][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 255.800360][ T30] task:kworker/1:2 state:D stack:22832 pid:938 tgid:938 ppid:2 flags:0x00004000 [ 255.879355][ T30] Workqueue: events_power_efficient crda_timeout_work [ 255.929729][ T30] Call Trace: [ 255.939620][ T30] [ 255.962440][ T30] __schedule+0x1895/0x4b30 [ 255.967036][ T30] ? __pfx___schedule+0x10/0x10 [ 255.971906][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 256.052371][ T30] ? __pfx_lock_release+0x10/0x10 [ 256.057480][ T30] ? kick_pool+0x1bd/0x620 [ 256.061936][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 256.158653][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 256.163986][ T30] ? schedule+0x90/0x320 [ 256.168259][ T30] schedule+0x14b/0x320 [ 256.221069][ T30] schedule_preempt_disabled+0x13/0x30 [ 256.243559][ T30] __mutex_lock+0x6a7/0xd70 [ 256.248130][ T30] ? __mutex_lock+0x52a/0xd70 [ 256.287210][ T30] ? crda_timeout_work+0x15/0x50 [ 256.292216][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 256.322371][ T30] ? process_scheduled_works+0x976/0x1850 [ 256.328166][ T30] crda_timeout_work+0x15/0x50 [ 256.372397][ T30] process_scheduled_works+0xa63/0x1850 [ 256.378049][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 256.417649][ T30] ? assign_work+0x364/0x3d0 [ 256.432276][ T30] worker_thread+0x870/0xd30 [ 256.452211][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 256.487277][ T30] ? __kthread_parkme+0x169/0x1d0 [ 256.500035][ T30] ? __pfx_worker_thread+0x10/0x10 [ 256.511272][ T30] kthread+0x2f0/0x390 [ 256.515791][ T30] ? __pfx_worker_thread+0x10/0x10 [ 256.520945][ T30] ? __pfx_kthread+0x10/0x10 [ 256.531149][ T30] ret_from_fork+0x4b/0x80 [ 256.537190][ T30] ? __pfx_kthread+0x10/0x10 [ 256.541827][ T30] ret_from_fork_asm+0x1a/0x30 [ 256.554003][ T30] [ 256.557175][ T30] INFO: task syz-executor:5250 blocked for more than 144 seconds. [ 256.571570][ T30] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 256.579217][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 256.594833][ T30] task:syz-executor state:D stack:20096 pid:5250 tgid:5250 ppid:1 flags:0x00004006 [ 256.608374][ T30] Call Trace: [ 256.611717][ T30] [ 256.617991][ T30] __schedule+0x1895/0x4b30 [ 256.625873][ T30] ? __pfx___schedule+0x10/0x10 [ 256.630765][ T30] ? __pfx_lock_release+0x10/0x10 [ 256.639261][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 256.649161][ T30] ? schedule+0x90/0x320 [ 256.655812][ T30] schedule+0x14b/0x320 [ 256.660007][ T30] schedule_preempt_disabled+0x13/0x30 [ 256.669514][ T30] __mutex_lock+0x6a7/0xd70 [ 256.676346][ T30] ? wake_up_q+0xdc/0x120 [ 256.680720][ T30] ? __mutex_lock+0x52a/0xd70 [ 256.690056][ T30] ? netdev_run_todo+0x89e/0x1000 [ 256.697623][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 256.705363][ T30] ? __init_swait_queue_head+0xae/0x150 [ 256.710976][ T30] netdev_run_todo+0x89e/0x1000 [ 256.730609][ T30] ? __pfx_netdev_run_todo+0x10/0x10 [ 256.738872][ T30] ? netdev_state_change+0xa8/0x1a0 [ 256.749409][ T30] ? __pfx_netdev_state_change+0x10/0x10 [ 256.756353][ T30] ? tun_chr_close+0x105/0x1b0 [ 256.761832][ T30] ? tun_chr_close+0x105/0x1b0 [ 256.770941][ T30] tun_chr_close+0x137/0x1b0 [ 256.776887][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 256.782041][ T30] __fput+0x23f/0x880 [ 256.791477][ T30] task_work_run+0x24f/0x310 [ 256.797447][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 256.807199][ T30] ? __pfx_task_work_run+0x10/0x10 [ 256.813899][ T30] ? do_exit+0xa2a/0x28e0 [ 256.818278][ T30] ? kmem_cache_free+0x1a2/0x420 [ 256.827617][ T30] ? do_exit+0xa2a/0x28e0 [ 256.831986][ T30] do_exit+0xa2f/0x28e0 [ 256.839322][ T30] ? __pfx_do_exit+0x10/0x10 [ 256.849339][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 256.856030][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 256.862094][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 256.874768][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 256.879933][ T30] do_group_exit+0x207/0x2c0 [ 256.889637][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 256.898547][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 256.906145][ T30] get_signal+0x176f/0x1810 [ 256.910703][ T30] ? __pfx_get_signal+0x10/0x10 [ 256.918951][ T30] arch_do_signal_or_restart+0x96/0x860 [ 256.926832][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 256.937383][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 256.947130][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 256.956249][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 256.961845][ T30] do_syscall_64+0x100/0x230 [ 256.969685][ T30] ? clear_bhb_loop+0x35/0x90 [ 256.977999][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.987605][ T30] RIP: 0033:0x7fd10f374157 [ 256.992083][ T30] RSP: 002b:00007fd10f65fd90 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 257.006142][ T30] RAX: fffffffffffffe00 RBX: 0000000000000002 RCX: 00007fd10f374157 [ 257.015421][ T30] RDX: 0000000040000000 RSI: 00007fd10f65fdec RDI: 00000000ffffffff [ 257.027791][ T30] RBP: 00007fd10f65fdec R08: 0000000000000000 R09: 7fffffffffffffff [ 257.038875][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 000055556bf325eb [ 257.052732][ T30] R13: 000055556bf32590 R14: 000000000000f1d0 R15: 00007fd10f65fe40 [ 257.060770][ T30] [ 257.068445][ T30] INFO: task syz.0.1:5310 blocked for more than 144 seconds. [ 257.076918][ T30] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 257.089477][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 257.100304][ T30] task:syz.0.1 state:D stack:23072 pid:5310 tgid:5308 ppid:5252 flags:0x00004006 [ 257.115786][ T30] Call Trace: [ 257.119099][ T30] [ 257.122052][ T30] __schedule+0x1895/0x4b30 [ 257.128693][ T30] ? __pfx___schedule+0x10/0x10 [ 257.137869][ T30] ? __pfx_lock_release+0x10/0x10 [ 257.144245][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 257.150907][ T30] ? schedule+0x90/0x320 [ 257.161205][ T30] schedule+0x14b/0x320 [ 257.167184][ T30] schedule_preempt_disabled+0x13/0x30 [ 257.177399][ T30] __mutex_lock+0x6a7/0xd70 [ 257.181951][ T30] ? __mutex_lock+0x52a/0xd70 [ 257.188283][ T30] ? netdev_run_todo+0x7b2/0x1000 [ 257.198600][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 257.205045][ T30] ? __init_swait_queue_head+0xae/0x150 [ 257.210646][ T30] netdev_run_todo+0x7b2/0x1000 [ 257.219878][ T30] ? __pfx_netdev_run_todo+0x10/0x10 [ 257.226525][ T30] ? netdev_state_change+0xa8/0x1a0 [ 257.231768][ T30] ? __pfx_netdev_state_change+0x10/0x10 [ 257.241812][ T30] ? tun_chr_close+0x105/0x1b0 [ 257.248009][ T30] ? tun_chr_close+0x105/0x1b0 [ 257.260207][ T30] tun_chr_close+0x137/0x1b0 [ 257.266145][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 257.271299][ T30] __fput+0x23f/0x880 [ 257.280390][ T30] task_work_run+0x24f/0x310 [ 257.286549][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 257.291892][ T30] ? __pfx_task_work_run+0x10/0x10 [ 257.302888][ T30] ? do_exit+0xa2a/0x28e0 [ 257.307255][ T30] ? kmem_cache_free+0x1a2/0x420 [ 257.312225][ T30] ? do_exit+0xa2a/0x28e0 [ 257.321925][ T30] do_exit+0xa2f/0x28e0 [ 257.326521][ T30] ? __pfx_do_exit+0x10/0x10 [ 257.331147][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 257.341931][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 257.348244][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 257.361817][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 257.367296][ T30] do_group_exit+0x207/0x2c0 [ 257.371920][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 257.390517][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 257.396149][ T30] get_signal+0x176f/0x1810 [ 257.400796][ T30] ? __pfx_get_signal+0x10/0x10 [ 257.412704][ T30] ? do_futex+0x33b/0x560 [ 257.417189][ T30] arch_do_signal_or_restart+0x96/0x860 [ 257.428396][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 257.434929][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 257.440961][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 257.452060][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 257.461921][ T30] do_syscall_64+0x100/0x230 [ 257.472003][ T30] ? clear_bhb_loop+0x35/0x90 [ 257.478251][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.489311][ T30] RIP: 0033:0x7f1b4cd7def9 [ 257.494969][ T30] RSP: 002b:00007f1b4da94038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 257.508646][ T30] RAX: ffffffffffffffea RBX: 00007f1b4cf35f80 RCX: 00007f1b4cd7def9 [ 257.518392][ T30] RDX: 0000000000001f00 RSI: 0000000020000500 RDI: 0000000000000007 [ 257.531557][ T30] RBP: 00007f1b4cdf0b76 R08: 0000000000000000 R09: 0000000000000000 [ 257.539971][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.552388][ T30] R13: 0000000000000000 R14: 00007f1b4cf35f80 R15: 00007f1b4d05fa28 [ 257.565825][ T30] [ 257.569058][ T30] INFO: task syz.4.15:5344 blocked for more than 145 seconds. [ 257.579124][ T30] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 257.591530][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 257.608457][ T30] task:syz.4.15 state:D stack:25456 pid:5344 tgid:5344 ppid:5249 flags:0x00004006 [ 257.622172][ T30] Call Trace: [ 257.630145][ T30] [ 257.634768][ T30] __schedule+0x1895/0x4b30 [ 257.639336][ T30] ? __pfx___schedule+0x10/0x10 [ 257.648575][ T30] ? __pfx_lock_release+0x10/0x10 [ 257.654941][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 257.660454][ T30] ? schedule+0x90/0x320 [ 257.670233][ T30] schedule+0x14b/0x320 [ 257.677008][ T30] schedule_preempt_disabled+0x13/0x30 [ 257.686922][ T30] __mutex_lock+0x6a7/0xd70 [ 257.691494][ T30] ? __mutex_lock+0x52a/0xd70 [ 257.698189][ T30] ? tun_chr_close+0x3b/0x1b0 [ 257.707135][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 257.712208][ T30] ? __pfx_call_rcu+0x10/0x10 [ 257.718328][ T30] tun_chr_close+0x3b/0x1b0 [ 257.728579][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 257.735216][ T30] __fput+0x23f/0x880 [ 257.739440][ T30] task_work_run+0x24f/0x310 [ 257.748570][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 257.755169][ T30] ? __pfx_task_work_run+0x10/0x10 [ 257.760325][ T30] ? do_exit+0xa2a/0x28e0 [ 257.770253][ T30] ? kmem_cache_free+0x1a2/0x420 [ 257.778043][ T30] ? do_exit+0xa2a/0x28e0 [ 257.786010][ T30] do_exit+0xa2f/0x28e0 [ 257.790222][ T30] ? __pfx_do_exit+0x10/0x10 [ 257.797583][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 257.806224][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 257.812259][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 257.820990][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 257.829460][ T30] do_group_exit+0x207/0x2c0 [ 257.838392][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 257.847244][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 257.854738][ T30] get_signal+0x176f/0x1810 [ 257.859298][ T30] ? __pfx_call_rcu+0x10/0x10 [ 257.868596][ T30] ? __pfx_get_signal+0x10/0x10 [ 257.875710][ T30] ? __pfx___might_resched+0x10/0x10 [ 257.881045][ T30] arch_do_signal_or_restart+0x96/0x860 [ 257.891777][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 257.900402][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 257.909690][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 257.917784][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 257.926708][ T30] do_syscall_64+0x100/0x230 [ 257.931440][ T30] ? clear_bhb_loop+0x35/0x90 [ 257.939851][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.949209][ T30] RIP: 0033:0x7fd78d57def9 [ 257.956272][ T30] RSP: 002b:00007fd78d85fb88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 257.967939][ T30] RAX: 0000000000000000 RBX: 0000000000012f41 RCX: 00007fd78d57def9 [ 257.979406][ T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 257.993371][ T30] RBP: 00007fd78d737a80 R08: 0000000000000001 R09: 00007fd78d85fe7f [ 258.001472][ T30] R10: 00007fd78d400000 R11: 0000000000000246 R12: 0000000000012fc1 [ 258.015821][ T30] R13: 00007fd78d85fc90 R14: 0000000000000032 R15: ffffffffffffffff [ 258.026293][ T30] [ 258.029414][ T30] [ 258.029414][ T30] Showing all locks held in the system: [ 258.042021][ T30] 3 locks held by kworker/0:0/8: [ 258.049420][ T30] 3 locks held by kworker/u8:1/12: [ 258.057943][ T30] #0: ffff88814c039148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 258.073782][ T30] #1: ffffc90000117d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 258.093557][ T30] #2: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 258.109341][ T30] 1 lock held by kworker/R-mm_pe/13: [ 258.114999][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 258.130777][ T30] 1 lock held by khungtaskd/30: [ 258.135909][ T30] #0: ffffffff8e937ee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 258.152342][ T30] 2 locks held by kworker/u8:5/713: [ 258.157574][ T30] 3 locks held by kworker/1:2/938: [ 258.167955][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 258.187660][ T30] #1: ffffc90003f57d00 ((crda_timeout).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 258.200836][ T30] #2: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: crda_timeout_work+0x15/0x50 [ 258.215962][ T30] 3 locks held by kworker/0:2/941: [ 258.221112][ T30] 3 locks held by kworker/u8:6/1115: [ 258.227854][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 258.242534][ T30] #1: ffffc900045a7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 258.260910][ T30] #2: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 258.270408][ T30] 2 locks held by getty/4984: [ 258.281834][ T30] #0: ffff88802e6670a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 258.294497][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 258.312776][ T30] 1 lock held by syz-executor/5250: [ 258.318009][ T30] #0: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: netdev_run_todo+0x89e/0x1000 [ 258.333268][ T30] 1 lock held by kworker/R-wg-cr/5267: [ 258.338758][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 258.354351][ T30] 1 lock held by kworker/R-wg-cr/5268: [ 258.359837][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 258.376974][ T30] 1 lock held by kworker/R-wg-cr/5269: [ 258.384881][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 258.400670][ T30] 1 lock held by kworker/R-wg-cr/5270: [ 258.408470][ T30] 1 lock held by kworker/R-wg-cr/5271: [ 258.422624][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 258.437800][ T30] 1 lock held by kworker/R-wg-cr/5272: [ 258.443589][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 258.460613][ T30] 1 lock held by kworker/R-wg-cr/5273: [ 258.466431][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 258.483695][ T30] 1 lock held by kworker/R-wg-cr/5274: [ 258.489198][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 258.507187][ T30] 1 lock held by kworker/R-wg-cr/5276: [ 258.514220][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 258.530085][ T30] 1 lock held by kworker/R-wg-cr/5277: [ 258.535907][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 258.552016][ T30] 1 lock held by kworker/R-wg-cr/5278: [ 258.559049][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 258.572389][ T30] 1 lock held by kworker/R-wg-cr/5279: [ 258.577873][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 258.594598][ T30] 1 lock held by kworker/R-wg-cr/5280: [ 258.600089][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 258.618445][ T30] 1 lock held by kworker/R-wg-cr/5281: [ 258.624197][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 258.640397][ T30] 1 lock held by kworker/R-wg-cr/5282: [ 258.646139][ T30] #0: ffffffff8e7e24e8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 258.663962][ T30] 3 locks held by kworker/1:4/5283: [ 258.669192][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 258.688471][ T30] #1: ffffc900040c7d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 258.701493][ T30] #2: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 258.716887][ T30] 3 locks held by kworker/0:3/5285: [ 258.722112][ T30] 3 locks held by kworker/0:4/5289: [ 258.728146][ T30] 6 locks held by kworker/0:5/5290: [ 258.738994][ T30] 3 locks held by kworker/0:6/5291: [ 258.745633][ T30] 3 locks held by kworker/0:7/5296: [ 258.750864][ T30] 1 lock held by syz.1.2/5297: [ 258.761156][ T30] #0: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: netdev_run_todo+0x7b2/0x1000 [ 258.770885][ T30] 1 lock held by syz.0.1/5310: [ 258.781002][ T30] #0: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: netdev_run_todo+0x7b2/0x1000 [ 258.793626][ T30] 2 locks held by syz.2.14/5355: [ 258.798592][ T30] #0: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 258.812715][ T30] #1: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 258.829673][ T30] 1 lock held by syz.4.15/5344: [ 258.835202][ T30] #0: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 258.851348][ T30] 2 locks held by syz-executor/5347: [ 258.856916][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 258.871911][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 258.881714][ T30] 2 locks held by syz-executor/5352: [ 258.895529][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 258.906400][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 258.921213][ T30] 2 locks held by syz-executor/5354: [ 258.927994][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 258.943260][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 258.958335][ T30] 2 locks held by syz-executor/5362: [ 258.963915][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 258.978790][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 258.989786][ T30] 2 locks held by syz-executor/5364: [ 259.001696][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 259.012135][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 259.026865][ T30] 2 locks held by syz-executor/5376: [ 259.032176][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 259.043180][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 259.058821][ T30] 2 locks held by syz-executor/5381: [ 259.064749][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 259.079582][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 259.091288][ T30] 2 locks held by syz-executor/5383: [ 259.102365][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 259.111832][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 259.127446][ T30] 2 locks held by syz-executor/5390: [ 259.134320][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 259.149107][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 259.159556][ T30] 2 locks held by syz-executor/5391: [ 259.170148][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 259.181699][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 259.199427][ T30] 2 locks held by syz-executor/5397: [ 259.205546][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 259.220962][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 259.237766][ T30] 2 locks held by syz-executor/5402: [ 259.243348][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 259.258010][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 259.268342][ T30] 2 locks held by syz-executor/5403: [ 259.278022][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 259.290886][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 259.309394][ T30] 2 locks held by syz-executor/5414: [ 259.314994][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 259.331485][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 259.341918][ T30] 2 locks held by syz-executor/5415: [ 259.352496][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 259.362043][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 259.377578][ T30] [ 259.380018][ T30] ============================================= [ 259.380018][ T30] [ 259.390651][ T30] NMI backtrace for cpu 1 [ 259.395014][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 259.405193][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 259.415264][ T30] Call Trace: [ 259.418557][ T30] [ 259.421501][ T30] dump_stack_lvl+0x241/0x360 [ 259.426209][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 259.431441][ T30] ? __pfx__printk+0x10/0x10 [ 259.436066][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 259.441048][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 259.446536][ T30] ? _printk+0xd5/0x120 [ 259.450718][ T30] ? __pfx__printk+0x10/0x10 [ 259.455330][ T30] ? __wake_up_klogd+0xcc/0x110 [ 259.460206][ T30] ? __pfx__printk+0x10/0x10 [ 259.464819][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 259.469892][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 259.475900][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 259.481916][ T30] watchdog+0xff4/0x1040 [ 259.486190][ T30] ? watchdog+0x1ea/0x1040 [ 259.490651][ T30] ? __pfx_watchdog+0x10/0x10 [ 259.495351][ T30] kthread+0x2f0/0x390 [ 259.499444][ T30] ? __pfx_watchdog+0x10/0x10 [ 259.504144][ T30] ? __pfx_kthread+0x10/0x10 [ 259.508766][ T30] ret_from_fork+0x4b/0x80 [ 259.513211][ T30] ? __pfx_kthread+0x10/0x10 [ 259.517817][ T30] ret_from_fork_asm+0x1a/0x30 [ 259.522623][ T30] [ 259.526343][ T30] Sending NMI from CPU 1 to CPUs 0: [ 259.531587][ C0] NMI backtrace for cpu 0 [ 259.531600][ C0] CPU: 0 UID: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 259.531618][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 259.531627][ C0] RIP: 0010:__lock_acquire+0x15c/0x2050 [ 259.531653][ C0] Code: e8 03 0f b6 04 30 84 c0 48 89 54 24 28 0f 85 fd 15 00 00 83 3d 14 e6 ca 18 00 75 09 83 fa 30 0f 83 07 14 00 00 44 89 6c 24 60 <48> 89 6c 24 48 4c 89 64 24 30 44 8b b4 24 d8 00 00 00 48 c7 c0 c0 [ 259.531670][ C0] RSP: 0018:ffffc90000156430 EFLAGS: 00000087 [ 259.531684][ C0] RAX: 0000000000000004 RBX: ffffffff93c25608 RCX: ffffffff9a3b0903 [ 259.531696][ C0] RDX: 0000000000000004 RSI: dffffc0000000000 RDI: ffffffff8e958708 [ 259.531707][ C0] RBP: ffff88801cec64d8 R08: 0000000000000001 R09: 0000000000000001 [ 259.531717][ C0] R10: dffffc0000000000 R11: fffffbfff2039056 R12: ffff88801cec5a00 [ 259.531728][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff8e958708 [ 259.531738][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 259.531751][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 259.531762][ C0] CR2: 00007f9737f71866 CR3: 000000000e734000 CR4: 00000000003526f0 [ 259.531775][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 259.531784][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 259.531794][ C0] Call Trace: [ 259.531800][ C0] [ 259.531823][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 259.531849][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 259.531873][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 259.531903][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 259.531924][ C0] ? nmi_handle+0x14f/0x5a0 [ 259.531940][ C0] ? nmi_handle+0x2a/0x5a0 [ 259.531955][ C0] ? __lock_acquire+0x15c/0x2050 [ 259.531978][ C0] ? default_do_nmi+0x63/0x160 [ 259.531993][ C0] ? exc_nmi+0x123/0x1f0 [ 259.532008][ C0] ? end_repeat_nmi+0xf/0x53 [ 259.532032][ C0] ? __lock_acquire+0x15c/0x2050 [ 259.532054][ C0] ? __lock_acquire+0x15c/0x2050 [ 259.532078][ C0] ? __lock_acquire+0x15c/0x2050 [ 259.532100][ C0] [ 259.532105][ C0] [ 259.532117][ C0] lock_acquire+0x1ed/0x550 [ 259.532139][ C0] ? ktime_get_with_offset+0x83/0x150 [ 259.532165][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 259.532188][ C0] ? __pfx___skb_flow_dissect+0x10/0x10 [ 259.532215][ C0] ? ktime_get_with_offset+0x83/0x150 [ 259.532233][ C0] seqcount_lockdep_reader_access+0x13f/0x220 [ 259.532251][ C0] ? ktime_get_with_offset+0x83/0x150 [ 259.532269][ C0] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 259.532291][ C0] ? mark_lock+0x9a/0x360 [ 259.532305][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 259.532333][ C0] ? mark_lock+0x9a/0x360 [ 259.532350][ C0] ktime_get_with_offset+0x83/0x150 [ 259.532370][ C0] netif_rx_internal+0x459/0x630 [ 259.532392][ C0] ? __pfx_netif_rx_internal+0x10/0x10 [ 259.532417][ C0] ? rcu_is_watching+0x15/0xb0 [ 259.532436][ C0] __netif_rx+0x78/0xc0 [ 259.532461][ C0] loopback_xmit+0x454/0x6b0 [ 259.532489][ C0] ? validate_xmit_skb+0x9f9/0x1120 [ 259.532517][ C0] dev_hard_start_xmit+0x27a/0x7e0 [ 259.532548][ C0] __dev_queue_xmit+0x1b58/0x3e80 [ 259.532590][ C0] ? __dev_queue_xmit+0x2da/0x3e80 [ 259.532616][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 259.532649][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 259.532676][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 259.532704][ C0] ? ip_finish_output2+0xa14/0x1390 [ 259.532723][ C0] ? ip_finish_output2+0x45f/0x1390 [ 259.532742][ C0] ip_finish_output2+0xd41/0x1390 [ 259.532760][ C0] ? ip_finish_output2+0x45f/0x1390 [ 259.532781][ C0] ? __pfx_ip_finish_output2+0x10/0x10 [ 259.532800][ C0] ? ip_skb_dst_mtu+0x6ba/0x9b0 [ 259.532818][ C0] ? __ip_finish_output+0x349/0x400 [ 259.532837][ C0] synproxy_send_client_synack+0x8b8/0xf30 [ 259.532858][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 259.532876][ C0] ? synproxy_pernet+0x45/0x270 [ 259.532895][ C0] nft_synproxy_eval_v4+0x3ca/0x610 [ 259.532915][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 259.532934][ C0] ? nf_ip_checksum+0x13a/0x500 [ 259.532954][ C0] nft_synproxy_do_eval+0x362/0xa60 [ 259.532973][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 259.532993][ C0] ? __pfx_validate_chain+0x10/0x10 [ 259.533012][ C0] nft_do_chain+0x4ad/0x1da0 [ 259.533035][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 259.533052][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 259.533081][ C0] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 259.533102][ C0] nft_do_chain_inet+0x418/0x6b0 [ 259.533121][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 259.533138][ C0] ? ipt_do_table+0x312/0x1860 [ 259.533166][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 259.533184][ C0] nf_hook_slow+0xc3/0x220 [ 259.533200][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 259.533222][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 259.533245][ C0] NF_HOOK+0x29e/0x450 [ 259.533267][ C0] ? NF_HOOK+0x9a/0x450 [ 259.533287][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 259.533309][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 259.533333][ C0] ? ip_rcv_finish+0x406/0x560 [ 259.533355][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 259.533377][ C0] NF_HOOK+0x3a4/0x450 [ 259.533397][ C0] ? __lock_acquire+0x1384/0x2050 [ 259.533420][ C0] ? NF_HOOK+0x9a/0x450 [ 259.533441][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 259.533461][ C0] ? ip_rcv_core+0x801/0xd10 [ 259.533483][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 259.533507][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 259.533529][ C0] __netif_receive_skb+0x2bf/0x650 [ 259.533545][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 259.533566][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 259.533580][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 259.533601][ C0] ? __pfx_lock_release+0x10/0x10 [ 259.533623][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 259.533644][ C0] process_backlog+0x662/0x15b0 [ 259.533661][ C0] ? process_backlog+0x33b/0x15b0 [ 259.533679][ C0] ? __pfx_process_backlog+0x10/0x10 [ 259.533694][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 259.533717][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 259.533739][ C0] __napi_poll+0xcb/0x490 [ 259.533754][ C0] net_rx_action+0x89b/0x1240 [ 259.533776][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 259.533793][ C0] ? sched_clock+0x4a/0x70 [ 259.533816][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 259.533841][ C0] handle_softirqs+0x2c5/0x980 [ 259.533861][ C0] ? run_ksoftirqd+0xca/0x130 [ 259.533883][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 259.533901][ C0] ? preempt_schedule+0xe1/0xf0 [ 259.533921][ C0] run_ksoftirqd+0xca/0x130 [ 259.533941][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 259.533963][ C0] ? __pfx_ksoftirqd_should_run+0x10/0x10 [ 259.533984][ C0] ? smpboot_thread_fn+0x2d3/0xa30 [ 259.534003][ C0] ? smpboot_thread_fn+0x4fb/0xa30 [ 259.534022][ C0] ? smpboot_thread_fn+0x656/0xa30 [ 259.534042][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 259.534062][ C0] smpboot_thread_fn+0x544/0xa30 [ 259.534082][ C0] ? smpboot_thread_fn+0x4e/0xa30 [ 259.534104][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 259.534124][ C0] kthread+0x2f0/0x390 [ 259.534137][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 259.534160][ C0] ? __pfx_kthread+0x10/0x10 [ 259.534174][ C0] ret_from_fork+0x4b/0x80 [ 259.534194][ C0] ? __pfx_kthread+0x10/0x10 [ 259.534208][ C0] ret_from_fork_asm+0x1a/0x30 [ 259.534233][ C0] [ 260.277533][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 260.284508][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 260.294711][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 260.304783][ T30] Call Trace: [ 260.308071][ T30] [ 260.311019][ T30] dump_stack_lvl+0x241/0x360 [ 260.315723][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 260.320947][ T30] ? __pfx__printk+0x10/0x10 [ 260.325553][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 260.331565][ T30] ? vscnprintf+0x5d/0x90 [ 260.335928][ T30] panic+0x349/0x880 [ 260.339849][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 260.346032][ T30] ? __pfx_panic+0x10/0x10 [ 260.350471][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 260.355865][ T30] ? __irq_work_queue_local+0x137/0x410 [ 260.361436][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 260.366826][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 260.373006][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 260.379186][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 260.385375][ T30] watchdog+0x1033/0x1040 [ 260.389730][ T30] ? watchdog+0x1ea/0x1040 [ 260.394175][ T30] ? __pfx_watchdog+0x10/0x10 [ 260.398876][ T30] kthread+0x2f0/0x390 [ 260.402963][ T30] ? __pfx_watchdog+0x10/0x10 [ 260.407672][ T30] ? __pfx_kthread+0x10/0x10 [ 260.412378][ T30] ret_from_fork+0x4b/0x80 [ 260.416820][ T30] ? __pfx_kthread+0x10/0x10 [ 260.421423][ T30] ret_from_fork_asm+0x1a/0x30 [ 260.426223][ T30] [ 260.429596][ T30] Kernel Offset: disabled [ 260.433923][ T30] Rebooting in 86400 seconds..