last executing test programs: 2.258502229s ago: executing program 2 (id=151): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0xb, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", ' \x00'}, 0x28) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000240)="6e37cff5b582e082d58cb23de3c19dc4971d9b59ddb52ae25a3ca48e8d5284721b4b722d1fd011fc3144e4ceb18b32b5b8", 0x31}, {&(0x7f0000000340)="5fdbd61342a1560054f74cee82024cacdf79b6be94f99a7aea5b7678644cc1ef33880d4a59cad1fd0852b05064b02335eb6064c24f1ad325e0325bc473c3aeaf6709e5227bca1f7ba283d381d4f64e34fa77c5cac5d0bcf72850aaa9ea7f9144a0e108ae41f51262011dd0a3eb6eaf00da010b18a79f6917d0c25efbf1c56feb59cbcb63f4683c026aa7aa1d65bea9ba31", 0x91}, {&(0x7f0000000540)="1165b65dc1f84946f03562d6913624a2b6d8ec92d3b85d62c12f159214de3618d4dc028c1b6992dc66459f58c8b8b56fe04e31cdde47a1821cf3bddee1076115f9afb5391f0f33219347a02ffb4109374ae3528f700cf1963b704fd24e27b70dd82d3ef5fd0d6c7e9512db1aff64b84d0fe3cce36da98fcc74949374701d31a1418b3fb186b4fc5f661870be567805e16f89688c5b75b19b2081c8026c57eb5eefe65efbb7e34c39a7651531bd31e4bcb66636f5412f2f97dd0f6eba05988d5dbfef41b1382b757fa7654472294d51c5681364bc2e48cfb226168a09933e5851fcf209063fdb938b7d7351e7f065d41ec4fa4090a59490776f19d579833473c5faaf30c40d", 0x105}, {&(0x7f0000000280)="0f1d547dfd011eee5ee96e9f1947841b6080ffadffd0f2ba53588aaf9dce463cb08890097ea29302b894feb895cebb0e72a94c681955c3a39a1e5ebde1638c8f408cbb197ede5a6779e4582b685db9abb1184d1e4bf53bb5eafcc7d265002aeead4852d157cfb83a10f405c72c51bd99d99ea7f702c9424dcfff", 0x7a}, {&(0x7f0000000d00)="7ab285d32f60507430110d45fba18e434184c81c9a10404af273af02537863cd4f9b455ba771ca5222198ae07333ef0d2beff796d017427138340fc2b1528610600c9b212beee90a7941df2f1ec93c7469156c30892b39b7b43f9d229a356cc43023e2eb30577ca2725e6c1ce2e4557d4150336ac279203360ee37b0f67dce3d0fa468aed602dc9f641bbacbeac908a860f4d02f22946a5a73f0bd6896b5fb16e75d3437356e3e8307c6d07b767649101165270eb5c82bc6cd3d2c5954f370361578736b68b2d8d891071b5ad1372c18000000", 0xd3}, {&(0x7f0000001700)="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", 0xbe4}, {&(0x7f0000000440)="156f35eda3eaf40347c8fcb457593de1fc6e333cc2b86d11cefa6387fed76e611ca44de9ed7fa9f1b85663b4edb341e4540122b84005f5ec9cc3b5421dcddec26cc9364883aa6f289716b42062e393bbfaa8aac292e2b2fd6c964add609061bb4b97eaf3531f806ffa", 0x69}, {&(0x7f0000000a80)="163c76999ae42cc5ecc01af351fb70e6e11409c5d3a344799b070cdd740699f7a1cc0fc12379c717a07625de3c464c8c0023f101be14eb4db316dd831fbd717de366fc76377e2ec18bc7a3a84d197df729ce618cb52927ecb190cc359052470c77f3a884e1208092d7ab2446a8d6e3ca5b642723a5519faaa38542c5ef7e98d45b4bf5852749d96a5748f2d42ca3da2a34250d84a64bc6bc43a5b094b31ea4ec17a9b4973a4a0c589f1c1159773ec6bdcf99dacc886b07fa86e452e7acd9383a0d4ce2343b1c", 0xc6}, {&(0x7f0000000800)="4f7a08cb7e877b8163c9939a6fc02812ad2fe5f90078e5bb023fd64f0bfa7f93390f8ac20b392ba4ee60a9f8f24e5fd3a05eeafc0baa41c747752ec23fb297ee50f7a4b25a208ce6f518a2753e08dd6a598813e6d721ff302e", 0x59}, {&(0x7f00000004c0)="cc098cb4f8101a257eb48ef649e4fd0dad820842c93863ab85977f0ab768a224000dac40378a5a30e9b0768ebb6254afbc7a7b5a8dac25d9f7e5597effae8329fd603cf91d2c56f3c7ddb6c4e845a75d60f913cf8dc8ee2167ce92e5", 0x5c}, {&(0x7f0000003ec0)="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", 0x78d}], 0xb}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) recvfrom$inet6(r0, &(0x7f0000000100)=""/19, 0x1ff4, 0x40, 0x0, 0x0) 2.163366556s ago: executing program 2 (id=152): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001100)=ANY=[@ANYBLOB="88090000", @ANYRES16=r1, @ANYBLOB="010000200000000000003b000000", @ANYRES32=r2, @ANYBLOB="22003300a0a40600080211000001ffffffffffff080211000000550004000f003f000000080057"], 0x988}, 0x1, 0x0, 0x0, 0x4004}, 0x8000) 2.061068211s ago: executing program 2 (id=153): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fc0000000800110007000000", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.957075743s ago: executing program 2 (id=154): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="04005b00c8989308971edbbd"], 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 1.638626147s ago: executing program 2 (id=159): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000140), 0x2, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)={[{0x2b, 'pids'}]}, 0x6) 1.470582175s ago: executing program 4 (id=162): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0xd, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b7040000020000008500000033000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 1.384043812s ago: executing program 3 (id=164): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fc0000000800110007000000", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.335645912s ago: executing program 2 (id=165): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000000c0)="901240c26659aa66cdbf4f8f9f57ad7070c857acb9e3d346635baf03a38eef5a40288a17a2f80cdd5f9cfc6d8d9a9baba907c01998a0ab2660b9021822e432312b0fb31bb5", 0x45}], 0x1}}], 0x1, 0xc8040) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x6) 1.242960071s ago: executing program 0 (id=166): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x5, 0x400, 0xa, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 1.178041615s ago: executing program 4 (id=168): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) accept$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 1.161347807s ago: executing program 3 (id=169): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="04005b00c8989308971edbbd"], 0x28}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 1.030316319s ago: executing program 1 (id=170): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(0x3) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={0x0, r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 1.024465752s ago: executing program 0 (id=171): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20040051}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x66, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffff0180c2000000"], 0x0) 948.345585ms ago: executing program 4 (id=172): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000000000000000440000000800", @ANYRES32=r2, @ANYBLOB="2c00238008001400a7ffffff"], 0x54}}, 0x0) 909.495857ms ago: executing program 1 (id=173): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e20, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0xd}}, 0x0, 0x0, 0x49, 0x0, "8d545bba19fe5f61c8c5a0e13bf4f06baaab13dd9bb137e9eeef2ab6c8c37b6081bab60baf2b1382a040e5ceb0735a61c02d7bc958b256c94bc97e451ff6de6cc9f03f69a51666722a8fef5fe7ca86ef"}, 0xd8) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e23, 0x1da, @local, 0x1}}, 0x0, 0x0, 0x4d, 0x0, "afba8998d5b86da3ddd021b9231569359ff9ea8c3ba79d106c5eb1a4013168a217d5626cf43da2a075be2454f8a98c3e85ed68a75d3ced314909f55b771239ab7f65a8bdfedba984b67d6ba4a7cfdae5"}, 0xd8) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000480)=[{&(0x7f0000000180)="580000001400add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 789.768015ms ago: executing program 3 (id=174): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002ebd7000fbdbdf2517000000", @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000) 787.65209ms ago: executing program 0 (id=175): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x4, 0x10000, 0x0, 0xffffffff}, [@TCA_NETEM_LOSS={0x4}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x5c}}, 0x0) 700.054848ms ago: executing program 4 (id=176): epoll_create1(0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010102, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1, 0x0, 0x0, 0x40, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, 0xa, @in=@local, 0x0, 0x4}}, 0xe8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 657.594712ms ago: executing program 1 (id=177): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x2ddfdbff, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) 545.130822ms ago: executing program 0 (id=178): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) close(r2) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback, 0x9}, 0x1c) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000001340)="e6", 0xfffffeff}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xcbf, 0x10efe}, 0x14) splice(r0, 0x0, r3, 0x0, 0x5947, 0xc) 544.6383ms ago: executing program 3 (id=179): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fc000000080011000700000008000e0080", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 481.470458ms ago: executing program 1 (id=180): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0xe, 0x0, &(0x7f0000000080)="f8ad48cc02cb29dcc8007f5b88a8", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 480.928131ms ago: executing program 4 (id=181): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) 302.8882ms ago: executing program 0 (id=182): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001100)=ANY=[@ANYBLOB="88090000", @ANYRES16=r1, @ANYBLOB="010000200000000000003b0000000800", @ANYRES32=r2, @ANYBLOB="22003300a0a40600080211000001ffffffffffff080211000000550004000f003f000000080057"], 0x988}, 0x1, 0x0, 0x0, 0x4004}, 0x8000) 302.227974ms ago: executing program 3 (id=183): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001080)={r0, &(0x7f0000000000), 0x0}, 0x20) 273.732346ms ago: executing program 1 (id=184): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="04005b00c8989308971edbbd"], 0x28}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 206.406504ms ago: executing program 4 (id=185): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(0x3) close(0x4) 140.722213ms ago: executing program 3 (id=186): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050029bd7100fadbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="0c007d800400020004006c"], 0x28}}, 0x4000800) 31.703358ms ago: executing program 1 (id=187): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001600)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf252500000008000300", @ANYRES32=r2, @ANYBLOB="08003500000000000a000600ae434a4c8eae00000a0034000101010101010000080026006c0900001800508004000500080007000100000105"], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x8c0) 0s ago: executing program 0 (id=188): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) getpid() kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.5' (ED25519) to the list of known hosts. [ 70.958121][ T5827] cgroup: Unknown subsys name 'net' [ 71.092403][ T5827] cgroup: Unknown subsys name 'cpuset' [ 71.101619][ T5827] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.764366][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.771053][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.674145][ T5827] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.119216][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.133348][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.142707][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.151487][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.160476][ T5855] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.167981][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.175116][ T5855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.176263][ T5855] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.193216][ T5855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.202217][ T5859] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.212416][ T5859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.220866][ T5860] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.227124][ T5857] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.229414][ T5860] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.242643][ T5855] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.250865][ T5857] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.251367][ T5855] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.265538][ T5860] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.270223][ T5857] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.276240][ T5855] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.288375][ T5860] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.290580][ T5857] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.310186][ T5861] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.316490][ T5857] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.324659][ T5861] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.330228][ T5857] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.343454][ T5857] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.351089][ T5857] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.359292][ T5861] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 75.366739][ T5861] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.789629][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 75.934245][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 75.974786][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 76.025025][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 76.053755][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 76.077847][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.085189][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.095990][ T5838] bridge_slave_0: entered allmulticast mode [ 76.103612][ T5838] bridge_slave_0: entered promiscuous mode [ 76.115935][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.123351][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.130704][ T5838] bridge_slave_1: entered allmulticast mode [ 76.137508][ T5838] bridge_slave_1: entered promiscuous mode [ 76.232202][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.239899][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.247106][ T5840] bridge_slave_0: entered allmulticast mode [ 76.254308][ T5840] bridge_slave_0: entered promiscuous mode [ 76.299820][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.307472][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.314794][ T5840] bridge_slave_1: entered allmulticast mode [ 76.322364][ T5840] bridge_slave_1: entered promiscuous mode [ 76.331438][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.344511][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.403910][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.412035][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.419414][ T5852] bridge_slave_0: entered allmulticast mode [ 76.426426][ T5852] bridge_slave_0: entered promiscuous mode [ 76.434321][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.441693][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.449022][ T5852] bridge_slave_1: entered allmulticast mode [ 76.455810][ T5852] bridge_slave_1: entered promiscuous mode [ 76.477750][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.485200][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.492633][ T5839] bridge_slave_0: entered allmulticast mode [ 76.499782][ T5839] bridge_slave_0: entered promiscuous mode [ 76.517377][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.551328][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.558448][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.565963][ T5839] bridge_slave_1: entered allmulticast mode [ 76.573285][ T5839] bridge_slave_1: entered promiscuous mode [ 76.589431][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.602871][ T5838] team0: Port device team_slave_0 added [ 76.611573][ T5838] team0: Port device team_slave_1 added [ 76.652304][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.690357][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.703081][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.721030][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.728248][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.736050][ T5848] bridge_slave_0: entered allmulticast mode [ 76.743733][ T5848] bridge_slave_0: entered promiscuous mode [ 76.753442][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.774517][ T5840] team0: Port device team_slave_0 added [ 76.792756][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.800115][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.826194][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.849092][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.856273][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.864065][ T5848] bridge_slave_1: entered allmulticast mode [ 76.871024][ T5848] bridge_slave_1: entered promiscuous mode [ 76.897756][ T5840] team0: Port device team_slave_1 added [ 76.920564][ T5852] team0: Port device team_slave_0 added [ 76.927731][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.935113][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.969560][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.002001][ T5839] team0: Port device team_slave_0 added [ 77.010985][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.041183][ T5852] team0: Port device team_slave_1 added [ 77.047652][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.055342][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.082211][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.095724][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.103226][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.129694][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.144459][ T5839] team0: Port device team_slave_1 added [ 77.152349][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.225248][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.232689][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.258963][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.305339][ T5848] team0: Port device team_slave_0 added [ 77.312393][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.319848][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.346718][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.360039][ T5861] Bluetooth: hci1: command tx timeout [ 77.360043][ T5847] Bluetooth: hci0: command tx timeout [ 77.360472][ T5847] Bluetooth: hci3: command tx timeout [ 77.377459][ T5838] hsr_slave_0: entered promiscuous mode [ 77.384374][ T5838] hsr_slave_1: entered promiscuous mode [ 77.401991][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.409221][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.435387][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.441445][ T5847] Bluetooth: hci4: command tx timeout [ 77.448726][ T5848] team0: Port device team_slave_1 added [ 77.455420][ T5857] Bluetooth: hci2: command tx timeout [ 77.487774][ T5840] hsr_slave_0: entered promiscuous mode [ 77.496269][ T5840] hsr_slave_1: entered promiscuous mode [ 77.502767][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.511010][ T5840] Cannot create hsr debugfs directory [ 77.517156][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.526247][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.552790][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.574119][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.581499][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.608502][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.621456][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.628475][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.655401][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.730937][ T5852] hsr_slave_0: entered promiscuous mode [ 77.737438][ T5852] hsr_slave_1: entered promiscuous mode [ 77.745138][ T5852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.752921][ T5852] Cannot create hsr debugfs directory [ 77.827946][ T5848] hsr_slave_0: entered promiscuous mode [ 77.834731][ T5848] hsr_slave_1: entered promiscuous mode [ 77.841287][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.848888][ T5848] Cannot create hsr debugfs directory [ 77.928002][ T5839] hsr_slave_0: entered promiscuous mode [ 77.934790][ T5839] hsr_slave_1: entered promiscuous mode [ 77.941622][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.949821][ T5839] Cannot create hsr debugfs directory [ 78.187983][ T5838] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.202915][ T5838] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.241545][ T5838] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.271864][ T5838] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.316004][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.345050][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.357300][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.393479][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.443971][ T5848] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.456456][ T5848] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.475630][ T5848] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.487023][ T5848] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 78.564421][ T5852] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.581839][ T5852] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.604775][ T5852] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.634535][ T5852] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.735142][ T5839] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.746225][ T5839] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.759393][ T5839] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.777555][ T5839] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.791450][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.854037][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.892537][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.928155][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.935986][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.954999][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.968096][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.996312][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.003557][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.027274][ T3003] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.034687][ T3003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.067508][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.084155][ T3003] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.091371][ T3003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.153629][ T3564] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.160834][ T3564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.171627][ T3564] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.178877][ T3564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.205593][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.235613][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.277648][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.285081][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.337393][ T3564] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.344747][ T3564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.439211][ T5857] Bluetooth: hci1: command tx timeout [ 79.444842][ T5847] Bluetooth: hci0: command tx timeout [ 79.445745][ T5861] Bluetooth: hci3: command tx timeout [ 79.484554][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.526499][ T5861] Bluetooth: hci2: command tx timeout [ 79.526531][ T5847] Bluetooth: hci4: command tx timeout [ 79.596058][ T5852] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 79.615367][ T5852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.652233][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.714246][ T3540] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.721620][ T3540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.761178][ T3540] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.768355][ T3540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.877942][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.898546][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.907656][ T5913] modprobe (5913) used greatest stack depth: 19248 bytes left [ 79.958240][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.027277][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.124018][ T5838] veth0_vlan: entered promiscuous mode [ 80.170921][ T5840] veth0_vlan: entered promiscuous mode [ 80.208752][ T5852] veth0_vlan: entered promiscuous mode [ 80.227718][ T5852] veth1_vlan: entered promiscuous mode [ 80.242242][ T5840] veth1_vlan: entered promiscuous mode [ 80.265220][ T5838] veth1_vlan: entered promiscuous mode [ 80.366049][ T5838] veth0_macvtap: entered promiscuous mode [ 80.380165][ T5838] veth1_macvtap: entered promiscuous mode [ 80.387374][ T5840] veth0_macvtap: entered promiscuous mode [ 80.407184][ T5852] veth0_macvtap: entered promiscuous mode [ 80.423029][ T5840] veth1_macvtap: entered promiscuous mode [ 80.438080][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.457199][ T5852] veth1_macvtap: entered promiscuous mode [ 80.467416][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.499692][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.511425][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.523540][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.535087][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.554076][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.565647][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.577683][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.592168][ T5838] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.601226][ T5838] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.610104][ T5838] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.618843][ T5838] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.633777][ T5848] veth0_vlan: entered promiscuous mode [ 80.645188][ T5840] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.655046][ T5840] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.663890][ T5840] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.672721][ T5840] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.720864][ T5848] veth1_vlan: entered promiscuous mode [ 80.731229][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.741956][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.754523][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.765739][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.777134][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.813415][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.825247][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.835942][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.846885][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.857992][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.873114][ T5852] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.884357][ T5852] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.893207][ T5852] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.902114][ T5852] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.034282][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.043000][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.093730][ T5839] veth0_vlan: entered promiscuous mode [ 81.118489][ T3564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.139775][ T3564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.153874][ T5839] veth1_vlan: entered promiscuous mode [ 81.174548][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.183911][ T5848] veth0_macvtap: entered promiscuous mode [ 81.193468][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.228587][ T3540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.239310][ T3540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.251895][ T5848] veth1_macvtap: entered promiscuous mode [ 81.307953][ T5839] veth0_macvtap: entered promiscuous mode [ 81.339814][ T3564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.347705][ T3564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.369842][ T5839] veth1_macvtap: entered promiscuous mode [ 81.416961][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.428266][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.439166][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.450027][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.460582][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.471480][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.485493][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.513480][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.515876][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.542329][ T5847] Bluetooth: hci3: command tx timeout [ 81.547800][ T5847] Bluetooth: hci0: command tx timeout [ 81.547868][ T5861] Bluetooth: hci1: command tx timeout [ 81.555406][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.569131][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.580934][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.591086][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.600307][ T5861] Bluetooth: hci2: command tx timeout [ 81.602069][ T5857] Bluetooth: hci4: command tx timeout [ 81.614684][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.624848][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.635463][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.646796][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.660057][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.670740][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.682754][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.694072][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.704251][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.714967][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.726020][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.748272][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.760804][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.772594][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.783504][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.794213][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.805684][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.815951][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.826926][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.868399][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.888533][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.891050][ T5839] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.905315][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.905356][ T5839] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.922559][ T5839] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.932615][ T5839] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.955405][ T5848] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.969058][ T5848] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.992867][ T5848] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.019563][ T5848] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.069237][ T5932] xt_hashlimit: size too large, truncated to 1048576 [ 82.313711][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.352829][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.461758][ T3564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.472067][ T5939] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 82.479805][ T5939] IPv6: NLM_F_CREATE should be set when creating new route [ 82.488033][ T3564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.553718][ T3003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.593510][ T3003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.684403][ T3540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.724540][ T3540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.176448][ T5955] netlink: 'syz.1.11': attribute type 4 has an invalid length. [ 83.198433][ T5955] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.11'. [ 83.601265][ T5857] Bluetooth: hci1: command tx timeout [ 83.610890][ T5857] Bluetooth: hci0: command tx timeout [ 83.612958][ T5861] Bluetooth: hci3: command tx timeout [ 83.680454][ T5861] Bluetooth: hci2: command tx timeout [ 83.680461][ T5857] Bluetooth: hci4: command tx timeout [ 84.303289][ T5988] netlink: 176 bytes leftover after parsing attributes in process `syz.0.21'. [ 84.463762][ T5990] netlink: 108 bytes leftover after parsing attributes in process `syz.0.22'. [ 85.491933][ T5986] netem: change failed [ 85.727113][ T5995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24'. [ 85.752326][ T5995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24'. [ 85.770158][ T5998] netlink: 96 bytes leftover after parsing attributes in process `syz.3.26'. [ 86.358588][ T6013] netlink: 108 bytes leftover after parsing attributes in process `syz.0.35'. [ 86.791467][ T6028] netlink: 96 bytes leftover after parsing attributes in process `syz.1.40'. [ 87.151625][ T6040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.46'. [ 87.310321][ T6043] netlink: 108 bytes leftover after parsing attributes in process `syz.1.47'. [ 87.606719][ T6050] Illegal XDP return value 1656887650 on prog (id 28) dev N/A, expect packet loss! [ 88.610630][ T6061] netlink: 40 bytes leftover after parsing attributes in process `syz.4.56'. [ 88.796020][ T6072] netlink: 108 bytes leftover after parsing attributes in process `syz.2.62'. [ 89.435222][ T6096] netlink: 40 bytes leftover after parsing attributes in process `syz.2.73'. [ 89.649298][ T6102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.77'. [ 90.063310][ T6116] Zero length message leads to an empty skb [ 90.221117][ T6122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.86'. [ 90.254011][ T6124] netlink: 40 bytes leftover after parsing attributes in process `syz.3.87'. [ 90.488670][ T6131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.90'. [ 90.945361][ T6149] netlink: 24 bytes leftover after parsing attributes in process `syz.4.99'. [ 91.058020][ T6153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.101'. [ 91.385485][ T6165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.106'. [ 92.251933][ T1733] cfg80211: failed to load regulatory.db [ 92.415762][ T6201] syzkaller0: entered allmulticast mode [ 93.091648][ T6225] warning: `syz.4.133' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 93.623553][ T6245] __nla_validate_parse: 7 callbacks suppressed [ 93.623576][ T6245] netlink: 64 bytes leftover after parsing attributes in process `syz.3.142'. [ 94.249550][ T6262] netlink: 2348 bytes leftover after parsing attributes in process `syz.2.152'. [ 94.517158][ T6266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.154'. [ 94.779311][ T6272] netlink: 56 bytes leftover after parsing attributes in process `syz.4.158'. [ 95.001722][ T6280] netlink: 96 bytes leftover after parsing attributes in process `syz.0.161'. [ 95.373784][ T6296] netlink: 8 bytes leftover after parsing attributes in process `syz.3.169'. [ 95.528092][ T6303] netlink: 56 bytes leftover after parsing attributes in process `syz.4.172'. [ 95.676679][ T6309] netlink: 20 bytes leftover after parsing attributes in process `syz.3.174'. [ 95.955744][ T6319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.179'. [ 96.187379][ T6324] netlink: 'syz.0.182': attribute type 72 has an invalid length. [ 96.225767][ T6324] netlink: 2360 bytes leftover after parsing attributes in process `syz.0.182'. [ 133.239496][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.246048][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.645607][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.652378][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.929106][ T5847] Bluetooth: hci3: command 0x0406 tx timeout [ 201.935224][ T5847] Bluetooth: hci0: command 0x0406 tx timeout [ 201.941545][ T5847] Bluetooth: hci1: command 0x0406 tx timeout [ 201.947623][ T5847] Bluetooth: hci4: command 0x0406 tx timeout [ 201.953786][ T5847] Bluetooth: hci2: command 0x0406 tx timeout [ 254.799080][ T31] INFO: task syz.2.165:6287 blocked for more than 143 seconds. [ 254.806769][ T31] Not tainted 6.14.0-rc7-syzkaller-01889-gcc04ed502457 #0 [ 255.018897][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 255.027669][ T31] task:syz.2.165 state:D stack:25952 pid:6287 tgid:6287 ppid:5839 task_flags:0x400040 flags:0x00000000 [ 255.268906][ T31] Call Trace: [ 255.272291][ T31] [ 255.275261][ T31] __schedule+0x190e/0x4c90 [ 255.418943][ T31] ? __pfx___schedule+0x10/0x10 [ 255.423894][ T31] ? __pfx_lock_release+0x10/0x10 [ 255.538907][ T31] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 255.544901][ T31] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 255.712804][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 255.788936][ T31] ? schedule+0x90/0x320 [ 255.793273][ T31] schedule+0x14b/0x320 [ 255.797503][ T31] schedule_preempt_disabled+0x13/0x30 [ 255.966952][ T31] __mutex_lock+0x817/0x1010 [ 256.038922][ T31] ? __mutex_lock+0x602/0x1010 [ 256.043808][ T31] ? pipe_release+0x48/0x320 [ 256.048454][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 256.096176][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.102709][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.209013][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 256.214491][ T31] pipe_release+0x48/0x320 [ 256.338929][ T31] ? __pfx_pipe_release+0x10/0x10 [ 256.344057][ T31] __fput+0x3e9/0x9f0 [ 256.348101][ T31] task_work_run+0x24f/0x310 [ 256.508912][ T31] ? _raw_spin_unlock+0x28/0x50 [ 256.513877][ T31] ? __pfx_task_work_run+0x10/0x10 [ 256.648928][ T31] ? syscall_exit_to_user_mode+0xa3/0x340 [ 256.654860][ T31] syscall_exit_to_user_mode+0x13f/0x340 [ 256.799039][ T31] do_syscall_64+0x100/0x230 [ 256.803765][ T31] ? clear_bhb_loop+0x35/0x90 [ 256.808498][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.998933][ T31] RIP: 0033:0x7f9d4558d169 [ 257.003450][ T31] RSP: 002b:00007ffe4845f478 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 257.158937][ T31] RAX: 0000000000000000 RBX: 00007f9d457a7ba0 RCX: 00007f9d4558d169 [ 257.167017][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 257.362926][ T31] RBP: 00007f9d457a7ba0 R08: 0000000000000604 R09: 000000064845f76f [ 257.478953][ T31] R10: 00007f9d457a7ac0 R11: 0000000000000246 R12: 00000000000176b1 [ 257.487030][ T31] R13: 00007ffe4845f570 R14: ffffffffffffffff R15: 00007ffe4845f590 [ 257.678946][ T31] [ 257.708188][ T31] [ 257.708188][ T31] Showing all locks held in the system: [ 257.821769][ T31] 1 lock held by khungtaskd/31: [ 257.826701][ T31] #0: ffffffff8eb393e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 258.009095][ T31] 2 locks held by udevd/5211: [ 258.013883][ T31] 2 locks held by getty/5593: [ 258.128970][ T31] #0: ffff88814e6d00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 258.248989][ T31] #1: ffffc900033032f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x616/0x1770 [ 258.389071][ T31] 1 lock held by dhcpcd/5651: [ 258.393815][ T31] 1 lock held by dhcpcd/5652: [ 258.398515][ T31] 1 lock held by dhcpcd/5656: [ 258.567354][ T31] 1 lock held by syz-executor/5827: [ 258.649114][ T31] 1 lock held by syz-executor/5838: [ 258.654391][ T31] 1 lock held by syz-executor/5839: [ 258.708922][ T31] 1 lock held by syz-executor/5840: [ 258.714254][ T31] 2 locks held by syz-executor/5852: [ 258.768903][ T31] 1 lock held by syz.2.165/6287: [ 258.773923][ T31] #0: ffff88807c8e9068 (&pipe->mutex){+.+.}-{4:4}, at: pipe_release+0x48/0x320 [ 258.908977][ T31] 1 lock held by syz.2.165/6288: [ 258.914004][ T31] #0: ffff88807c8e9068 (&pipe->mutex){+.+.}-{4:4}, at: splice_file_to_pipe+0x2e/0x500 [ 259.099024][ T31] 1 lock held by udevd/6343: [ 259.103690][ T31] 1 lock held by udevd/6345: [ 259.108336][ T31] [ 259.238928][ T31] ============================================= [ 259.238928][ T31] [ 259.248023][ T31] NMI backtrace for cpu 0 [ 259.248051][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-rc7-syzkaller-01889-gcc04ed502457 #0 [ 259.248074][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 259.248086][ T31] Call Trace: [ 259.248094][ T31] [ 259.248103][ T31] dump_stack_lvl+0x241/0x360 [ 259.248135][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 259.248159][ T31] ? __pfx__printk+0x10/0x10 [ 259.248193][ T31] nmi_cpu_backtrace+0x49c/0x4d0 [ 259.248226][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 259.248251][ T31] ? _printk+0xd5/0x120 [ 259.248269][ T31] ? __pfx__printk+0x10/0x10 [ 259.248289][ T31] ? __wake_up_klogd+0xcc/0x110 [ 259.248319][ T31] ? __pfx__printk+0x10/0x10 [ 259.248340][ T31] ? __rcu_read_unlock+0xa1/0x110 [ 259.248373][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 259.248403][ T31] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 259.248434][ T31] watchdog+0x1058/0x10a0 [ 259.248468][ T31] ? watchdog+0x1ea/0x10a0 [ 259.248505][ T31] ? __pfx_watchdog+0x10/0x10 [ 259.248537][ T31] kthread+0x7a9/0x920 [ 259.248555][ T31] ? __pfx_kthread+0x10/0x10 [ 259.248576][ T31] ? __pfx_watchdog+0x10/0x10 [ 259.248608][ T31] ? __pfx_kthread+0x10/0x10 [ 259.248626][ T31] ? __pfx_kthread+0x10/0x10 [ 259.248647][ T31] ? __pfx_kthread+0x10/0x10 [ 259.248665][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 259.248691][ T31] ? lockdep_hardirqs_on+0x99/0x150 [ 259.248721][ T31] ? __pfx_kthread+0x10/0x10 [ 259.248742][ T31] ret_from_fork+0x4b/0x80 [ 259.248769][ T31] ? __pfx_kthread+0x10/0x10 [ 259.248789][ T31] ret_from_fork_asm+0x1a/0x30 [ 259.248832][ T31] [ 259.414155][ T31] Sending NMI from CPU 0 to CPUs 1: [ 259.419923][ C1] NMI backtrace for cpu 1 [ 259.419939][ C1] CPU: 1 UID: 0 PID: 5827 Comm: syz-executor Not tainted 6.14.0-rc7-syzkaller-01889-gcc04ed502457 #0 [ 259.419959][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 259.419969][ C1] RIP: 0010:unwind_next_frame+0xb4/0x22d0 [ 259.420007][ C1] Code: 18 00 00 89 84 24 84 00 00 00 48 89 6c 24 78 48 89 8c 24 90 00 00 00 48 89 5c 24 20 bf 01 00 00 00 e8 a0 4c 22 00 49 8d 6d 50 <48> 89 e8 48 c1 e8 03 48 89 44 24 38 42 80 3c 20 00 74 08 48 89 ef [ 259.420022][ C1] RSP: 0018:ffffc90000a28850 EFLAGS: 00000006 [ 259.420038][ C1] RAX: 0000000000010004 RBX: 1ffff92000145124 RCX: ffffffff9a65f903 [ 259.420051][ C1] RDX: dffffc0000000000 RSI: ffffffff81d10a57 RDI: 0000000000000001 [ 259.420063][ C1] RBP: ffffc90000a28970 R08: 000000000000000d R09: ffffc90000a28a10 [ 259.420075][ C1] R10: ffffc90000a28970 R11: ffffffff81ad7cb0 R12: dffffc0000000000 [ 259.420088][ C1] R13: ffffc90000a28920 R14: ffffffff81d10a57 R15: 0000000000000000 [ 259.420101][ C1] FS: 00005555612bc500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 259.420116][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 259.420128][ C1] CR2: 0000562e1f67d0b0 CR3: 00000000344e4000 CR4: 00000000003526f0 [ 259.420143][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 259.420153][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 259.420164][ C1] Call Trace: [ 259.420170][ C1] [ 259.420177][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 259.420199][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 259.420228][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 259.420249][ C1] ? nmi_handle+0x2a/0x5a0 [ 259.420284][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 259.420306][ C1] ? nmi_handle+0x14f/0x5a0 [ 259.420332][ C1] ? nmi_handle+0x2a/0x5a0 [ 259.420359][ C1] ? unwind_next_frame+0xb4/0x22d0 [ 259.420384][ C1] ? default_do_nmi+0x63/0x160 [ 259.420405][ C1] ? exc_nmi+0x123/0x1f0 [ 259.420424][ C1] ? end_repeat_nmi+0xf/0x53 [ 259.420448][ C1] ? irq_work_queue+0xa7/0x150 [ 259.420473][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 259.420498][ C1] ? irq_work_queue+0xa7/0x150 [ 259.420522][ C1] ? unwind_next_frame+0xb4/0x22d0 [ 259.420548][ C1] ? unwind_next_frame+0xb4/0x22d0 [ 259.420575][ C1] ? unwind_next_frame+0xb4/0x22d0 [ 259.420601][ C1] [ 259.420607][ C1] [ 259.420617][ C1] ? arch_irq_work_raise+0x6f/0x80 [ 259.420640][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 259.420664][ C1] arch_stack_walk+0x11c/0x150 [ 259.420683][ C1] ? irq_work_queue+0xa7/0x150 [ 259.420717][ C1] stack_trace_save+0x118/0x1d0 [ 259.420741][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 259.420763][ C1] ? __lock_acquire+0x1397/0x2100 [ 259.420790][ C1] ? mark_lock+0x9a/0x360 [ 259.420806][ C1] ? __send_signal_locked+0x228/0xe90 [ 259.420832][ C1] kasan_save_track+0x3f/0x80 [ 259.420850][ C1] ? kasan_save_track+0x3f/0x80 [ 259.420867][ C1] ? __kasan_slab_alloc+0x66/0x80 [ 259.420886][ C1] ? kmem_cache_alloc_noprof+0x1d9/0x380 [ 259.420909][ C1] ? __send_signal_locked+0x228/0xe90 [ 259.420934][ C1] ? group_send_sig_info+0x292/0x310 [ 259.420960][ C1] ? do_bpf_send_signal+0xc3/0x1f0 [ 259.420985][ C1] ? irq_work_single+0xe2/0x240 [ 259.421008][ C1] ? irq_work_run+0x18b/0x350 [ 259.421031][ C1] ? __sysvec_irq_work+0xb8/0x430 [ 259.421051][ C1] ? sysvec_irq_work+0x9e/0xc0 [ 259.421069][ C1] ? asm_sysvec_irq_work+0x1a/0x20 [ 259.421092][ C1] ? native_apic_msr_write+0x39/0x50 [ 259.421111][ C1] ? arch_irq_work_raise+0x6f/0x80 [ 259.421131][ C1] ? irq_work_queue+0xa7/0x150 [ 259.421174][ C1] ? kmem_cache_alloc_noprof+0x2a7/0x380 [ 259.421199][ C1] __kasan_slab_alloc+0x66/0x80 [ 259.421219][ C1] ? __send_signal_locked+0x1a1/0xe90 [ 259.421243][ C1] kmem_cache_alloc_noprof+0x1d9/0x380 [ 259.421269][ C1] __send_signal_locked+0x228/0xe90 [ 259.421296][ C1] ? __lock_task_sighand+0x2a5/0x2d0 [ 259.421324][ C1] group_send_sig_info+0x292/0x310 [ 259.421352][ C1] ? __pfx_group_send_sig_info+0x10/0x10 [ 259.421379][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 259.421401][ C1] ? sched_clock+0x4a/0x70 [ 259.421421][ C1] ? sched_clock_cpu+0x76/0x490 [ 259.421443][ C1] do_bpf_send_signal+0xc3/0x1f0 [ 259.421469][ C1] irq_work_single+0xe2/0x240 [ 259.421495][ C1] irq_work_run+0x18b/0x350 [ 259.421521][ C1] ? __pfx_irq_work_run+0x10/0x10 [ 259.421546][ C1] ? __irq_exit_rcu+0x105/0x220 [ 259.421566][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 259.421589][ C1] __sysvec_irq_work+0xb8/0x430 [ 259.421610][ C1] sysvec_irq_work+0x9e/0xc0 [ 259.421629][ C1] [ 259.421634][ C1] [ 259.421640][ C1] asm_sysvec_irq_work+0x1a/0x20 [ 259.421664][ C1] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 259.421682][ C1] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 cc cc cc cc f3 0f 1e fa 89 f6 31 d2 e9 03 5c c3 03 0f 1f [ 259.421695][ C1] RSP: 0018:ffffc90003e17bc8 EFLAGS: 00000246 [ 259.421720][ C1] RAX: 00000000000000f6 RBX: 0000000000000200 RCX: 000000000000083f [ 259.421730][ C1] RDX: 0000000000000000 RSI: 00000000000000f6 RDI: 000000000000083f [ 259.421740][ C1] RBP: 0000000000000000 R08: ffffffff815ff70e R09: 1ffff920007c2f64 [ 259.421752][ C1] R10: dffffc0000000000 R11: fffff520007c2f65 R12: ffff8880b8735ed0 [ 259.421764][ C1] R13: 0000000000000000 R14: 2c1008001f8bfbff R15: 0000000000000020 [ 259.421779][ C1] ? arch_irq_work_raise+0x4e/0x80 [ 259.421804][ C1] arch_irq_work_raise+0x6f/0x80 [ 259.421825][ C1] irq_work_queue+0xa7/0x150 [ 259.421850][ C1] bpf_send_signal_common+0x4a8/0x6b0 [ 259.421878][ C1] ? __pfx_bpf_send_signal_common+0x10/0x10 [ 259.421903][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 259.421931][ C1] ? __pfx___cant_migrate+0x10/0x10 [ 259.421959][ C1] ? bpf_trace_run2+0x1fc/0x540 [ 259.421980][ C1] bpf_send_signal+0x1d/0x30 [ 259.421997][ C1] bpf_prog_7ba5217f62dcd359+0x41/0x45 [ 259.422013][ C1] bpf_trace_run2+0x2ec/0x540 [ 259.422038][ C1] ? __pfx_bpf_trace_run2+0x10/0x10 [ 259.422063][ C1] ? __might_fault+0xc6/0x120 [ 259.422079][ C1] ? trace_sys_enter+0x74/0x120 [ 259.422096][ C1] __bpf_trace_sys_enter+0x38/0x60 [ 259.422112][ C1] trace_sys_enter+0xb0/0x120 [ 259.422128][ C1] syscall_trace_enter+0xf8/0x150 [ 259.422145][ C1] do_syscall_64+0xcc/0x230 [ 259.422171][ C1] ? clear_bhb_loop+0x35/0x90 [ 259.422196][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.422219][ C1] RIP: 0033:0x7fb22a329359 [ 259.422232][ C1] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 259.422245][ C1] RSP: 002b:00007fffb7aa4f80 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 259.422261][ C1] RAX: ffffffffffffffda RBX: 00007fffb7aa5610 RCX: 00007fb22a329359 [ 259.422273][ C1] RDX: 00007fffb7aa4f80 RSI: 00007fffb7aa50b0 RDI: 0000000000000011 [ 259.422285][ C1] RBP: 0000000000000000 R08: 00000000275a8077 R09: 7fffffffffffffff [ 259.422296][ C1] R10: 00007fb22b227038 R11: 0000000000000246 R12: 00007fffb7aa5930 [ 259.422307][ C1] R13: 0000000000000004 R14: 00007fffb7aa551c R15: 00007fffb7aa55b0 [ 259.422326][ C1] [ 261.298923][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 261.305845][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-rc7-syzkaller-01889-gcc04ed502457 #0 [ 261.316385][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 261.326509][ T31] Call Trace: [ 261.329874][ T31] [ 261.332855][ T31] dump_stack_lvl+0x241/0x360 [ 261.337572][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.342819][ T31] ? __pfx__printk+0x10/0x10 [ 261.347459][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 261.353525][ T31] ? vscnprintf+0x5d/0x90 [ 261.357898][ T31] panic+0x349/0x880 [ 261.361840][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 261.368037][ T31] ? __pfx_panic+0x10/0x10 [ 261.372482][ T31] ? tick_nohz_tick_stopped+0x82/0xb0 [ 261.377888][ T31] ? __irq_work_queue_local+0x137/0x410 [ 261.383482][ T31] ? preempt_schedule_thunk+0x1a/0x30 [ 261.388896][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 261.395105][ T31] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 261.401306][ T31] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 261.407500][ T31] watchdog+0x1097/0x10a0 [ 261.411878][ T31] ? watchdog+0x1ea/0x10a0 [ 261.416341][ T31] ? __pfx_watchdog+0x10/0x10 [ 261.421062][ T31] kthread+0x7a9/0x920 [ 261.425164][ T31] ? __pfx_kthread+0x10/0x10 [ 261.429790][ T31] ? __pfx_watchdog+0x10/0x10 [ 261.434511][ T31] ? __pfx_kthread+0x10/0x10 [ 261.439132][ T31] ? __pfx_kthread+0x10/0x10 [ 261.443754][ T31] ? __pfx_kthread+0x10/0x10 [ 261.448377][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 261.453616][ T31] ? lockdep_hardirqs_on+0x99/0x150 [ 261.458855][ T31] ? __pfx_kthread+0x10/0x10 [ 261.463482][ T31] ret_from_fork+0x4b/0x80 [ 261.467969][ T31] ? __pfx_kthread+0x10/0x10 [ 261.472596][ T31] ret_from_fork_asm+0x1a/0x30 [ 261.477413][ T31] [ 261.480781][ T31] Kernel Offset: disabled [ 261.485130][ T31] Rebooting in 86400 seconds..