last executing test programs: 38.465691373s ago: executing program 4 (id=5): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000001600)=""/4112, 0x1010}], 0x1) 37.900867834s ago: executing program 4 (id=6): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x4048814) 37.717576168s ago: executing program 3 (id=4): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) ioctl$TCXONC(r0, 0x540a, 0x0) 37.500015274s ago: executing program 4 (id=8): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000000000010ac05470200000000000109022400010000500009040002010300010009210000000122f80409058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 36.979040151s ago: executing program 3 (id=12): rseq(0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x1, 0x0) pread64(r0, 0x0, 0x0, 0xce2) syz_usb_connect(0x0, 0x24, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) futex(0x0, 0xb, 0x2, 0x0, &(0x7f00000000c0)=0x2, 0x2) futex(&(0x7f000000cffc), 0x5, 0x4, 0x0, 0x0, 0x4ffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$kcm(0x29, 0x5, 0x0) userfaultfd(0x801) openat$tun(0xffffffffffffff9c, 0x0, 0x4e681, 0x0) r3 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r5, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000100)=0x5, r5, 0x0, 0x0, 0x1}}, 0x20) socket$unix(0x1, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000004, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x8, 0xffffffffffffffff, 0x9, 0x1000000000003, 0xf, 0x80000006}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r6 = syz_io_uring_setup(0x2f6f, &(0x7f0000000880)={0x0, 0x0, 0x100, 0x0, 0x104a}, &(0x7f0000000180), 0x0) io_uring_register$IORING_REGISTER_MEM_REGION(r6, 0x22, 0x0, 0x1) 35.396627096s ago: executing program 4 (id=14): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000140)={0x0, 0x15, 0x2, "d74c"}, 0x0, 0x0}) 35.391154016s ago: executing program 3 (id=15): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x50}}, 0x4800) 34.122584615s ago: executing program 3 (id=20): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c0003005c8f020048f0d8e54d23edfcbe6d55b57cb15e63c10080000000000000abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 33.118738586s ago: executing program 3 (id=23): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000001300)=ANY=[@ANYBLOB="0015f700000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x40, 0xf, 0xd, "432674290f1ffccd069f893457"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 31.728642045s ago: executing program 1 (id=25): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14) syz_emit_ethernet(0x9a, &(0x7f00000004c0)={@local, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2abe00", 0x64, 0x11, 0x0, @empty, @empty, {[], {0x0, 0x4f22, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x3, "8a8bebc4b04ccb77e7f3a5ca93d7c73e6c0c42d91e27fb2f15030dcafcdaca76", "e24fcb751eeaa8add0b2f075633f64c7", {"10fa9742846dea296c9d16d6e1249908", "51f3b6750c654f5d43fbb564be51ddae"}}}}}}}}, 0x0) 31.703521171s ago: executing program 2 (id=26): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040f0400016420"], 0x7) 31.67872417s ago: executing program 4 (id=27): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = open(&(0x7f0000000000)='./file0\x00', 0x1607c0, 0x78e22799f4a46ffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fcntl$setlease(r5, 0x400, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480)=0x17fe, 0x4) fcntl$setlease(r5, 0x400, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0xc5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x480, 0x0) 31.469352655s ago: executing program 0 (id=28): r0 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", "037ec42b", '\x00', "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386a7a0236a9cc1f0", "cf6cce2296b3f853e224c4e0"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000480)={0x9, 0x0, 0x9, 0x0, 0x0, 0x0, "0ff8000000000000c5c6ff0717c3a86d", 0x0, 0x2, 0x0, 0xff, 0x0, 0x1, 0xff}) 31.284965387s ago: executing program 2 (id=29): rseq(0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x1, 0x0) pread64(r0, 0x0, 0x0, 0xce2) syz_usb_connect(0x0, 0x24, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) futex(0x0, 0xb, 0x2, 0x0, &(0x7f00000000c0)=0x2, 0x2) futex(&(0x7f000000cffc), 0x5, 0x4, 0x0, 0x0, 0x4ffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$kcm(0x29, 0x5, 0x0) userfaultfd(0x801) openat$tun(0xffffffffffffff9c, 0x0, 0x4e681, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r4, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r4, 0xdf}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000100)=0x5, r4, 0x0, 0x0, 0x1}}, 0x20) socket$unix(0x1, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000004, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x8, 0xffffffffffffffff, 0x9, 0x1000000000003, 0xf, 0x80000006}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_setup(0x2f6f, &(0x7f0000000880)={0x0, 0x0, 0x100, 0x0, 0x104a}, &(0x7f0000000180), 0x0) io_uring_register$IORING_REGISTER_MEM_REGION(r5, 0x22, 0x0, 0x1) 31.270461583s ago: executing program 1 (id=30): socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) eventfd2(0x9, 0x800) socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) pipe2$9p(&(0x7f0000001900), 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) dup(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000050000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 31.077134552s ago: executing program 0 (id=31): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c9", @ANYBLOB=' '], 0x16) bpf$MAP_CREATE(0x0, 0x0, 0x50) 30.538440509s ago: executing program 1 (id=32): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000180)=',', 0x1) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00000003c0)="1c721c3eba50892646093830c24abe63a7938217f7a227c397dda2f0ac1f7b3715757c38dd7794dd1d", 0x29) 30.534138645s ago: executing program 0 (id=33): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 30.40676752s ago: executing program 2 (id=34): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="10", 0x5e0, 0x20008040, &(0x7f0000000080)={0x11, 0x8100, r1, 0x1, 0x6, 0x6, @broadcast}, 0x14) 30.187206376s ago: executing program 2 (id=35): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000400000014000500fc0100000000000000000000ad0000010800020003000000140006"], 0x4c}}, 0x0) 30.167407807s ago: executing program 1 (id=36): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000580)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0xfe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x80500, {0x2, 0x6, "081331", 0x9, 0xff, 0x0, @mcast1, @mcast2, [@srh={0x87, 0x0, 0x4, 0x0, 0x1, 0x40, 0x101}]}}}}}}}, 0x0) 30.089060659s ago: executing program 0 (id=37): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, 0x44118, 0x88f}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_COST={0x8, 0x3, 0x7f}, @IFLA_BRPORT_PRIORITY={0x6, 0x2, 0x3}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x811}, 0x4000000) 29.974381585s ago: executing program 3 (id=38): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000000000020700cb6f00000000000010902240001000090000904000001030000000921fcff000122030009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000580)=ANY=[@ANYBLOB="000c1c000000e52154"], 0x0, 0x0, 0x0, 0x0}, 0x0) 29.930477294s ago: executing program 2 (id=39): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1000000000) getgroups(0x0, 0x0) keyctl$chown(0x4, 0x0, 0xee01, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000001480), 0x0, 0x20000080, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 28.715146141s ago: executing program 0 (id=40): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x38, 0x0, 0x0, 0x2, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0xc2, 0x1, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x4, 0xd}, @mss={0x2, 0x4, 0x5df4}, @sack={0x5, 0x2}]}}}}}}}, 0x0) 28.582940669s ago: executing program 2 (id=41): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2db4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xa, "d017a35a"}]}}, 0x0}, 0x0) 28.548943589s ago: executing program 1 (id=42): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @remote}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000400)={&(0x7f0000000000)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000280)='+', 0xffe0}], 0x1, &(0x7f0000000180)=[@init={0x18, 0x84, 0x0, {0x7, 0x3, 0x6, 0x400}}, @sndinfo={0x20, 0x84, 0x2, {0x3, 0xb, 0xffff7ffe, 0xff}}], 0x38, 0x4014}, 0x2c0408d0) 28.105858668s ago: executing program 1 (id=43): socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) eventfd2(0x9, 0x800) socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) pipe2$9p(&(0x7f0000001900), 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) dup(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000050000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 28.046595843s ago: executing program 0 (id=44): rseq(0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x1, 0x0) pread64(r0, 0x0, 0x0, 0xce2) syz_usb_connect(0x0, 0x24, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) futex(0x0, 0xb, 0x2, 0x0, &(0x7f00000000c0)=0x2, 0x2) futex(&(0x7f000000cffc), 0x5, 0x4, 0x0, 0x0, 0x4ffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$kcm(0x29, 0x5, 0x0) userfaultfd(0x801) r3 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r5, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r5, 0xdf}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000100)=0x5, r5, 0x0, 0x0, 0x1}}, 0x20) socket$unix(0x1, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000004, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x8, 0xffffffffffffffff, 0x9, 0x1000000000003, 0xf, 0x80000006}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r6 = syz_io_uring_setup(0x2f6f, &(0x7f0000000880)={0x0, 0x0, 0x100, 0x0, 0x104a}, &(0x7f0000000180), 0x0) io_uring_register$IORING_REGISTER_MEM_REGION(r6, 0x22, 0x0, 0x1) 1.00601073s ago: executing program 32 (id=44): rseq(0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x1, 0x0) pread64(r0, 0x0, 0x0, 0xce2) syz_usb_connect(0x0, 0x24, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) futex(0x0, 0xb, 0x2, 0x0, &(0x7f00000000c0)=0x2, 0x2) futex(&(0x7f000000cffc), 0x5, 0x4, 0x0, 0x0, 0x4ffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$kcm(0x29, 0x5, 0x0) userfaultfd(0x801) r3 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r5, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r5, 0xdf}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000140)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000100)=0x5, r5, 0x0, 0x0, 0x1}}, 0x20) socket$unix(0x1, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000004, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x8, 0xffffffffffffffff, 0x9, 0x1000000000003, 0xf, 0x80000006}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r6 = syz_io_uring_setup(0x2f6f, &(0x7f0000000880)={0x0, 0x0, 0x100, 0x0, 0x104a}, &(0x7f0000000180), 0x0) io_uring_register$IORING_REGISTER_MEM_REGION(r6, 0x22, 0x0, 0x1) 780.009179ms ago: executing program 33 (id=43): socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) eventfd2(0x9, 0x800) socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) pipe2$9p(&(0x7f0000001900), 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) dup(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000050000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 593.742624ms ago: executing program 34 (id=41): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2db4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xa, "d017a35a"}]}}, 0x0}, 0x0) 391.792529ms ago: executing program 35 (id=38): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000000000020700cb6f00000000000010902240001000090000904000001030000000921fcff000122030009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000580)=ANY=[@ANYBLOB="000c1c000000e52154"], 0x0, 0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 36 (id=27): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = open(&(0x7f0000000000)='./file0\x00', 0x1607c0, 0x78e22799f4a46ffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fcntl$setlease(r5, 0x400, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480)=0x17fe, 0x4) fcntl$setlease(r5, 0x400, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0xc5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x480, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.16' (ED25519) to the list of known hosts. [ 89.003768][ T5824] cgroup: Unknown subsys name 'net' [ 89.251092][ T5824] cgroup: Unknown subsys name 'cpuset' [ 89.305657][ T5824] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.470314][ T5824] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.208488][ T31] cfg80211: failed to load regulatory.db [ 94.371947][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.373485][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.374259][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.396162][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.415098][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.533944][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 94.543283][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.544035][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 94.557291][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 94.558222][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.669118][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 94.670874][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 94.672318][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.672864][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 94.673866][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 94.684203][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 94.685768][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 94.687381][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.688609][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.695457][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.745091][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 94.748944][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 94.761966][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.787432][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.788315][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.538796][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 95.941100][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 95.951447][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 96.100273][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 96.112450][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 96.378947][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.380959][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.382072][ T5834] bridge_slave_0: entered allmulticast mode [ 96.386854][ T5834] bridge_slave_0: entered promiscuous mode [ 96.456714][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.456972][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.457131][ T59] Bluetooth: hci0: command tx timeout [ 96.457172][ T5834] bridge_slave_1: entered allmulticast mode [ 96.460146][ T5834] bridge_slave_1: entered promiscuous mode [ 96.685023][ T59] Bluetooth: hci1: command tx timeout [ 96.764989][ T59] Bluetooth: hci3: command tx timeout [ 96.845876][ T59] Bluetooth: hci4: command tx timeout [ 96.855318][ T59] Bluetooth: hci2: command tx timeout [ 97.080647][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.249043][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.249369][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.249529][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.249707][ T5837] bridge_slave_0: entered allmulticast mode [ 97.252938][ T5837] bridge_slave_0: entered promiscuous mode [ 97.302437][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.302593][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.302742][ T5841] bridge_slave_0: entered allmulticast mode [ 97.304700][ T5841] bridge_slave_0: entered promiscuous mode [ 97.456636][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.456788][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.457315][ T5837] bridge_slave_1: entered allmulticast mode [ 97.460316][ T5837] bridge_slave_1: entered promiscuous mode [ 97.546235][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.546380][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.546965][ T5841] bridge_slave_1: entered allmulticast mode [ 97.550132][ T5841] bridge_slave_1: entered promiscuous mode [ 98.076524][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.076673][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.076873][ T5838] bridge_slave_0: entered allmulticast mode [ 98.079945][ T5838] bridge_slave_0: entered promiscuous mode [ 98.085599][ T5834] team0: Port device team_slave_0 added [ 98.174664][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.175550][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.175790][ T5840] bridge_slave_0: entered allmulticast mode [ 98.179161][ T5840] bridge_slave_0: entered promiscuous mode [ 98.268059][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.268176][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.268377][ T5838] bridge_slave_1: entered allmulticast mode [ 98.271405][ T5838] bridge_slave_1: entered promiscuous mode [ 98.278181][ T5834] team0: Port device team_slave_1 added [ 98.279163][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.279315][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.279514][ T5840] bridge_slave_1: entered allmulticast mode [ 98.282742][ T5840] bridge_slave_1: entered promiscuous mode [ 98.292366][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.301078][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.525064][ T59] Bluetooth: hci0: command tx timeout [ 98.661063][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.663872][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.765691][ T59] Bluetooth: hci1: command tx timeout [ 98.845295][ T59] Bluetooth: hci3: command tx timeout [ 98.925165][ T5848] Bluetooth: hci4: command tx timeout [ 98.925328][ T59] Bluetooth: hci2: command tx timeout [ 99.075846][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.187938][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.187957][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.187986][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.193506][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.408716][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.409512][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.409524][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.409543][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.413297][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.431561][ T5837] team0: Port device team_slave_0 added [ 99.442728][ T5841] team0: Port device team_slave_0 added [ 99.631042][ T5837] team0: Port device team_slave_1 added [ 99.633284][ T5841] team0: Port device team_slave_1 added [ 99.919336][ T5838] team0: Port device team_slave_0 added [ 99.922889][ T5840] team0: Port device team_slave_0 added [ 100.087998][ T5838] team0: Port device team_slave_1 added [ 100.180364][ T5840] team0: Port device team_slave_1 added [ 100.181444][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.181460][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.181480][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.182670][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.182684][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.182710][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.605106][ T59] Bluetooth: hci0: command tx timeout [ 100.649919][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.649932][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.649952][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.651052][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.651065][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.651084][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.797447][ T5834] hsr_slave_0: entered promiscuous mode [ 100.799017][ T5834] hsr_slave_1: entered promiscuous mode [ 100.845153][ T59] Bluetooth: hci1: command tx timeout [ 100.908659][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.908678][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.908706][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.911981][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.911998][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.912017][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.918093][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.918114][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.918146][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.925002][ T59] Bluetooth: hci3: command tx timeout [ 100.927320][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.927338][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.927369][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.004989][ T59] Bluetooth: hci2: command tx timeout [ 101.005023][ T59] Bluetooth: hci4: command tx timeout [ 101.527133][ T5837] hsr_slave_0: entered promiscuous mode [ 101.528632][ T5837] hsr_slave_1: entered promiscuous mode [ 101.529777][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 101.529902][ T5837] Cannot create hsr debugfs directory [ 101.540810][ T5841] hsr_slave_0: entered promiscuous mode [ 101.542548][ T5841] hsr_slave_1: entered promiscuous mode [ 101.543627][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 101.543656][ T5841] Cannot create hsr debugfs directory [ 101.889383][ T5838] hsr_slave_0: entered promiscuous mode [ 101.891310][ T5838] hsr_slave_1: entered promiscuous mode [ 101.892204][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 101.892227][ T5838] Cannot create hsr debugfs directory [ 101.924681][ T5840] hsr_slave_0: entered promiscuous mode [ 101.927294][ T5840] hsr_slave_1: entered promiscuous mode [ 101.928419][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 101.928448][ T5840] Cannot create hsr debugfs directory [ 102.685353][ T5848] Bluetooth: hci0: command tx timeout [ 102.925210][ T5848] Bluetooth: hci1: command tx timeout [ 103.006446][ T5848] Bluetooth: hci3: command tx timeout [ 103.084992][ T5848] Bluetooth: hci4: command tx timeout [ 103.085024][ T5848] Bluetooth: hci2: command tx timeout [ 103.688729][ T5834] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 103.734267][ T5834] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 103.776583][ T5834] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 103.830494][ T5834] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 103.944231][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 103.994142][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 104.044026][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 104.102638][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 104.263245][ T5841] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 104.308785][ T5841] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 104.346662][ T5841] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 104.411571][ T5841] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 104.643411][ T5838] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.693227][ T5838] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.740252][ T5838] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.792349][ T5838] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.956756][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.997856][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.017665][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.053838][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.094765][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.214689][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.263700][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.291780][ T1580] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.292313][ T1580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.353723][ T1580] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.353847][ T1580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.428317][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.490216][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.517230][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.517475][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.573091][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.573865][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.658141][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.719440][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.719661][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.745776][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.799566][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.799733][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.953934][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.974129][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.041370][ T1580] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.041536][ T1580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.128780][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.128939][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.174085][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.281038][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.281287][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.351081][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.351263][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.402502][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.643678][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.065296][ T5837] veth0_vlan: entered promiscuous mode [ 107.136100][ T5837] veth1_vlan: entered promiscuous mode [ 107.338535][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.420678][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.424381][ T5837] veth0_macvtap: entered promiscuous mode [ 107.462113][ T5837] veth1_macvtap: entered promiscuous mode [ 107.490533][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.562326][ T5834] veth0_vlan: entered promiscuous mode [ 107.603956][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.640656][ T5834] veth1_vlan: entered promiscuous mode [ 107.671788][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.712241][ T5841] veth0_vlan: entered promiscuous mode [ 107.764160][ T80] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.783833][ T80] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.822236][ T1106] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.851799][ T1106] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.865303][ T5841] veth1_vlan: entered promiscuous mode [ 107.872543][ T5840] veth0_vlan: entered promiscuous mode [ 108.033747][ T5838] veth0_vlan: entered promiscuous mode [ 108.046910][ T5840] veth1_vlan: entered promiscuous mode [ 108.136493][ T5834] veth0_macvtap: entered promiscuous mode [ 108.158228][ T5838] veth1_vlan: entered promiscuous mode [ 108.194580][ T5834] veth1_macvtap: entered promiscuous mode [ 108.292103][ T5841] veth0_macvtap: entered promiscuous mode [ 108.306188][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.306216][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.352226][ T5841] veth1_macvtap: entered promiscuous mode [ 108.371327][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.434553][ T5840] veth0_macvtap: entered promiscuous mode [ 108.445772][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.445792][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.448980][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.513906][ T5840] veth1_macvtap: entered promiscuous mode [ 108.563446][ T1106] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.570763][ T1106] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.577760][ T5838] veth0_macvtap: entered promiscuous mode [ 108.579773][ T1106] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.603513][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.603619][ T1106] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.680729][ T5838] veth1_macvtap: entered promiscuous mode [ 108.705947][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.742879][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.827437][ T37] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.833952][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.884611][ T37] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.930045][ T37] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.962242][ T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.991373][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.014858][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.082626][ T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.118369][ T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.147730][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.150152][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.215494][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.215514][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.295129][ T5931] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 109.338257][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.342696][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.356487][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.446056][ T5931] usb 3-1: Using ep0 maxpacket: 16 [ 109.467023][ T5931] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 109.467079][ T5931] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 109.467125][ T5931] usb 3-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 109.467149][ T5931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.514162][ T5931] usb 3-1: config 0 descriptor?? [ 109.551100][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.673295][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.673317][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.959205][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.959225][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.060712][ T5931] saitek 0003:06A3:0621.0001: unknown main item tag 0x0 [ 110.060753][ T5931] saitek 0003:06A3:0621.0001: unknown main item tag 0x0 [ 110.060779][ T5931] saitek 0003:06A3:0621.0001: unknown main item tag 0x0 [ 110.060805][ T5931] saitek 0003:06A3:0621.0001: unknown main item tag 0x0 [ 110.060830][ T5931] saitek 0003:06A3:0621.0001: unknown main item tag 0x0 [ 110.088001][ T5931] saitek 0003:06A3:0621.0001: hidraw0: USB HID v0.05 Device [HID 06a3:0621] on usb-dummy_hcd.2-1/input0 [ 110.163523][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.163544][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.265581][ T989] usb 3-1: USB disconnect, device number 2 [ 110.417283][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.417304][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.501721][ T5956] fido_id[5956]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 110.599122][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.599144][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.682206][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.682229][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.823049][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.823072][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.172739][ T5965] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 111.327979][ T5967] Bluetooth: MGMT ver 1.23 [ 111.557043][ T2161] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 111.738278][ T2161] usb 5-1: Using ep0 maxpacket: 16 [ 111.744543][ T2161] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.744577][ T2161] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.744599][ T2161] usb 5-1: config 0 interface 0 has no altsetting 0 [ 111.744645][ T2161] usb 5-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 111.744668][ T2161] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.802043][ T2161] usb 5-1: config 0 descriptor?? [ 111.904966][ T5895] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 112.045517][ T5951] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 112.062914][ T5895] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 112.062950][ T5895] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 112.063044][ T5895] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 112.063070][ T5895] usb 2-1: config 220 has no interface number 2 [ 112.063877][ T5895] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 112.063915][ T5895] usb 2-1: config 220 interface 0 has no altsetting 0 [ 112.063936][ T5895] usb 2-1: config 220 interface 76 has no altsetting 0 [ 112.064031][ T5895] usb 2-1: config 220 interface 1 has no altsetting 0 [ 112.087397][ T5895] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 112.089211][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.089247][ T5895] usb 2-1: Product: syz [ 112.089265][ T5895] usb 2-1: Manufacturer: syz [ 112.089283][ T5895] usb 2-1: SerialNumber: syz [ 112.184920][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.275115][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.275266][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.275331][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.275390][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.276026][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.276109][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.276168][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.276375][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.276433][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.520068][ T5951] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 112.520098][ T5951] usb 3-1: config 0 has no interface number 0 [ 112.520151][ T5951] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 112.520176][ T5951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.549921][ T2161] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 112.549968][ T2161] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 112.550071][ T2161] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 112.550102][ T2161] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 112.550134][ T2161] apple 0003:05AC:0247.0002: unknown main item tag 0x0 [ 112.637131][ T5951] usb 3-1: config 0 descriptor?? [ 112.650483][ T2161] apple 0003:05AC:0247.0002: unexpected long global item [ 112.651455][ T2161] apple 0003:05AC:0247.0002: parse failed [ 112.651573][ T2161] apple 0003:05AC:0247.0002: probe with driver apple failed with error -22 [ 112.725750][ T5895] usb 2-1: selecting invalid altsetting 0 [ 112.786943][ T5895] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 112.787069][ T5895] usb 2-1: No valid video chain found. [ 112.895039][ T5951] usb 3-1: selecting invalid altsetting 1 [ 112.898760][ T5951] dvb_ttusb_budget: ttusb_init_controller: error [ 112.899943][ T5951] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 113.193797][ T5895] usb 2-1: selecting invalid altsetting 0 [ 113.193841][ T5895] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 113.216505][ T2161] usb 5-1: USB disconnect, device number 2 [ 113.305376][ T5895] usb 2-1: USB disconnect, device number 2 [ 114.038692][ T5951] DVB: Unable to find symbol cx22700_attach() [ 114.305133][ T5980] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 114.455012][ T5980] usb 5-1: Using ep0 maxpacket: 32 [ 114.457514][ T5980] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 114.457564][ T5980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.542421][ T5980] usb 5-1: config 0 descriptor?? [ 114.609787][ T5980] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 114.853228][ T5951] DVB: Unable to find symbol tda10046_attach() [ 114.853246][ T5951] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 114.931550][ T5951] usb 3-1: USB disconnect, device number 3 [ 114.935687][ T44] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 115.095082][ T44] usb 2-1: Using ep0 maxpacket: 32 [ 115.101158][ T44] usb 2-1: config 4 has an invalid interface number: 128 but max is 0 [ 115.101186][ T44] usb 2-1: config 4 has no interface number 0 [ 115.101235][ T44] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.101259][ T44] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.101296][ T44] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 115.101319][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.188711][ T44] hub 2-1:4.128: USB hub found [ 115.457779][ T2161] usb 5-1: USB disconnect, device number 3 [ 115.484526][ T44] hub 2-1:4.128: 9 ports detected [ 115.484587][ T44] hub 2-1:4.128: Using single TT (err -22) [ 115.492316][ T44] hub 2-1:4.128: insufficient power available to use all downstream ports [ 115.738718][ T59] Bluetooth: latency 3388 > 499 [ 115.993694][ T44] hub 2-1:4.128: hub_hub_status failed (err = -71) [ 115.993722][ T44] hub 2-1:4.128: config failed, can't get hub status (err -71) [ 116.033637][ T44] usb 2-1: USB disconnect, device number 3 [ 117.076912][ T2161] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 117.237571][ T2161] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 117.237602][ T2161] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.275896][ T2161] usb 4-1: config 0 descriptor?? [ 117.307197][ T2161] cp210x 4-1:0.0: cp210x converter detected [ 117.747670][ T2161] usb 4-1: cp210x converter now attached to ttyUSB0 [ 117.794123][ T59] Bluetooth: hci2: Invalid handle: 0x20c9 > 0x0eff [ 117.805628][ T5848] Bluetooth: hci2: command tx timeout [ 117.995138][ T2161] usb 4-1: USB disconnect, device number 2 [ 118.098359][ T2161] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 118.235696][ T2161] cp210x 4-1:0.0: device disconnected [ 118.609562][ T6059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.35'. [ 119.145804][ T2161] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 119.205988][ T6064] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.375615][ T2161] usb 4-1: Using ep0 maxpacket: 32 [ 119.744966][ T2161] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.745002][ T2161] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.745046][ T2161] usb 4-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 119.745070][ T2161] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.812658][ T2161] usb 4-1: config 0 descriptor?? [ 120.353507][ T2161] hid (null): unknown global tag 0xe [ 120.396460][ T2161] aquacomputer_d5next 0003:0C70:F0B6.0003: unknown global tag 0xe [ 120.396486][ T2161] aquacomputer_d5next 0003:0C70:F0B6.0003: item 0 1 1 14 parsing failed [ 120.397452][ T2161] aquacomputer_d5next 0003:0C70:F0B6.0003: probe with driver aquacomputer_d5next failed with error -22 [ 120.626997][ T2161] usb 4-1: USB disconnect, device number 3 [ 120.645927][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 120.835065][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 120.837732][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.837766][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.837807][ T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 120.837830][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.902315][ T9] usb 3-1: config 0 descriptor?? [ 128.466423][ C1] sched: DL replenish lagged too much [ 140.999022][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.999126][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 147.385126][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 147.385270][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 147.442545][ T9] usb 3-1: USB disconnect, device number 4 [ 150.802706][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 150.818000][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 150.819354][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 150.835032][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 150.864967][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 151.046515][ T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 151.099924][ T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 151.102846][ T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 151.105696][ T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 151.106558][ T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 151.415156][ T59] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 151.419403][ T59] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 151.424167][ T59] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 151.453018][ T59] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 151.454002][ T59] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 151.669022][ T59] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 151.674389][ T59] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 151.693003][ T59] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 151.694377][ T59] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 151.695583][ T59] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 151.840128][ T5848] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 151.854618][ T5848] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 151.863079][ T5848] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 151.875474][ T5848] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 151.877585][ T5848] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 152.925080][ T5848] Bluetooth: hci5: command tx timeout [ 153.165428][ T5848] Bluetooth: hci6: command tx timeout [ 153.565097][ T5848] Bluetooth: hci7: command tx timeout [ 153.805062][ T5848] Bluetooth: hci8: command tx timeout [ 153.965067][ T5848] Bluetooth: hci9: command tx timeout [ 155.009863][ T5848] Bluetooth: hci5: command tx timeout [ 155.245289][ T5848] Bluetooth: hci6: command tx timeout [ 155.645198][ T5848] Bluetooth: hci7: command tx timeout [ 155.885007][ T5848] Bluetooth: hci8: command tx timeout [ 156.049701][ T5848] Bluetooth: hci9: command tx timeout [ 157.086521][ T5848] Bluetooth: hci5: command tx timeout [ 157.325153][ T5848] Bluetooth: hci6: command tx timeout [ 157.725030][ T5848] Bluetooth: hci7: command tx timeout [ 157.965341][ T5848] Bluetooth: hci8: command tx timeout [ 158.127448][ T5848] Bluetooth: hci9: command tx timeout [ 159.165001][ T5848] Bluetooth: hci5: command tx timeout [ 159.407219][ T5848] Bluetooth: hci6: command tx timeout [ 159.805046][ T5848] Bluetooth: hci7: command tx timeout [ 160.084934][ T5848] Bluetooth: hci8: command tx timeout [ 160.161352][ T6102] chnl_net:caif_netlink_parms(): no params data found [ 160.222655][ T5848] Bluetooth: hci9: command tx timeout [ 181.254596][ T6106] chnl_net:caif_netlink_parms(): no params data found [ 181.296715][ T6108] chnl_net:caif_netlink_parms(): no params data found [ 181.329910][ T6110] chnl_net:caif_netlink_parms(): no params data found [ 182.520663][ T6104] chnl_net:caif_netlink_parms(): no params data found [ 199.744578][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.744675][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 210.156894][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 210.182007][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 210.197282][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 210.198932][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 210.224678][ T5154] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 210.361986][ T5154] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 210.372265][ T5154] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 210.373576][ T5154] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 210.374991][ T5154] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 210.386592][ T5154] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 211.270763][ T5836] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 211.315796][ T5836] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 211.324617][ T5836] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 211.335998][ T5836] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 211.349935][ T5836] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 211.704729][ T5842] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 211.724680][ T5842] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 211.734208][ T5842] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 211.806664][ T5842] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 211.808190][ T5842] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 212.061654][ T5846] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 212.086448][ T5846] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 212.087944][ T5846] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 212.089266][ T5846] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 212.090175][ T5846] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 225.328329][ T5848] Bluetooth: hci1: command tx timeout [ 225.328603][ T5848] Bluetooth: hci13: command tx timeout [ 225.328706][ T5848] Bluetooth: hci12: command tx timeout [ 225.328798][ T5848] Bluetooth: hci11: command tx timeout [ 225.328885][ T5848] Bluetooth: hci10: command tx timeout [ 227.405031][ T5848] Bluetooth: hci12: command tx timeout [ 227.405066][ T5848] Bluetooth: hci10: command tx timeout [ 227.405088][ T5848] Bluetooth: hci11: command tx timeout [ 227.405109][ T5848] Bluetooth: hci13: command tx timeout [ 227.405131][ T5848] Bluetooth: hci1: command tx timeout [ 229.485169][ T5154] Bluetooth: hci1: command tx timeout [ 229.485205][ T5154] Bluetooth: hci13: command tx timeout [ 229.485228][ T5154] Bluetooth: hci11: command tx timeout [ 229.485250][ T5154] Bluetooth: hci10: command tx timeout [ 229.485272][ T5154] Bluetooth: hci12: command tx timeout [ 231.575130][ T5848] Bluetooth: hci12: command tx timeout [ 231.575165][ T5848] Bluetooth: hci10: command tx timeout [ 231.575189][ T5848] Bluetooth: hci11: command tx timeout [ 231.575210][ T5848] Bluetooth: hci13: command tx timeout [ 231.575233][ T5848] Bluetooth: hci1: command tx timeout [ 259.055653][ T6108] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 261.490390][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.490503][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 270.934040][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 270.951542][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 270.963763][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 270.980726][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 270.992927][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 271.181704][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 271.192981][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 271.194466][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 271.212152][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 271.227214][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 271.336896][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 271.353638][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 271.363547][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 271.384508][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 271.394537][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 271.905723][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 271.918154][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 271.919191][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 271.935596][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 271.950862][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 272.640096][ T6167] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 272.642294][ T6167] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 272.643301][ T6167] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 272.644622][ T6167] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 272.685029][ T6167] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 273.654929][ T6167] Bluetooth: hci6: command 0x0406 tx timeout [ 278.625640][ T6208] Bluetooth: hci8: command 0x0406 tx timeout [ 293.085210][ T59] Bluetooth: hci14: command tx timeout [ 293.085485][ T59] Bluetooth: hci3: command tx timeout [ 293.085592][ T59] Bluetooth: hci0: command tx timeout [ 293.085685][ T59] Bluetooth: hci2: command tx timeout [ 293.123149][ T5842] Bluetooth: hci4: command tx timeout [ 295.165165][ T59] Bluetooth: hci3: command tx timeout [ 295.165199][ T59] Bluetooth: hci0: command tx timeout [ 295.165223][ T59] Bluetooth: hci2: command tx timeout [ 295.165245][ T59] Bluetooth: hci14: command tx timeout [ 295.194780][ T5842] Bluetooth: hci4: command tx timeout [ 297.245179][ T59] Bluetooth: hci14: command tx timeout [ 297.245215][ T59] Bluetooth: hci4: command tx timeout [ 297.245237][ T59] Bluetooth: hci2: command tx timeout [ 297.245259][ T59] Bluetooth: hci0: command tx timeout [ 297.245282][ T59] Bluetooth: hci3: command tx timeout [ 299.325329][ T59] Bluetooth: hci3: command tx timeout [ 299.325366][ T59] Bluetooth: hci2: command tx timeout [ 299.325389][ T59] Bluetooth: hci4: command tx timeout [ 299.325411][ T59] Bluetooth: hci14: command tx timeout [ 299.325488][ T6167] Bluetooth: hci0: command tx timeout [ 322.624678][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.625624][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 331.103071][ T5842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 331.134910][ T5842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 331.153134][ T5842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 331.154468][ T5842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 331.175227][ T5842] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 331.927428][ T6167] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 331.930534][ T6167] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 331.955420][ T6167] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 331.984934][ T6167] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 331.985819][ T6167] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 332.147111][ T5842] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 332.150291][ T5842] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 332.151340][ T5842] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 332.153192][ T5842] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 332.184602][ T5842] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 332.284084][ T6167] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 332.299338][ T6167] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 332.302226][ T6167] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 332.332876][ T6167] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 332.351097][ T6167] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 332.655912][ T5842] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 332.658771][ T5842] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 332.659785][ T5842] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 332.661671][ T5842] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 332.663910][ T5842] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 333.337959][ T6167] Bluetooth: hci5: command tx timeout [ 334.045043][ T6167] Bluetooth: hci6: command tx timeout [ 334.284987][ T6167] Bluetooth: hci7: command tx timeout [ 334.444947][ T6167] Bluetooth: hci9: command tx timeout [ 334.772297][ T6167] Bluetooth: hci15: command tx timeout [ 335.405339][ T5842] Bluetooth: hci5: command tx timeout [ 336.125107][ T5842] Bluetooth: hci6: command tx timeout [ 336.370458][ T5842] Bluetooth: hci7: command tx timeout [ 336.535056][ T5842] Bluetooth: hci9: command tx timeout [ 336.855099][ T5842] Bluetooth: hci15: command tx timeout [ 337.488659][ T5842] Bluetooth: hci5: command tx timeout [ 338.205248][ T5842] Bluetooth: hci6: command tx timeout [ 338.444935][ T5842] Bluetooth: hci7: command tx timeout [ 338.605156][ T5842] Bluetooth: hci9: command tx timeout [ 338.924924][ T5842] Bluetooth: hci15: command tx timeout [ 339.565185][ T5842] Bluetooth: hci5: command tx timeout [ 340.288353][ T5842] Bluetooth: hci6: command tx timeout [ 340.525057][ T5842] Bluetooth: hci7: command tx timeout [ 340.684985][ T5842] Bluetooth: hci9: command tx timeout [ 341.004990][ T5842] Bluetooth: hci15: command tx timeout [ 375.725471][ T39] INFO: task syz-executor:5840 blocked for more than 143 seconds. [ 375.725504][ T39] Not tainted syzkaller #0 [ 375.725516][ T39] Blocked by coredump. [ 375.725523][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 375.725536][ T39] task:syz-executor state:D stack:21288 pid:5840 tgid:5840 ppid:1 task_flags:0x40054c flags:0x00004006 [ 375.725612][ T39] Call Trace: [ 375.725620][ T39] [ 375.725635][ T39] __schedule+0x16f3/0x4c20 [ 375.725710][ T39] ? __pfx___schedule+0x10/0x10 [ 375.725761][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 375.725798][ T39] rt_mutex_schedule+0x77/0xf0 [ 375.725821][ T39] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 375.725847][ T39] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 375.725894][ T39] rt_mutex_slowlock+0x2b1/0x6e0 [ 375.725923][ T39] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 375.725951][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 375.725997][ T39] ? __pfx___fsnotify_parent+0x10/0x10 [ 375.726036][ T39] ? tun_chr_close+0x41/0x1c0 [ 375.726067][ T39] mutex_lock_nested+0x16a/0x1d0 [ 375.726108][ T39] ? __pfx_tun_chr_close+0x10/0x10 [ 375.726140][ T39] tun_chr_close+0x41/0x1c0 [ 375.726172][ T39] __fput+0x45b/0xa80 [ 375.726206][ T39] task_work_run+0x1d4/0x260 [ 375.726232][ T39] ? __pfx_task_work_run+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 375.726254][ T39] ? do_exit+0x6b0/0x2300 [ 375.726273][ T39] ? kmem_cache_free+0x195/0x510 [ 375.726314][ T39] do_exit+0x6b5/0x2300 [ 375.726314][ T39] do_exit+0x6b5/0x2300 [ 375.726334][ T39] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 375.726370][ T39] ? __lock_acquire+0xab9/0xd20 [ 375.726401][ T39] ? __pfx_do_exit+0x10/0x10 [ 375.726418][ T39] ? rt_mutex_slowunlock+0x493/0x8a0 [ 375.726448][ T39] ? rt_spin_lock+0x1bb/0x2c0 [ 375.726484][ T39] do_group_exit+0x21c/0x2d0 [ 375.726511][ T39] get_signal+0x125e/0x1310 [ 375.726583][ T39] arch_do_signal_or_restart+0x9a/0x750 [ 375.726611][ T39] ? fput_close_sync+0x119/0x200 [ 375.726632][ T39] ? kmem_cache_free+0x402/0x510 [ 375.726664][ T39] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 375.726709][ T39] ? exit_to_user_mode_loop+0x40/0x110 [ 375.726744][ T39] exit_to_user_mode_loop+0x75/0x110 [ 375.726775][ T39] do_syscall_64+0x2bd/0x3b0 [ 375.726795][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 375.726827][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.726849][ T39] ? clear_bhb_loop+0x60/0xb0 [ 375.726876][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.726903][ T39] RIP: 0033:0x7f6a4b1dd80a [ 375.726926][ T39] RSP: 002b:00007fff00a184f0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 375.726948][ T39] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00007f6a4b1dd80a [ 375.726962][ T39] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 375.726975][ T39] RBP: 00007fff00a1854c R08: 0000000000000000 R09: 00007fff00a18257 [ 375.726989][ T39] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000a [ 375.727003][ T39] R13: 000000000000003c R14: 000000000001d635 R15: 00007fff00a185a0 [ 375.727037][ T39] [ 375.727075][ T39] INFO: task kworker/1:9:6088 blocked for more than 143 seconds. [ 375.727089][ T39] Not tainted syzkaller #0 [ 375.727100][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 375.727110][ T39] task:kworker/1:9 state:D stack:21448 pid:6088 tgid:6088 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 375.727169][ T39] Workqueue: events_power_efficient reg_check_chans_work [ 375.727203][ T39] Call Trace: [ 375.727210][ T39] [ 375.727224][ T39] __schedule+0x16f3/0x4c20 [ 375.727284][ T39] ? __pfx___schedule+0x10/0x10 [ 375.727342][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 375.727378][ T39] rt_mutex_schedule+0x77/0xf0 [ 375.727399][ T39] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 375.727426][ T39] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 375.727472][ T39] rt_mutex_slowlock+0x2b1/0x6e0 [ 375.727501][ T39] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 375.727529][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 375.727553][ T39] ? __lock_acquire+0xab9/0xd20 [ 375.727595][ T39] ? reg_check_chans_work+0x95/0xf30 [ 375.727634][ T39] ? __lock_acquire+0xab9/0xd20 [ 375.730896][ T39] ? reg_check_chans_work+0x95/0xf30 [ 375.730938][ T39] mutex_lock_nested+0x16a/0x1d0 [ 375.730965][ T39] ? do_raw_spin_lock+0x121/0x290 [ 375.730996][ T39] reg_check_chans_work+0x95/0xf30 [ 375.731036][ T39] ? __lock_acquire+0xab9/0xd20 [ 375.731074][ T39] ? __pfx_reg_check_chans_work+0x10/0x10 [ 375.731109][ T39] ? process_scheduled_works+0x9ef/0x17b0 [ 375.731144][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 375.731174][ T39] ? process_scheduled_works+0x9ef/0x17b0 [ 375.731201][ T39] ? process_scheduled_works+0x9ef/0x17b0 [ 375.731231][ T39] process_scheduled_works+0xade/0x17b0 [ 375.731293][ T39] ? __pfx_process_scheduled_works+0x10/0x10 [ 375.731351][ T39] worker_thread+0x8a0/0xda0 [ 375.731383][ T39] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 375.731426][ T39] ? __kthread_parkme+0x7b/0x200 [ 375.731468][ T39] kthread+0x70e/0x8a0 [ 375.731505][ T39] ? __pfx_worker_thread+0x10/0x10 [ 375.731533][ T39] ? __pfx_kthread+0x10/0x10 [ 375.731571][ T39] ? __pfx_kthread+0x10/0x10 [ 375.731607][ T39] ret_from_fork+0x439/0x7d0 [ 375.731639][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 375.731675][ T39] ? __switch_to_asm+0x39/0x70 [ 375.731696][ T39] ? __switch_to_asm+0x33/0x70 [ 375.731716][ T39] ? __pfx_kthread+0x10/0x10 [ 375.731751][ T39] ret_from_fork_asm+0x1a/0x30 [ 375.731790][ T39] [ 375.731837][ T39] [ 375.731837][ T39] Showing all locks held in the system: [ 375.731850][ T39] 2 locks held by rcuc/1/28: [ 375.731862][ T39] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 375.731922][ T39] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 375.731979][ T39] 6 locks held by ktimers/1/29: [ 375.731992][ T39] 2 locks held by ksoftirqd/1/30: [ 375.732004][ T39] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 375.732059][ T39] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 375.732116][ T39] 4 locks held by kworker/1:0/31: [ 375.732128][ T39] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 375.732184][ T39] #1: ffffc90000a5fbc0 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 375.732241][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 375.732303][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 375.732362][ T39] 1 lock held by khungtaskd/39: [ 375.732373][ T39] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 375.732427][ T39] 2 locks held by kworker/u8:3/57: [ 375.732447][ T39] 2 locks held by kworker/1:2/989: [ 375.732464][ T39] 3 locks held by kworker/u8:11/1580: [ 375.732476][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 375.732532][ T39] #1: ffffc90005707bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 375.732587][ T39] #2: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 375.732653][ T39] 2 locks held by getty/5596: [ 375.732665][ T39] #0: ffff88823bf768a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 375.732727][ T39] #1: ffffc90003e832e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 375.732785][ T39] 1 lock held by syz-executor/5837: [ 375.732797][ T39] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 375.732848][ T39] 1 lock held by syz-executor/5838: [ 375.732860][ T39] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 375.732921][ T39] 1 lock held by syz-executor/5840: [ 375.732933][ T39] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 375.732992][ T39] 1 lock held by syz-executor/5841: [ 375.733004][ T39] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 375.733068][ T39] 4 locks held by kworker/1:4/5903: [ 375.733080][ T39] #0: ffff88805c4c2938 ((wq_completion)wg-crypt-wg1#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 375.733142][ T39] #1: ffffc90004ef7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 375.733223][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 375.733278][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 375.733355][ T39] 2 locks held by kworker/1:5/5931: [ 375.733368][ T39] 3 locks held by kworker/0:7/5980: [ 375.733380][ T39] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 375.733436][ T39] #1: ffffc90005617bc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 375.733491][ T39] #2: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 375.733543][ T39] 1 lock held by syz.4.27/6057: [ 375.733555][ T39] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 375.733614][ T39] 3 locks held by kworker/u8:13/6084: [ 375.733627][ T39] #0: ffff8880300a5138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 375.733683][ T39] #1: ffffc9000589fbc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 375.733741][ T39] #2: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 375.733798][ T39] 3 locks held by kworker/1:9/6088: [ 375.733810][ T39] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 375.733866][ T39] #1: ffffc900058bfbc0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 375.733921][ T39] #2: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x95/0xf30 [ 375.733983][ T39] 1 lock held by syz-executor/6102: [ 375.733995][ T39] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 375.734055][ T39] 1 lock held by syz-executor/6104: [ 375.734067][ T39] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 375.734127][ T39] 1 lock held by syz-executor/6106: [ 375.734139][ T39] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 375.734199][ T39] 1 lock held by syz-executor/6108: [ 375.734211][ T39] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 375.734270][ T39] 1 lock held by syz-executor/6110: [ 375.734282][ T39] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 375.734349][ T39] 4 locks held by kworker/1:11/6113: [ 375.734361][ T39] #0: ffff88805c4cd938 ((wq_completion)wg-crypt-wg2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 375.734417][ T39] #1: ffffc90004e87bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 375.734501][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 375.734555][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 375.734609][ T39] 4 locks held by kworker/1:12/6114: [ 375.734620][ T39] #0: ffff88805c0b4138 ((wq_completion)wg-crypt-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 375.914809][ T39] #1: ffffc90005a17bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 375.914902][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 375.914957][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 375.915014][ T39] 4 locks held by kworker/1:13/6120: [ 375.915027][ T39] #0: ffff88805c467d38 ((wq_completion)wg-crypt-wg1#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 375.915086][ T39] #1: ffffc90005a77bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 375.915158][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 375.915212][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 375.915267][ T39] 4 locks held by kworker/1:14/6121: [ 375.915287][ T39] #0: ffff88805c4c1138 ((wq_completion)wg-crypt-wg1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 375.915341][ T39] #1: ffffc90005a87bc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 375.915396][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 375.915449][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 375.915503][ T39] 4 locks held by kworker/1:15/6122: [ 375.915515][ T39] #0: ffff88805c0c9138 ((wq_completion)wg-crypt-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 375.915574][ T39] #1: ffffc90005a97bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 375.915646][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 375.915700][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 375.915755][ T39] 4 locks held by kworker/1:16/6133: [ 375.915768][ T39] #0: ffff88805c464938 ((wq_completion)wg-kex-wg0#8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 375.915827][ T39] #1: ffffc90005af7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 375.915900][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 375.915954][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 375.916009][ T39] 4 locks held by kworker/1:17/6138: [ 375.916021][ T39] #0: ffff88805c467d38 ((wq_completion)wg-crypt-wg1#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 375.916081][ T39] #1: ffffc90003fefbc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 375.916136][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 375.916189][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 375.916243][ T39] 4 locks held by kworker/1:18/6139: [ 375.916255][ T39] #0: ffff888019899138 ((wq_completion)events_long){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 375.916316][ T39] #1: ffffc90003fdfbc0 ((work_completion)(&(&ipvs->defense_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 375.916373][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 375.916425][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 375.916480][ T39] 2 locks held by syz-executor/6151: [ 375.916492][ T39] #0: ffff88803dbb8e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 375.916547][ T39] #1: ffff88803dbb80a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 375.916606][ T39] 3 locks held by syz-executor/6152: [ 375.916618][ T39] #0: ffff8880283d0e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 375.916670][ T39] #1: ffff8880283d00a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 375.916727][ T39] #2: ffffffff8ee3b0d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 375.916777][ T39] 3 locks held by syz-executor/6158: [ 375.916788][ T39] #0: ffff888073ab4e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 375.916842][ T39] #1: ffff888073ab40a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 375.916899][ T39] #2: ffffffff8ee3b0d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 375.916948][ T39] 4 locks held by syz-executor/6162: [ 375.916960][ T39] #0: ffff888058ae8e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 375.917013][ T39] #1: ffff888058ae80a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 375.917071][ T39] #2: ffffffff8ee3b0d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 375.917119][ T39] #3: ffff888032d76b58 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 375.917184][ T39] 3 locks held by syz-executor/6164: [ 375.917196][ T39] #0: ffff888058ae0e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 375.917250][ T39] #1: ffff888058ae00a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 375.917311][ T39] #2: ffffffff8ee3b0d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 375.917362][ T39] 4 locks held by kworker/1:20/6177: [ 375.917374][ T39] #0: ffff88805c4cd938 ((wq_completion)wg-crypt-wg2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 375.917429][ T39] #1: ffffc90003f3fbc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 375.917484][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 375.917538][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 375.917593][ T39] 2 locks held by kworker/1:21/6178: [ 375.917606][ T39] 4 locks held by kworker/1:22/6179: [ 375.917618][ T39] 1 lock held by syz-executor/6186: [ 375.917630][ T39] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 375.917682][ T39] 1 lock held by syz-executor/6189: [ 375.917693][ T39] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 375.917743][ T39] 1 lock held by syz-executor/6190: [ 375.917755][ T39] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 375.917805][ T39] 1 lock held by syz-executor/6196: [ 375.917817][ T39] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 375.917866][ T39] 1 lock held by syz-executor/6198: [ 375.917878][ T39] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 375.917929][ T39] 4 locks held by kworker/1:23/6207: [ 375.917941][ T39] #0: ffff888029929d38 ((wq_completion)wg-crypt-wg0#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 375.918000][ T39] #1: ffffc90003a5fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 375.918073][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 375.918127][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 375.918183][ T39] 1 lock held by syz-executor/6225: [ 375.918195][ T39] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 375.918246][ T39] 1 lock held by syz-executor/6231: [ 375.918257][ T39] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 375.918313][ T39] 1 lock held by syz-executor/6233: [ 375.918325][ T39] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 375.918375][ T39] 1 lock held by syz-executor/6234: [ 375.918386][ T39] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 375.918436][ T39] 1 lock held by syz-executor/6237: [ 375.918448][ T39] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 375.918499][ T39] [ 375.918504][ T39] ============================================= [ 375.918504][ T39] [ 375.918532][ T39] NMI backtrace for cpu 0 [ 375.918564][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 375.918609][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 375.918631][ T39] Call Trace: [ 375.918646][ T39] [ 375.918662][ T39] dump_stack_lvl+0x189/0x250 [ 375.918728][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 375.918786][ T39] ? __pfx__printk+0x10/0x10 [ 375.918857][ T39] nmi_cpu_backtrace+0x39e/0x3d0 [ 375.918914][ T39] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 375.918971][ T39] ? __pfx__printk+0x10/0x10 [ 375.919023][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 375.919077][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 375.919132][ T39] watchdog+0xf93/0xfe0 [ 375.919194][ T39] ? watchdog+0x1de/0xfe0 [ 375.919247][ T39] kthread+0x70e/0x8a0 [ 375.919290][ T39] ? __pfx_watchdog+0x10/0x10 [ 375.919316][ T39] ? __pfx_kthread+0x10/0x10 [ 375.919353][ T39] ? __pfx_kthread+0x10/0x10 [ 375.919385][ T39] ret_from_fork+0x439/0x7d0 [ 375.919416][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 375.919449][ T39] ? __switch_to_asm+0x39/0x70 [ 375.919468][ T39] ? __switch_to_asm+0x33/0x70 [ 375.919486][ T39] ? __pfx_kthread+0x10/0x10 [ 375.919519][ T39] ret_from_fork_asm+0x1a/0x30 [ 375.919555][ T39] [ 375.919563][ T39] Sending NMI from CPU 0 to CPUs 1: [ 375.919599][ C1] NMI backtrace for cpu 1 [ 375.919615][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 375.919646][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 375.919662][ C1] RIP: 0010:mark_lock+0xa0/0x190 [ 375.919693][ C1] Code: c7 c7 68 9d 21 8d 48 c7 c6 c1 87 11 8d e8 c8 0b e7 ff 90 0f 0b 90 90 90 31 c9 4c 89 fe 4c 89 f7 b8 01 00 00 00 85 69 60 74 10 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 49 89 fe 49 89 f7 [ 375.919708][ C1] RSP: 0018:ffffc90000a3e658 EFLAGS: 00000002 [ 375.919723][ C1] RAX: 0000000000000001 RBX: 0000000000000002 RCX: ffffffff92a10180 [ 375.919734][ C1] RDX: 0000000000000002 RSI: ffff88801ca929f8 RDI: ffff88801ca91dc0 [ 375.919746][ C1] RBP: 0000000000000004 R08: 0000000000000000 R09: ffffffff84eef03b [ 375.919757][ C1] R10: 0000000000000010 R11: ffffffff81aaf310 R12: 0000000000000003 [ 375.919769][ C1] R13: 0000000000000003 R14: ffff88801ca929f8 R15: ffff88801ca92a18 [ 375.919781][ C1] FS: 0000000000000000(0000) GS:ffff8881269bc000(0000) knlGS:0000000000000000 [ 375.919795][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 375.919807][ C1] CR2: 000055eaa7f5a1b8 CR3: 000000000d7a6000 CR4: 00000000003526f0 [ 375.919823][ C1] Call Trace: [ 375.919829][ C1] [ 375.919837][ C1] __lock_acquire+0x9b6/0xd20 [ 375.919864][ C1] ? ref_tracker_alloc+0x1cb/0x450 [ 375.919890][ C1] lock_acquire+0x120/0x360 [ 375.919912][ C1] ? ref_tracker_alloc+0x1cb/0x450 [ 375.919939][ C1] ? arch_stack_walk+0x10d/0x150 [ 375.919968][ C1] rt_spin_lock+0x88/0x2c0 [ 375.919988][ C1] ? ref_tracker_alloc+0x1cb/0x450 [ 375.920015][ C1] ? __pfx_rt_spin_lock+0x10/0x10 [ 375.920035][ C1] ? stack_depot_save_flags+0x40/0x860 [ 375.920064][ C1] ref_tracker_alloc+0x1cb/0x450 [ 375.920090][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 375.920135][ C1] ? dst_init+0xd9/0x450 [ 375.920152][ C1] ? dst_alloc+0x12a/0x170 [ 375.920168][ C1] ? ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 375.920188][ C1] ? ip_route_output_key_hash+0x1b9/0x2e0 [ 375.920207][ C1] ? ip_route_output_flow+0x2a/0x150 [ 375.920222][ C1] ? ip_route_me_harder+0x6d2/0x1030 [ 375.920242][ C1] ? synproxy_send_tcp+0x359/0x6c0 [ 375.920268][ C1] ? synproxy_send_client_synack+0x8bb/0xe20 [ 375.920295][ C1] ? nft_synproxy_eval_v4+0x36e/0x560 [ 375.920313][ C1] ? nft_synproxy_do_eval+0x345/0x570 [ 375.920331][ C1] ? nft_do_chain+0x409/0x1920 [ 375.920347][ C1] ? nft_do_chain_inet+0x25d/0x340 [ 375.920364][ C1] ? nf_hook_slow+0xc5/0x220 [ 375.920388][ C1] ? NF_HOOK+0x206/0x3a0 [ 375.920424][ C1] ? NF_HOOK+0x309/0x3a0 [ 375.920445][ C1] ? __netif_receive_skb+0x143/0x380 [ 375.920466][ C1] ? dst_alloc+0x105/0x170 [ 375.920483][ C1] ? dst_alloc+0x105/0x170 [ 375.920501][ C1] dst_init+0xd9/0x450 [ 375.920519][ C1] dst_alloc+0x12a/0x170 [ 375.920543][ C1] ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 375.920566][ C1] ? ip_route_output_key_hash+0xde/0x2e0 [ 375.920585][ C1] ip_route_output_key_hash+0x1b9/0x2e0 [ 375.920603][ C1] ? __lock_acquire+0xab9/0xd20 [ 375.920626][ C1] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 375.920648][ C1] ? ip_route_me_harder+0x4ad/0x1030 [ 375.920670][ C1] ip_route_output_flow+0x2a/0x150 [ 375.920686][ C1] ? ip_route_me_harder+0x6c0/0x1030 [ 375.920706][ C1] ip_route_me_harder+0x6d2/0x1030 [ 375.920731][ C1] ? __pfx_ip_route_me_harder+0x10/0x10 [ 375.920763][ C1] synproxy_send_tcp+0x359/0x6c0 [ 375.920792][ C1] synproxy_send_client_synack+0x8bb/0xe20 [ 375.920824][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 375.920869][ C1] ? nft_tunnel_get_reduce+0x548/0x640 [ 375.920894][ C1] ? synproxy_pernet+0x45/0x270 [ 375.920915][ C1] nft_synproxy_eval_v4+0x36e/0x560 [ 375.920937][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 375.920957][ C1] ? nf_ip_checksum+0x13c/0x510 [ 375.920977][ C1] nft_synproxy_do_eval+0x345/0x570 [ 375.920998][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 375.921018][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 375.921046][ C1] nft_do_chain+0x409/0x1920 [ 375.921071][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 375.921101][ C1] ? try_to_take_rt_mutex+0x840/0xb00 [ 375.921128][ C1] nft_do_chain_inet+0x25d/0x340 [ 375.921145][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 375.921163][ C1] ? __lock_acquire+0xab9/0xd20 [ 375.921192][ C1] ? NF_HOOK+0x9a/0x3a0 [ 375.921215][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 375.921234][ C1] nf_hook_slow+0xc5/0x220 [ 375.921261][ C1] NF_HOOK+0x206/0x3a0 [ 375.921288][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 375.921313][ C1] ? NF_HOOK+0x9a/0x3a0 [ 375.921336][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 375.921359][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 375.921385][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 375.921411][ C1] ? skb_dst+0x4f/0xd0 [ 375.921435][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 375.921461][ C1] NF_HOOK+0x309/0x3a0 [ 375.921485][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 375.921510][ C1] ? NF_HOOK+0x9a/0x3a0 [ 375.921537][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 375.921562][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 375.921592][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 375.921615][ C1] __netif_receive_skb+0x143/0x380 [ 375.921636][ C1] ? rt_spin_unlock+0x65/0x80 [ 375.921660][ C1] ? process_backlog+0x27b/0x900 [ 375.921682][ C1] process_backlog+0x31e/0x900 [ 375.921712][ C1] __napi_poll+0xb3/0x540 [ 375.921735][ C1] net_rx_action+0x707/0xe00 [ 375.921758][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 375.921793][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 375.921832][ C1] handle_softirqs+0x22f/0x710 [ 375.921859][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 375.921886][ C1] run_ktimerd+0xcf/0x190 [ 375.921910][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 375.921939][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 375.921961][ C1] smpboot_thread_fn+0x53f/0xa60 [ 375.921984][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 375.922010][ C1] kthread+0x70e/0x8a0 [ 375.922037][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 375.922060][ C1] ? __pfx_kthread+0x10/0x10 [ 375.922111][ C1] ? __pfx_kthread+0x10/0x10 [ 375.922138][ C1] ret_from_fork+0x439/0x7d0 [ 375.922161][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 375.922187][ C1] ? __switch_to_asm+0x39/0x70 [ 375.922203][ C1] ? __switch_to_asm+0x33/0x70 [ 375.922219][ C1] ? __pfx_kthread+0x10/0x10 [ 375.922246][ C1] ret_from_fork_asm+0x1a/0x30 [ 375.922270][ C1] [ 375.922602][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 375.922619][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 375.922643][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 375.922655][ T39] Call Trace: [ 375.922663][ T39] [ 375.922672][ T39] dump_stack_lvl+0x99/0x250 [ 375.922705][ T39] ? __asan_memcpy+0x40/0x70 [ 375.922729][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 375.922761][ T39] ? __pfx__printk+0x10/0x10 [ 375.922799][ T39] vpanic+0x281/0x750 [ 375.922835][ T39] ? __pfx_vpanic+0x10/0x10 [ 375.922864][ T39] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 375.922887][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 375.922930][ T39] panic+0xb9/0xc0 [ 375.922961][ T39] ? __pfx_panic+0x10/0x10 [ 375.922996][ T39] ? irq_work_queue+0xc3/0x140 [ 375.923028][ T39] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 375.923060][ T39] watchdog+0xfd2/0xfe0 [ 375.923094][ T39] ? watchdog+0x1de/0xfe0 [ 375.923126][ T39] kthread+0x70e/0x8a0 [ 375.923162][ T39] ? __pfx_watchdog+0x10/0x10 [ 375.923189][ T39] ? __pfx_kthread+0x10/0x10 [ 375.923233][ T39] ? __pfx_kthread+0x10/0x10 [ 375.923267][ T39] ret_from_fork+0x439/0x7d0 [ 375.923304][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 375.923339][ T39] ? __switch_to_asm+0x39/0x70 [ 375.923358][ T39] ? __switch_to_asm+0x33/0x70 [ 375.923377][ T39] ? __pfx_kthread+0x10/0x10 [ 375.923412][ T39] ret_from_fork_asm+0x1a/0x30 [ 375.923449][ T39] [ 375.923808][ T39] Kernel Offset: disabled