last executing test programs: 2.699017872s ago: executing program 3 (id=4): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b00011100000009040000019569", @ANYRES32], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/bpf', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000001000"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800c0001006d6163766c616e001800028004000580ae442be9ec0f27fe30f5acf9cfef54d568e76d01db82bfef6965e45bebab74f55027d960580f75c8515cde379a77b3b1f749cbdbd06724850afbc10b84da03a43c86285b12e9d661b278a3aea1e05d4d2e3b24a51c79b5b283612c606f06b22da5c3497833f165c5dc34edfb778c3e56f2e6b3f666a3497107fd4a7113e1"], 0x38}}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x70, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xfffa}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x70}}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000600", 0x33fe0}], 0x1}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r6, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a24000000000a01010000000000000000050000000900010073797a30000000000400060070000000030a01030000000000000000050000000900010073797a30000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000080001400000000014000300766c616e3000"/167], 0xd0}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xcc}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x0, 0xa005}, @sack_perm]}}}}}}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.161152443s ago: executing program 1 (id=2): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x71) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x58, 0x10, 0x1, 0x70bd2c, 0x0, {}, [@IFLA_VFINFO_LIST={0x34, 0x16, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x1, 0x50e, 0xff, 0x88a8}}, {0x14, 0x1, {0x5, 0x2c38, 0x101}}]}]}]}, @IFLA_IFALIASn={0x46}]}, 0x58}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000680)=@newqdisc={0x230, 0x24, 0x601, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xf}, {0x6, 0xfff1}, {0x7}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}, @TCA_STAB={0x8c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x9, 0xae, 0x1, 0x2, 0xe9e, 0x2, 0x6}}, {0x10, 0x2, [0xe, 0x8, 0x200, 0x2, 0xb064, 0x28]}}, {{0x1c, 0x1, {0x8, 0x7, 0xfc, 0x5, 0x1, 0x7, 0x1, 0x3}}, {0xa, 0x2, [0xf, 0x2d, 0x0]}}, {{0x1c, 0x1, {0xb6, 0xc, 0x6, 0x764, 0x1, 0xfff, 0x4, 0xa}}, {0x18, 0x2, [0x9, 0x6, 0x8, 0x8, 0x2c, 0x6, 0x1, 0x7, 0x9, 0x9]}}]}, @TCA_STAB={0x170, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x22, 0x1, 0x0, 0x1, 0x2, 0x9, 0x81, 0x5}}, {0xe, 0x2, [0xc, 0x4, 0x2, 0x2c, 0xffff]}}, {{0x1c, 0x1, {0x7f, 0x3, 0xee, 0x55c7, 0x2, 0x7, 0x530d, 0x2}}, {0x8, 0x2, [0x2, 0x3]}}, {{0x1c, 0x1, {0x9, 0x1, 0xcdb, 0x5, 0x2, 0x2, 0x9, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0x6e, 0x8, 0x2, 0x40, 0x2, 0x286cd411, 0x26, 0x3}}, {0xa, 0x2, [0x1, 0x0, 0xfff7]}}, {{0x1c, 0x1, {0xff, 0xcd, 0x100, 0x6c11d340, 0x1, 0x4, 0x6, 0x5}}, {0xe, 0x2, [0xd9b, 0x0, 0x2, 0x4, 0x28ad]}}, {{0x1c, 0x1, {0x8c, 0x3, 0x6, 0xe2cd, 0x0, 0x7cb, 0x4, 0x7}}, {0x12, 0x2, [0x20, 0x94, 0x7, 0x7f, 0x2, 0x2, 0xc]}}, {{0x1c, 0x1, {0x5, 0x9, 0x6, 0x8f0, 0x0, 0x14000000, 0x3, 0x3}}, {0xa, 0x2, [0x3, 0xf539, 0x4]}}, {{0x1c, 0x1, {0x8, 0x7, 0x5d6, 0xd51a, 0x1, 0xb3, 0x3, 0x1}}, {0x6, 0x2, [0xda6e]}}, {{0x1c, 0x1, {0x3, 0x4, 0x4, 0x0, 0x0, 0x1, 0x7, 0x3}}, {0xa, 0x2, [0x2, 0x9, 0x4]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x230}, 0x1, 0x0, 0x0, 0x8081}, 0x24000010) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) cachestat(r6, &(0x7f0000000180)={0x3, 0xf12}, &(0x7f0000000200), 0x0) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000340)='user\x00', &(0x7f00000008c0)={'syz', 0x3}, &(0x7f00000005c0)='AT_7jsj\xa5\xb0\xf7\xca\xe7\xbd,\x00', 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r8 = dup(r5) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r7, 0xc0a85352, &(0x7f0000000280)={{0x0, 0x9}, 'port1\x00', 0x0, 0x0, 0xfffffffe, 0x6, 0x3}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0xff, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000480)={r9, 0xb, 0x3}, 0x8) 1.248799793s ago: executing program 2 (id=3): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x319, 0x8000) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)) r2 = dup(r1) read$dsp(r2, &(0x7f0000000100)=""/167, 0xa7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{0x5, 0x200}, {0x5794, 0x800000}]}, 0x14, 0x3) r3 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000690, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0200000005000000000000000000766574683098c76f5f7465616d00000064756d6d79300800000000000000000064756d0004300000000000000000000073797a6b616c6c8279a7e00000000000ffffffffffff000000000000ffffffff7fff00000000000000087000000070000000a000000072656469726563740000000000000000000000000000000000000000000000000800000000000000ffffffff000000000b00000000000000000073797a6b616c6c65723100000000000067726574617030000000000000000000766c616e30000000000000000000000064756d6d7930000000000000000000000180c2000000000000000000aaaaaaaaaabb00000000000000007000000070000000a8000000736e6174000000000000000000000000000000000000000001b700000000000010000000000000000000000000000000ffffffff00000000"]}, 0x280) openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = mq_open(&(0x7f0000001100)='*a%\xff\x00\xf1\fNC\x84\xe0\x99\x1e-\x9a\x0f\x1a\x90\xee\x10\xfeARsO\xae\xd6\x05K\xe2D\x8d\xa4H8\xcf:\a;\xd8\xc7\xc8\\C\xcf\xa7\xcb\xb4\xe4\x8dY\xe3\xa5K&\xe5\xc4\x84v\xfa\xe7\x11\xc4\x99\x10,\xe3M\x80\xd3\xc2\x1c\xb0\x84\xb83', 0x41, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = accept4$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000001c0)=0x1c, 0x80800) syz_io_uring_complete(0x0) accept(r7, &(0x7f0000000200)=@ethernet={0x0, @multicast}, &(0x7f0000000300)=0x80) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x38, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0xff00, @loopback={0x0, 0xac14140b}}, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4a6}]}, &(0x7f00000002c0)=0x10) mq_timedreceive(r5, 0x0, 0x0, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000100)={'icmp\x00'}, &(0x7f0000000140)=0x1e) 1.243253937s ago: executing program 4 (id=5): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x22000, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) ioctl$PPPIOCGFLAGS1(r1, 0x40047452, &(0x7f0000000100)) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000080)={0x10, 0x2}, 0x10, 0x0) getsockopt(r2, 0x2, 0x4, &(0x7f0000000380)=""/117, &(0x7f00000002c0)=0x75) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000140)={0x404}, 0x10, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r3, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x1) eventfd2(0x10, 0x80801) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000280)='hybla\x00', 0x6) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x1}], 0x1}, 0x24008814) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 901.663737ms ago: executing program 0 (id=1): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x41720, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x1, 0x0) 894.390003ms ago: executing program 1 (id=6): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x22000, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) ioctl$PPPIOCGFLAGS1(r1, 0x40047452, &(0x7f0000000100)) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000080)={0x10, 0x2}, 0x10, 0x0) getsockopt(r2, 0x2, 0x4, 0x0, &(0x7f00000002c0)) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000140)={0x404}, 0x10, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r3, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x1) eventfd2(0x10, 0x80801) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000280)='hybla\x00', 0x6) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x1}], 0x1}, 0x24008814) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 746.463329ms ago: executing program 4 (id=7): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b00011100000009040000019569", @ANYRES32], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/bpf', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000180012800c0001006d6163766c616e001800028004000580ae442be9ec0f27fe30f5acf9cfef54d568e76d01db82bfef6965e45bebab74f55027d960580f75c8515cde379a77b3b1f749cbdbd06724850afbc10b84da03a43c86285b12e9d661b278a3aea1e05d4d2e3b24a51c79b5b283612c606f06b22da5c3497833f165c5dc34edfb778c3e56f2e6b3f666a3497107fd4a7113e1"], 0x38}}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x70, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xfffa}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x70}}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000600", 0x33fe0}], 0x1}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r6, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a24000000000a01010000000000000000050000000900010073797a30000000000400060070000000030a01030000000000000000050000000900010073797a30000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000080001400000000014000300766c616e3000"/167], 0xd0}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x0, 0xa005}, @sack_perm]}}}}}}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 487.905216ms ago: executing program 3 (id=8): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = fsopen(&(0x7f0000000100)='cifs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000180)='user\x00', &(0x7f0000000040), 0x0) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000200)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x10000, 0x56570da2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x400], [0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0xfffffffc, 0x6, 0x0, 0x80000000, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0xeae, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55e8, 0x0, 0x0, 0x7, 0x3, 0x0, 0x3ffffffe]}, 0x45c) epoll_create1(0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000280)={0x181dbc1da839d496}) ioctl$UI_DEV_CREATE(r5, 0x5501) ioctl$UI_DEV_DESTROY(r5, 0x5502) write$tcp_mem(r4, &(0x7f0000000280)={0x0, 0x2d, 0x0, 0x3a, 0x0, 0x2c}, 0x48) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c) r7 = socket$igmp6(0xa, 0x3, 0x2) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_buf(r8, 0x0, 0x29, &(0x7f0000000080)="222fd493b590ca013e2ea9f8c67fc907", 0x10) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x2b0, 0x150, 0x150, 0x0, 0xf8010000, 0x378, 0x238, 0x238, 0x378, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'batadv0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x4}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [0xffffffff], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket$alg(0x26, 0x5, 0x0) r9 = openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$tun(r4, 0x0, 0xc9) write$binfmt_script(r9, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) 255.120535ms ago: executing program 0 (id=9): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'netdevsim0\x00'}) syz_io_uring_setup(0x7279, &(0x7f0000000080)={0x0, 0xb0aa, 0x0, 0xfffffff8, 0xfffffffd, 0x0, r0}, 0x0, 0x0) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = gettid() prlimit64(r1, 0x0, 0x0, 0x0) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r2, 0x1000000, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000023c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000004780)=[{0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000001380)=[@iv={0xc0, 0x117, 0x2, 0xac, "4e5629f472730ed056e65be13dcf5d7d7e39254a4af4033e0500e9c53b7d595441e7d5989d730cc9419676c467a24fe62388af6185af7c13ef276ba7d1be0394d0d3d686010dc967b90c69dd41c04b4af66a6f90d0bc4ae1831976c0225793bb979563641befcc873bbd8a952176c0d0fb3e4930ed203016aaea57962fdc7ab016e0fea9f98430c54c186cdd9326ab1e65eb71bd50a9b711eabc5617f7c3ad27947cc591332ad1f1f5972c23"}], 0xc0}], 0x492492492492770, 0x0) recvmmsg(r4, &(0x7f0000005d80)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000340)=""/4096, 0x34000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r4, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100104bdcad4066a7b57c3a5510e795c6a1e86ed7a0bbdaf2c149f8db0000010902120001000000010904000000080250008c159aef00c936f7e036dbd71b6844"], 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$netlink(0x10, 0x3, 0x400000000000004) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f00000001c0)=0x100000, 0x4) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000040), 0x4) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 202.063208ms ago: executing program 1 (id=10): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x41720, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x1, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/virtio-ports', 0x200000, 0x198) r4 = socket(0x2, 0x80805, 0xffffffff) r5 = socket$inet(0x2, 0x80001, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000540)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, 0x20) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000080)={r6, 0x3}, &(0x7f00000000c0)=0x8) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000003c0), &(0x7f0000000280)=0x14) setsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x9, 0x80000001, 0x4}, 0x10) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000000)={0x3f, 0x4, 0x6, 0x1f, 0xf4, 0x7f, 0x3f, 0x6, 0x2, 0x9, 0xff, 0x9, 0x0, 0x7f}, 0xe) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_STATUS(r7, 0x84, 0xe, &(0x7f0000000640)={0x0, 0x0, 0xfffb, 0x7fff, 0x8, 0x3, 0x1c, 0x6, {0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}}, 0xba7f, 0x4, 0x0, 0x20003, 0x5b8}}, &(0x7f0000000040)=0xb0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000004c0)={r6, 0x10, &(0x7f0000000500)=[@in6={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xe}}, 0x5}]}, &(0x7f00000002c0)=0xfffffffffffffefc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x13}, 0x2}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0x4}, 0x9c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000300)={r6, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x28}}}, 0x8, 0x322, 0x0, 0x10001, 0x10000000}, &(0x7f0000000240)=0x98) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000140)={r8, @in6={{0xa, 0x4e23, 0xf, @remote, 0x1ff}}, 0x6, 0x5}, &(0x7f0000000200)=0x88) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r7, 0x84, 0xf, &(0x7f0000000700)={r6, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x31}}}, 0xbbe0, 0x7, 0xe999, 0x1, 0x1}, &(0x7f0000000480)=0x98) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000007c0)={r6, 0xf5, "60f4621fea53b2d5eb04bdc68b41f93ed9f09f184037060b41a3c3b15a2d92b49bb4535e9763d949efd3df60eb2474176f1036d74330ad87ba76120be334aeb031c0e789343f8160036b79f1da4a3df557d7e77e2c063f6fcf6d7587a72954079a59a5fef46c0ad86c8516a81ef92518f43cb63c21287dded24072181f2ae1095c32558d92a63548420fb644b73f3d099aa4fc3a7870afe15bff22f3d2492574c320b4dba4ef61665cad1801e8759ea1afb2c80e0292122523149ea6f87e5c838bb39a28fe8e7dd3db37d273669d42c6bf8ef50fae5c18c9666f221f9f45cbe187a1e019ffff0000523fbc9cdb44380596d0cb9f0b"}, &(0x7f0000000580)=0xfd) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000300)={0x1000, 0x7ff, 0x200, 0x10000, 0x401, 0x6, 0x34bd, 0xfdc, r6}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) 0s ago: executing program 2 (id=11): unshare(0x62040200) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="580000000102010100000000000000000a0000004400018006000340000000002c0001"], 0x58}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x7fffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3209000000140004800800024032658aeb08000140000000010900010073797a3000000000140000001100010000000000000000000000000a"], 0x88}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) r4 = syz_io_uring_setup(0x7485, &(0x7f0000000100)={0x0, 0xee0e, 0x80, 0x3, 0x37f}, &(0x7f0000000080), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f00000001c0)=[0xffffffffffffffff], 0x100000) r5 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r5, 0x0, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x41, &(0x7f0000000100)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.40' (ED25519) to the list of known hosts. [ 81.127466][ T5216] cgroup: Unknown subsys name 'net' [ 81.284883][ T5216] cgroup: Unknown subsys name 'cpuset' [ 81.294657][ T5216] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.038929][ T5216] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.986253][ T5229] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.005115][ T5239] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.031272][ T5239] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.051472][ T5239] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.065615][ T5239] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.078248][ T5239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.089805][ T5239] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.092977][ T5240] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.113085][ T5239] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.126224][ T5245] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.133048][ T5240] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.136475][ T5245] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.150018][ T5243] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.156247][ T5245] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.166396][ T5240] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.177614][ T5245] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.189557][ T5240] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.198789][ T5245] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.219678][ T5240] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 87.229526][ T5240] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.230880][ T5245] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.244021][ T5240] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.252968][ T5245] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.265321][ T5240] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.276318][ T5245] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.285171][ T5240] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.296649][ T5245] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.311598][ T5240] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.332880][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.361920][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.965632][ T5248] chnl_net:caif_netlink_parms(): no params data found [ 87.982427][ T5250] chnl_net:caif_netlink_parms(): no params data found [ 88.035368][ T5246] chnl_net:caif_netlink_parms(): no params data found [ 88.098250][ T5249] chnl_net:caif_netlink_parms(): no params data found [ 88.124669][ T5247] chnl_net:caif_netlink_parms(): no params data found [ 88.285610][ T5248] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.298529][ T5248] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.307857][ T5248] bridge_slave_0: entered allmulticast mode [ 88.326619][ T5248] bridge_slave_0: entered promiscuous mode [ 88.341703][ T5248] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.353455][ T5248] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.364617][ T5248] bridge_slave_1: entered allmulticast mode [ 88.377626][ T5248] bridge_slave_1: entered promiscuous mode [ 88.435713][ T5250] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.449442][ T5250] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.459694][ T5250] bridge_slave_0: entered allmulticast mode [ 88.469697][ T5250] bridge_slave_0: entered promiscuous mode [ 88.510220][ T5250] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.521005][ T5250] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.531383][ T5250] bridge_slave_1: entered allmulticast mode [ 88.543656][ T5250] bridge_slave_1: entered promiscuous mode [ 88.583605][ T5246] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.593018][ T5246] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.604456][ T5246] bridge_slave_0: entered allmulticast mode [ 88.615463][ T5246] bridge_slave_0: entered promiscuous mode [ 88.644012][ T5248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.686893][ T5247] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.696186][ T5247] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.705735][ T5247] bridge_slave_0: entered allmulticast mode [ 88.717970][ T5247] bridge_slave_0: entered promiscuous mode [ 88.730193][ T5246] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.740419][ T5246] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.749995][ T5246] bridge_slave_1: entered allmulticast mode [ 88.761450][ T5246] bridge_slave_1: entered promiscuous mode [ 88.783227][ T5248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.795335][ T5249] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.808294][ T5249] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.820072][ T5249] bridge_slave_0: entered allmulticast mode [ 88.834251][ T5249] bridge_slave_0: entered promiscuous mode [ 88.849285][ T5250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.867783][ T5247] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.881748][ T5247] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.892853][ T5247] bridge_slave_1: entered allmulticast mode [ 88.905771][ T5247] bridge_slave_1: entered promiscuous mode [ 88.939806][ T5249] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.950942][ T5249] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.960834][ T5249] bridge_slave_1: entered allmulticast mode [ 88.970865][ T5249] bridge_slave_1: entered promiscuous mode [ 88.987815][ T5250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.047160][ T5246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.135040][ T5246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.172305][ T5248] team0: Port device team_slave_0 added [ 89.202038][ T5250] team0: Port device team_slave_0 added [ 89.213013][ T5247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.239958][ T5248] team0: Port device team_slave_1 added [ 89.256415][ T5249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.275585][ T5250] team0: Port device team_slave_1 added [ 89.290444][ T5247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.308994][ T5246] team0: Port device team_slave_0 added [ 89.322063][ T54] Bluetooth: hci1: command tx timeout [ 89.322391][ T54] Bluetooth: hci4: command tx timeout [ 89.334083][ T5246] team0: Port device team_slave_1 added [ 89.361903][ T5249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.401094][ T54] Bluetooth: hci2: command tx timeout [ 89.401109][ T5229] Bluetooth: hci0: command tx timeout [ 89.480700][ T54] Bluetooth: hci3: command tx timeout [ 89.484451][ T5250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.498535][ T5250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.536970][ T5250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.568431][ T5247] team0: Port device team_slave_0 added [ 89.578087][ T5246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.588315][ T5246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.621074][ T5246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.642926][ T5246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.651078][ T5246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.687351][ T5246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.706848][ T5248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.718625][ T5248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.754737][ T5248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.781319][ T5250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.790052][ T5250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.824814][ T5250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.846016][ T5247] team0: Port device team_slave_1 added [ 89.865678][ T5248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.876250][ T5248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.919209][ T5248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.939033][ T5249] team0: Port device team_slave_0 added [ 89.953299][ T5249] team0: Port device team_slave_1 added [ 90.012280][ T5247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.027352][ T5247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.068370][ T5247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.126194][ T5247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.139417][ T5247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.172263][ T5247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.231063][ T5249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.240323][ T5249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.281103][ T5249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.313387][ T5248] hsr_slave_0: entered promiscuous mode [ 90.320879][ T5248] hsr_slave_1: entered promiscuous mode [ 90.336384][ T5250] hsr_slave_0: entered promiscuous mode [ 90.344875][ T5250] hsr_slave_1: entered promiscuous mode [ 90.355672][ T5250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.371162][ T5250] Cannot create hsr debugfs directory [ 90.392711][ T5249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.403934][ T5249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.447981][ T5249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.486261][ T5246] hsr_slave_0: entered promiscuous mode [ 90.497815][ T5246] hsr_slave_1: entered promiscuous mode [ 90.507835][ T5246] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.539231][ T5246] Cannot create hsr debugfs directory [ 90.646250][ T5247] hsr_slave_0: entered promiscuous mode [ 90.658369][ T5247] hsr_slave_1: entered promiscuous mode [ 90.666390][ T5247] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.679979][ T5247] Cannot create hsr debugfs directory [ 90.696884][ T5249] hsr_slave_0: entered promiscuous mode [ 90.704825][ T5249] hsr_slave_1: entered promiscuous mode [ 90.713008][ T5249] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.725567][ T5249] Cannot create hsr debugfs directory [ 91.176846][ T5250] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.206087][ T5250] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.224144][ T5250] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.258490][ T5250] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.297882][ T5248] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.323733][ T5248] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.339709][ T5248] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.365643][ T5248] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.403817][ T54] Bluetooth: hci4: command tx timeout [ 91.403826][ T5229] Bluetooth: hci1: command tx timeout [ 91.468884][ T5246] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.484076][ T54] Bluetooth: hci0: command tx timeout [ 91.484159][ T5229] Bluetooth: hci2: command tx timeout [ 91.504463][ T5246] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.515128][ T5246] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.533554][ T5246] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.570664][ T5229] Bluetooth: hci3: command tx timeout [ 91.665424][ T5249] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.683339][ T5249] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.707323][ T5249] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.722598][ T5249] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.770002][ T5250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.839600][ T5247] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.854991][ T5247] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.869117][ T5247] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.889624][ T5250] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.907334][ T5247] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.972694][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.987771][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.009304][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.024067][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.118560][ T5248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.179321][ T5246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.220403][ T5248] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.303980][ T5246] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.318622][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.326786][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.338691][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.347178][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.385381][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.394725][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.423273][ T5249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.468010][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.479906][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.505688][ T5250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.595328][ T5249] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.635615][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.644269][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.667976][ T5247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.688432][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.698343][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.755616][ T5247] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.792260][ T2485] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.802612][ T2485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.817125][ T2485] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.825886][ T2485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.853960][ T5248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.926576][ T5249] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 92.944112][ T5249] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.992776][ T5250] veth0_vlan: entered promiscuous mode [ 93.017170][ T5246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.067687][ T5250] veth1_vlan: entered promiscuous mode [ 93.116152][ T5249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.171877][ T5248] veth0_vlan: entered promiscuous mode [ 93.235261][ T5248] veth1_vlan: entered promiscuous mode [ 93.276138][ T5247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.317632][ T5246] veth0_vlan: entered promiscuous mode [ 93.336128][ T5250] veth0_macvtap: entered promiscuous mode [ 93.355877][ T5250] veth1_macvtap: entered promiscuous mode [ 93.419171][ T5248] veth0_macvtap: entered promiscuous mode [ 93.432498][ T5246] veth1_vlan: entered promiscuous mode [ 93.477952][ T5250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.480937][ T5229] Bluetooth: hci1: command tx timeout [ 93.490705][ T54] Bluetooth: hci4: command tx timeout [ 93.503636][ T5248] veth1_macvtap: entered promiscuous mode [ 93.538290][ T5250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.563145][ T54] Bluetooth: hci2: command tx timeout [ 93.569863][ T5229] Bluetooth: hci0: command tx timeout [ 93.613002][ T5249] veth0_vlan: entered promiscuous mode [ 93.625875][ T5250] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.639348][ T5250] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.641615][ T5229] Bluetooth: hci3: command tx timeout [ 93.658902][ T5250] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.674133][ T5250] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.750228][ T5249] veth1_vlan: entered promiscuous mode [ 93.823410][ T5246] veth0_macvtap: entered promiscuous mode [ 93.850100][ T5247] veth0_vlan: entered promiscuous mode [ 93.878926][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.898848][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.917352][ T5248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.986097][ T5246] veth1_macvtap: entered promiscuous mode [ 94.018779][ T5247] veth1_vlan: entered promiscuous mode [ 94.110049][ T5248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.126032][ T5248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.139797][ T5248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.158365][ T5249] veth0_macvtap: entered promiscuous mode [ 94.177216][ T5248] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.190524][ T5248] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.203697][ T5248] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.215307][ T5248] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.236047][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.254337][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.266986][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.284326][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.303701][ T5246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.335950][ T5249] veth1_macvtap: entered promiscuous mode [ 94.384443][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.397913][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.411219][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.425210][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.438635][ T5246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.453232][ T5246] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.467000][ T5246] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.478402][ T5246] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.490032][ T5246] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.522164][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.536509][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.602347][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.623479][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.635887][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.650238][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.667393][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.685704][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.704977][ T5249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.753790][ T5247] veth0_macvtap: entered promiscuous mode [ 94.779586][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.780871][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.801863][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.804419][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.817134][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.846074][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.871846][ T5249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.886135][ T5249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.902951][ T5249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.914394][ T5247] veth1_macvtap: entered promiscuous mode [ 94.938208][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.949903][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.974802][ T5249] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.988021][ T5249] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.001527][ T5249] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.013404][ T5249] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.057680][ T5250] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.122559][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.137068][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.158147][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.170273][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.187494][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.206880][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.220776][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.236192][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.248625][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.267987][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.287175][ T5247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.377559][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.395900][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.410908][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.428751][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.441080][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.454297][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.467785][ T5247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.485752][ T5247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.502088][ T5247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.516309][ T5247] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.527042][ T5247] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.538438][ T5247] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.549682][ T5247] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.581430][ T5229] Bluetooth: hci1: command tx timeout [ 95.582423][ T54] Bluetooth: hci4: command tx timeout [ 95.609596][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.641003][ T54] Bluetooth: hci0: command tx timeout [ 95.645721][ T5229] Bluetooth: hci2: command tx timeout [ 95.663212][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.673444][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.673470][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.721399][ T5229] Bluetooth: hci3: command tx timeout [ 95.722505][ T25] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 95.818714][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.845284][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.859801][ T5293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 95.895350][ T25] usb 4-1: config 17 has an invalid descriptor of length 255, skipping remainder of the config [ 95.917809][ T25] usb 4-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 95.936377][ T25] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 95.950002][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.254146][ T5289] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4'. [ 96.279118][ T5289] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 96.343896][ T2485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.359708][ T2485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.518439][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.550261][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.588057][ T25] usb 4-1: string descriptor 0 read error: -71 [ 96.607962][ T25] aiptek 4-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 96.665634][ T25] usb 4-1: USB disconnect, device number 2 [ 96.757645][ T2485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.790963][ T2485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.200021][ T5308] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.600898][ T5227] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 97.811009][ T5227] usb 5-1: config 17 has an invalid descriptor of length 255, skipping remainder of the config [ 97.851824][ T5227] usb 5-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 97.871366][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.881691][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 98.001691][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.053665][ T5227] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 98.121119][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.138965][ T5227] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.154988][ T5329] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11'. [ 98.199046][ T5318] input: syz1 as /devices/virtual/input/input6 [ 98.221712][ T5329] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11'. [ 98.380220][ T5318] kernel profiling enabled (shift: 0) [ 98.495981][ T5312] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.7'. [ 98.593198][ T5312] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 98.721221][ T5234] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 99.367727][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.382460][ C1] hrtimer: interrupt took 343541 ns [ 99.570569][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 99.715786][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 99.829907][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 99.872661][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 99.961250][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 100.681805][ T5227] usb 5-1: string descriptor 0 read error: -71 [ 104.884173][ T5234] usb 1-1: unable to get BOS descriptor or descriptor too short [ 106.822478][ T5234] usb 1-1: too many configurations: 198, using maximum allowed: 8 [ 107.082672][ T5227] aiptek 5-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 107.094400][ T1176] cfg80211: failed to load regulatory.db [ 107.110611][ T5234] usb 1-1: unable to read config index 0 descriptor/start: -32 [ 107.120132][ T5234] usb 1-1: chopping to 0 config(s) [ 107.781086][ T5234] usb 1-1: can't read configurations, error -32 [ 107.866274][ T5227] usb 5-1: USB disconnect, device number 2 [ 108.040743][ T5234] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 108.674011][ T5234] usb 1-1: device descriptor read/64, error -32 [ 114.480545][ C0] sched: DL replenish lagged too much [ 123.340695][ T5234] usb usb1-port1: attempt power cycle [ 136.121456][ T5234] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 136.241284][ T5234] usb 1-1: device descriptor read/8, error -32 [ 136.566252][ T5234] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 136.708745][ T5234] usb 1-1: device descriptor read/8, error -32 [ 136.940993][ T5234] usb usb1-port1: unable to enumerate USB device [ 138.156999][ T5318] syz.3.8: vmalloc error: size 738197504, failed to allocated page array size 1441792, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 138.358548][ T5318] CPU: 1 UID: 0 PID: 5318 Comm: syz.3.8 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 138.371327][ T5318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 138.384692][ T5318] Call Trace: [ 138.388169][ T5318] [ 138.391387][ T5318] dump_stack_lvl+0x241/0x360 [ 138.396724][ T5318] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.402246][ T5318] ? __pfx__printk+0x10/0x10 [ 138.406914][ T5318] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 138.415146][ T5318] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 138.426031][ T5318] warn_alloc+0x278/0x410 [ 138.434211][ T5318] ? __pfx_warn_alloc+0x10/0x10 [ 138.440476][ T5318] ? profile_init+0xb1/0x100 [ 138.447493][ T5318] ? __get_vm_area_node+0x23d/0x270 [ 138.453649][ T5318] __vmalloc_node_range_noprof+0x691/0x13f0 [ 138.463062][ T5318] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 138.470892][ T5318] ? rcu_is_watching+0x15/0xb0 [ 138.477037][ T5318] ? rcu_is_watching+0x15/0xb0 [ 138.482999][ T5318] ? profile_init+0xb1/0x100 [ 138.487947][ T5318] ? __pfx_sysfs_kf_write+0x10/0x10 [ 138.493499][ T5318] vzalloc_noprof+0x79/0x90 [ 138.499360][ T5318] ? profile_init+0xb1/0x100 [ 138.504102][ T5318] profile_init+0xb1/0x100 [ 138.510282][ T5318] profiling_store+0x6c/0xf0 [ 138.516239][ T5318] kernfs_fop_write_iter+0x3a0/0x500 [ 138.523018][ T5318] vfs_write+0xa6d/0xc90 [ 138.528336][ T5318] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 138.534948][ T5318] ? __pfx_vfs_write+0x10/0x10 [ 138.540490][ T5318] ? do_futex+0x33b/0x560 [ 138.545307][ T5318] ? __fdget_pos+0x24e/0x320 [ 138.550886][ T5318] ksys_write+0x1a0/0x2c0 [ 138.555577][ T5318] ? __pfx_ksys_write+0x10/0x10 [ 138.561837][ T5318] ? do_syscall_64+0x100/0x230 [ 138.567573][ T5318] ? do_syscall_64+0xb6/0x230 [ 138.572617][ T5318] do_syscall_64+0xf3/0x230 [ 138.577607][ T5318] ? clear_bhb_loop+0x35/0x90 [ 138.584007][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.592599][ T5318] RIP: 0033:0x7fd7dc97def9 [ 138.598250][ T5318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.620965][ T5318] RSP: 002b:00007fd7dd719038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 138.630701][ T5318] RAX: ffffffffffffffda RBX: 00007fd7dcb36058 RCX: 00007fd7dc97def9 [ 138.641182][ T5318] RDX: 0000000000000048 RSI: 0000000020000280 RDI: 0000000000000008 [ 138.650423][ T5318] RBP: 00007fd7dc9f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 138.658990][ T5318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.668133][ T5318] R13: 0000000000000000 R14: 00007fd7dcb36058 R15: 00007fd7dcc5fa28 [ 138.676696][ T5318] [ 139.056549][ T5318] Mem-Info: [ 139.060196][ T5318] active_anon:5594 inactive_anon:0 isolated_anon:0 [ 139.060196][ T5318] active_file:1162 inactive_file:38199 isolated_file:0 [ 139.060196][ T5318] unevictable:772 dirty:17 writeback:0 [ 139.060196][ T5318] slab_reclaimable:8318 slab_unreclaimable:111357 [ 139.060196][ T5318] mapped:38795 shmem:2216 pagetables:643 [ 139.060196][ T5318] sec_pagetables:0 bounce:0 [ 139.060196][ T5318] kernel_misc_reclaimable:0 [ 139.060196][ T5318] free:1293274 free_pcp:965 free_cma:0 [ 139.135966][ T5318] Node 0 active_anon:22376kB inactive_anon:0kB active_file:4648kB inactive_file:152724kB unevictable:1552kB isolated(anon):0kB isolated(file):0kB mapped:155180kB dirty:68kB writeback:0kB shmem:7328kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10136kB pagetables:2572kB sec_pagetables:0kB all_unreclaimable? no [ 139.185313][ T5243] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 139.195675][ T5243] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 139.208786][ T5236] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 139.226863][ T5236] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 139.236291][ T5243] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 139.245658][ T5232] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 139.254337][ T5243] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 139.263199][ T5236] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 139.274050][ T5232] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 139.292687][ T5243] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 139.303351][ T5236] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 139.321800][ T5232] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 139.334086][ T5236] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 139.352668][ T5232] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 139.360721][ T5243] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 139.382751][ T5236] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 139.392214][ T5232] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 139.405141][ T5243] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 139.418484][ T5239] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 139.426230][ T5236] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 139.434117][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.442567][ T5232] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 139.450860][ T5243] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 139.460808][ T5236] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 139.471323][ T5232] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 139.482052][ T5239] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 139.493467][ T5232] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 139.591556][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.727019][ T5242] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 139.768205][ T5360] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 139.779038][ T5360] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 139.791043][ T5360] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 139.861086][ T5318] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 139.964584][ T5318] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 140.005714][ T5318] lowmem_reserve[]: 0 2465 2466 0 0 [ 140.012353][ T5318] Node 0 DMA32 free:1221916kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:23132kB inactive_anon:0kB active_file:4648kB inactive_file:151896kB unevictable:1552kB writepending:68kB present:3129332kB managed:2552492kB mlocked:16kB bounce:0kB free_pcp:784kB local_pcp:104kB free_cma:0kB [ 140.059232][ T5318] lowmem_reserve[]: 0 0 0 0 0 [ 140.069440][ T5318] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 140.107880][ T5318] lowmem_reserve[]: 0 0 0 0 0 [ 140.116344][ T5318] Node 1 Normal free:3928832kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 140.163649][ T5318] lowmem_reserve[]: 0 0 0 0 0 [ 140.169282][ T5318] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 140.190094][ T5318] Node 0 DMA32: 2*4kB (ME) 14*8kB (E) 26*16kB (E) 29*32kB (E) 14*64kB (UE) 2*128kB (E) 7*256kB (UM) 9*512kB (M) 37*1024kB (UM) 14*2048kB (UM) 278*4096kB (ME) = 1214264kB [ 140.219487][ T5318] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 140.240367][ T5318] Node 1 Normal: 108*4kB (UE) 50*8kB (UME) 34*16kB (UME) 189*32kB (UME) 80*64kB (UME) 24*128kB (UME) 18*256kB (UME) 10*512kB (UME) 4*1024kB (UME) 4*2048kB (UE) 950*4096kB (M) = 3928832kB [ 140.269219][ T5318] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 140.290786][ T5318] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 140.309048][ T5318] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 140.335012][ T5318] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 140.355913][ T5318] 41580 total pagecache pages [ 140.364823][ T5318] 0 pages in swap cache [ 140.369889][ T5318] Free swap = 124984kB [ 140.383021][ T5318] Total swap = 124996kB [ 140.395389][ T5318] 2097051 pages RAM [ 140.399931][ T5318] 0 pages HighMem/MovableOnly [ 140.408465][ T5318] 427078 pages reserved [ 140.418490][ T5318] 0 pages cma reserved [ 141.566676][ T5360] Bluetooth: hci2: command tx timeout [ 141.648078][ T5360] Bluetooth: hci8: command tx timeout [ 141.657530][ T5240] Bluetooth: hci6: command tx timeout [ 141.665302][ T5240] Bluetooth: hci5: command tx timeout [ 141.881968][ T5360] Bluetooth: hci7: command tx timeout [ 143.640757][ T5360] Bluetooth: hci2: command tx timeout [ 143.720688][ T5240] Bluetooth: hci5: command tx timeout [ 143.726706][ T5240] Bluetooth: hci6: command tx timeout [ 143.735709][ T5360] Bluetooth: hci8: command tx timeout [ 143.960894][ T5360] Bluetooth: hci7: command tx timeout [ 145.722157][ T5360] Bluetooth: hci2: command tx timeout [ 145.800971][ T4619] Bluetooth: hci5: command tx timeout [ 145.810404][ T5240] Bluetooth: hci6: command tx timeout [ 145.817069][ T5360] Bluetooth: hci8: command tx timeout [ 146.040812][ T5240] Bluetooth: hci7: command tx timeout [ 147.801350][ T5240] Bluetooth: hci2: command tx timeout [ 147.880718][ T5360] Bluetooth: hci8: command tx timeout [ 147.887028][ T5360] Bluetooth: hci5: command tx timeout [ 147.897997][ T5240] Bluetooth: hci6: command tx timeout [ 148.120874][ T5360] Bluetooth: hci7: command tx timeout [ 170.270984][ T5240] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 170.282124][ T5240] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 170.291485][ T5240] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 170.303456][ T5240] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 170.311986][ T5240] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 170.321580][ T5240] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 170.554466][ T5360] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 170.564809][ T5360] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 170.575842][ T5360] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 170.594431][ T5360] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 170.603605][ T5360] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 170.613448][ T5360] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 172.360767][ T5360] Bluetooth: hci0: command tx timeout [ 172.680641][ T5360] Bluetooth: hci3: command tx timeout [ 174.440605][ T5360] Bluetooth: hci0: command tx timeout [ 174.760800][ T5360] Bluetooth: hci3: command tx timeout [ 176.520762][ T5360] Bluetooth: hci0: command tx timeout [ 176.840669][ T5360] Bluetooth: hci3: command tx timeout [ 178.600656][ T5360] Bluetooth: hci0: command tx timeout [ 178.920912][ T5360] Bluetooth: hci3: command tx timeout [ 198.271308][ T5240] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 198.284563][ T5240] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 198.295779][ T5240] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 198.305181][ T5240] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 198.316943][ T5240] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 198.325303][ T5240] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 198.739501][ T5240] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 198.759080][ T5240] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 198.767854][ T5240] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 198.776450][ T5240] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 198.784624][ T5240] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 198.792580][ T5240] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 198.838732][ T5240] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 198.847831][ T5240] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 198.858884][ T5240] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 198.867103][ T5240] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 198.880922][ T5240] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 198.889561][ T5240] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 200.440760][ T5240] Bluetooth: hci9: command tx timeout [ 200.762774][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.769403][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.840805][ T5240] Bluetooth: hci10: command tx timeout [ 200.920620][ T5240] Bluetooth: hci11: command tx timeout [ 202.520733][ T5240] Bluetooth: hci9: command tx timeout [ 202.921107][ T5240] Bluetooth: hci10: command tx timeout [ 203.000696][ T5240] Bluetooth: hci11: command tx timeout [ 204.600956][ T5240] Bluetooth: hci9: command tx timeout [ 205.000724][ T5240] Bluetooth: hci10: command tx timeout [ 205.080619][ T5240] Bluetooth: hci11: command tx timeout [ 206.681386][ T5240] Bluetooth: hci9: command tx timeout [ 207.080694][ T5240] Bluetooth: hci10: command tx timeout [ 207.160663][ T5240] Bluetooth: hci11: command tx timeout [ 213.090720][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 213.096859][ T5240] Bluetooth: hci4: command 0x0406 tx timeout [ 230.789506][ T54] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 230.803665][ T54] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 230.812078][ T54] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 230.820383][ T54] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 230.828653][ T54] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 230.836282][ T54] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 231.100820][ T5242] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 231.110307][ T5242] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 231.119406][ T5242] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 231.127660][ T5242] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 231.136229][ T5242] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 231.145408][ T5242] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 259.093285][ T5239] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 259.102450][ T5239] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 259.114920][ T5239] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 259.124578][ T5239] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 259.136574][ T5239] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 259.145084][ T5239] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 259.488958][ T5229] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 259.501087][ T5229] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 259.514084][ T5229] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 259.523903][ T5229] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 259.533225][ T5229] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 259.541152][ T5229] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 259.649485][ T5232] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 259.658950][ T5232] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 259.670731][ T5232] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 259.679118][ T5232] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 259.691613][ T5232] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 259.699208][ T5232] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 262.211042][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.217408][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 264.289031][ T5410] Bluetooth: hci7: command 0x0406 tx timeout [ 264.295812][ T5410] Bluetooth: hci2: command 0x0406 tx timeout [ 264.302261][ T5410] Bluetooth: hci5: command 0x0406 tx timeout [ 264.308332][ T5410] Bluetooth: hci6: command 0x0406 tx timeout [ 264.316801][ T5410] Bluetooth: hci8: command 0x0406 tx timeout [ 276.280702][ T30] INFO: task kworker/1:2:1176 blocked for more than 143 seconds. [ 276.288992][ T30] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 276.330525][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 276.339379][ T30] task:kworker/1:2 state:D stack:24272 pid:1176 tgid:1176 ppid:2 flags:0x00004000 [ 276.480648][ T30] Workqueue: events_power_efficient crda_timeout_work [ 276.487879][ T30] Call Trace: [ 276.520616][ T30] [ 276.523630][ T30] __schedule+0x1895/0x4b30 [ 276.528203][ T30] ? __pfx___schedule+0x10/0x10 [ 276.600753][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 276.630859][ T30] ? __pfx_lock_release+0x10/0x10 [ 276.636079][ T30] ? kick_pool+0x45c/0x620 [ 276.680591][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 276.685892][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 276.730667][ T30] ? schedule+0x90/0x320 [ 276.735003][ T30] schedule+0x14b/0x320 [ 276.739219][ T30] schedule_preempt_disabled+0x13/0x30 [ 276.797232][ T30] __mutex_lock+0x6a7/0xd70 [ 276.830542][ T30] ? __mutex_lock+0x52a/0xd70 [ 276.835321][ T30] ? crda_timeout_work+0x15/0x50 [ 276.840309][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 276.902863][ T30] ? process_scheduled_works+0x976/0x1850 [ 276.908681][ T30] crda_timeout_work+0x15/0x50 [ 276.956586][ T30] process_scheduled_works+0xa63/0x1850 [ 276.967498][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 277.000766][ T30] ? assign_work+0x364/0x3d0 [ 277.005503][ T30] worker_thread+0x870/0xd30 [ 277.010162][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 277.057692][ T30] ? __kthread_parkme+0x169/0x1d0 [ 277.100623][ T30] ? __pfx_worker_thread+0x10/0x10 [ 277.105838][ T30] kthread+0x2f0/0x390 [ 277.109948][ T30] ? __pfx_worker_thread+0x10/0x10 [ 277.160646][ T30] ? __pfx_kthread+0x10/0x10 [ 277.166305][ T30] ret_from_fork+0x4b/0x80 [ 277.210585][ T30] ? __pfx_kthread+0x10/0x10 [ 277.215269][ T30] ret_from_fork_asm+0x1a/0x30 [ 277.220104][ T30] [ 277.280542][ T30] INFO: task kworker/u8:7:2464 blocked for more than 144 seconds. [ 277.288430][ T30] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 277.340532][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 277.349290][ T30] task:kworker/u8:7 state:D stack:23664 pid:2464 tgid:2464 ppid:2 flags:0x00004000 [ 277.398718][ T30] Workqueue: ipv6_addrconf addrconf_dad_work [ 277.414159][ T30] Call Trace: [ 277.417509][ T30] [ 277.425763][ T30] __schedule+0x1895/0x4b30 [ 277.430379][ T30] ? __pfx___schedule+0x10/0x10 [ 277.443858][ T30] ? __pfx_lock_release+0x10/0x10 [ 277.448980][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 277.459229][ T30] ? kthread_data+0x52/0xd0 [ 277.466642][ T30] ? schedule+0x90/0x320 [ 277.477281][ T30] ? wq_worker_sleeping+0x66/0x240 [ 277.487551][ T30] ? schedule+0x90/0x320 [ 277.495736][ T30] schedule+0x14b/0x320 [ 277.499987][ T30] schedule_preempt_disabled+0x13/0x30 [ 277.508350][ T30] __mutex_lock+0x6a7/0xd70 [ 277.516859][ T30] ? mark_lock+0x9a/0x360 [ 277.524054][ T30] ? __mutex_lock+0x52a/0xd70 [ 277.528809][ T30] ? addrconf_dad_work+0xd0/0x16f0 [ 277.539218][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 277.548605][ T30] addrconf_dad_work+0xd0/0x16f0 [ 277.557495][ T30] ? __pfx_addrconf_dad_work+0x10/0x10 [ 277.569203][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 277.579578][ T30] ? process_scheduled_works+0x976/0x1850 [ 277.590303][ T30] process_scheduled_works+0xa63/0x1850 [ 277.599824][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 277.608711][ T30] ? assign_work+0x364/0x3d0 [ 277.617287][ T30] worker_thread+0x870/0xd30 [ 277.624811][ T30] ? __kthread_parkme+0x169/0x1d0 [ 277.629922][ T30] ? __pfx_worker_thread+0x10/0x10 [ 277.639257][ T30] kthread+0x2f0/0x390 [ 277.649596][ T30] ? __pfx_worker_thread+0x10/0x10 [ 277.658673][ T30] ? __pfx_kthread+0x10/0x10 [ 277.666822][ T30] ret_from_fork+0x4b/0x80 [ 277.675326][ T30] ? __pfx_kthread+0x10/0x10 [ 277.680005][ T30] ret_from_fork_asm+0x1a/0x30 [ 277.687677][ T30] [ 277.695193][ T30] [ 277.695193][ T30] Showing all locks held in the system: [ 277.709897][ T30] 1 lock held by khungtaskd/30: [ 277.718763][ T30] #0: ffffffff8e937ee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 277.731557][ T30] 4 locks held by kworker/u9:0/54: [ 277.736742][ T30] #0: ffff8880832e0148 ((wq_completion)hci14#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 277.755948][ T30] #1: ffffc90000bf7d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 277.771760][ T30] #2: ffff88803e194078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0 [ 277.788254][ T30] #3: ffffffff8fe384a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0 [ 277.799237][ T30] 3 locks held by kworker/1:2/1176: [ 277.812948][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 277.830654][ T30] #1: ffffc90004a7fd00 ((crda_timeout).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 277.849518][ T30] #2: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: crda_timeout_work+0x15/0x50 [ 277.859665][ T30] 3 locks held by kworker/0:2/1849: [ 277.871885][ T30] 3 locks held by kworker/u8:7/2464: [ 277.877329][ T30] #0: ffff88814bee0148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 277.894348][ T30] #1: ffffc90009527d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 277.910142][ T30] #2: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 277.924149][ T30] 6 locks held by kworker/u9:1/4619: [ 277.929498][ T30] #0: ffff888045358948 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 277.948316][ T30] #1: ffffc9000daafd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 277.970274][ T30] #2: ffff88807bc04d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 277.987391][ T30] #3: ffff88807bc04078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 277.999459][ T30] #4: ffffffff8fe384a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 278.015632][ T30] #5: ffffffff8e93d478 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 278.027178][ T30] 2 locks held by getty/4983: [ 278.038622][ T30] #0: ffff88802e3770a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 278.050345][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 278.077959][ T30] 4 locks held by kworker/u9:2/5229: [ 278.084812][ T30] #0: ffff888067456148 ((wq_completion)hci16#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 278.100954][ T30] #1: ffffc90003be7d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 278.120843][ T30] #2: ffff88806744c078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0 [ 278.137341][ T30] #3: ffffffff8fe384a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0 [ 278.148966][ T30] 5 locks held by kworker/u9:3/5232: [ 278.162504][ T30] #0: ffff88804c024148 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 278.177345][ T30] #1: ffffc90003c07d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 278.194780][ T30] #2: ffff88802d06cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 278.209033][ T30] #3: ffff88802d06c078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 278.220858][ T30] #4: ffffffff8fe384a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 278.238305][ T30] 5 locks held by kworker/u9:4/5236: [ 278.244179][ T30] #0: ffff888049ec3148 ((wq_completion)hci8){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 278.260540][ T30] #1: ffffc90003c47d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 278.280102][ T30] #2: ffff88807ae68d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 278.307266][ T30] #3: ffff88807ae68078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 278.317546][ T30] #4: ffffffff8fe384a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 278.334285][ T30] 4 locks held by kworker/u9:5/5239: [ 278.339727][ T30] #0: ffff888034e22148 ((wq_completion)hci15#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 278.357623][ T30] #1: ffffc90003c8fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 278.380560][ T30] #2: ffff8880351b4078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0 [ 278.397209][ T30] #3: ffffffff8fe384a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0 [ 278.408532][ T30] 4 locks held by kworker/u9:6/5240: [ 278.421445][ T30] #0: ffff88803dd4c148 ((wq_completion)hci12#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 278.438892][ T30] #1: ffffc90003cafd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 278.459908][ T30] #2: ffff88806229c078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0 [ 278.471968][ T30] #3: ffffffff8fe384a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0 [ 278.491970][ T30] 4 locks held by kworker/u9:7/5242: [ 278.497326][ T30] #0: ffff88803e247148 ((wq_completion)hci13#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 278.514876][ T30] #1: ffffc90003cbfd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 278.530955][ T30] #2: ffff888038f04078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0 [ 278.548720][ T30] #3: ffffffff8fe384a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0 [ 278.559874][ T30] 5 locks held by kworker/u9:8/5243: [ 278.570499][ T30] #0: ffff88804c022948 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 278.587506][ T30] #1: ffffc90003cdfd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 278.603292][ T30] #2: ffff88807aec8d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 278.622744][ T30] #3: ffff88807aec8078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 278.636474][ T30] #4: ffffffff8fe384a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 278.654349][ T30] 5 locks held by kworker/u9:9/5245: [ 278.659708][ T30] #0: ffff88804a31f948 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 278.678519][ T30] #1: ffffc90003cffd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 278.698295][ T30] #2: ffff88807cbfcd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 278.710266][ T30] #3: ffff88807cbfc078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 278.726809][ T30] #4: ffffffff8fe384a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 278.742952][ T30] 1 lock held by syz-executor/5246: [ 278.748217][ T30] #0: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 278.765248][ T30] 3 locks held by kworker/1:5/5283: [ 278.773648][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 278.792269][ T30] #1: ffffc90004327d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 278.808895][ T30] #2: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 278.826443][ T30] 5 locks held by kworker/0:5/5302: [ 278.832100][ T30] 1 lock held by syz.3.8/5317: [ 278.837003][ T30] #0: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 278.850511][ T30] 1 lock held by syz.1.10/5321: [ 278.855427][ T30] #0: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 278.873828][ T30] 3 locks held by syz.2.11/5325: [ 278.878835][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 278.895421][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x602/0x9e0 [ 278.906117][ T30] #2: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 278.923109][ T30] 5 locks held by kworker/u9:10/5360: [ 278.928561][ T30] #0: ffff888026b84948 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 278.945671][ T30] #1: ffffc90004727d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 278.961512][ T30] #2: ffff888028d2cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 278.976005][ T30] #3: ffff888028d2c078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 278.994481][ T30] #4: ffffffff8fe384a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 279.012578][ T30] 2 locks held by syz-executor/5361: [ 279.017978][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 279.031703][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 279.048900][ T30] 2 locks held by syz-executor/5362: [ 279.056279][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 279.071023][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 279.089067][ T30] 2 locks held by syz-executor/5363: [ 279.098263][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 279.110456][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 279.126455][ T30] 2 locks held by syz-executor/5366: [ 279.132219][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 279.148063][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 279.159907][ T30] 2 locks held by syz-executor/5367: [ 279.172157][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 279.187199][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 279.200759][ T30] 2 locks held by syz-executor/5375: [ 279.206108][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 279.223230][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 279.237416][ T30] 2 locks held by syz-executor/5377: [ 279.245688][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 279.259195][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 279.273472][ T30] 2 locks held by syz-executor/5383: [ 279.278846][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 279.294563][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 279.308643][ T30] 2 locks held by syz-executor/5388: [ 279.319291][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 279.340115][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 279.356843][ T30] 2 locks held by syz-executor/5389: [ 279.362676][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 279.380534][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 279.398241][ T30] 2 locks held by syz-executor/5395: [ 279.403972][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 279.420324][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 279.439001][ T30] 2 locks held by syz-executor/5397: [ 279.444771][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 279.460462][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 279.475828][ T30] 2 locks held by syz-executor/5404: [ 279.487308][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 279.511027][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 279.526925][ T30] 2 locks held by syz-executor/5407: [ 279.533653][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 279.550455][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 279.568959][ T30] 2 locks held by syz-executor/5408: [ 279.574701][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 279.590463][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 279.607990][ T30] 1 lock held by dhcpcd/5409: [ 279.613729][ T30] #0: ffff888030cb4258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 279.630488][ T30] 5 locks held by kworker/u9:12/5411: [ 279.635940][ T30] #0: ffff888049db4948 ((wq_completion)hci7){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 279.657679][ T30] #1: ffffc9000340fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 279.676873][ T30] #2: ffff88807cbf8d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 279.687238][ T30] #3: ffff88807cbf8078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 279.705155][ T30] #4: ffffffff8fe384a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 279.719187][ T30] 1 lock held by dhcpcd/5413: [ 279.728959][ T30] #0: ffff888048bc2258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 279.740929][ T30] 1 lock held by dhcpcd/5414: [ 279.745677][ T30] #0: ffff888048164258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 279.762480][ T30] 1 lock held by dhcpcd/5415: [ 279.767236][ T30] #0: ffff88807b218258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 279.782800][ T30] 1 lock held by dhcpcd/5417: [ 279.787543][ T30] #0: ffff88805a3d8258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 279.801939][ T30] 1 lock held by dhcpcd/5418: [ 279.806673][ T30] #0: ffff88802972c258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 279.825175][ T30] [ 279.827612][ T30] ============================================= [ 279.827612][ T30] [ 279.845123][ T30] NMI backtrace for cpu 1 [ 279.849529][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 279.859749][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 279.869844][ T30] Call Trace: [ 279.873163][ T30] [ 279.876135][ T30] dump_stack_lvl+0x241/0x360 [ 279.880875][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 279.886126][ T30] ? __pfx__printk+0x10/0x10 [ 279.890777][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 279.895770][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 279.901286][ T30] ? _printk+0xd5/0x120 [ 279.905495][ T30] ? __pfx__printk+0x10/0x10 [ 279.910129][ T30] ? __wake_up_klogd+0xcc/0x110 [ 279.915061][ T30] ? __pfx__printk+0x10/0x10 [ 279.919698][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 279.924776][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 279.930932][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 279.936973][ T30] watchdog+0xff4/0x1040 [ 279.941267][ T30] ? watchdog+0x1ea/0x1040 [ 279.945732][ T30] ? __pfx_watchdog+0x10/0x10 [ 279.950451][ T30] kthread+0x2f0/0x390 [ 279.954564][ T30] ? __pfx_watchdog+0x10/0x10 [ 279.959282][ T30] ? __pfx_kthread+0x10/0x10 [ 279.963911][ T30] ret_from_fork+0x4b/0x80 [ 279.968385][ T30] ? __pfx_kthread+0x10/0x10 [ 279.973011][ T30] ret_from_fork_asm+0x1a/0x30 [ 279.977837][ T30] [ 279.981631][ T30] Sending NMI from CPU 1 to CPUs 0: [ 279.986991][ C0] NMI backtrace for cpu 0 [ 279.987007][ C0] CPU: 0 UID: 0 PID: 5302 Comm: kworker/0:5 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 279.987028][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 279.987040][ C0] Workqueue: events_power_efficient neigh_periodic_work [ 279.987065][ C0] RIP: 0010:__lock_acquire+0x4dc/0x2050 [ 279.987095][ C0] Code: 13 00 00 44 89 3b 44 89 c3 48 89 d8 48 c1 e8 06 48 8d 3c c5 c0 97 25 94 be 08 00 00 00 e8 6c 49 8e 00 48 0f a3 1d 04 71 b5 12 <73> 27 48 69 c3 c8 00 00 00 48 8d 98 c0 16 c2 93 48 ba 00 00 00 00 [ 279.987110][ C0] RSP: 0018:ffffc900000078b0 EFLAGS: 00000057 [ 279.987125][ C0] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff817026b4 [ 279.987138][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff942597c0 [ 279.987150][ C0] RBP: 000000000000000a R08: ffffffff942597c7 R09: 1ffffffff284b2f8 [ 279.987162][ C0] R10: dffffc0000000000 R11: fffffbfff284b2f9 R12: ffff888027695a00 [ 279.987176][ C0] R13: 0000000000000001 R14: 00000000000c2001 R15: 0000000000000000 [ 279.987188][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 279.987203][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 279.987216][ C0] CR2: 0000001b32c10ff8 CR3: 0000000031da6000 CR4: 00000000003506f0 [ 279.987231][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 279.987242][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 279.987254][ C0] Call Trace: [ 279.987260][ C0] [ 279.987268][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 279.987302][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 279.987329][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 279.987362][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 279.987386][ C0] ? nmi_handle+0x14f/0x5a0 [ 279.987403][ C0] ? nmi_handle+0x2a/0x5a0 [ 279.987421][ C0] ? __lock_acquire+0x4dc/0x2050 [ 279.987446][ C0] ? default_do_nmi+0x63/0x160 [ 279.987463][ C0] ? exc_nmi+0x123/0x1f0 [ 279.987479][ C0] ? end_repeat_nmi+0xf/0x53 [ 279.987504][ C0] ? __lock_acquire+0x4d4/0x2050 [ 279.987530][ C0] ? __lock_acquire+0x4dc/0x2050 [ 279.987556][ C0] ? __lock_acquire+0x4dc/0x2050 [ 279.987584][ C0] ? __lock_acquire+0x4dc/0x2050 [ 279.987609][ C0] [ 279.987615][ C0] [ 279.987628][ C0] lock_acquire+0x1ed/0x550 [ 279.987652][ C0] ? debug_object_active_state+0x15d/0x360 [ 279.987679][ C0] ? __kasan_slab_free+0x59/0x70 [ 279.987696][ C0] ? kmem_cache_free+0x1a2/0x420 [ 279.987718][ C0] ? dst_destroy+0x2ac/0x460 [ 279.987743][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 279.987767][ C0] ? ret_from_fork+0x4b/0x80 [ 279.987791][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 279.987821][ C0] ? mark_lock+0x9a/0x360 [ 279.987839][ C0] _raw_spin_lock_irqsave+0xd5/0x120 [ 279.987859][ C0] ? debug_object_active_state+0x15d/0x360 [ 279.987885][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 279.987905][ C0] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 279.987931][ C0] debug_object_active_state+0x15d/0x360 [ 279.987958][ C0] ? rcu_core+0xa37/0x17a0 [ 279.987975][ C0] ? __pfx_debug_object_active_state+0x10/0x10 [ 279.988001][ C0] ? dst_destroy+0x2ac/0x460 [ 279.988026][ C0] ? dst_destroy+0x43a/0x460 [ 279.988050][ C0] rcu_core+0xa21/0x17a0 [ 279.988072][ C0] ? __pfx_rcu_core+0x10/0x10 [ 279.988101][ C0] handle_softirqs+0x2c5/0x980 [ 279.988126][ C0] ? do_softirq+0x11b/0x1e0 [ 279.988149][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 279.988175][ C0] do_softirq+0x11b/0x1e0 [ 279.988196][ C0] [ 279.988202][ C0] [ 279.988208][ C0] ? __pfx_do_softirq+0x10/0x10 [ 279.988230][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 279.988257][ C0] ? rcu_is_watching+0x15/0xb0 [ 279.988277][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 279.988305][ C0] ? neigh_periodic_work+0xb35/0xd50 [ 279.988321][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 279.988344][ C0] ? neigh_destroy+0x423/0x580 [ 279.988373][ C0] neigh_periodic_work+0xb35/0xd50 [ 279.988393][ C0] ? process_scheduled_works+0x976/0x1850 [ 279.988417][ C0] process_scheduled_works+0xa63/0x1850 [ 279.988450][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 279.988477][ C0] ? assign_work+0x364/0x3d0 [ 279.988501][ C0] worker_thread+0x870/0xd30 [ 279.988527][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 279.988550][ C0] ? __kthread_parkme+0x169/0x1d0 [ 279.988576][ C0] ? __pfx_worker_thread+0x10/0x10 [ 279.988600][ C0] kthread+0x2f0/0x390 [ 279.988615][ C0] ? __pfx_worker_thread+0x10/0x10 [ 279.988639][ C0] ? __pfx_kthread+0x10/0x10 [ 279.988655][ C0] ret_from_fork+0x4b/0x80 [ 279.988679][ C0] ? __pfx_kthread+0x10/0x10 [ 279.988695][ C0] ret_from_fork_asm+0x1a/0x30 [ 279.988725][ C0] [ 280.508440][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 280.515545][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 280.525752][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 280.535851][ T30] Call Trace: [ 280.539173][ T30] [ 280.542141][ T30] dump_stack_lvl+0x241/0x360 [ 280.546871][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 280.552115][ T30] ? __pfx__printk+0x10/0x10 [ 280.556746][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 280.562784][ T30] ? vscnprintf+0x5d/0x90 [ 280.567171][ T30] panic+0x349/0x880 [ 280.571216][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 280.577433][ T30] ? __pfx_panic+0x10/0x10 [ 280.581892][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 280.587311][ T30] ? __irq_work_queue_local+0x137/0x410 [ 280.592909][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 280.598323][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 280.604534][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 280.610753][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 280.616969][ T30] watchdog+0x1033/0x1040 [ 280.621876][ T30] ? watchdog+0x1ea/0x1040 [ 280.626342][ T30] ? __pfx_watchdog+0x10/0x10 [ 280.631065][ T30] kthread+0x2f0/0x390 [ 280.635198][ T30] ? __pfx_watchdog+0x10/0x10 [ 280.641584][ T30] ? __pfx_kthread+0x10/0x10 [ 280.646323][ T30] ret_from_fork+0x4b/0x80 [ 280.650801][ T30] ? __pfx_kthread+0x10/0x10 [ 280.655890][ T30] ret_from_fork_asm+0x1a/0x30 [ 280.660718][ T30] [ 280.664520][ T30] Kernel Offset: disabled [ 280.668883][ T30] Rebooting in 86400 seconds..