last executing test programs: 784.415491ms ago: executing program 0 (id=1): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00'}) r1 = socket$netlink(0x10, 0x3, 0xb) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@ipv6_deladdrlabel={0x54, 0x49, 0x2, 0x70bd2b, 0x25dfdbfe, {0xa, 0x0, 0x78, 0x0, r2, 0x8000}, [@IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_LABEL={0x8, 0x2, 0xc}, @IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFAL_ADDRESS={0x14, 0x1, @private0}]}, 0x54}}, 0x0) 577.769423ms ago: executing program 0 (id=6): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x4) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtfilter={0x0, 0x2c, 0x300, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0x6, 0xe}, {0x7ff1, 0xe}}, [@filter_kind_options=@f_u32={{}, {0x0, 0x2, [@TCA_U32_MARK={0x0, 0xa, {0x8, 0x800}}, @TCA_U32_POLICE={0x0, 0x6, [@TCA_POLICE_PEAKRATE={0x0, 0x3, [0x80, 0x80, 0x8, 0x2, 0xcc, 0x80000000, 0x1, 0x2, 0x10001, 0x9, 0x77e08009, 0xfffffffb, 0x4, 0x100, 0x5, 0xffff, 0xc7, 0x1, 0x1, 0xfffffffb, 0x3, 0x1, 0x5, 0x80000001, 0xc, 0x3, 0x6, 0x65d, 0x1000, 0x8, 0xff, 0x6b8, 0x5, 0x4, 0x80000001, 0x101, 0x800, 0xc, 0xd, 0xffffffff, 0x0, 0x6, 0x8, 0x1, 0x7fffffff, 0x9, 0x9, 0x2, 0x6, 0x8, 0x4, 0x0, 0xa, 0x5, 0x7, 0x4, 0x3, 0x7, 0x7, 0x9b, 0x8, 0x0, 0x2, 0x4b5, 0x3e0, 0x3e0a, 0x1f58, 0x2, 0xb3f, 0x99, 0x5, 0x1000, 0x8001, 0x5, 0x3, 0x8, 0x0, 0x71, 0x0, 0xa6, 0xffff, 0x3, 0x7, 0x6, 0x7fff, 0x2, 0x80000001, 0xfff, 0xfffffffd, 0x4, 0x4, 0x8000, 0x200, 0x3bc, 0x5, 0x8, 0x7ff, 0x7, 0x81, 0x3, 0xa17, 0x2, 0x5, 0x2, 0x1, 0xa, 0xca13, 0x4, 0x1, 0xffffb748, 0x4, 0x10000, 0x4, 0xd5, 0x4a6, 0x5, 0x8, 0xbe9b, 0xfffff1ce, 0x203, 0xffff, 0x7ff, 0xb, 0x0, 0x3, 0x1, 0x1, 0x2a8f, 0x2e, 0x5, 0x3, 0x54, 0xffffff7c, 0x1, 0x401, 0x10001, 0x2, 0x60000000, 0x4, 0x80000001, 0x8, 0x3ff, 0x1, 0x3, 0x7fff, 0x93, 0xffffffff, 0x8, 0xdc6d, 0x0, 0xffffffff, 0x1, 0x0, 0x5, 0x4, 0xfffff963, 0x81, 0x9, 0xc, 0x400, 0x0, 0x1, 0x2, 0x69e, 0x1000, 0x8, 0x10001, 0xf, 0x8, 0xa, 0x5, 0x0, 0x7, 0x0, 0x9, 0xa, 0x1, 0x8, 0x3, 0xfffffffc, 0x7ffb, 0xe00, 0x44, 0x2, 0x3ff, 0x3ff, 0x0, 0x9, 0x8, 0x6, 0x5, 0x4, 0x8, 0x3, 0x4, 0x5, 0x2, 0xffff, 0x7, 0x4, 0x8001, 0x0, 0x400, 0xb9a5, 0x1, 0x7, 0x1, 0x1, 0xc4ae, 0x1, 0x0, 0x3, 0xffffffff, 0x7, 0x0, 0x800, 0x7, 0x0, 0x3, 0x854e, 0x3, 0x5, 0x1, 0x9, 0xeb, 0x9, 0x5, 0x6, 0x3, 0x350a0c2, 0x8, 0x1, 0x0, 0x9, 0x4, 0x6, 0x9, 0xa30, 0x62, 0x7, 0x9, 0xb, 0x800, 0x2, 0xa, 0x81, 0x5, 0x8, 0x4, 0xfffffff8, 0x9, 0x0, 0x0, 0x5, 0xa, 0x6]}, @TCA_POLICE_AVRATE, @TCA_POLICE_AVRATE={0x0, 0x4, 0xffff}, @TCA_POLICE_RATE64={0x0, 0x8, 0x5}, @TCA_POLICE_RATE={0x0, 0x2, [0x4, 0xc134, 0x100, 0x3, 0x0, 0x5, 0x101, 0x2, 0x9, 0xffff, 0x9188, 0x544ce6c0, 0x1, 0x0, 0x9, 0x5, 0xdb7, 0xa, 0x7ff, 0x1, 0x8000, 0x0, 0x7, 0x3, 0xe, 0x3ff, 0x8, 0x3ff, 0x2, 0x100, 0x3, 0x0, 0x3, 0x0, 0xa08, 0x8, 0xc, 0x800, 0x9, 0x80, 0xfff, 0x1, 0xfffffffa, 0xac, 0x7ff, 0x0, 0xfffffffe, 0x3, 0xde92, 0x0, 0x6, 0x80000001, 0x0, 0x8, 0x7, 0x9, 0x7, 0x1ff, 0x69c, 0x101, 0x80000001, 0xffff, 0x5, 0x800, 0x1, 0x9cdd, 0x1, 0x80, 0x8, 0x2, 0xfffffff7, 0x8, 0xfffffffe, 0x2, 0x5, 0x6, 0x40, 0x6, 0x9, 0x6ea, 0x1, 0x25d, 0x7f, 0xc5, 0x80000000, 0x800, 0x0, 0x100, 0x8, 0xd53a, 0x96d, 0x8, 0x67, 0xd, 0x3, 0x6, 0x2, 0xffffffff, 0x80000001, 0x9, 0x1, 0x4000000, 0x8, 0x1, 0x1, 0x5c5, 0x4, 0x0, 0xe2b, 0x5, 0xffffff00, 0x8, 0xffffffff, 0x81, 0x4, 0xe, 0x5, 0x1, 0x300, 0x8000, 0x100, 0x8, 0xfffffff9, 0x3d33, 0xfffffff9, 0xfffffffa, 0x5, 0xfffffff7, 0xffff8001, 0x3, 0x1, 0x1ff, 0xa, 0x9, 0x2, 0x909c, 0x0, 0x18, 0xed1, 0x80, 0x8, 0x400, 0x76, 0x5, 0x0, 0x7a6a, 0x5, 0x4, 0x2, 0x0, 0x4, 0x1ff, 0x81, 0xfffffff7, 0x0, 0x9, 0xe, 0x3, 0x1, 0x3, 0x0, 0x5, 0x1e3b, 0x8408, 0x9, 0xffff5ca9, 0x9, 0x0, 0x4, 0x8, 0x7, 0xca90, 0x2, 0x2, 0x4, 0x0, 0x5, 0x7df9fe42, 0xe981, 0x56, 0xd6, 0xffffff88, 0x1, 0x778, 0x2, 0x3, 0x9, 0x0, 0xffffffff, 0x7f, 0x7, 0x1, 0x6, 0x8, 0x1, 0x0, 0x8000, 0xfffffffc, 0x9, 0x7c2, 0x2, 0xffff7fff, 0x6, 0x3, 0xb, 0x4, 0x1, 0x9, 0x7fff, 0x80, 0x5, 0x1ff, 0x3, 0x5, 0x0, 0x4, 0x1, 0x80000001, 0x6, 0x5, 0x0, 0x9, 0x4, 0xffffffff, 0xf, 0xb, 0x1, 0xf3, 0x400, 0x0, 0x400, 0x101, 0xfffffff7, 0x7, 0x8, 0x80000001, 0x3, 0x40, 0xfffffff2, 0xff, 0xfffffffc, 0xc, 0x8, 0x8, 0x7, 0x80000001, 0x99, 0x6, 0x9, 0xade2, 0x7, 0x180000, 0x14df, 0x9, 0xffff, 0x6]}, @TCA_POLICE_AVRATE={0x0, 0x4, 0x40}, @TCA_POLICE_RATE64={0x0, 0x8, 0xf33}]}, @TCA_U32_DIVISOR={0x0, 0x4, 0x30}]}}]}, 0x5c}}, 0x0) 491.607515ms ago: executing program 0 (id=7): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) (async) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x1}], 0x1}, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='hybla\x00', 0x6) (async) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x700) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0xffff0f00}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union={0x0, 0x0, 0x0, 0x6, 0x0, 0x2}]}}, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 347.076042ms ago: executing program 0 (id=8): r0 = socket(0x2, 0x6, 0x0) connect$qrtr(r0, 0x0, 0x0) sendmsg$rds(r0, &(0x7f0000001a80)={&(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/44, 0x2c}, {&(0x7f0000000500)=""/222, 0xde}, {&(0x7f0000000180)=""/69, 0x45}], 0x3, &(0x7f0000001940)=[@rdma_args={0x48, 0x114, 0x1, {{0x5, 0x2}, {&(0x7f0000000300)=""/25, 0x19}, &(0x7f00000007c0)=[{&(0x7f0000000680)=""/6, 0x6}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/243, 0xf3}], 0x3, 0x0, 0x2}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x5}, @rdma_dest={0x18, 0x114, 0x2, {0x1, 0x1000}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000800)=""/9, 0x9}, &(0x7f0000000840), 0x13}}, @rdma_dest={0x18, 0x114, 0x2, {0x2, 0x401}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x1}, @fadd={0x58, 0x114, 0x6, {{0xf, 0x7}, &(0x7f0000000880)=0x8, &(0x7f00000008c0)=0x10001, 0x800000000, 0x8001, 0x10000, 0x5ff437f3, 0x37, 0x3}}], 0x130, 0x10}, 0x8040) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000004380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r3, &(0x7f0000004740)={0x0, 0x0, &(0x7f0000004700)={&(0x7f0000004600)={0x44, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6}}]}, 0x44}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009700000085000000070000009500000000000000371621cc9add4361d26303002187a8afd00ba3e3259462c91bf89d22308efd719a9e3741335f2eac8d23c79c07a61ea325cfb3fc54c4afa0aeeb4d21d569821864f33d077087450efa929d332809bb33000000ee4b7a3216aaac795f0e23fc1928c0489993d6c89d2f6b590db10125680bd1b1d6320a66e58bb1d63702ff6b39c49f6906ae57dcbb95f5e76fefb93a880e9007566ad42439a529c654998ef933317370dc"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000340)="23000000010011", 0x7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) r6 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMSETDEVNAME(r6, 0x80184947, &(0x7f0000000040)={0x0, 'syz0\x00'}) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x1, 0x0, 0x0, {[@mss={0x2, 0x4, 0xa005}, @nop]}}}}}}}, 0x0) socket(0x2, 0x6, 0x0) (async) connect$qrtr(r0, 0x0, 0x0) (async) sendmsg$rds(r0, &(0x7f0000001a80)={&(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/44, 0x2c}, {&(0x7f0000000500)=""/222, 0xde}, {&(0x7f0000000180)=""/69, 0x45}], 0x3, &(0x7f0000001940)=[@rdma_args={0x48, 0x114, 0x1, {{0x5, 0x2}, {&(0x7f0000000300)=""/25, 0x19}, &(0x7f00000007c0)=[{&(0x7f0000000680)=""/6, 0x6}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/243, 0xf3}], 0x3, 0x0, 0x2}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x5}, @rdma_dest={0x18, 0x114, 0x2, {0x1, 0x1000}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000800)=""/9, 0x9}, &(0x7f0000000840), 0x13}}, @rdma_dest={0x18, 0x114, 0x2, {0x2, 0x401}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x1}, @fadd={0x58, 0x114, 0x6, {{0xf, 0x7}, &(0x7f0000000880)=0x8, &(0x7f00000008c0)=0x10001, 0x800000000, 0x8001, 0x10000, 0x5ff437f3, 0x37, 0x3}}], 0x130, 0x10}, 0x8040) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000004380), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$DEVLINK_CMD_SB_POOL_GET(r3, &(0x7f0000004740)={0x0, 0x0, &(0x7f0000004700)={&(0x7f0000004600)={0x44, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6}}]}, 0x44}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009700000085000000070000009500000000000000371621cc9add4361d26303002187a8afd00ba3e3259462c91bf89d22308efd719a9e3741335f2eac8d23c79c07a61ea325cfb3fc54c4afa0aeeb4d21d569821864f33d077087450efa929d332809bb33000000ee4b7a3216aaac795f0e23fc1928c0489993d6c89d2f6b590db10125680bd1b1d6320a66e58bb1d63702ff6b39c49f6906ae57dcbb95f5e76fefb93a880e9007566ad42439a529c654998ef933317370dc"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r5, &(0x7f0000000340)="23000000010011", 0x7) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) (async) socket$isdn_base(0x22, 0x3, 0x0) (async) ioctl$IMSETDEVNAME(r6, 0x80184947, &(0x7f0000000040)={0x0, 'syz0\x00'}) (async) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x1, 0x0, 0x0, {[@mss={0x2, 0x4, 0xa005}, @nop]}}}}}}}, 0x0) (async) 304.672962ms ago: executing program 1 (id=2): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x2, 0x4) recvmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}, 0x100}], 0x1, 0x122, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xd}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x3, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 126.133275ms ago: executing program 0 (id=9): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000011008188040f46ecf14cb9cca7480ef435000000e3bd6efbbf4ae7220b0013200d000100ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000060020000000000a01010000000000000000010000000900010073797a300000000040000000160a01080000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000064000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001007465616d300000000000000000000000140001006970365f7674693098e0c600000008000740000000011400000010006f35496dcc58b5cf53e25063669f93a38d08d5a6ff4bbefaa490d07bad16b44187a77033ce913219e2195e749dfffe4e37a93a2e7381b9cd1f5ee59fc66484f4a793aebfd18af998cebb68ca9e3997912d95d75bc3df9870dc7f68194ac4b9a238bfff88c41cb26e624ca715727a9519f40dca5ad10d6a0cf1"], 0xec}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)={0x404, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x35a, 0x33, @assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x9}, @broadcast, @broadcast, @from_mac, {0x9, 0x1d}, @value=@ver_80211n={0x0, 0x8, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x800, 0x53, @random=0x5, @void, @val={0x2d, 0x1a, {0x2, 0x0, 0x6, 0x0, {0x9, 0x6, 0x0, 0x5, 0x0, 0x1}, 0x6, 0x9, 0xf}}, [{0xdd, 0x84, "dd1c493b3d71fbc4ce82993664569fac8416a550f97e7f80a3cc697bf9f1bcfd3453e2420f5611c504a7598fee988d48920c86057421e709f6622d0f822b406cf098957c31d4cdd8d7288c72f6b291dfcb4ce354084a478a93de9cd913ceb07ac8aa99907dad06f6f23bcdcc21ee80eb773f4e9a7c6067f59572097ebefcf6eff3eb8fa9"}, {0xdd, 0xa8, "d0bcc8cd6f0cdfdefbb2015d8000e5177001591ebb92f54c420d86e010a4b6e1da7d539c6a2a4c627cd8ecd3c36468130071365b6145944d6c685c2bd5a0fb6d36445432650724ee860bc98ab97c97d5f9f23b0807133cca3f0d0f2c9f53f0e6e5cd04b529940c4d5a7bb530cfae63feab4cfa5be5b57cca3a459bb626735a31c4678418618fef122563e9bac43aa9e1310e3c4ff1ec34a981fce77d45e39d0b88564acbb53af395"}, {0xdd, 0xc6, "01f8f750ddb8353776eac2077ba6a607a98604c259914425d5afc94f4a9e528f5ffa01257b618796fa176b8f804d4796eb1deb9a78dc62efa27c7283aa30e2e1f45d4920e6c6f57b00ea7f9051cc928cb1c830965574bfef4317e8cbeecc4ab97f03c00ef8dd3df7762cffabf76247deab94e37942b429bdeaeb45ca9857144132ff62bb16ec98bff8d41b59e846a753460a84b5830f2f41800f4b0e2ada557c08100422d2cc72a66bc8a55608b8732929c2dcbdcaf793357ebcab7631e9f05f105fa6a91658"}, {0xdd, 0x33, "5c45766a9f59bf67bea2426605bb8cc216c01cca2c4849cddf36d8144791cbef218fb9520cdffd9bca1f50d6b1f4f814d10e89"}, {0xdd, 0xe9, "c4deed39c255886729d12976c0ef25afb821185ec3d691f8f375f1e3cd684cb08946b35b630dcf3ff27b6194b80427bb9ccb9d6cfcea49e320cd5f6d0b3c0564ede6e49b6b1b1ca8cc6b9b6d2e80df84c52404b45ae5ea6d4f0bee820cd8e4d8199226e918a04bd7edffc6422837de65e035b0d78de7d006ca6a6ddf918ac2af2b32b4de2b03d593c697febaf6456102aed1b0ad69b10928668c1ac29b446085f5eec26becaa188139c03e0c41fd1ec6e5268e2670f38e953f1578a88451bbb9d0a92aa8f42dcc50b2f011b2f8b93e70d06fb416878393ab1c1175a9a8f2438b2d82cb27b543d73b17"}]}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x38, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x7ffb}, @broadcast, @broadcast, @initial, {0x4, 0x52}}, 0x28, @val={0x8c, 0x18, {0x90, "0b50a7dd6811", @long="4d2ef8853312b993178c39ece132ca81"}}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}], @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x328}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7ff}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffeff}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xe5e}]}, 0x404}, 0x1, 0x0, 0x0, 0x40040}, 0x4000010) 0s ago: executing program 1 (id=10): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80100004}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x4e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0xddfbe6b2fa80e1f4}, 0x4841) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0xd}, [{0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8001}, {0x0, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x6}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5efd3e9c}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0xfffffffa}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x807e}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffe}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.146' (ED25519) to the list of known hosts. [ 51.667278][ T5219] cgroup: Unknown subsys name 'net' [ 51.835741][ T5219] cgroup: Unknown subsys name 'cpuset' [ 51.843354][ T5219] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 53.133917][ T5219] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 56.417310][ T5234] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 56.438620][ T5239] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 56.449130][ T5244] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 56.456857][ T5244] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 56.464923][ T5244] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 56.473280][ T5244] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 56.481004][ T5244] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 56.488300][ T5244] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 56.494620][ T5248] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 56.495824][ T5244] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 56.511586][ T5244] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 56.513725][ T5248] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 56.519933][ T5244] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 56.534001][ T5248] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 56.543415][ T5244] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 56.551977][ T5249] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 56.559277][ T5248] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 56.563751][ T5244] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 56.573563][ T5248] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 56.581498][ T5249] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 56.589890][ T5251] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 56.599255][ T5251] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 56.603095][ T5249] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 56.606620][ T5251] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 56.614013][ T5249] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 56.621423][ T5251] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 56.627911][ T5249] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 56.635379][ T5251] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 56.643665][ T5249] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 56.648769][ T5251] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 57.071713][ T5233] chnl_net:caif_netlink_parms(): no params data found [ 57.090047][ T5241] chnl_net:caif_netlink_parms(): no params data found [ 57.103847][ T5235] chnl_net:caif_netlink_parms(): no params data found [ 57.196370][ T5229] chnl_net:caif_netlink_parms(): no params data found [ 57.244972][ T5233] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.252148][ T5233] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.259931][ T5233] bridge_slave_0: entered allmulticast mode [ 57.268829][ T5233] bridge_slave_0: entered promiscuous mode [ 57.276562][ T5233] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.286433][ T5233] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.293606][ T5233] bridge_slave_1: entered allmulticast mode [ 57.300090][ T5233] bridge_slave_1: entered promiscuous mode [ 57.331198][ T5240] chnl_net:caif_netlink_parms(): no params data found [ 57.350465][ T5233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.361682][ T5233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.453704][ T5229] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.460853][ T5229] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.468320][ T5229] bridge_slave_0: entered allmulticast mode [ 57.474967][ T5229] bridge_slave_0: entered promiscuous mode [ 57.487306][ T5233] team0: Port device team_slave_0 added [ 57.496066][ T5235] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.503429][ T5235] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.510624][ T5235] bridge_slave_0: entered allmulticast mode [ 57.517404][ T5235] bridge_slave_0: entered promiscuous mode [ 57.524600][ T5241] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.531684][ T5241] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.541194][ T5241] bridge_slave_0: entered allmulticast mode [ 57.548517][ T5241] bridge_slave_0: entered promiscuous mode [ 57.556352][ T5241] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.563725][ T5241] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.570864][ T5241] bridge_slave_1: entered allmulticast mode [ 57.577726][ T5241] bridge_slave_1: entered promiscuous mode [ 57.591858][ T5229] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.599581][ T5229] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.606988][ T5229] bridge_slave_1: entered allmulticast mode [ 57.613953][ T5229] bridge_slave_1: entered promiscuous mode [ 57.621582][ T5233] team0: Port device team_slave_1 added [ 57.651675][ T5235] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.658978][ T5235] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.666238][ T5235] bridge_slave_1: entered allmulticast mode [ 57.673488][ T5235] bridge_slave_1: entered promiscuous mode [ 57.720220][ T5240] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.729707][ T5240] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.737210][ T5240] bridge_slave_0: entered allmulticast mode [ 57.744390][ T5240] bridge_slave_0: entered promiscuous mode [ 57.752280][ T5235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.765166][ T5235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.776128][ T5241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.789919][ T5229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.800817][ T5229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.810782][ T5233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.817799][ T5233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.844093][ T5233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.858269][ T5240] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.868065][ T5240] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.875493][ T5240] bridge_slave_1: entered allmulticast mode [ 57.882001][ T5240] bridge_slave_1: entered promiscuous mode [ 57.903983][ T5241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.925170][ T5233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.932132][ T5233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.958424][ T5233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.003778][ T5229] team0: Port device team_slave_0 added [ 58.011321][ T5240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.024115][ T5240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.035413][ T5235] team0: Port device team_slave_0 added [ 58.057933][ T5229] team0: Port device team_slave_1 added [ 58.081698][ T5235] team0: Port device team_slave_1 added [ 58.096567][ T5241] team0: Port device team_slave_0 added [ 58.131441][ T5241] team0: Port device team_slave_1 added [ 58.137576][ T5235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.144867][ T5235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.171103][ T5235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.195079][ T5233] hsr_slave_0: entered promiscuous mode [ 58.201251][ T5233] hsr_slave_1: entered promiscuous mode [ 58.209508][ T5240] team0: Port device team_slave_0 added [ 58.229280][ T5235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.236297][ T5235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.262392][ T5235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.273942][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.280907][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.307414][ T5229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.320357][ T5240] team0: Port device team_slave_1 added [ 58.327017][ T5241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.334039][ T5241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.360115][ T5241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.384510][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.391460][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.417871][ T5229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.446301][ T5241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.454346][ T5241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.480783][ T5241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.514203][ T5240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.521154][ T5240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.547342][ T5240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.559627][ T5240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.567133][ T5240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.593249][ T5240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.633589][ T5238] Bluetooth: hci1: command tx timeout [ 58.633593][ T5251] Bluetooth: hci0: command tx timeout [ 58.659387][ T5241] hsr_slave_0: entered promiscuous mode [ 58.667864][ T5241] hsr_slave_1: entered promiscuous mode [ 58.674161][ T5241] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.681877][ T5241] Cannot create hsr debugfs directory [ 58.689730][ T5235] hsr_slave_0: entered promiscuous mode [ 58.696457][ T5235] hsr_slave_1: entered promiscuous mode [ 58.702369][ T5235] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.710355][ T5235] Cannot create hsr debugfs directory [ 58.715839][ T5251] Bluetooth: hci3: command tx timeout [ 58.715904][ T5234] Bluetooth: hci4: command tx timeout [ 58.727803][ T5238] Bluetooth: hci2: command tx timeout [ 58.792231][ T5240] hsr_slave_0: entered promiscuous mode [ 58.798550][ T5240] hsr_slave_1: entered promiscuous mode [ 58.806704][ T5240] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.814555][ T5240] Cannot create hsr debugfs directory [ 58.826105][ T5229] hsr_slave_0: entered promiscuous mode [ 58.832213][ T5229] hsr_slave_1: entered promiscuous mode [ 58.838346][ T5229] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.846181][ T5229] Cannot create hsr debugfs directory [ 59.060773][ T5233] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.098309][ T5233] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.125455][ T5233] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.148873][ T5233] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.204950][ T5241] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.218843][ T5241] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.227570][ T5241] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.243479][ T5241] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.298066][ T5229] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.308232][ T5229] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.326937][ T5229] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.336133][ T5229] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.398729][ T5240] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.410878][ T5240] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.434486][ T5240] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.446559][ T5240] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.485096][ T5233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.541956][ T5233] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.570789][ T5235] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.582047][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.589215][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.599236][ T5235] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.609736][ T5235] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.619495][ T5235] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.647551][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.654654][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.679706][ T5241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.726234][ T5241] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.750917][ T5229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.770315][ T1307] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.777444][ T1307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.823843][ T1307] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.830940][ T1307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.916164][ T5229] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.969808][ T2925] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.976941][ T2925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.998532][ T5240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.009011][ T2925] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.016108][ T2925] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.056448][ T5240] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.104464][ T5233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.123242][ T5235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.147803][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.155387][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.180548][ T5229] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.195287][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.202385][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.229724][ T5241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.288049][ T5233] veth0_vlan: entered promiscuous mode [ 60.319718][ T5235] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.346606][ T1307] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.353741][ T1307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.380146][ T5233] veth1_vlan: entered promiscuous mode [ 60.391141][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.398261][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.460435][ T5240] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.546406][ T5233] veth0_macvtap: entered promiscuous mode [ 60.557033][ T5241] veth0_vlan: entered promiscuous mode [ 60.574161][ T5233] veth1_macvtap: entered promiscuous mode [ 60.589061][ T5241] veth1_vlan: entered promiscuous mode [ 60.612393][ T5229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.637473][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.677677][ T5241] veth0_macvtap: entered promiscuous mode [ 60.693970][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.714323][ T5238] Bluetooth: hci1: command tx timeout [ 60.718582][ T5234] Bluetooth: hci0: command tx timeout [ 60.735126][ T5241] veth1_macvtap: entered promiscuous mode [ 60.775964][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.789703][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.802033][ T5234] Bluetooth: hci4: command tx timeout [ 60.802045][ T5238] Bluetooth: hci3: command tx timeout [ 60.807875][ T5234] Bluetooth: hci2: command tx timeout [ 60.821506][ T5241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.841883][ T5233] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.851568][ T5233] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.860689][ T5233] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.869515][ T5233] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.895570][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.906639][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.917807][ T5241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.935504][ T5240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.977916][ T5241] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.989385][ T5241] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.005902][ T5241] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.014977][ T5241] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.073853][ T5229] veth0_vlan: entered promiscuous mode [ 61.100944][ T5235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.127138][ T5229] veth1_vlan: entered promiscuous mode [ 61.162072][ T5240] veth0_vlan: entered promiscuous mode [ 61.177853][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.188268][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.218803][ T5240] veth1_vlan: entered promiscuous mode [ 61.257954][ T2974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.259084][ T5229] veth0_macvtap: entered promiscuous mode [ 61.294228][ T5229] veth1_macvtap: entered promiscuous mode [ 61.301099][ T2974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.333069][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.340903][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.364986][ T5240] veth0_macvtap: entered promiscuous mode [ 61.389605][ T5233] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 61.397369][ T5240] veth1_macvtap: entered promiscuous mode [ 61.425365][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.436443][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.446314][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.456816][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.468174][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.478250][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.488969][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.498872][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.509422][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.520761][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.530346][ T5235] veth0_vlan: entered promiscuous mode [ 61.576714][ T2974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.586158][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.594957][ T2974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.596873][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.614307][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.625140][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.635405][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.646180][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.658778][ T5240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.680516][ T5235] veth1_vlan: entered promiscuous mode [ 61.703439][ T5229] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.712145][ T5229] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.722241][ T5229] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.731619][ T5229] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.750073][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.764813][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.775245][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.786126][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.796156][ T5240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.812418][ T5240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.829426][ T5240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.879822][ T5240] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.898465][ T5240] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.910324][ T5240] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.922416][ T5240] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.940277][ T5325] Bluetooth: MGMT ver 1.23 [ 62.084789][ T5235] veth0_macvtap: entered promiscuous mode [ 62.140097][ T5235] veth1_macvtap: entered promiscuous mode [ 62.380259][ T5333] netlink: 2 bytes leftover after parsing attributes in process `syz.0.9'. [ 62.862646][ T5234] Bluetooth: hci1: command tx timeout [ 62.868177][ T5238] Bluetooth: hci0: command tx timeout [ 62.873758][ T5251] Bluetooth: hci3: command tx timeout [ 62.879168][ T5251] Bluetooth: hci4: command tx timeout [ 62.884667][ T5239] Bluetooth: hci2: command tx timeout [ 64.953636][ T5234] Bluetooth: hci1: command tx timeout [ 64.959131][ T5239] Bluetooth: hci3: command tx timeout [ 64.964700][ T5238] Bluetooth: hci0: command tx timeout [ 64.970116][ T5238] Bluetooth: hci2: command tx timeout [ 64.975669][ T5251] Bluetooth: hci4: command tx timeout [ 71.515284][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.521745][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.153793][ T5251] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 73.161929][ T5251] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 73.169726][ T5251] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 73.177744][ T5251] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 73.185456][ T5251] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 73.205049][ T5251] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 73.252756][ T5238] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 73.261435][ T5238] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 73.269389][ T5238] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 73.282020][ T5238] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 73.289919][ T5238] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 73.298226][ T5238] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 75.272788][ T5238] Bluetooth: hci5: command tx timeout [ 75.352963][ T5238] Bluetooth: hci6: command tx timeout [ 76.661992][ T46] cfg80211: failed to load regulatory.db [ 77.352751][ T5238] Bluetooth: hci5: command tx timeout [ 77.432709][ T5238] Bluetooth: hci6: command tx timeout [ 79.432744][ T5238] Bluetooth: hci5: command tx timeout [ 79.512611][ T5238] Bluetooth: hci6: command tx timeout [ 81.512775][ T5238] Bluetooth: hci5: command tx timeout [ 81.592686][ T5238] Bluetooth: hci6: command tx timeout [ 116.552457][ C0] sched: DL replenish lagged too much [ 118.912598][ T5251] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 118.934903][ T5251] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 118.944814][ T5251] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 118.962031][ T5251] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 118.969633][ T5251] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 118.977142][ T5251] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 119.078894][ T5238] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 119.087171][ T5238] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 119.096032][ T5238] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 119.112699][ T5238] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 119.120594][ T5238] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 119.130041][ T5238] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 119.141957][ T5239] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 119.151955][ T5239] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 119.159599][ T5239] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 119.167906][ T5239] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 119.175643][ T5239] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 119.183046][ T5239] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 121.032756][ T5251] Bluetooth: hci7: command tx timeout [ 121.272731][ T5238] Bluetooth: hci8: command tx timeout [ 121.279831][ T5251] Bluetooth: hci9: command tx timeout [ 123.112841][ T5251] Bluetooth: hci7: command tx timeout [ 123.353005][ T5238] Bluetooth: hci8: command tx timeout [ 123.358484][ T5251] Bluetooth: hci9: command tx timeout [ 125.192667][ T5251] Bluetooth: hci7: command tx timeout [ 125.432639][ T5238] Bluetooth: hci8: command tx timeout [ 125.439329][ T5251] Bluetooth: hci9: command tx timeout [ 127.272629][ T5251] Bluetooth: hci7: command tx timeout [ 127.512725][ T5238] Bluetooth: hci8: command tx timeout [ 127.518448][ T5251] Bluetooth: hci9: command tx timeout [ 132.959409][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.965859][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.121389][ T5238] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 134.131255][ T5238] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 134.142205][ T5238] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 134.150120][ T5238] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 134.158200][ T5238] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 134.165577][ T5238] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 134.204584][ T5251] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 134.213007][ T5251] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 134.221912][ T5251] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 134.230515][ T5251] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 134.238288][ T5251] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 134.245675][ T5251] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 136.232621][ T5251] Bluetooth: hci10: command tx timeout [ 136.312664][ T5251] Bluetooth: hci11: command tx timeout [ 138.312659][ T5251] Bluetooth: hci10: command tx timeout [ 138.392600][ T5251] Bluetooth: hci11: command tx timeout [ 140.392623][ T5251] Bluetooth: hci10: command tx timeout [ 140.472560][ T5251] Bluetooth: hci11: command tx timeout [ 142.472603][ T5251] Bluetooth: hci10: command tx timeout [ 142.552619][ T5251] Bluetooth: hci11: command tx timeout [ 180.561589][ T5251] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 180.569941][ T5251] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 180.577811][ T5251] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 180.585998][ T5251] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 180.593699][ T5251] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 180.601612][ T5251] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 180.689241][ T5244] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 180.698710][ T5244] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 180.721823][ T5244] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 180.730149][ T5244] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 180.738079][ T5244] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 180.745667][ T5244] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 180.858906][ T5244] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 180.867442][ T5244] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 180.883418][ T5244] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 180.891470][ T5244] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 180.900595][ T5244] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 180.908235][ T5244] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 181.128525][ T5251] Bluetooth: hci1: command 0x0406 tx timeout [ 181.134610][ T5244] Bluetooth: hci3: command 0x0406 tx timeout [ 181.140630][ T5244] Bluetooth: hci4: command 0x0406 tx timeout [ 181.146722][ T4623] Bluetooth: hci2: command 0x0406 tx timeout [ 181.152795][ T54] Bluetooth: hci0: command 0x0406 tx timeout [ 182.792637][ T5238] Bluetooth: hci13: command tx timeout [ 182.798539][ T5238] Bluetooth: hci12: command tx timeout [ 182.952875][ T5238] Bluetooth: hci14: command tx timeout [ 184.872602][ T5249] Bluetooth: hci13: command tx timeout [ 184.878237][ T5238] Bluetooth: hci12: command tx timeout [ 185.032692][ T5238] Bluetooth: hci14: command tx timeout [ 186.952722][ T5249] Bluetooth: hci13: command tx timeout [ 186.959438][ T5238] Bluetooth: hci12: command tx timeout [ 187.113028][ T5238] Bluetooth: hci14: command tx timeout [ 189.032598][ T5238] Bluetooth: hci12: command tx timeout [ 189.038140][ T5238] Bluetooth: hci13: command tx timeout [ 189.192754][ T5238] Bluetooth: hci14: command tx timeout [ 194.398339][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.421336][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.988946][ T5239] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 194.997591][ T5239] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 195.011089][ T5239] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 195.019074][ T5239] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 195.038627][ T5234] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 195.046597][ T5234] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 195.091832][ T5234] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 195.100831][ T5234] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 195.108997][ T5234] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 195.123074][ T5234] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 195.131391][ T5234] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 195.139188][ T5234] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 196.482022][ T5239] Bluetooth: hci6: command 0x0406 tx timeout [ 196.498255][ T5234] Bluetooth: hci5: command 0x0406 tx timeout [ 197.112558][ T5238] Bluetooth: hci15: command tx timeout [ 197.192598][ T5238] Bluetooth: hci16: command tx timeout [ 199.192535][ T5238] Bluetooth: hci15: command tx timeout [ 199.272525][ T5238] Bluetooth: hci16: command tx timeout [ 201.275079][ T5238] Bluetooth: hci15: command tx timeout [ 201.352522][ T5238] Bluetooth: hci16: command tx timeout [ 203.352584][ T5238] Bluetooth: hci15: command tx timeout [ 203.432609][ T5238] Bluetooth: hci16: command tx timeout [ 215.512584][ T30] INFO: task syz-executor:5240 blocked for more than 143 seconds. [ 215.520788][ T30] Not tainted 6.12.0-rc1-syzkaller-00178-g983e35ce2e1e #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 215.557981][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 215.611269][ T30] task:syz-executor state:D stack:20240 pid:5240 tgid:5240 ppid:1 flags:0x00000004 [ 215.692475][ T30] Call Trace: [ 215.695808][ T30] [ 215.698765][ T30] __schedule+0x1895/0x4b30 [ 215.768569][ T30] ? __pfx___schedule+0x10/0x10 [ 215.802568][ T30] ? __pfx_lock_release+0x10/0x10 [ 215.807660][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 215.852571][ T30] ? schedule+0x90/0x320 [ 215.856884][ T30] schedule+0x14b/0x320 [ 215.861067][ T30] schedule_preempt_disabled+0x13/0x30 [ 215.922476][ T30] __mutex_lock+0x6a7/0xd70 [ 215.927042][ T30] ? __mutex_lock+0x52a/0xd70 [ 215.931744][ T30] ? genl_rcv_msg+0x121/0xec0 [ 215.989782][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 216.010036][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 216.059038][ T30] ? __local_bh_enable_ip+0x168/0x200 [ 216.069028][ T30] ? dev_hard_start_xmit+0x773/0x7e0 [ 216.101411][ T30] ? radix_tree_lookup+0x238/0x290 [ 216.112229][ T30] genl_rcv_msg+0x121/0xec0 [ 216.132648][ T30] ? mark_lock+0x9a/0x360 [ 216.137031][ T30] ? __lock_acquire+0x1384/0x2050 [ 216.142091][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 216.218629][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 216.238391][ T30] ? __pfx___might_resched+0x10/0x10 [ 216.262432][ T30] netlink_rcv_skb+0x1e3/0x430 [ 216.267242][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 216.272289][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 216.308628][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 216.348580][ T30] genl_rcv+0x28/0x40 [ 216.362015][ T30] netlink_unicast+0x7f6/0x990 [ 216.382449][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 216.387782][ T30] ? __virt_addr_valid+0x183/0x530 [ 216.416504][ T30] ? __check_object_size+0x48e/0x900 [ 216.421847][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 216.448106][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.455016][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 216.460001][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.471163][ T30] __sock_sendmsg+0x221/0x270 [ 216.476258][ T30] __sys_sendto+0x39b/0x4f0 [ 216.480800][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 216.491767][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 216.500375][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 216.512458][ T30] __x64_sys_sendto+0xde/0x100 [ 216.518321][ T30] do_syscall_64+0xf3/0x230 [ 216.528149][ T30] ? clear_bhb_loop+0x35/0x90 [ 216.534264][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.540210][ T30] RIP: 0033:0x7f46a0d7fe8c [ 216.550653][ T30] RSP: 002b:00007ffefd6fa830 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 216.560628][ T30] RAX: ffffffffffffffda RBX: 00007f46a1a64620 RCX: 00007f46a0d7fe8c [ 216.575843][ T30] RDX: 0000000000000028 RSI: 00007f46a1a64670 RDI: 0000000000000003 [ 216.586417][ T30] RBP: 0000000000000000 R08: 00007ffefd6fa884 R09: 000000000000000c [ 216.599009][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 216.608768][ T30] R13: 00007ffefd6fa8d8 R14: 00007f46a1a64670 R15: 0000000000000000 [ 216.621776][ T30] [ 216.626405][ T30] INFO: task syz.1.10:5335 blocked for more than 144 seconds. [ 216.642555][ T30] Not tainted 6.12.0-rc1-syzkaller-00178-g983e35ce2e1e #0 [ 216.650214][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 216.664427][ T30] task:syz.1.10 state:D stack:27392 pid:5335 tgid:5334 ppid:5241 flags:0x00000004 [ 216.678191][ T30] Call Trace: [ 216.681587][ T30] [ 216.688330][ T30] __schedule+0x1895/0x4b30 [ 216.696404][ T30] ? __pfx___schedule+0x10/0x10 [ 216.701305][ T30] ? __pfx_lock_release+0x10/0x10 [ 216.709315][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 216.718418][ T30] ? schedule+0x90/0x320 [ 216.725503][ T30] schedule+0x14b/0x320 [ 216.729708][ T30] schedule_preempt_disabled+0x13/0x30 [ 216.740371][ T30] __mutex_lock+0x6a7/0xd70 [ 216.747948][ T30] ? __mutex_lock+0x52a/0xd70 [ 216.756212][ T30] ? genl_rcv_msg+0x121/0xec0 [ 216.760926][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 216.768786][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 216.777610][ T30] ? __local_bh_enable_ip+0x168/0x200 [ 216.791208][ T30] ? dev_hard_start_xmit+0x773/0x7e0 [ 216.802278][ T30] ? radix_tree_lookup+0x238/0x290 [ 216.810243][ T30] genl_rcv_msg+0x121/0xec0 [ 216.818327][ T30] ? mark_lock+0x9a/0x360 [ 216.827397][ T30] ? __lock_acquire+0x1384/0x2050 [ 216.836208][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 216.841289][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 216.849229][ T30] ? __pfx___might_resched+0x10/0x10 [ 216.858600][ T30] netlink_rcv_skb+0x1e3/0x430 [ 216.865905][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 216.870959][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 216.881209][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 216.889241][ T30] genl_rcv+0x28/0x40 [ 216.896936][ T30] netlink_unicast+0x7f6/0x990 [ 216.901747][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 216.909630][ T30] ? __virt_addr_valid+0x183/0x530 [ 216.918774][ T30] ? __check_object_size+0x48e/0x900 [ 216.927758][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 216.936455][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.941779][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 216.949353][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.958419][ T30] __sock_sendmsg+0x221/0x270 [ 216.966051][ T30] __sys_sendto+0x39b/0x4f0 [ 216.970591][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 216.980541][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 216.989101][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 216.999050][ T30] ? exc_page_fault+0x590/0x8c0 [ 217.006571][ T30] __x64_sys_sendto+0xde/0x100 [ 217.011374][ T30] do_syscall_64+0xf3/0x230 [ 217.019924][ T30] ? clear_bhb_loop+0x35/0x90 [ 217.028414][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.039262][ T30] RIP: 0033:0x7f4817d7fe8c [ 217.046289][ T30] RSP: 002b:00007f4818ba8ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 217.058563][ T30] RAX: ffffffffffffffda RBX: 00007f4818ba8fc0 RCX: 00007f4817d7fe8c [ 217.069202][ T30] RDX: 0000000000000020 RSI: 00007f4818ba9010 RDI: 0000000000000004 [ 217.082469][ T30] RBP: 0000000000000000 R08: 00007f4818ba8f14 R09: 000000000000000c [ 217.095792][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 217.106308][ T30] R13: 00007f4818ba8f68 R14: 00007f4818ba9010 R15: 0000000000000000 [ 217.118287][ T30] [ 217.121478][ T30] [ 217.121478][ T30] Showing all locks held in the system: [ 217.137243][ T30] 3 locks held by kworker/0:0/8: [ 217.142209][ T30] 1 lock held by khungtaskd/30: [ 217.149925][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 217.166351][ T30] 3 locks held by kworker/u8:4/62: [ 217.171485][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 217.191548][ T30] #1: ffffc900015d7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 217.209209][ T30] #2: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 217.219987][ T30] 3 locks held by kworker/u8:5/995: [ 217.230981][ T30] #0: ffff88814c238148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 217.248736][ T30] #1: ffffc90003e87d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 217.261878][ T30] #2: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 217.278938][ T30] 7 locks held by kworker/u8:6/1307: [ 217.284540][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 217.301720][ T30] #1: ffffc9000485fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 217.319436][ T30] #2: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 217.329537][ T30] #3: ffff888079fd50e8 (&dev->mutex){....}-{3:3}, at: devlink_pernet_pre_exit+0x13b/0x440 [ 217.345429][ T30] #4: ffff888079fd6250 (&devlink->lock_key#5){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0x14d/0x440 [ 217.372604][ T30] #5: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 217.381554][ T30] #6: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 217.398985][ T30] 2 locks held by getty/4993: [ 217.404412][ T30] #0: ffff88802e3d90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 217.421119][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 217.431938][ T30] 3 locks held by syz-executor/5229: [ 217.443852][ T30] #0: ffffffff8fd377b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 217.452132][ T30] #1: ffffffff8fd37668 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 217.468637][ T30] #2: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: wiphy_register+0x1d26/0x2b30 [ 217.478332][ T30] 2 locks held by syz-executor/5240: [ 217.489637][ T30] #0: ffffffff8fd377b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 217.498256][ T30] #1: ffffffff8fd37668 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 217.512950][ T30] 3 locks held by kworker/0:3/5243: [ 217.518177][ T30] 3 locks held by kworker/1:7/5313: [ 217.530228][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 217.548490][ T30] #1: ffffc90003dd7d00 ((crda_timeout).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 217.559959][ T30] #2: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: crda_timeout_work+0x15/0x50 [ 217.576844][ T30] 7 locks held by kworker/0:5/5323: [ 217.582063][ T30] 1 lock held by syz.0.9/5333: [ 217.598677][ T30] #0: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: netdev_run_todo+0x7b2/0x1000 [ 217.610690][ T30] 2 locks held by syz.1.10/5335: [ 217.621162][ T30] #0: ffffffff8fd377b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 217.636065][ T30] #1: ffffffff8fd37668 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 217.646511][ T30] 1 lock held by syz-executor/5369: [ 217.652005][ T30] #0: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 217.679091][ T30] 1 lock held by syz-executor/5371: [ 217.688943][ T30] #0: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 217.699945][ T30] 1 lock held by syz-executor/5380: [ 217.709943][ T30] #0: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 217.722182][ T30] 1 lock held by syz-executor/5381: [ 217.732904][ T30] #0: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 217.742369][ T30] 1 lock held by syz-executor/5386: [ 217.752959][ T30] #0: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 217.769237][ T30] 1 lock held by syz-executor/5390: [ 217.774784][ T30] #0: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 217.790060][ T30] 1 lock held by syz-executor/5391: [ 217.795596][ T30] #0: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 217.810784][ T30] 2 locks held by dhcpcd/5399: [ 217.817715][ T30] #0: ffff8881477ea258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 217.832914][ T30] #1: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 217.851835][ T30] 2 locks held by dhcpcd/5400: [ 217.856923][ T30] #0: ffff88804d8e8258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 217.874433][ T30] #1: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 217.891201][ T30] [ 217.894070][ T30] ============================================= [ 217.894070][ T30] [ 217.917984][ T30] NMI backtrace for cpu 1 [ 217.922353][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00178-g983e35ce2e1e #0 [ 217.932879][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 217.942956][ T30] Call Trace: [ 217.946245][ T30] [ 217.949188][ T30] dump_stack_lvl+0x241/0x360 [ 217.953888][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.959109][ T30] ? __pfx__printk+0x10/0x10 [ 217.963734][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 217.968697][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 217.974175][ T30] ? _printk+0xd5/0x120 [ 217.978354][ T30] ? __pfx__printk+0x10/0x10 [ 217.982969][ T30] ? __wake_up_klogd+0xcc/0x110 [ 217.987844][ T30] ? __pfx__printk+0x10/0x10 [ 217.992458][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 217.997506][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 218.003508][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 218.009510][ T30] watchdog+0xff4/0x1040 [ 218.013777][ T30] ? watchdog+0x1ea/0x1040 [ 218.018219][ T30] ? __pfx_watchdog+0x10/0x10 [ 218.022915][ T30] kthread+0x2f0/0x390 [ 218.027008][ T30] ? __pfx_watchdog+0x10/0x10 [ 218.031701][ T30] ? __pfx_kthread+0x10/0x10 [ 218.036311][ T30] ret_from_fork+0x4b/0x80 [ 218.040746][ T30] ? __pfx_kthread+0x10/0x10 [ 218.045350][ T30] ret_from_fork_asm+0x1a/0x30 [ 218.050146][ T30] [ 218.053559][ T30] Sending NMI from CPU 1 to CPUs 0: [ 218.058803][ C0] NMI backtrace for cpu 0 [ 218.058815][ C0] CPU: 0 UID: 0 PID: 5323 Comm: kworker/0:5 Not tainted 6.12.0-rc1-syzkaller-00178-g983e35ce2e1e #0 [ 218.058835][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 218.058845][ C0] Workqueue: events nsim_dev_trap_report_work [ 218.058866][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70 [ 218.058887][ C0] Code: 8b 3d a4 f6 9c 0c 48 89 de 5b e9 83 c8 5d 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0c 25 c0 d7 03 00 65 8b 15 00 fc 6e 7e 81 e2 00 01 ff 00 [ 218.058906][ C0] RSP: 0018:ffffc90000007658 EFLAGS: 00000246 [ 218.058919][ C0] RAX: ffffffff89e60824 RBX: ffff88802f2020f0 RCX: dffffc0000000000 [ 218.058931][ C0] RDX: 0000000000000100 RSI: ffff88802f202000 RDI: 0000000000000000 [ 218.058942][ C0] RBP: ffffc900000077b8 R08: ffffffff89e606ca R09: ffffffff89e67f09 [ 218.058954][ C0] R10: 0000000000000002 R11: ffff888025158000 R12: 1ffff92000000ed8 [ 218.058965][ C0] R13: 1ffff92000000ed8 R14: 0000000000000003 R15: 0000000000000000 [ 218.058976][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 218.058990][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 218.059001][ C0] CR2: 00007f37f1e00020 CR3: 000000000e734000 CR4: 00000000003526f0 [ 218.059015][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 218.059025][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 218.059035][ C0] Call Trace: [ 218.059040][ C0] [ 218.059047][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 218.059066][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 218.059089][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 218.059106][ C0] ? nmi_handle+0x2a/0x5a0 [ 218.059129][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 218.059149][ C0] ? nmi_handle+0x14f/0x5a0 [ 218.059164][ C0] ? nmi_handle+0x2a/0x5a0 [ 218.059180][ C0] ? __sanitizer_cov_trace_pc+0x8/0x70 [ 218.059198][ C0] ? default_do_nmi+0x63/0x160 [ 218.059216][ C0] ? exc_nmi+0x123/0x1f0 [ 218.059233][ C0] ? end_repeat_nmi+0xf/0x53 [ 218.059250][ C0] ? nf_nat_ipv4_pre_routing+0xe9/0x3b0 [ 218.059267][ C0] ? nf_nat_inet_fn+0x10a/0xd10 [ 218.059281][ C0] ? nf_nat_inet_fn+0x264/0xd10 [ 218.059297][ C0] ? __sanitizer_cov_trace_pc+0x8/0x70 [ 218.059315][ C0] ? __sanitizer_cov_trace_pc+0x8/0x70 [ 218.059335][ C0] ? __sanitizer_cov_trace_pc+0x8/0x70 [ 218.059353][ C0] [ 218.059358][ C0] [ 218.059364][ C0] nf_nat_inet_fn+0x264/0xd10 [ 218.059382][ C0] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 218.059401][ C0] ? ipt_do_table+0x312/0x1860 [ 218.059425][ C0] nf_nat_ipv4_pre_routing+0x1cd/0x3b0 [ 218.059445][ C0] ? __pfx_nf_nat_ipv4_pre_routing+0x10/0x10 [ 218.059462][ C0] nf_hook_slow+0xc3/0x220 [ 218.059481][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 218.059498][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 218.059514][ C0] NF_HOOK+0x29e/0x450 [ 218.059529][ C0] ? __lock_acquire+0x1384/0x2050 [ 218.059551][ C0] ? NF_HOOK+0x9a/0x450 [ 218.059567][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 218.059582][ C0] ? ip_rcv_core+0x801/0xd10 [ 218.059599][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 218.059619][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 218.059635][ C0] __netif_receive_skb+0x2bf/0x650 [ 218.059656][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 218.059682][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 218.059699][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 218.059720][ C0] ? __pfx_lock_release+0x10/0x10 [ 218.059741][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 218.059766][ C0] process_backlog+0x662/0x15b0 [ 218.059788][ C0] ? process_backlog+0x33b/0x15b0 [ 218.059810][ C0] ? __pfx_process_backlog+0x10/0x10 [ 218.059828][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 218.059850][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 218.059872][ C0] __napi_poll+0xcb/0x490 [ 218.059892][ C0] net_rx_action+0x89b/0x1240 [ 218.059920][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 218.059939][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 218.059974][ C0] handle_softirqs+0x2c5/0x980 [ 218.059996][ C0] ? do_softirq+0x11b/0x1e0 [ 218.060016][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 218.060039][ C0] do_softirq+0x11b/0x1e0 [ 218.060056][ C0] [ 218.060062][ C0] [ 218.060067][ C0] ? __pfx_do_softirq+0x10/0x10 [ 218.060086][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 218.060108][ C0] ? rcu_is_watching+0x15/0xb0 [ 218.060126][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 218.060146][ C0] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 218.060163][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 218.060183][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 218.060203][ C0] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 218.060222][ C0] nsim_dev_trap_report_work+0x75d/0xaa0 [ 218.060246][ C0] ? process_scheduled_works+0x976/0x1850 [ 218.060267][ C0] process_scheduled_works+0xa63/0x1850 [ 218.060299][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 218.060322][ C0] ? assign_work+0x364/0x3d0 [ 218.060343][ C0] worker_thread+0x870/0xd30 [ 218.060367][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 218.060389][ C0] ? __kthread_parkme+0x169/0x1d0 [ 218.060411][ C0] ? __pfx_worker_thread+0x10/0x10 [ 218.060431][ C0] kthread+0x2f0/0x390 [ 218.060445][ C0] ? __pfx_worker_thread+0x10/0x10 [ 218.060464][ C0] ? __pfx_kthread+0x10/0x10 [ 218.060480][ C0] ret_from_fork+0x4b/0x80 [ 218.060499][ C0] ? __pfx_kthread+0x10/0x10 [ 218.060514][ C0] ret_from_fork_asm+0x1a/0x30 [ 218.060541][ C0] [ 218.676932][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 218.683826][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00178-g983e35ce2e1e #0 [ 218.694344][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 218.704509][ T30] Call Trace: [ 218.707892][ T30] [ 218.710844][ T30] dump_stack_lvl+0x241/0x360 [ 218.715574][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 218.720786][ T30] ? __pfx__printk+0x10/0x10 [ 218.725393][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 218.731414][ T30] ? vscnprintf+0x5d/0x90 [ 218.735765][ T30] panic+0x349/0x880 [ 218.739687][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 218.745859][ T30] ? __pfx_panic+0x10/0x10 [ 218.750298][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 218.755692][ T30] ? __irq_work_queue_local+0x137/0x410 [ 218.761256][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 218.766639][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 218.772809][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 218.778985][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 218.785160][ T30] watchdog+0x1033/0x1040 [ 218.789512][ T30] ? watchdog+0x1ea/0x1040 [ 218.793950][ T30] ? __pfx_watchdog+0x10/0x10 [ 218.798643][ T30] kthread+0x2f0/0x390 [ 218.802723][ T30] ? __pfx_watchdog+0x10/0x10 [ 218.807416][ T30] ? __pfx_kthread+0x10/0x10 [ 218.812021][ T30] ret_from_fork+0x4b/0x80 [ 218.816452][ T30] ? __pfx_kthread+0x10/0x10 [ 218.821055][ T30] ret_from_fork_asm+0x1a/0x30 [ 218.825847][ T30] [ 218.829119][ T30] Kernel Offset: disabled [ 218.833433][ T30] Rebooting in 86400 seconds..