last executing test programs: 26.085008134s ago: executing program 0 (id=1): mkdir(&(0x7f0000000000)='./file0\x00', 0x4d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x10000000, 0x1, 0x200a, 0xb}, {0x1, 0x2, 0xf, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) r0 = syz_open_dev$media(&(0x7f0000000040), 0x7ffffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) bind$ax25(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) close(0xffffffffffffffff) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000040)={0xa}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8001, &(0x7f0000000000)=0x6, 0x8, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r6 = syz_io_uring_setup(0x19d3, &(0x7f00000003c0)={0x0, 0x0, 0x10100, 0x8}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r6, 0xa3d, 0x0, 0x0, 0x0, 0xff39) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB="7472616e733d76697274696f2c64656275673d307816303030"]) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r9, 0x0, 0x58) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 24.899364249s ago: executing program 0 (id=6): writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000004c0)='\n', 0x1}], 0x1000000000000139) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "db8f2d2b3b7596160c6981acf8805944823a7f"}) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x20006, 0x3, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) r1 = syz_io_uring_setup(0x7934, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0xfffffffe, 0xfffffffd}, &(0x7f00000000c0), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa91, &(0x7f00000002c0), &(0x7f0000000040)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x6e6a9ace1e35a607}) io_uring_enter(r1, 0xec4, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_pts(r0, 0x0) r5 = dup3(r4, r0, 0x0) read$FUSE(r5, &(0x7f0000003f80)={0x2020}, 0x2020) read$FUSE(r5, &(0x7f0000000800)={0x2020}, 0x2020) 24.844126359s ago: executing program 1 (id=2): mkdir(&(0x7f0000000000)='./file0\x00', 0x4d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x10000000, 0x1, 0x200a, 0xb}, {0x1, 0x2, 0xf, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) r0 = syz_open_dev$media(&(0x7f0000000040), 0x7ffffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8001, &(0x7f0000000000)=0x6, 0x8, 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB="7472616e733d76697274696f2c64656275673d307816303030"]) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r5, 0x0, 0x58) 24.814147129s ago: executing program 3 (id=4): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_SET_PROPBIT(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f00000005c0), 0x200005d8) r1 = io_uring_setup(0x104c, &(0x7f0000001440)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, 0x0) close(r1) 24.733831589s ago: executing program 4 (id=5): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) landlock_create_ruleset(&(0x7f0000000380)={0x5014, 0x0, 0x1}, 0x18, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000c80)=[{0x20, 0xfc, 0x0, 0xfffff00c}]}, 0x8) r2 = fcntl$dupfd(r0, 0x0, r1) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x10) symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) lseek(r6, 0x1, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x10, 0x121b01) socket(0xf, 0x3, 0x20000) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000040)={0x1}) socket$tipc(0x1e, 0x2, 0x0) r8 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r8, &(0x7f0000000340)=@id={0x1e, 0x3, 0x2, {0x4e23, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) syz_pidfd_open(0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 24.144461056s ago: executing program 2 (id=3): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1, 0x70bd2a}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000006780)=[{{0x0, 0x0, 0x0}}], 0x80000000000020c, 0x0) 23.506759634s ago: executing program 1 (id=7): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000500)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, r6, 0x1, 0x1, 0x0, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x2c}}, 0x0) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r9 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x10, 0x0) landlock_restrict_self(r9, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000bc0)='./file0\x00', r8}, 0x18) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) read$nci(r1, &(0x7f00000002c0)=""/97, 0x61) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r10) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="0100000000000000000002000000080001"], 0x1c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r12 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r12, 0x10f, 0x84, &(0x7f0000000580), &(0x7f00000005c0)=0x4) pipe(&(0x7f0000000340)) 23.463634754s ago: executing program 0 (id=8): r0 = openat$cachefiles(0xffffff9c, 0x0, 0x1, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000140)=ANY=[]) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r4, 0xfffffffd) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x8, 0x1) mount$pvfs2(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_io_uring_setup(0x4ebf, &(0x7f00000002c0)={0x0, 0x0, 0x40}, &(0x7f0000000040), &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x24020400) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000f00)='kfree\x00', r7}, 0x18) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000000240), &(0x7f0000000280)) 20.14818742s ago: executing program 4 (id=9): r0 = socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000480)=ANY=[@ANYRES32=r0, @ANYRESOCT=0x0, @ANYRES16=r0, @ANYRES32, @ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x7, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x0, 0x3, 0x6, 0x5}, {0x5, 0x5, 0x3, 0x9}], 0x10, 0x36, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_init_net_socket$rose(0xb, 0x5, 0x0) add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c00000010004b0400000000000000007a000000", @ANYRES32=r5, @ANYBLOB="00000000000000000a000100aaaaaaaaaa000000e2f24b9d8bad9917"], 0x2c}}, 0x0) 20.140240181s ago: executing program 0 (id=10): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0xd00f935e928e83a1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0xeeef0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xeeef0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 18.759435385s ago: executing program 4 (id=11): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000016e40)=@newtaction={0xd4, 0x30, 0x1, 0x70bd29, 0x25dfdbfd, {}, [{0xc0, 0x1, [@m_ipt={0xbc, 0x19, 0x0, 0x0, {{0x8}, {0x90, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TARG={0x71, 0x6, {0x4, 'security\x00', 0xfe, 0x825, "248e48b571d031f1073654a556ec537591417fac110521d3f0e8ecbb536fbb1e0702ba34b146fad3ab79bbb0774e708621a8ded3bab2689ee4b796d31ad22ea35a195ff6c954e7"}}]}, {0x5, 0x6, '\n'}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8080}, 0x20040806) recvmmsg$unix(r1, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/92, 0x5c}, {&(0x7f0000000580)=""/117, 0x75}], 0x2}}], 0x1, 0x2021, 0x0) 18.666110295s ago: executing program 2 (id=12): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES64, @ANYRESHEX], 0x29) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000019c0)) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000040)={@remote, @empty, 0x2, "005c2beeb0801bd73c676461644cf36dfc15ea56886fff778a41757aa3ae714d", 0x2, 0x0, 0x0, 0x6}, 0x3c) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f00000000c0)=0x2, 0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x9c000000, @dev={0xfe, 0x80, '\x00', 0x30}, 0x1df}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="100000001001000001000000dc000000bd2d1c501f8eb6b3058deb852c24b39b7fe9e94750b6a82dc8068de71c104eb9c5450f05ef0b1d5214709c20ccf8521af6a5de8f876c0da4208257a23d56c7f83c3f318d47cb79c92163d76900f1e5277507265c735c1c71309e350e5b"], 0x10}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 18.370897603s ago: executing program 4 (id=13): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f00000002c0)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) ioctl$sock_ifreq(r4, 0x8910, 0x0) ioctl$sock_netdev_private(r4, 0x8949, &(0x7f0000000000)) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) 16.630253756s ago: executing program 4 (id=14): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000040)={0x1, 0x2, 0x4, 0xffff, 0x0, "008ef14ba278887cb0baba08431799317e6324"}) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) 15.238849621s ago: executing program 4 (id=15): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) socket$kcm(0x11, 0x3, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x9, 0x1, 0xd7861687b8cfee55, 0x4, 0x7f, 0x2, 0xa, 0x1779, 0x1, 0x0, 0x1, 0x5}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x161501, 0x0) ppoll(&(0x7f00000003c0)=[{r1, 0x4044}], 0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0xba98575a95aeb710) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 15.181102691s ago: executing program 3 (id=16): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'tunl0\x00', &(0x7f00000004c0)={'gre0\x00', 0x0, 0x0, 0x8, 0x8, 0x6, {{0x23, 0x4, 0x0, 0x1d, 0x8c, 0x68, 0x0, 0x56, 0x29, 0x0, @multicast2, @empty, {[@rr={0x7, 0x7, 0x3e, [@private=0xa010102]}, @cipso={0x86, 0x15, 0xfffffffffffffffc, [{0x1, 0xf, "192665a9cdce83b7bc4d74fef3"}]}, @generic={0x89, 0x4, "def6"}, @timestamp_prespec={0x44, 0x2c, 0xb, 0x3, 0xa, [{@dev={0xac, 0x14, 0x14, 0x37}, 0x3}, {@broadcast, 0x7f}, {@multicast1, 0xffffffff}, {@private=0xa010102, 0x10000}, {@broadcast, 0x8001}]}, @timestamp={0x44, 0x8, 0xc6, 0x0, 0x6, [0x7910]}, @ssrr={0x89, 0x1b, 0xa9, [@loopback, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x20}, @rand_addr=0x64010101, @remote]}, @timestamp={0x44, 0x8, 0x40, 0x0, 0x8, [0xfffffffa]}, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'syztnl1\x00', &(0x7f00000005c0)={'sit0\x00', 0x0, 0x10, 0x7800, 0x0, 0x52be, {{0x26, 0x4, 0x3, 0x3d, 0x98, 0x65, 0x0, 0x3, 0x29, 0x0, @broadcast, @multicast1, {[@generic={0x83, 0x2}, @cipso={0x86, 0x69, 0x1, [{0x5, 0x5, "12ab07"}, {0x7, 0x6, "a9c0be3a"}, {0x1, 0x5, "332ea0"}, {0x7, 0xa, "16e4bd1961b23c07"}, {0x0, 0x12, "c1fc4aff0dafba8faed8f8029a7f4ead"}, {0x7, 0xf, "ec1ae6bcce11cec63b51f611ce"}, {0x0, 0xc, "45a29cee9765d4e58e19"}, {0x7, 0x10, "a10898306ee051428987b9df5e67"}, {0x5, 0x8, "dda5f0d1ab40"}, {0x0, 0x4, "cbf2"}]}, @ssrr={0x89, 0x13, 0x1d, [@broadcast, @dev={0xac, 0x14, 0x14, 0x25}, @dev={0xac, 0x14, 0x14, 0x2c}, @empty]}, @cipso={0x86, 0x6, 0xffffffffffffffff}]}}}}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000006c0)={0x0, @initdev, @loopback}, &(0x7f0000000700)=0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=@newlink={0x34, 0x10, 0x427, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x192, 0x282b0}, [@IFLA_MASTER={0x8}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0xf}]}]}, 0x34}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000900)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000740)={0x180, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x10}, 0x4080) syz_io_uring_setup(0x110, &(0x7f0000000a00)={0x0, 0x0, 0x400}, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r7, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x4ec, 0x1, 0x0, 0xfffffffc}, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r10, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r11) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r11, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r12, 0x0) r13 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r13, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r15, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x30}}, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 8.040742143s ago: executing program 32 (id=7): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000500)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x2c, r6, 0x1, 0x1, 0x0, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x2c}}, 0x0) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r9 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x10, 0x0) landlock_restrict_self(r9, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000bc0)='./file0\x00', r8}, 0x18) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) read$nci(r1, &(0x7f00000002c0)=""/97, 0x61) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r10) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="0100000000000000000002000000080001"], 0x1c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r12 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r12, 0x10f, 0x84, &(0x7f0000000580), &(0x7f00000005c0)=0x4) pipe(&(0x7f0000000340)) 5.0203547s ago: executing program 33 (id=10): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0xd00f935e928e83a1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0xeeef0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xeeef0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 3.545387495s ago: executing program 34 (id=12): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES64, @ANYRESHEX], 0x29) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000019c0)) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000040)={@remote, @empty, 0x2, "005c2beeb0801bd73c676461644cf36dfc15ea56886fff778a41757aa3ae714d", 0x2, 0x0, 0x0, 0x6}, 0x3c) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f00000000c0)=0x2, 0x4) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x9c000000, @dev={0xfe, 0x80, '\x00', 0x30}, 0x1df}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="100000001001000001000000dc000000bd2d1c501f8eb6b3058deb852c24b39b7fe9e94750b6a82dc8068de71c104eb9c5450f05ef0b1d5214709c20ccf8521af6a5de8f876c0da4208257a23d56c7f83c3f318d47cb79c92163d76900f1e5277507265c735c1c71309e350e5b"], 0x10}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 32.951931ms ago: executing program 35 (id=16): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'tunl0\x00', &(0x7f00000004c0)={'gre0\x00', 0x0, 0x0, 0x8, 0x8, 0x6, {{0x23, 0x4, 0x0, 0x1d, 0x8c, 0x68, 0x0, 0x56, 0x29, 0x0, @multicast2, @empty, {[@rr={0x7, 0x7, 0x3e, [@private=0xa010102]}, @cipso={0x86, 0x15, 0xfffffffffffffffc, [{0x1, 0xf, "192665a9cdce83b7bc4d74fef3"}]}, @generic={0x89, 0x4, "def6"}, @timestamp_prespec={0x44, 0x2c, 0xb, 0x3, 0xa, [{@dev={0xac, 0x14, 0x14, 0x37}, 0x3}, {@broadcast, 0x7f}, {@multicast1, 0xffffffff}, {@private=0xa010102, 0x10000}, {@broadcast, 0x8001}]}, @timestamp={0x44, 0x8, 0xc6, 0x0, 0x6, [0x7910]}, @ssrr={0x89, 0x1b, 0xa9, [@loopback, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x20}, @rand_addr=0x64010101, @remote]}, @timestamp={0x44, 0x8, 0x40, 0x0, 0x8, [0xfffffffa]}, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'syztnl1\x00', &(0x7f00000005c0)={'sit0\x00', 0x0, 0x10, 0x7800, 0x0, 0x52be, {{0x26, 0x4, 0x3, 0x3d, 0x98, 0x65, 0x0, 0x3, 0x29, 0x0, @broadcast, @multicast1, {[@generic={0x83, 0x2}, @cipso={0x86, 0x69, 0x1, [{0x5, 0x5, "12ab07"}, {0x7, 0x6, "a9c0be3a"}, {0x1, 0x5, "332ea0"}, {0x7, 0xa, "16e4bd1961b23c07"}, {0x0, 0x12, "c1fc4aff0dafba8faed8f8029a7f4ead"}, {0x7, 0xf, "ec1ae6bcce11cec63b51f611ce"}, {0x0, 0xc, "45a29cee9765d4e58e19"}, {0x7, 0x10, "a10898306ee051428987b9df5e67"}, {0x5, 0x8, "dda5f0d1ab40"}, {0x0, 0x4, "cbf2"}]}, @ssrr={0x89, 0x13, 0x1d, [@broadcast, @dev={0xac, 0x14, 0x14, 0x25}, @dev={0xac, 0x14, 0x14, 0x2c}, @empty]}, @cipso={0x86, 0x6, 0xffffffffffffffff}]}}}}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000006c0)={0x0, @initdev, @loopback}, &(0x7f0000000700)=0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=@newlink={0x34, 0x10, 0x427, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x192, 0x282b0}, [@IFLA_MASTER={0x8}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0xf}]}]}, 0x34}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000900)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000740)={0x180, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x10}, 0x4080) syz_io_uring_setup(0x110, &(0x7f0000000a00)={0x0, 0x0, 0x400}, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r7, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x4ec, 0x1, 0x0, 0xfffffffc}, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r10, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r11) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r11, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r12, 0x0) r13 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r13, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r14, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r15, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x30}}, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 0s ago: executing program 36 (id=15): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) socket$kcm(0x11, 0x3, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x9, 0x1, 0xd7861687b8cfee55, 0x4, 0x7f, 0x2, 0xa, 0x1779, 0x1, 0x0, 0x1, 0x5}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x161501, 0x0) ppoll(&(0x7f00000003c0)=[{r1, 0x4044}], 0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0xba98575a95aeb710) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.172' (ED25519) to the list of known hosts. [ 55.360896][ T4154] cgroup: Unknown subsys name 'net' [ 55.477430][ T4154] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 56.965481][ T4154] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 58.375240][ T4167] chnl_net:caif_netlink_parms(): no params data found [ 58.502391][ T4174] chnl_net:caif_netlink_parms(): no params data found [ 58.566870][ T4167] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.574715][ T4167] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.583557][ T4167] device bridge_slave_0 entered promiscuous mode [ 58.619757][ T4166] chnl_net:caif_netlink_parms(): no params data found [ 58.630110][ T4167] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.649385][ T4167] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.658165][ T4167] device bridge_slave_1 entered promiscuous mode [ 58.699208][ T4168] chnl_net:caif_netlink_parms(): no params data found [ 58.727932][ T4167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.742334][ T4175] chnl_net:caif_netlink_parms(): no params data found [ 58.759945][ T4167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.853365][ T4174] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.860447][ T4174] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.870083][ T4174] device bridge_slave_0 entered promiscuous mode [ 58.881293][ T4167] team0: Port device team_slave_0 added [ 58.894566][ T4166] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.902558][ T4166] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.910428][ T4166] device bridge_slave_0 entered promiscuous mode [ 58.919198][ T4174] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.926545][ T4174] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.934509][ T4174] device bridge_slave_1 entered promiscuous mode [ 58.943410][ T4167] team0: Port device team_slave_1 added [ 58.967156][ T4166] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.974422][ T4166] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.983075][ T4166] device bridge_slave_1 entered promiscuous mode [ 59.042304][ T4174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.060062][ T4168] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.067985][ T4168] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.076495][ T4168] device bridge_slave_0 entered promiscuous mode [ 59.085712][ T4166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.095947][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.103102][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.129370][ T4167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.143457][ T4174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.169149][ T4168] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.176679][ T4168] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.184838][ T4168] device bridge_slave_1 entered promiscuous mode [ 59.202211][ T4166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.212036][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.218986][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.245082][ T4167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.266798][ T4175] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.274254][ T4175] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.282739][ T4175] device bridge_slave_0 entered promiscuous mode [ 59.311496][ T4174] team0: Port device team_slave_0 added [ 59.317626][ T4175] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.325164][ T4175] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.334472][ T4175] device bridge_slave_1 entered promiscuous mode [ 59.343724][ T4168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.364346][ T4166] team0: Port device team_slave_0 added [ 59.387411][ T4174] team0: Port device team_slave_1 added [ 59.408137][ T4168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.418646][ T4166] team0: Port device team_slave_1 added [ 59.437146][ T4167] device hsr_slave_0 entered promiscuous mode [ 59.444333][ T4167] device hsr_slave_1 entered promiscuous mode [ 59.483358][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.490316][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.517168][ T4166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.542044][ T4175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.567859][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.575038][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.601671][ T4166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.613801][ T4174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.621040][ T4174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.646992][ T4174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.659934][ T4175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.671563][ T4168] team0: Port device team_slave_0 added [ 59.692226][ T4174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.699185][ T4174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.725639][ T4174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.738888][ T4168] team0: Port device team_slave_1 added [ 59.788387][ T4175] team0: Port device team_slave_0 added [ 59.796463][ T4175] team0: Port device team_slave_1 added [ 59.844705][ T4166] device hsr_slave_0 entered promiscuous mode [ 59.851764][ T4166] device hsr_slave_1 entered promiscuous mode [ 59.858421][ T4166] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.866758][ T4166] Cannot create hsr debugfs directory [ 59.888979][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.896182][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.922426][ T4168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.956383][ T4174] device hsr_slave_0 entered promiscuous mode [ 59.963429][ T4174] device hsr_slave_1 entered promiscuous mode [ 59.969994][ T4174] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.977834][ T4174] Cannot create hsr debugfs directory [ 59.984130][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.991200][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.017241][ T4168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.028846][ T4175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.036069][ T4175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.062106][ T4175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.097559][ T4175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.104727][ T4175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.131711][ T4178] Bluetooth: hci1: command 0x0409 tx timeout [ 60.137917][ T4178] Bluetooth: hci2: command 0x0409 tx timeout [ 60.138041][ T4175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.154864][ T1111] Bluetooth: hci3: command 0x0409 tx timeout [ 60.160940][ T1111] Bluetooth: hci4: command 0x0409 tx timeout [ 60.170016][ T1111] Bluetooth: hci0: command 0x0409 tx timeout [ 60.223286][ T4168] device hsr_slave_0 entered promiscuous mode [ 60.230041][ T4168] device hsr_slave_1 entered promiscuous mode [ 60.236850][ T4168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.244661][ T4168] Cannot create hsr debugfs directory [ 60.317996][ T4175] device hsr_slave_0 entered promiscuous mode [ 60.325116][ T4175] device hsr_slave_1 entered promiscuous mode [ 60.331861][ T4175] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.339415][ T4175] Cannot create hsr debugfs directory [ 60.525830][ T4167] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.560276][ T4167] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.581620][ T4167] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.590601][ T4167] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.616296][ T4166] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.625990][ T4166] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.652128][ T4166] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.661190][ T4166] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.706193][ T4174] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.729830][ T4174] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.750597][ T4174] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.785860][ T4174] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.821709][ T4168] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.833377][ T4168] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.848530][ T4167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.862146][ T4168] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.898562][ T4168] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.918225][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.928080][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.943530][ T4167] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.974981][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.984910][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.995160][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.002509][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.014199][ T4166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.029655][ T4175] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.045120][ T4175] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.056057][ T4175] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.066107][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.076491][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.085579][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.095768][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.102885][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.131877][ T4175] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.144964][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.188356][ T4166] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.196140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.204956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.215128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.239025][ T4168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.252641][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.263355][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.273130][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.283165][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.292191][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.299332][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.307329][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.316156][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.348448][ T4174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.357357][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.367300][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.376319][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.385372][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.395064][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.404961][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.413453][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.422402][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.431648][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.438691][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.454236][ T4167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 61.468761][ T4168] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.476802][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.485970][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.495896][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.525409][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.536927][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.547706][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.563115][ T4174] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.597100][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.607144][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.617545][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.626534][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.635768][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.642873][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.651712][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.660454][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.669130][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.676197][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.685079][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.693857][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 61.704082][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.726696][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.737175][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.757222][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.764385][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.778815][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.787831][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.796734][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.805700][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.816138][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.824658][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.831731][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.875014][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.883171][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.892031][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.900303][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.910261][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.919541][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 61.928755][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 61.937958][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 61.948332][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 61.958177][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 61.966893][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 61.975881][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.984867][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.996054][ T4166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.018838][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.027167][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.039114][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.048004][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.058776][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.067790][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.076781][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.085434][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.094217][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.103104][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.122578][ T4167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.138217][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.156585][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.169638][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.194526][ T4175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.207966][ T4174] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.220297][ T4214] Bluetooth: hci0: command 0x041b tx timeout [ 62.221125][ T4216] Bluetooth: hci1: command 0x041b tx timeout [ 62.227092][ T4214] Bluetooth: hci4: command 0x041b tx timeout [ 62.239292][ T4214] Bluetooth: hci3: command 0x041b tx timeout [ 62.246623][ T4174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.254695][ T4214] Bluetooth: hci2: command 0x041b tx timeout [ 62.262166][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.273908][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.310266][ T4175] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.329914][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.341801][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.351922][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.359956][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.404227][ T4167] device veth0_vlan entered promiscuous mode [ 62.412322][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.423658][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.434462][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.444948][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.460083][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.467454][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.476772][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.486166][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.495426][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.502542][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.512537][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.521358][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.528764][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.538035][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.547015][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.555271][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.575343][ T4166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.589196][ T4167] device veth1_vlan entered promiscuous mode [ 62.606048][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.628851][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.646253][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.686643][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.697337][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.707460][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.717137][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.726322][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.735149][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.742849][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.759512][ T4168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.786289][ T4174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.800214][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.815797][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.824810][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.833893][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.845635][ T4175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.856990][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.865918][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.903163][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.916889][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.947795][ T4167] device veth0_macvtap entered promiscuous mode [ 62.961258][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.977838][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.987612][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.997443][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.006316][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.026124][ T4174] device veth0_vlan entered promiscuous mode [ 63.034801][ T4168] device veth0_vlan entered promiscuous mode [ 63.045918][ T4167] device veth1_macvtap entered promiscuous mode [ 63.056915][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.066826][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.075469][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.085577][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.094857][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.104801][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.113567][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.127221][ T4168] device veth1_vlan entered promiscuous mode [ 63.152802][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.163733][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.173342][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.183016][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.190456][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.205280][ T4174] device veth1_vlan entered promiscuous mode [ 63.219116][ T4175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.253304][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.266274][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.283553][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.291822][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.299834][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.308585][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.317500][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.326512][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.336244][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.345402][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.353956][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.362899][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.370798][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.386076][ T4167] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.396471][ T4167] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.405748][ T4167] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.415825][ T4167] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.427750][ T4166] device veth0_vlan entered promiscuous mode [ 63.449554][ T4168] device veth0_macvtap entered promiscuous mode [ 63.460611][ T4168] device veth1_macvtap entered promiscuous mode [ 63.489289][ T4174] device veth0_macvtap entered promiscuous mode [ 63.497025][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.505992][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.515563][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.524060][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.532998][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.541887][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.550447][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.559648][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.567892][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.578113][ T4166] device veth1_vlan entered promiscuous mode [ 63.595464][ T4175] device veth0_vlan entered promiscuous mode [ 63.606805][ T4174] device veth1_macvtap entered promiscuous mode [ 63.631658][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.639856][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.648777][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.667183][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.679609][ T4175] device veth1_vlan entered promiscuous mode [ 63.694638][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.706442][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.718523][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.763617][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.773097][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.782154][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.791409][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.810352][ T4166] device veth0_macvtap entered promiscuous mode [ 63.825146][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.836477][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.849076][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.862202][ T4168] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.871065][ T4168] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.879828][ T4168] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.889172][ T4168] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.900470][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.909927][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.918980][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.928189][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.937923][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.954412][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.967868][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.978352][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.993001][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.005187][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.019350][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.030202][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.040615][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.053203][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.064779][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.083174][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.093494][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.103411][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.113075][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.137351][ T4166] device veth1_macvtap entered promiscuous mode [ 64.155704][ T4175] device veth0_macvtap entered promiscuous mode [ 64.164892][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.168999][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.174541][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.187394][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.190535][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.207714][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.216880][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.227493][ T4174] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.236478][ T4174] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.245694][ T4174] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.254891][ T4174] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.277532][ T4175] device veth1_macvtap entered promiscuous mode [ 64.291469][ T4212] Bluetooth: hci4: command 0x040f tx timeout [ 64.297964][ T4212] Bluetooth: hci0: command 0x040f tx timeout [ 64.301323][ T4216] Bluetooth: hci2: command 0x040f tx timeout [ 64.319559][ T4216] Bluetooth: hci3: command 0x040f tx timeout [ 64.325941][ T4216] Bluetooth: hci1: command 0x040f tx timeout [ 64.343070][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.360971][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.371982][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.382526][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.392365][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.403429][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.414899][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.428411][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.439179][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.449865][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.461995][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.471862][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.482627][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.495273][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.510214][ T4166] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.519399][ T4166] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.529100][ T4166] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.538725][ T4166] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.549125][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.560521][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.569660][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.578571][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.587633][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.604718][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.613976][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.614299][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.633634][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.644301][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.655200][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.666845][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.677743][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.687819][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.699689][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.713012][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.742387][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.750298][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.759425][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.777260][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.787863][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.797902][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.808377][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.818614][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.829371][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.839333][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.849843][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.861851][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.888897][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.898253][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.913136][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.924107][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.937607][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.964422][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.980382][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.982194][ T4175] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.003114][ T4175] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.012952][ T4175] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.023108][ T4175] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.054068][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.203502][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.211901][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.219893][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.234241][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.258014][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.273857][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.377051][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.395376][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.491869][ T4250] 9pnet_virtio: no channels available for device syz [ 66.179310][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.214962][ T4225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.241603][ T4225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.249641][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.285484][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.291776][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.314419][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.382058][ T4249] Bluetooth: hci1: command 0x0419 tx timeout [ 66.388694][ T4249] Bluetooth: hci3: command 0x0419 tx timeout [ 66.389288][ T4251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.420796][ T4249] Bluetooth: hci2: command 0x0419 tx timeout [ 66.460693][ T4249] Bluetooth: hci0: command 0x0419 tx timeout [ 66.471408][ T4249] Bluetooth: hci4: command 0x0419 tx timeout [ 66.611552][ T4251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.630930][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.665521][ T4261] input: syz0 as /devices/virtual/input/input5 [ 66.770992][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 66.800332][ T4264] 9pnet_virtio: no channels available for device syz [ 66.808972][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 66.817993][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 67.529575][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 67.538893][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 67.548015][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 67.557016][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 67.638149][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 67.647186][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 67.691015][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 69.301373][ T4278] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 70.931377][ T4279] orangefs_mount: mount request failed with -4 [ 71.050911][ T4284] tipc: Enabling of bearer rejected, failed to enable media [ 71.322836][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.329507][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.449253][ T4285] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 76.170076][ T4326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.177678][ T4326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.191258][ T4326] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 76.626441][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 81.497923][ T1108] cfg80211: failed to load regulatory.db [ 132.692337][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.698682][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 180.850950][ T4331] Bluetooth: hci0: command 0x0406 tx timeout [ 180.857062][ T4331] Bluetooth: hci2: command 0x0406 tx timeout [ 180.860865][ T21] Bluetooth: hci4: command 0x0406 tx timeout [ 180.870671][ T21] Bluetooth: hci1: command 0x0406 tx timeout [ 194.142497][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.148883][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 219.100897][ T27] INFO: task kworker/u4:5:4225 blocked for more than 143 seconds. [ 219.108959][ T27] Not tainted 5.15.175-syzkaller #0 [ 219.120202][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 219.128960][ T27] task:kworker/u4:5 state:D stack:25304 pid: 4225 ppid: 2 flags:0x00004000 [ 219.142820][ T27] Workqueue: nfc2_nci_cmd_wq nci_cmd_work SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 219.148606][ T27] Call Trace: [ 219.151924][ T27] [ 219.156284][ T27] __schedule+0x12c4/0x45b0 [ 219.167132][ T27] ? release_firmware_map_entry+0x190/0x190 [ 219.173411][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 219.178911][ T27] ? kthread_data+0x4e/0xc0 [ 219.192595][ T27] ? wq_worker_sleeping+0x5d/0x200 [ 219.197750][ T27] schedule+0x11b/0x1f0 [ 219.206774][ T27] schedule_preempt_disabled+0xf/0x20 [ 219.213579][ T27] __mutex_lock_common+0xe34/0x25a0 [ 219.219035][ T27] ? virtual_nci_send+0x1c/0xd0 [ 219.228776][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 219.238601][ T27] ? do_raw_read_unlock+0x38/0x70 [ 219.243759][ T27] ? nfc_send_to_raw_sock+0x214/0x230 [ 219.249170][ T27] ? kfree_skb_reason+0xca/0x170 [ 219.254338][ T27] mutex_lock_nested+0x17/0x20 [ 219.259122][ T27] virtual_nci_send+0x1c/0xd0 [ 219.263876][ T27] nci_cmd_work+0xa4/0x2a0 [ 219.268326][ T27] process_one_work+0x8a1/0x10c0 [ 219.273358][ T27] ? worker_detach_from_pool+0x260/0x260 [ 219.279173][ T27] ? _raw_spin_lock_irqsave+0x120/0x120 [ 219.284780][ T27] ? kthread_data+0x4e/0xc0 [ 219.289880][ T27] ? wq_worker_running+0x97/0x170 [ 219.294985][ T27] worker_thread+0xaca/0x1280 [ 219.299680][ T27] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 219.305677][ T27] kthread+0x3f6/0x4f0 [ 219.309782][ T27] ? rcu_lock_release+0x20/0x20 [ 219.314723][ T27] ? kthread_blkcg+0xd0/0xd0 [ 219.319335][ T27] ret_from_fork+0x1f/0x30 [ 219.324043][ T27] [ 219.327272][ T27] INFO: task syz.1.7:4284 blocked for more than 143 seconds. [ 219.334957][ T27] Not tainted 5.15.175-syzkaller #0 [ 219.340943][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 219.349614][ T27] task:syz.1.7 state:D stack:24888 pid: 4284 ppid: 4168 flags:0x00004004 [ 219.358855][ T27] Call Trace: [ 219.362161][ T27] [ 219.365231][ T27] __schedule+0x12c4/0x45b0 [ 219.369779][ T27] ? release_firmware_map_entry+0x190/0x190 [ 219.375823][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 219.381365][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 219.386589][ T27] schedule+0x11b/0x1f0 [ 219.391121][ T27] schedule_preempt_disabled+0xf/0x20 [ 219.396516][ T27] __mutex_lock_common+0xe34/0x25a0 [ 219.401906][ T27] ? preempt_schedule+0xd9/0xe0 [ 219.406787][ T27] ? nfc_register_device+0x98/0x310 [ 219.415850][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 219.422684][ T27] ? _raw_spin_unlock+0x36/0x40 [ 219.427624][ T27] mutex_lock_nested+0x17/0x20 [ 219.432907][ T27] nfc_register_device+0x98/0x310 [ 219.437970][ T27] nci_register_device+0x7be/0x900 [ 219.443225][ T27] ? nci_free_device+0x90/0x90 [ 219.448031][ T27] ? nci_hci_allocate+0x1dd/0x2a0 [ 219.453182][ T27] ? nci_allocate_device+0x248/0x350 [ 219.458574][ T27] virtual_ncidev_open+0x55/0xc0 [ 219.463586][ T27] ? virtual_ncidev_ioctl+0x90/0x90 [ 219.468814][ T27] misc_open+0x304/0x380 [ 219.473179][ T27] chrdev_open+0x54a/0x630 [ 219.477612][ T27] ? cd_forget+0x160/0x160 [ 219.482061][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 219.487281][ T27] ? fsnotify_perm+0x47b/0x590 [ 219.492459][ T27] ? cd_forget+0x160/0x160 [ 219.496894][ T27] do_dentry_open+0x807/0xfb0 [ 219.501700][ T27] path_openat+0x2705/0x2f20 [ 219.506347][ T27] ? do_filp_open+0x460/0x460 [ 219.511169][ T27] do_filp_open+0x21c/0x460 [ 219.515715][ T27] ? vfs_tmpfile+0x2e0/0x2e0 [ 219.520317][ T27] ? _raw_spin_unlock+0x24/0x40 [ 219.525777][ T27] ? alloc_fd+0x598/0x630 [ 219.530144][ T27] do_sys_openat2+0x13b/0x4f0 [ 219.535289][ T27] ? do_sys_open+0x220/0x220 [ 219.540435][ T27] ? __sys_bpf+0x28f/0x670 [ 219.544982][ T27] ? fput_many+0x15e/0x1b0 [ 219.549424][ T27] __x64_sys_openat+0x243/0x290 [ 219.554552][ T27] ? __ia32_sys_open+0x270/0x270 [ 219.559585][ T27] ? syscall_enter_from_user_mode+0x2e/0x240 [ 219.565654][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 219.571091][ T27] ? syscall_enter_from_user_mode+0x2e/0x240 [ 219.577200][ T27] do_syscall_64+0x3b/0xb0 [ 219.581708][ T27] ? clear_bhb_loop+0x15/0x70 [ 219.586400][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 219.592372][ T27] RIP: 0033:0x7f1cb027fd29 [ 219.597188][ T27] RSP: 002b:00007f1cae0cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 219.605746][ T27] RAX: ffffffffffffffda RBX: 00007f1cb0470080 RCX: 00007f1cb027fd29 [ 219.613779][ T27] RDX: 0000000000000002 RSI: 0000000020000080 RDI: ffffffffffffff9c [ 219.621835][ T27] RBP: 00007f1cb02fbaa8 R08: 0000000000000000 R09: 0000000000000000 [ 219.629813][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.638115][ T27] R13: 0000000000000000 R14: 00007f1cb0470080 R15: 00007ffe3a5f79f8 [ 219.646511][ T27] [ 219.649571][ T27] INFO: task syz.1.7:4285 blocked for more than 143 seconds. [ 219.657520][ T27] Not tainted 5.15.175-syzkaller #0 [ 219.663359][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 219.672083][ T27] task:syz.1.7 state:D stack:24848 pid: 4285 ppid: 4168 flags:0x00004004 [ 219.681373][ T27] Call Trace: [ 219.684657][ T27] [ 219.687591][ T27] __schedule+0x12c4/0x45b0 [ 219.692191][ T27] ? release_firmware_map_entry+0x190/0x190 [ 219.698527][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 219.704123][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 219.709364][ T27] schedule+0x11b/0x1f0 [ 219.713586][ T27] schedule_preempt_disabled+0xf/0x20 [ 219.718971][ T27] __mutex_lock_common+0xe34/0x25a0 [ 219.724227][ T27] ? virtual_nci_close+0x13/0x40 [ 219.729174][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 219.734594][ T27] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 219.740547][ T27] ? _raw_spin_unlock+0x40/0x40 [ 219.745548][ T27] ? skb_queue_purge+0x2b9/0x2e0 [ 219.750487][ T27] mutex_lock_nested+0x17/0x20 [ 219.755869][ T27] virtual_nci_close+0x13/0x40 [ 219.761618][ T27] nci_dev_up+0x954/0xd40 [ 219.766011][ T27] ? nci_core_ntf_packet+0x180/0x180 [ 219.771785][ T27] ? nfc_get_device+0x94/0xf0 [ 219.776475][ T27] ? nfc_release+0x2d0/0x2d0 [ 219.781510][ T27] nfc_dev_up+0x185/0x330 [ 219.785859][ T27] nfc_genl_dev_up+0x80/0xd0 [ 219.790450][ T27] genl_rcv_msg+0xfbd/0x14a0 [ 219.795480][ T27] ? genl_bind+0x420/0x420 [ 219.800521][ T27] ? mark_lock+0x98/0x340 [ 219.805056][ T27] ? __lock_acquire+0x1295/0x1ff0 [ 219.810104][ T27] ? nfc_genl_dump_devices_done+0x60/0x60 [ 219.815987][ T27] netlink_rcv_skb+0x1cf/0x410 [ 219.820885][ T27] ? genl_bind+0x420/0x420 [ 219.825320][ T27] ? netlink_ack+0xb10/0xb10 [ 219.829913][ T27] ? down_read+0x1b3/0x2e0 [ 219.834415][ T27] ? genl_rcv+0x9/0x40 [ 219.838500][ T27] genl_rcv+0x24/0x40 [ 219.842624][ T27] netlink_unicast+0x7b6/0x980 [ 219.847451][ T27] ? netlink_detachskb+0x90/0x90 [ 219.852446][ T27] ? __virt_addr_valid+0x3bb/0x460 [ 219.857570][ T27] ? 0xffffffff81000000 [ 219.861872][ T27] ? __check_object_size+0x300/0x410 [ 219.867172][ T27] ? bpf_lsm_netlink_send+0x5/0x10 [ 219.873699][ T27] netlink_sendmsg+0xa30/0xd60 [ 219.878501][ T27] ? netlink_getsockopt+0x5b0/0x5b0 [ 219.883925][ T27] ? plist_check_list+0x20d/0x220 [ 219.888974][ T27] ? aa_sock_msg_perm+0x91/0x150 [ 219.894021][ T27] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 219.899345][ T27] ? security_socket_sendmsg+0x7d/0xa0 [ 219.906006][ T27] ? netlink_getsockopt+0x5b0/0x5b0 [ 219.911302][ T27] ____sys_sendmsg+0x59e/0x8f0 [ 219.916081][ T27] ? iovec_from_user+0x300/0x390 [ 219.921176][ T27] ? __sys_sendmsg_sock+0x30/0x30 [ 219.926224][ T27] ___sys_sendmsg+0x252/0x2e0 [ 219.930948][ T27] ? __sys_sendmsg+0x260/0x260 [ 219.935802][ T27] ? __fdget+0x191/0x220 [ 219.940036][ T27] __se_sys_sendmsg+0x19a/0x260 [ 219.945017][ T27] ? __x64_sys_sendmsg+0x80/0x80 [ 219.949994][ T27] ? syscall_enter_from_user_mode+0x2e/0x240 [ 219.956063][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 219.961420][ T27] ? syscall_enter_from_user_mode+0x2e/0x240 [ 219.967421][ T27] do_syscall_64+0x3b/0xb0 [ 219.971899][ T27] ? clear_bhb_loop+0x15/0x70 [ 219.976583][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 219.983306][ T27] RIP: 0033:0x7f1cb027fd29 [ 219.987763][ T27] RSP: 002b:00007f1cae0ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 219.996548][ T27] RAX: ffffffffffffffda RBX: 00007f1cb0470160 RCX: 00007f1cb027fd29 [ 220.005254][ T27] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000009 [ 220.013374][ T27] RBP: 00007f1cb02fbaa8 R08: 0000000000000000 R09: 0000000000000000 [ 220.021440][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 220.029428][ T27] R13: 0000000000000000 R14: 00007f1cb0470160 R15: 00007ffe3a5f79f8 [ 220.037481][ T27] [ 220.040540][ T27] INFO: task syz.0.10:4287 blocked for more than 144 seconds. [ 220.048210][ T27] Not tainted 5.15.175-syzkaller #0 [ 220.054240][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 220.062989][ T27] task:syz.0.10 state:D stack:27520 pid: 4287 ppid: 4167 flags:0x00004004 [ 220.072292][ T27] Call Trace: [ 220.075577][ T27] [ 220.078566][ T27] __schedule+0x12c4/0x45b0 [ 220.083238][ T27] ? release_firmware_map_entry+0x190/0x190 [ 220.089147][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 220.095019][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 220.100245][ T27] schedule+0x11b/0x1f0 [ 220.104845][ T27] schedule_preempt_disabled+0xf/0x20 [ 220.111252][ T27] __mutex_lock_common+0xe34/0x25a0 [ 220.116472][ T27] ? misc_open+0x58/0x380 [ 220.120872][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 220.126097][ T27] ? __lock_acquire+0x1ff0/0x1ff0 [ 220.131181][ T27] ? kobject_get_unless_zero+0x229/0x320 [ 220.136821][ T27] mutex_lock_nested+0x17/0x20 [ 220.141641][ T27] misc_open+0x58/0x380 [ 220.145808][ T27] chrdev_open+0x54a/0x630 [ 220.150218][ T27] ? cd_forget+0x160/0x160 [ 220.154691][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 220.159906][ T27] ? fsnotify_perm+0x47b/0x590 [ 220.164747][ T27] ? cd_forget+0x160/0x160 [ 220.169177][ T27] do_dentry_open+0x807/0xfb0 [ 220.173919][ T27] path_openat+0x2705/0x2f20 [ 220.178568][ T27] ? do_filp_open+0x460/0x460 [ 220.183343][ T27] do_filp_open+0x21c/0x460 [ 220.187863][ T27] ? vfs_tmpfile+0x2e0/0x2e0 [ 220.192524][ T27] ? _raw_spin_unlock+0x24/0x40 [ 220.197405][ T27] ? alloc_fd+0x598/0x630 [ 220.203219][ T27] do_sys_openat2+0x13b/0x4f0 [ 220.208544][ T27] ? do_sys_open+0x220/0x220 [ 220.213248][ T27] __x64_sys_openat+0x243/0x290 [ 220.218120][ T27] ? __ia32_sys_open+0x270/0x270 [ 220.223122][ T27] ? syscall_enter_from_user_mode+0x2e/0x240 [ 220.229136][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 220.234417][ T27] ? syscall_enter_from_user_mode+0x2e/0x240 [ 220.240419][ T27] do_syscall_64+0x3b/0xb0 [ 220.245022][ T27] ? clear_bhb_loop+0x15/0x70 [ 220.249712][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 220.255789][ T27] RIP: 0033:0x7f75c610dd29 [ 220.260225][ T27] RSP: 002b:00007f75c3f7e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 220.268733][ T27] RAX: ffffffffffffffda RBX: 00007f75c62fdfa0 RCX: 00007f75c610dd29 [ 220.276887][ T27] RDX: d00f935e928e83a1 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 220.284943][ T27] RBP: 00007f75c6189aa8 R08: 0000000000000000 R09: 0000000000000000 [ 220.293165][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 220.301253][ T27] R13: 0000000000000001 R14: 00007f75c62fdfa0 R15: 00007ffe424f1068 [ 220.309287][ T27] [ 220.314583][ T27] INFO: task syz.2.12:4307 blocked for more than 144 seconds. [ 220.322249][ T27] Not tainted 5.15.175-syzkaller #0 [ 220.327972][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 220.336680][ T27] task:syz.2.12 state:D stack:27096 pid: 4307 ppid: 4175 flags:0x00004004 [ 220.345944][ T27] Call Trace: [ 220.349250][ T27] [ 220.352252][ T27] __schedule+0x12c4/0x45b0 [ 220.356782][ T27] ? release_firmware_map_entry+0x190/0x190 [ 220.362831][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 220.368323][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 220.373627][ T27] schedule+0x11b/0x1f0 [ 220.377797][ T27] schedule_preempt_disabled+0xf/0x20 [ 220.383314][ T27] __mutex_lock_common+0xe34/0x25a0 [ 220.388537][ T27] ? genl_rcv_msg+0x124/0x14a0 [ 220.393362][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 220.398572][ T27] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 220.404267][ T27] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 220.410052][ T27] ? netlink_rcv_skb+0x1b0/0x410 [ 220.415744][ T27] ? radix_tree_lookup+0x234/0x280 [ 220.422258][ T27] mutex_lock_nested+0x17/0x20 [ 220.427049][ T27] genl_rcv_msg+0x124/0x14a0 [ 220.431745][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 220.436961][ T27] ? genl_bind+0x420/0x420 [ 220.441452][ T27] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 220.447374][ T27] ? _raw_spin_unlock+0x40/0x40 [ 220.452399][ T27] ? mark_lock+0x98/0x340 [ 220.456752][ T27] ? __lock_acquire+0x1295/0x1ff0 [ 220.462012][ T27] netlink_rcv_skb+0x1cf/0x410 [ 220.466804][ T27] ? genl_bind+0x420/0x420 [ 220.471526][ T27] ? netlink_ack+0xb10/0xb10 [ 220.476140][ T27] ? down_read+0x1b3/0x2e0 [ 220.480547][ T27] ? genl_rcv+0x9/0x40 [ 220.484711][ T27] genl_rcv+0x24/0x40 [ 220.488710][ T27] netlink_unicast+0x7b6/0x980 [ 220.493533][ T27] ? netlink_detachskb+0x90/0x90 [ 220.498494][ T27] netlink_sendmsg+0xa30/0xd60 [ 220.503327][ T27] ? netlink_getsockopt+0x5b0/0x5b0 [ 220.508564][ T27] ? aa_sock_msg_perm+0x91/0x150 [ 220.513561][ T27] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 220.519439][ T27] ? security_socket_sendmsg+0x7d/0xa0 [ 220.524997][ T27] ? netlink_getsockopt+0x5b0/0x5b0 [ 220.530245][ T27] __sys_sendto+0x564/0x720 [ 220.535161][ T27] ? __ia32_sys_getpeername+0x80/0x80 [ 220.540948][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 220.546325][ T27] ? rcu_is_watching+0x11/0xa0 [ 220.551176][ T27] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 220.556831][ T27] ? trace_hardirqs_on+0x30/0x80 [ 220.561852][ T27] __x64_sys_sendto+0xda/0xf0 [ 220.566574][ T27] do_syscall_64+0x3b/0xb0 [ 220.571074][ T27] ? clear_bhb_loop+0x15/0x70 [ 220.575773][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 220.581747][ T27] RIP: 0033:0x7f7aa2ce3bbc [ 220.586178][ T27] RSP: 002b:00007f7aa0b0eec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 220.594675][ T27] RAX: ffffffffffffffda RBX: 00007f7aa0b0efc0 RCX: 00007f7aa2ce3bbc [ 220.602741][ T27] RDX: 0000000000000020 RSI: 00007f7aa0b0f010 RDI: 0000000000000005 [ 220.610863][ T27] RBP: 0000000000000000 R08: 00007f7aa0b0ef14 R09: 000000000000000c [ 220.619484][ T27] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 220.627560][ T27] R13: 00007f7aa0b0ef68 R14: 00007f7aa0b0f010 R15: 0000000000000000 [ 220.635627][ T27] [ 220.638678][ T27] [ 220.638678][ T27] Showing all locks held in the system: [ 220.647007][ T27] 1 lock held by khungtaskd/27: [ 220.652848][ T27] #0: ffffffff8cb1fd20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 220.662623][ T27] 2 locks held by getty/3922: [ 220.667316][ T27] #0: ffff88802c5bf098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 220.677214][ T27] #1: ffffc900025ae2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6af/0x1db0 [ 220.687407][ T27] 3 locks held by kworker/u4:5/4225: [ 220.692826][ T27] #0: ffff88805d569138 ((wq_completion)nfc2_nci_cmd_wq){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 220.704059][ T27] #1: ffffc9000323fd20 ((work_completion)(&ndev->cmd_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 220.715624][ T27] #2: ffffffff8d359328 (nci_mutex){+.+.}-{3:3}, at: virtual_nci_send+0x1c/0xd0 [ 220.726127][ T27] 3 locks held by syz.1.7/4284: [ 220.731074][ T27] #0: ffffffff8d212548 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 220.739549][ T27] #1: ffffffff8d359328 (nci_mutex){+.+.}-{3:3}, at: virtual_ncidev_open+0x15/0xc0 [ 220.748947][ T27] #2: ffff88805d560190 (&dev->mutex){....}-{3:3}, at: nfc_register_device+0x98/0x310 [ 220.759542][ T27] 5 locks held by syz.1.7/4285: [ 220.764477][ T27] #0: ffffffff8dc9f0f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 220.772800][ T27] #1: ffffffff8dc9efa8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x124/0x14a0 [ 220.781934][ T27] #2: ffff88805d560190 (&dev->mutex){....}-{3:3}, at: nfc_dev_up+0x3b/0x330 [ 220.790795][ T27] #3: ffff888147ae7350 (&ndev->req_lock){+.+.}-{3:3}, at: nci_dev_up+0xa0/0xd40 [ 220.799970][ T27] #4: ffffffff8d359328 (nci_mutex){+.+.}-{3:3}, at: virtual_nci_close+0x13/0x40 [ 220.809190][ T27] 1 lock held by syz.0.10/4287: [ 220.814095][ T27] #0: ffffffff8d212548 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 220.823365][ T27] 2 locks held by syz.2.12/4307: [ 220.828328][ T27] #0: ffffffff8dc9f0f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 220.836570][ T27] #1: ffffffff8dc9efa8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x124/0x14a0 [ 220.845717][ T27] 1 lock held by syz.4.15/4322: [ 220.850557][ T27] #0: ffffffff8d212548 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 220.859087][ T27] 1 lock held by syz.4.15/4325: [ 220.864320][ T27] #0: ffffffff8d212548 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 220.873216][ T27] 2 locks held by syz.3.16/4326: [ 220.878172][ T27] #0: ffffffff8dc9f0f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 220.886499][ T27] #1: ffffffff8dc9efa8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x124/0x14a0 [ 220.895728][ T27] 2 locks held by syz.3.16/4327: [ 220.900731][ T27] #0: ffffffff8dc9f0f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 220.908961][ T27] #1: ffffffff8dc9efa8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x124/0x14a0 [ 220.918056][ T27] 2 locks held by syz.3.16/4333: [ 220.923044][ T27] #0: ffffffff8dc9f0f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 220.932037][ T27] #1: ffffffff8dc9efa8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x124/0x14a0 [ 220.941194][ T27] 1 lock held by syz-executor/4336: [ 220.946399][ T27] #0: ffffffff8d212548 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 220.954891][ T27] 1 lock held by syz-executor/4339: [ 220.960091][ T27] #0: ffffffff8d212548 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 220.968615][ T27] 1 lock held by syz-executor/4341: [ 220.974830][ T27] #0: ffffffff8d212548 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 220.983401][ T27] 1 lock held by syz-executor/4346: [ 220.988598][ T27] #0: ffffffff8d212548 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 220.997213][ T27] 1 lock held by syz-executor/4347: [ 221.002499][ T27] #0: ffffffff8d212548 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 221.011043][ T27] 1 lock held by syz-executor/4362: [ 221.016243][ T27] #0: ffffffff8d212548 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 221.024790][ T27] 1 lock held by syz-executor/4364: [ 221.030555][ T27] #0: ffffffff8d212548 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 221.039099][ T27] 1 lock held by syz-executor/4366: [ 221.044361][ T27] #0: ffffffff8d212548 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 221.052873][ T27] 1 lock held by syz-executor/4369: [ 221.058058][ T27] #0: ffffffff8d212548 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 221.066587][ T27] 1 lock held by syz-executor/4370: [ 221.071818][ T27] #0: ffffffff8d212548 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 221.080402][ T27] 1 lock held by syz-executor/4372: [ 221.086026][ T27] #0: ffffffff8d212548 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 221.094870][ T27] 1 lock held by syz-executor/4374: [ 221.100082][ T27] #0: ffffffff8d212548 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 221.108651][ T27] 1 lock held by syz-executor/4376: [ 221.113912][ T27] #0: ffffffff8d212548 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 221.122446][ T27] 1 lock held by syz-executor/4379: [ 221.127642][ T27] #0: ffffffff8d212548 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 221.136787][ T27] 1 lock held by syz-executor/4380: [ 221.142060][ T27] #0: ffffffff8d212548 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x58/0x380 [ 221.150550][ T27] [ 221.152954][ T27] ============================================= [ 221.152954][ T27] [ 221.161439][ T27] NMI backtrace for cpu 0 [ 221.165776][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.175-syzkaller #0 [ 221.173742][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 221.184160][ T27] Call Trace: [ 221.187427][ T27] [ 221.190353][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 221.195050][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 221.200683][ T27] ? panic+0x860/0x860 [ 221.204744][ T27] ? nmi_cpu_backtrace+0x23b/0x4a0 [ 221.209846][ T27] nmi_cpu_backtrace+0x46a/0x4a0 [ 221.214771][ T27] ? __wake_up_klogd+0xd5/0x100 [ 221.219812][ T27] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 221.225962][ T27] ? _printk+0xd1/0x120 [ 221.230131][ T27] ? panic+0x860/0x860 [ 221.234280][ T27] ? __wake_up_klogd+0xcc/0x100 [ 221.239137][ T27] ? panic+0x860/0x860 [ 221.243216][ T27] ? __rcu_read_unlock+0x92/0x100 [ 221.248235][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 221.254303][ T27] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 221.260274][ T27] watchdog+0xe72/0xeb0 [ 221.264427][ T27] kthread+0x3f6/0x4f0 [ 221.268485][ T27] ? hungtask_pm_notify+0x50/0x50 [ 221.273504][ T27] ? kthread_blkcg+0xd0/0xd0 [ 221.278102][ T27] ret_from_fork+0x1f/0x30 [ 221.282517][ T27] [ 221.286298][ T27] Sending NMI from CPU 0 to CPUs 1: [ 221.291731][ C1] NMI backtrace for cpu 1 [ 221.291740][ C1] CPU: 1 PID: 4309 Comm: kworker/u4:8 Not tainted 5.15.175-syzkaller #0 [ 221.291756][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 221.291766][ C1] Workqueue: phy9 ieee80211_iface_work [ 221.291788][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x109/0x130 [ 221.291811][ C1] Code: 75 85 c0 74 3f 48 c7 04 24 0e 36 e0 45 4b c7 04 2c 00 00 00 00 65 48 8b 04 25 28 00 00 00 48 3b 44 24 40 75 26 48 8d 65 d8 5b <41> 5c 41 5d 41 5e 41 5f 5d c3 e8 58 61 f6 ff 41 f7 c7 00 02 00 00 [ 221.291824][ C1] RSP: 0018:ffffc900033df330 EFLAGS: 00000246 [ 221.291836][ C1] RAX: 3c7cee27fc2d4400 RBX: 1ffff110171e4fe9 RCX: 0000000000000202 [ 221.291848][ C1] RDX: dffffc0000000000 RSI: ffffffff8aab2b80 RDI: 0000000000000001 [ 221.291859][ C1] RBP: ffffc900033df350 R08: dffffc0000000000 R09: fffffbfff213123a [ 221.291871][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 221.291882][ C1] R13: 1ffff9200067be58 R14: ffffc900033df2e0 R15: 0000000000000246 [ 221.291893][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 221.291907][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 221.291917][ C1] CR2: 00007ffe714a6fc8 CR3: 0000000020388000 CR4: 00000000003506e0 [ 221.291931][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 221.291940][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 221.291949][ C1] Call Trace: [ 221.291954][ C1] [ 221.291959][ C1] ? nmi_cpu_backtrace+0x39f/0x4a0 [ 221.291976][ C1] ? read_lock_is_recursive+0x10/0x10 [ 221.291995][ C1] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 221.292012][ C1] ? unknown_nmi_error+0xd0/0xd0 [ 221.292037][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 221.292053][ C1] ? nmi_handle+0xf7/0x370 [ 221.292071][ C1] ? _raw_spin_unlock_irqrestore+0x109/0x130 [ 221.292089][ C1] ? default_do_nmi+0x62/0x150 [ 221.292106][ C1] ? exc_nmi+0xa8/0x100 [ 221.292121][ C1] ? end_repeat_nmi+0x16/0x31 [ 221.292141][ C1] ? _raw_spin_unlock_irqrestore+0x109/0x130 [ 221.292160][ C1] ? _raw_spin_unlock_irqrestore+0x109/0x130 [ 221.292180][ C1] ? _raw_spin_unlock_irqrestore+0x109/0x130 [ 221.292199][ C1] [ 221.292203][ C1] [ 221.292209][ C1] kvfree_call_rcu+0x523/0x8a0 [ 221.292229][ C1] ? call_rcu+0xa70/0xa70 [ 221.292243][ C1] ? do_raw_spin_lock+0x14a/0x370 [ 221.292266][ C1] cfg80211_update_known_bss+0x16b/0x9e0 [ 221.292287][ C1] cfg80211_bss_update+0x187/0x2280 [ 221.292311][ C1] ? __kmalloc+0x168/0x300 [ 221.292327][ C1] ? cfg80211_inform_bss_frame_data+0x4f8/0x20f0 [ 221.292345][ C1] ? cfg80211_inform_bss_frame_data+0x6e6/0x20f0 [ 221.292366][ C1] cfg80211_inform_bss_frame_data+0xa13/0x20f0 [ 221.292397][ C1] ? cfg80211_parse_mbssid_data+0x3410/0x3410 [ 221.292424][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 221.292447][ C1] ieee80211_bss_info_update+0x7a6/0xc80 [ 221.292468][ C1] ? ieee80211_rx_bss_put+0x60/0x60 [ 221.292491][ C1] ieee80211_ibss_rx_queued_mgmt+0x175e/0x2af0 [ 221.292510][ C1] ? mark_lock+0x98/0x340 [ 221.292533][ C1] ? ieee80211_ibss_rx_no_sta+0x720/0x720 [ 221.292551][ C1] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 221.292569][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 221.292586][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 221.292610][ C1] ? _raw_spin_unlock+0x40/0x40 [ 221.292628][ C1] ? kcov_remote_start+0x6f/0x480 [ 221.292649][ C1] ? kcov_remote_start+0xf2/0x480 [ 221.292667][ C1] ieee80211_iface_work+0x78f/0xcc0 [ 221.292690][ C1] process_one_work+0x8a1/0x10c0 [ 221.292715][ C1] ? worker_detach_from_pool+0x260/0x260 [ 221.292734][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 221.292752][ C1] ? kthread_data+0x4e/0xc0 [ 221.292767][ C1] ? wq_worker_running+0x97/0x170 [ 221.292784][ C1] worker_thread+0xaca/0x1280 [ 221.292801][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 221.292831][ C1] kthread+0x3f6/0x4f0 [ 221.292845][ C1] ? rcu_lock_release+0x20/0x20 [ 221.292861][ C1] ? kthread_blkcg+0xd0/0xd0 [ 221.292877][ C1] ret_from_fork+0x1f/0x30 [ 221.292901][ C1] [ 221.294703][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 221.701242][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.175-syzkaller #0 [ 221.709228][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 221.719360][ T27] Call Trace: [ 221.722650][ T27] [ 221.725570][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 221.730258][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 221.735881][ T27] ? panic+0x860/0x860 [ 221.739947][ T27] panic+0x318/0x860 [ 221.743838][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 221.749478][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 221.755632][ T27] ? fb_is_primary_device+0xd0/0xd0 [ 221.760842][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 221.766919][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 221.773112][ T27] ? nmi_trigger_cpumask_backtrace+0x281/0x2a0 [ 221.779273][ T27] ? nmi_trigger_cpumask_backtrace+0x286/0x2a0 [ 221.785432][ T27] watchdog+0xeb0/0xeb0 [ 221.789588][ T27] kthread+0x3f6/0x4f0 [ 221.793646][ T27] ? hungtask_pm_notify+0x50/0x50 [ 221.798659][ T27] ? kthread_blkcg+0xd0/0xd0 [ 221.803244][ T27] ret_from_fork+0x1f/0x30 [ 221.807721][ T27] [ 221.811070][ T27] Kernel Offset: disabled [ 221.815405][ T27] Rebooting in 86400 seconds..