last executing test programs: 16.127661993s ago: executing program 0 (id=1): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b00011100000009040000019569", @ANYRES32], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/bpf', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000001000"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800c0001006d6163766c616e001800028004000580ae442be9ec0f27fe30f5acf9cfef54d568e76d01db82bfef6965e45bebab74f55027d960580f75c8515cde379a77b3b1f749cbdbd06724850afbc10b84da03a43c86285b12e9d661b278a3aea1e05d4d2e3b24a51c79b5b283612c606f06b22da5c3497833f165c5dc34edfb778c3e56f2e6b3f666a3497107fd4a7113e1"], 0x38}}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x70, 0x0, 0x0, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xfffa}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x70}}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000600", 0x33fe0}], 0x1}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r6, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a24000000000a01010000000000000000050000000900010073797a30000000000400060070000000030a01030000000000000000050000000900010073797a30000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000080001400000000014000300766c616e3000"/167], 0xd0}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x0, 0xa005}, @sack_perm]}}}}}}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 15.581827538s ago: executing program 1 (id=2): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400070010000100004000701b808f5e8197ac00000000000000000a140000001101000000000000000000000000010a"], 0x28}}, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) read$FUSE(r0, &(0x7f00000008c0)={0x2020}, 0xfffffef0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000080)=0x5, 0x4) sendmmsg$inet6(r3, &(0x7f0000000c80)=[{{&(0x7f0000000580)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x40000cc, 0xc000) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r4, &(0x7f00000017c0)=[{&(0x7f0000000040)="273eebfecb7c0e923301b61c42cb1d11f41d00bdab2a3d983b065a56", 0x1c}, {&(0x7f0000000000)="fe", 0x1}], 0x2) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa10102030109021800010000000009040000009d144e00"], 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 15.073910849s ago: executing program 2 (id=3): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x32, 0x4, 0x0, 0x0, 0xc8, 0x64, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x9, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@dev, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote, 0x1}, {@multicast2}, {@private=0xa0100fe}, {@rand_addr=0x64010100}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x13, 0x0, [@remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 11.082440756s ago: executing program 0 (id=10): unshare(0x60600) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x2040c0, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, 0x0) 10.910299438s ago: executing program 3 (id=11): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r0, 0x0, &(0x7f0000000000)) 8.821611725s ago: executing program 3 (id=13): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = gettid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') getdents(r1, &(0x7f0000001200)=""/162, 0xa2) rt_sigqueueinfo(r0, 0x21, &(0x7f0000001500)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) gettid() (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') (async) getdents(r1, &(0x7f0000001200)=""/162, 0xa2) (async) rt_sigqueueinfo(r0, 0x21, &(0x7f0000001500)) (async) 8.809972021s ago: executing program 4 (id=14): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'caif0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getchain={0x24, 0x65, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)=0x0) process_vm_writev(r3, &(0x7f0000000000), 0x10000000000002d1, 0x0, 0x3a, 0x0) 8.586197436s ago: executing program 4 (id=15): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x24, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004014}, 0x40004) r0 = socket(0x28, 0x1, 0x2) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f00000001c0)=""/17, 0x11}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000000000)=""/83, 0x53}, {&(0x7f0000000880)=""/232, 0xe8}], 0xb, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 8.571245241s ago: executing program 3 (id=16): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x68, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x30, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_INGRESS_QOS={0x1c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x68}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0xfffffffc}]}}}]}, 0x44}}, 0x0) r4 = syz_open_dev$vcsu(&(0x7f0000001340), 0x1ff, 0x0) lseek(r4, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r5, 0x1, 0x10, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'team_slave_1\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0x1f000}}) unshare(0x24020400) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x10001, 0x7fff, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000240)="d64e047a8757569687e26ce3b3f09c098468b847ac7d1da5159a8e010839a3214061dd1b3ece76af42f99eb35cbd5a3f74d73f869f5900cc9cde7068b6215fb2ecf2b666a875a22eb89502691c10fe65dec8185c9e99da1372d0de5231a8240655418e1e0ff091", &(0x7f0000001780), 0x8, r6}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r6, &(0x7f0000000000), &(0x7f0000000080)=""/12}, 0x20) socket$inet_sctp(0x2, 0x1, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) fsync(r7) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000080)={0x4, [0xe1, 0xff00, 0x5, 0xa08]}, &(0x7f00000000c0)=0xc) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) 8.463867177s ago: executing program 4 (id=17): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee3, 0x110, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x2000001, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @loopback}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}], 0x18}, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c010000270001"], 0x13c}}, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x3, 0x401, 0x7, 0x7, 0x6}, &(0x7f0000000140)=0x14) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}, "90e2a72a"}}}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@getnexthop={0x34, 0x6a, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NHA_GROUPS={0x4}, @NHA_ID={0x8}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}, @NHA_GROUPS={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 8.241998407s ago: executing program 4 (id=18): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x56, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, '\x00', 0x20, 0x21, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, {[@fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65}, @hopopts={0x73}], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "114f84", 0x0, "8e269c"}}}}}}}, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0xce, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = socket(0x25, 0x2, 0xfffffffc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x0, @broadcast}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @empty}}) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r7, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x2, 0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x60, 0x2, [@TCA_FLOW_ACT={0x5c, 0x9, 0x0, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0xb17}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0xfffffffffffffe0f}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 5.412983082s ago: executing program 0 (id=19): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r4}) io_setup(0x2, &(0x7f00000000c0)=0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="0001"], 0x18) r6 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x14, 0x7, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40011}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x1d) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, 0x0, 0x0) io_submit(r5, 0x0, &(0x7f0000000380)) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r11, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r10}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv6_delroute={0x1c, 0x19, 0x1}, 0x1c}}, 0x0) socket$packet(0x11, 0x3, 0x300) r12 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000580)={0x14, r12, 0x703}, 0x14}}, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x2, {{0xa, 0x1, 0x0, @mcast1={0xff, 0xf}, 0x2}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0xf}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000001c0)={0x4000000, {{0xa, 0x4e25, 0x0, @dev={0xfe, 0x80, '\x00', 0x2d}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfa}}}, 0x108) 1.482752442s ago: executing program 3 (id=22): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x3c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @local}}]}, 0x3c}}, 0x0) (fail_nth: 9) 1.482210346s ago: executing program 4 (id=23): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) syz_io_uring_setup(0x450, &(0x7f0000000040)={0x0, 0xf3b8, 0x8, 0x2, 0x120}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x11c, &(0x7f0000000140)=0x1, 0x0, 0x4) r2 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000300)=ANY=[], 0xc0) getsockopt$inet6_opts(r2, 0x29, 0x36, 0x0, &(0x7f00000003c0)) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000005000000000800040001000000", 0x24) 431.308554ms ago: executing program 4 (id=24): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00010000ed3ec908cd0cb366231dc09d60992fa133e0120001000004e5fe7b5e4893109dc33cff11b0ab1ecffc9ab35afc0b0630661693cf8a0f6c2dcf39a9186e84e4ad7581a0faddaa55512044c2e190a7bca6f617ab430bf40aa89168a112693b5772462118690a2c591e0469ff95fb33e364f04f7d66d748cde4f7376f308c155d07b0cdf5ddbd7880bdb7cf26dd7ce252a1a97db8d6dbfaf45aabc3169eae4b"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x2c, 0xf8, 0x4, 0x10, 0x6cd, 0x110, 0x53f0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xe9, 0xbd, 0xfa, 0x0, [], [{{0x9, 0x5, 0x7, 0xf}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f00000004c0)={0x0, 0x10}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000f40)='fdinfo\x00') socket$nl_route(0x10, 0x3, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000079db8540da0b77010b7d000000010902120001000000000904", @ANYRES32, @ANYRES8=r1], 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.kill\x00', 0x275a, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0)=@newqdisc={0x24, 0x24, 0x600, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x4000059) recvmmsg(r8, &(0x7f0000009600)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)=""/9, 0x9}, {&(0x7f0000000480)=""/179, 0xb3}, {&(0x7f0000006540)=""/4096, 0x1000}, {&(0x7f0000000680)=""/125, 0x7d}, {&(0x7f0000000540)=""/81, 0x51}, {&(0x7f0000000280)=""/31, 0x1f}, {&(0x7f0000000800)=""/230, 0xe6}, {&(0x7f0000000900)=""/152, 0x98}], 0x8}, 0x3}], 0x1, 0x122, 0x0) write$binfmt_misc(r6, &(0x7f0000000640)=ANY=[], 0xff79) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r10 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) dup(r10) socket(0x2000000015, 0x80005, 0x0) 26.297752ms ago: executing program 3 (id=25): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f00000011c0)=""/4106, 0x100a, 0x6) 0s ago: executing program 3 (id=26): r0 = socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast1, @local, @remote}, 0xc) (async) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast1, @local, @remote}, 0xc) socket$inet(0x2, 0x1, 0x0) (async) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@rand_addr=0x64010101, @local}, 0xc) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='attr/current\x00') (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000700)='attr/current\x00') bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, r3, 0x1, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, r3, 0x1, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="60000000100020000000000000000000000000009a7e47f1df7178f075e6630f36", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800800010068737200340002800500030000000000050006000800000008000100", @ANYRES32=r6, @ANYBLOB="0500060000000000050003000300000008000200", @ANYRES32=r7, @ANYBLOB], 0x60}}, 0x0) read$FUSE(r3, &(0x7f0000001800)={0x2020}, 0x2020) (async) read$FUSE(r3, &(0x7f0000001800)={0x2020}, 0x2020) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000300)={0x0, 0xd47}) write$cgroup_devices(r3, &(0x7f0000000180)={'a', ' *:* ', 'm\x00'}, 0x8) (async) write$cgroup_devices(r3, &(0x7f0000000180)={'a', ' *:* ', 'm\x00'}, 0x8) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r1, &(0x7f0000000080)={0x4}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter\x00') (async) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter\x00') bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000e17b5f"], 0x48) preadv(r8, &(0x7f0000000380)=[{&(0x7f0000000180)=""/79, 0x4f}], 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r9, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xfffffffe, {}, {}, @raw32}], 0x1c) (async) write$sndseq(r9, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xfffffffe, {}, {}, @raw32}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r9, 0x4040534e, &(0x7f0000000180)={0x37, @time={0x65757100, 0x1000000}}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000240)={0x1, 0x1, 0x5, &(0x7f00000000c0)={0x9, "ab7ccdff50076dcb9f0a705f4c6dca3390dfa62e432f061e7331b0ea242056341b"}}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1448}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x101}, @IFLA_BR_MAX_AGE={0x8}]}}}]}, 0x44}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.212' (ED25519) to the list of known hosts. [ 50.547860][ T5213] cgroup: Unknown subsys name 'net' [ 50.715333][ T5213] cgroup: Unknown subsys name 'cpuset' [ 50.723084][ T5213] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.955979][ T5213] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.954753][ T5226] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.963074][ T5232] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.972685][ T5232] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.980795][ T5232] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.988484][ T5232] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.996001][ T5232] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.004027][ T5233] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 54.023015][ T5233] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 54.035204][ T5232] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.043906][ T5233] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 54.044109][ T5232] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.052532][ T5233] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.059484][ T5232] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 54.071143][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 54.079189][ T5232] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.080259][ T5233] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 54.093457][ T4625] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 54.094458][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 54.100911][ T4625] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.109140][ T5233] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 54.116485][ T4625] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 54.122816][ T5238] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 54.137166][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 54.137241][ T4625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 54.145322][ T4625] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.153067][ T5238] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 54.159508][ T4625] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 54.173124][ T4625] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.181046][ T4625] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 54.189217][ T4625] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 54.606199][ T5242] chnl_net:caif_netlink_parms(): no params data found [ 54.688788][ T5244] chnl_net:caif_netlink_parms(): no params data found [ 54.698876][ T5243] chnl_net:caif_netlink_parms(): no params data found [ 54.748772][ T5241] chnl_net:caif_netlink_parms(): no params data found [ 54.802495][ T5245] chnl_net:caif_netlink_parms(): no params data found [ 54.817234][ T5242] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.825073][ T5242] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.833177][ T5242] bridge_slave_0: entered allmulticast mode [ 54.839750][ T5242] bridge_slave_0: entered promiscuous mode [ 54.882195][ T5242] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.889282][ T5242] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.897134][ T5242] bridge_slave_1: entered allmulticast mode [ 54.903920][ T5242] bridge_slave_1: entered promiscuous mode [ 54.998773][ T5243] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.005969][ T5243] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.013551][ T5243] bridge_slave_0: entered allmulticast mode [ 55.020000][ T5243] bridge_slave_0: entered promiscuous mode [ 55.039951][ T5241] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.047061][ T5241] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.054606][ T5241] bridge_slave_0: entered allmulticast mode [ 55.061076][ T5241] bridge_slave_0: entered promiscuous mode [ 55.069667][ T5242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.078976][ T5244] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.087175][ T5244] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.094471][ T5244] bridge_slave_0: entered allmulticast mode [ 55.101056][ T5244] bridge_slave_0: entered promiscuous mode [ 55.115106][ T5243] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.122421][ T5243] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.129562][ T5243] bridge_slave_1: entered allmulticast mode [ 55.136526][ T5243] bridge_slave_1: entered promiscuous mode [ 55.150421][ T5241] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.157840][ T5241] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.165581][ T5241] bridge_slave_1: entered allmulticast mode [ 55.172277][ T5241] bridge_slave_1: entered promiscuous mode [ 55.187389][ T5242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.196809][ T5244] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.204247][ T5244] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.211541][ T5244] bridge_slave_1: entered allmulticast mode [ 55.218365][ T5244] bridge_slave_1: entered promiscuous mode [ 55.266609][ T5245] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.273944][ T5245] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.281036][ T5245] bridge_slave_0: entered allmulticast mode [ 55.288032][ T5245] bridge_slave_0: entered promiscuous mode [ 55.296190][ T5245] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.303446][ T5245] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.310564][ T5245] bridge_slave_1: entered allmulticast mode [ 55.317201][ T5245] bridge_slave_1: entered promiscuous mode [ 55.326055][ T5243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.337067][ T5241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.348670][ T5241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.360459][ T5242] team0: Port device team_slave_0 added [ 55.368141][ T5242] team0: Port device team_slave_1 added [ 55.395371][ T5243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.419824][ T5244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.431863][ T5245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.468000][ T5244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.478853][ T5245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.505153][ T5243] team0: Port device team_slave_0 added [ 55.514190][ T5241] team0: Port device team_slave_0 added [ 55.520793][ T5242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.530780][ T5242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.557180][ T5242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.591385][ T5243] team0: Port device team_slave_1 added [ 55.599901][ T5241] team0: Port device team_slave_1 added [ 55.614127][ T5242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.621085][ T5242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.647709][ T5242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.669085][ T5245] team0: Port device team_slave_0 added [ 55.694730][ T5244] team0: Port device team_slave_0 added [ 55.701765][ T5245] team0: Port device team_slave_1 added [ 55.724647][ T5241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.731617][ T5241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.762137][ T5241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.776342][ T5241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.783417][ T5241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.809409][ T5241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.825263][ T5244] team0: Port device team_slave_1 added [ 55.839720][ T5243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.846726][ T5243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.873221][ T5243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.904943][ T5245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.911919][ T5245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.938634][ T5245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.951344][ T5245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.958575][ T5245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.985062][ T5245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.997326][ T5243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.004325][ T5243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.030276][ T5243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.064258][ T5244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.071228][ T5244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.097349][ T5244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.109754][ T5244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.117016][ T5244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.143827][ T4625] Bluetooth: hci0: command tx timeout [ 56.149401][ T5244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.172128][ T5242] hsr_slave_0: entered promiscuous mode [ 56.178340][ T5242] hsr_slave_1: entered promiscuous mode [ 56.222296][ T4625] Bluetooth: hci2: command tx timeout [ 56.228157][ T4625] Bluetooth: hci4: command tx timeout [ 56.234201][ T5237] Bluetooth: hci1: command tx timeout [ 56.239808][ T5237] Bluetooth: hci3: command tx timeout [ 56.253505][ T5241] hsr_slave_0: entered promiscuous mode [ 56.259938][ T5241] hsr_slave_1: entered promiscuous mode [ 56.266050][ T5241] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.273816][ T5241] Cannot create hsr debugfs directory [ 56.290523][ T5243] hsr_slave_0: entered promiscuous mode [ 56.296728][ T5243] hsr_slave_1: entered promiscuous mode [ 56.305814][ T5243] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.313465][ T5243] Cannot create hsr debugfs directory [ 56.330051][ T5245] hsr_slave_0: entered promiscuous mode [ 56.336277][ T5245] hsr_slave_1: entered promiscuous mode [ 56.345423][ T5245] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.353080][ T5245] Cannot create hsr debugfs directory [ 56.369598][ T5244] hsr_slave_0: entered promiscuous mode [ 56.376078][ T5244] hsr_slave_1: entered promiscuous mode [ 56.381948][ T5244] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.389608][ T5244] Cannot create hsr debugfs directory [ 56.723885][ T5243] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.735199][ T5243] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.744959][ T5243] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.754810][ T5243] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.811961][ T5242] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.827829][ T5242] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.846067][ T5242] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.866375][ T5242] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.918001][ T5241] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.928121][ T5241] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.939116][ T5241] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.951697][ T5241] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.005027][ T5243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.018496][ T5244] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.053459][ T5244] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.065538][ T5244] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.076279][ T5244] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.152348][ T5245] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 57.162001][ T5245] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 57.187184][ T5243] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.194839][ T5245] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 57.208974][ T5242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.228041][ T5245] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 57.250452][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.257739][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.287346][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.294484][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.311218][ T5242] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.345982][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.353064][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.374980][ T1122] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.382040][ T1122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.409735][ T5241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.458666][ T5244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.485426][ T5241] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.532855][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.539946][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.563466][ T5244] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.573492][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.580581][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.636915][ T5242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.646641][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.653777][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.666159][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.673264][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.690054][ T5243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.809789][ T5243] veth0_vlan: entered promiscuous mode [ 57.833708][ T5242] veth0_vlan: entered promiscuous mode [ 57.847394][ T5241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.857102][ T5245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.875829][ T5243] veth1_vlan: entered promiscuous mode [ 57.901837][ T5245] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.926298][ T5242] veth1_vlan: entered promiscuous mode [ 57.956789][ T1122] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.963958][ T1122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.985351][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.992491][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.034980][ T5241] veth0_vlan: entered promiscuous mode [ 58.046119][ T5244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.059798][ T5242] veth0_macvtap: entered promiscuous mode [ 58.083332][ T5243] veth0_macvtap: entered promiscuous mode [ 58.090223][ T5242] veth1_macvtap: entered promiscuous mode [ 58.107006][ T5241] veth1_vlan: entered promiscuous mode [ 58.124391][ T5245] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.134969][ T5245] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.150045][ T5243] veth1_macvtap: entered promiscuous mode [ 58.175810][ T5242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.208790][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.220343][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.232701][ T4625] Bluetooth: hci0: command tx timeout [ 58.241004][ T5243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.252775][ T5243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.264605][ T5243] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.274351][ T5243] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.286875][ T5243] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.296065][ T5243] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.305466][ T4625] Bluetooth: hci4: command tx timeout [ 58.305557][ T5226] Bluetooth: hci2: command tx timeout [ 58.312240][ T4625] Bluetooth: hci1: command tx timeout [ 58.317042][ T5237] Bluetooth: hci3: command tx timeout [ 58.330352][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.341661][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.353188][ T5242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.374646][ T5241] veth0_macvtap: entered promiscuous mode [ 58.386923][ T5242] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.396260][ T5242] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.405320][ T5242] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.414615][ T5242] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.430200][ T5245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.459021][ T5241] veth1_macvtap: entered promiscuous mode [ 58.499399][ T5244] veth0_vlan: entered promiscuous mode [ 58.527032][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.540469][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.551910][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.563385][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.574514][ T5241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.585907][ T5244] veth1_vlan: entered promiscuous mode [ 58.629008][ T5245] veth0_vlan: entered promiscuous mode [ 58.640580][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.651494][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.661767][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.673289][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.684562][ T5241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.711084][ T5241] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.721766][ T5241] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.730518][ T5241] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.739605][ T5241] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.791485][ T5245] veth1_vlan: entered promiscuous mode [ 58.799386][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.813231][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.837930][ T2975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.841023][ T5244] veth0_macvtap: entered promiscuous mode [ 58.851874][ T2975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.900519][ T5245] veth0_macvtap: entered promiscuous mode [ 58.916861][ T5244] veth1_macvtap: entered promiscuous mode [ 58.938732][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.950261][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.951346][ T5245] veth1_macvtap: entered promiscuous mode [ 59.007417][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.031556][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.044166][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.056594][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.058773][ T5242] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 59.066536][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.066570][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.066581][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.115171][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.126000][ T5245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.145190][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.160284][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.170170][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.180640][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.190506][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.201015][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.210914][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.221394][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.235042][ T5244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.249773][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.260897][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.272000][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.282742][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.293579][ T5245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.304034][ T5245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.315195][ T5245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.324458][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.334385][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.342695][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.347350][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.363466][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.374565][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.384524][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.395006][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.404950][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.415471][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.426550][ T5244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.451801][ T5245] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.469848][ T5245] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.479035][ T5245] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.488983][ T5245] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.534667][ T5244] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.560379][ T5244] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.577935][ T5244] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.586958][ T5244] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.616765][ T5286] FAULT_INJECTION: forcing a failure. [ 59.616765][ T5286] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 59.616995][ T2930] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.630473][ T5286] CPU: 1 UID: 0 PID: 5286 Comm: syz.3.4 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 59.645657][ T2930] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.647816][ T5286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 59.665157][ T5286] Call Trace: [ 59.668429][ T5286] [ 59.671352][ T5286] dump_stack_lvl+0x241/0x360 [ 59.676042][ T5286] ? __pfx_dump_stack_lvl+0x10/0x10 [ 59.681236][ T5286] ? __pfx__printk+0x10/0x10 [ 59.685821][ T5286] ? __pfx_lock_release+0x10/0x10 [ 59.690843][ T5286] should_fail_ex+0x3b0/0x4e0 [ 59.695519][ T5286] _copy_from_user+0x2f/0xe0 [ 59.700104][ T5286] copy_msghdr_from_user+0xae/0x680 [ 59.705298][ T5286] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 59.711106][ T5286] __sys_sendmsg+0x237/0x390 [ 59.715690][ T5286] ? __pfx___sys_sendmsg+0x10/0x10 [ 59.720792][ T5286] ? vfs_write+0x7bf/0xc90 [ 59.725229][ T5286] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 59.731574][ T5286] ? do_syscall_64+0x100/0x230 [ 59.736355][ T5286] ? do_syscall_64+0xb6/0x230 [ 59.741045][ T5286] do_syscall_64+0xf3/0x230 [ 59.745556][ T5286] ? clear_bhb_loop+0x35/0x90 [ 59.750236][ T5286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.756133][ T5286] RIP: 0033:0x7f823a77def9 [ 59.760551][ T5286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.780160][ T5286] RSP: 002b:00007f823b4ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 59.788584][ T5286] RAX: ffffffffffffffda RBX: 00007f823a935f80 RCX: 00007f823a77def9 [ 59.796565][ T5286] RDX: 0000000000000000 RSI: 0000000020002f00 RDI: 0000000000000003 [ 59.804537][ T5286] RBP: 00007f823b4ee090 R08: 0000000000000000 R09: 0000000000000000 [ 59.812511][ T5286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.820475][ T5286] R13: 0000000000000000 R14: 00007f823a935f80 R15: 00007f823aa5fa28 [ 59.828450][ T5286] [ 60.012285][ T46] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 60.060284][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.069900][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.085593][ T2930] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.094167][ T2930] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.181656][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.258009][ T46] usb 1-1: config 17 has an invalid descriptor of length 255, skipping remainder of the config [ 60.271633][ T1122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.289683][ T46] usb 1-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 60.302805][ T5237] Bluetooth: hci0: command tx timeout [ 60.309040][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.328755][ T46] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 60.338890][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.365891][ T1122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.384604][ T5237] Bluetooth: hci3: command tx timeout [ 60.390516][ T5226] Bluetooth: hci2: command tx timeout [ 60.393175][ T4625] Bluetooth: hci1: command tx timeout [ 60.401976][ T5238] Bluetooth: hci4: command tx timeout [ 60.576020][ T5285] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1'. [ 60.652501][ T5285] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 60.702685][ T5278] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 60.765325][ T5302] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 60.822349][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 60.932327][ T5278] usb 2-1: Using ep0 maxpacket: 32 [ 61.192132][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 61.197498][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 61.366818][ T5278] usb 2-1: config index 0 descriptor too short (expected 24, got 18) [ 61.457852][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 61.559273][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 61.603143][ T5278] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 61.647245][ T5278] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.664971][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 61.702143][ T5278] usb 2-1: Product: syz [ 61.712323][ T5278] usb 2-1: Manufacturer: syz [ 61.716950][ T5278] usb 2-1: SerialNumber: syz [ 61.730332][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 61.788342][ T5278] usb 2-1: config 0 descriptor?? [ 62.033024][ T46] usb 1-1: string descriptor 0 read error: -71 [ 62.063011][ T46] aiptek 1-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 62.091910][ T5311] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 62.396203][ T5237] Bluetooth: hci0: command tx timeout [ 62.469431][ T5237] Bluetooth: hci4: command tx timeout [ 62.483112][ T5226] Bluetooth: hci1: command tx timeout [ 62.488523][ T5226] Bluetooth: hci3: command tx timeout [ 62.503284][ T5226] Bluetooth: hci2: command tx timeout [ 63.023628][ T5278] airspy 2-1:0.0: usb_control_msg() failed -110 request 09 [ 63.030881][ T5278] airspy 2-1:0.0: Could not detect board [ 63.656576][ T0] NOHZ tick-stop error: local softirq work is pending, handler #4a!!! [ 63.670868][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 63.717772][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 63.967631][ T5278] airspy 2-1:0.0: probe with driver airspy failed with error -110 [ 64.492638][ T46] usb 1-1: USB disconnect, device number 2 [ 67.248219][ T5331] netlink: 296 bytes leftover after parsing attributes in process `syz.4.17'. [ 67.273961][ T5331] unsupported nlmsg_type 40 [ 70.132099][ C0] sched: DL replenish lagged too much [ 72.162643][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.169149][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 74.338783][ T5342] FAULT_INJECTION: forcing a failure. [ 74.338783][ T5342] name failslab, interval 1, probability 0, space 0, times 1 [ 74.432368][ T5342] CPU: 1 UID: 0 PID: 5342 Comm: syz.3.22 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 74.442569][ T5342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 74.452644][ T5342] Call Trace: [ 74.455934][ T5342] [ 74.458874][ T5342] dump_stack_lvl+0x241/0x360 [ 74.463577][ T5342] ? __pfx_dump_stack_lvl+0x10/0x10 [ 74.468795][ T5342] ? __pfx__printk+0x10/0x10 [ 74.473407][ T5342] ? __kmalloc_node_noprof+0xb7/0x440 [ 74.478796][ T5342] ? __pfx___might_resched+0x10/0x10 [ 74.484104][ T5342] should_fail_ex+0x3b0/0x4e0 [ 74.488806][ T5342] should_failslab+0xac/0x100 [ 74.493500][ T5342] __kmalloc_node_noprof+0xdf/0x440 [ 74.498712][ T5342] ? alloc_slab_obj_exts+0x3a/0xa0 [ 74.503845][ T5342] alloc_slab_obj_exts+0x3a/0xa0 [ 74.508812][ T5342] __memcg_slab_post_alloc_hook+0x319/0x7e0 [ 74.514734][ T5342] ? fib_table_insert+0x604/0x1f30 [ 74.519866][ T5342] kmem_cache_alloc_noprof+0x1de/0x2a0 [ 74.525346][ T5342] fib_table_insert+0x604/0x1f30 [ 74.530314][ T5342] ? lwtunnel_valid_encap_type+0x8a/0x5f0 [ 74.536050][ T5342] ? lwtunnel_valid_encap_type+0x265/0x5f0 [ 74.541866][ T5342] ? rcu_read_unlock+0x50/0xa0 [ 74.546652][ T5342] ? __pfx_fib_table_insert+0x10/0x10 [ 74.552044][ T5342] ? fib_new_table+0x120/0x2d0 [ 74.556827][ T5342] inet_rtm_newroute+0x149/0x290 [ 74.561782][ T5342] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 74.567252][ T5342] ? __dev_queue_xmit+0x1764/0x3e80 [ 74.572485][ T5342] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 74.577961][ T5342] rtnetlink_rcv_msg+0x73f/0xcf0 [ 74.582923][ T5342] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 74.588067][ T5342] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 74.593568][ T5342] ? ref_tracker_free+0x643/0x7e0 [ 74.598619][ T5342] netlink_rcv_skb+0x1e3/0x430 [ 74.603402][ T5342] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 74.608881][ T5342] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 74.614208][ T5342] ? netlink_deliver_tap+0x2e/0x1b0 [ 74.619427][ T5342] netlink_unicast+0x7f6/0x990 [ 74.624219][ T5342] ? __pfx_netlink_unicast+0x10/0x10 [ 74.629515][ T5342] ? __virt_addr_valid+0x183/0x530 [ 74.634643][ T5342] ? __check_object_size+0x48e/0x900 [ 74.639949][ T5342] netlink_sendmsg+0x8e4/0xcb0 [ 74.644743][ T5342] ? __pfx_netlink_sendmsg+0x10/0x10 [ 74.650051][ T5342] ? aa_sock_msg_perm+0x91/0x160 [ 74.655011][ T5342] ? __pfx_netlink_sendmsg+0x10/0x10 [ 74.660311][ T5342] __sock_sendmsg+0x221/0x270 [ 74.665006][ T5342] ____sys_sendmsg+0x52a/0x7e0 [ 74.669797][ T5342] ? __pfx_____sys_sendmsg+0x10/0x10 [ 74.675118][ T5342] __sys_sendmsg+0x2aa/0x390 [ 74.679733][ T5342] ? __pfx___sys_sendmsg+0x10/0x10 [ 74.684864][ T5342] ? vfs_write+0x7bf/0xc90 [ 74.689337][ T5342] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 74.695686][ T5342] ? do_syscall_64+0x100/0x230 [ 74.700472][ T5342] ? do_syscall_64+0xb6/0x230 [ 74.705174][ T5342] do_syscall_64+0xf3/0x230 [ 74.709694][ T5342] ? clear_bhb_loop+0x35/0x90 [ 74.714391][ T5342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.720301][ T5342] RIP: 0033:0x7f823a77def9 [ 74.724730][ T5342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.744354][ T5342] RSP: 002b:00007f823b4ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.752793][ T5342] RAX: ffffffffffffffda RBX: 00007f823a935f80 RCX: 00007f823a77def9 [ 74.760783][ T5342] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 74.768770][ T5342] RBP: 00007f823b4ee090 R08: 0000000000000000 R09: 0000000000000000 [ 74.776760][ T5342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.784751][ T5342] R13: 0000000000000000 R14: 00007f823a935f80 R15: 00007f823aa5fa28 [ 74.792758][ T5342] [ 75.195672][ T4625] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 75.206037][ T4625] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 75.217815][ T4625] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 75.225644][ T4625] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 75.234137][ T5226] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 75.242883][ T5226] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 75.250498][ T5226] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 75.259624][ T5226] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 75.336500][ T5226] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 75.347720][ T5226] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 75.355586][ T5226] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 75.369329][ T5226] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 75.862303][ T5278] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 76.042208][ T5278] usb 5-1: Using ep0 maxpacket: 8 [ 76.053508][ T5278] usb 5-1: too many configurations: 153, using maximum allowed: 8 [ 76.074765][ T5278] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 76.088443][ T5278] usb 5-1: can't read configurations, error -61 [ 76.235251][ T5278] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 76.393008][ T5278] usb 5-1: Using ep0 maxpacket: 8 [ 76.400049][ T5278] usb 5-1: too many configurations: 153, using maximum allowed: 8 [ 76.417424][ T5278] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 76.430087][ T5278] usb 5-1: can't read configurations, error -61 [ 76.438776][ T5278] usb usb5-port1: attempt power cycle [ 76.645189][ T25] cfg80211: failed to load regulatory.db [ 76.793029][ T5278] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 76.827883][ T5278] usb 5-1: Using ep0 maxpacket: 8 [ 76.835779][ T5278] usb 5-1: too many configurations: 153, using maximum allowed: 8 [ 76.851565][ T5278] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 76.869333][ T5278] usb 5-1: can't read configurations, error -61 [ 77.012277][ T5278] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 77.050372][ T5278] usb 5-1: Using ep0 maxpacket: 8 [ 77.058390][ T5278] usb 5-1: too many configurations: 153, using maximum allowed: 8 [ 77.074503][ T5278] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 77.088265][ T5278] usb 5-1: can't read configurations, error -61 [ 77.096577][ T5278] usb usb5-port1: unable to enumerate USB device [ 77.423964][ T5238] Bluetooth: hci6: command tx timeout [ 77.431667][ T5226] Bluetooth: hci5: command tx timeout [ 79.502383][ T5238] Bluetooth: hci6: command tx timeout [ 79.509040][ T5226] Bluetooth: hci5: command tx timeout [ 81.582981][ T5226] Bluetooth: hci5: command tx timeout [ 81.588435][ T5226] Bluetooth: hci6: command tx timeout [ 81.607714][ T5238] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 81.616271][ T5238] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 81.624413][ T5238] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 81.632966][ T5238] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 81.640610][ T5238] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 81.649021][ T5238] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 83.662704][ T5238] Bluetooth: hci6: command tx timeout [ 83.668157][ T5238] Bluetooth: hci5: command tx timeout [ 83.742374][ T5238] Bluetooth: hci7: command tx timeout [ 85.822364][ T5238] Bluetooth: hci7: command tx timeout [ 86.336537][ T5226] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 86.350876][ T5226] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 86.358868][ T5226] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 86.367625][ T5226] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 86.376711][ T5226] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 86.385120][ T5226] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 86.525640][ T5226] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 86.536586][ T5226] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 86.552883][ T5226] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 86.562281][ T5226] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 86.569832][ T5226] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 86.577258][ T5226] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 87.902263][ T5226] Bluetooth: hci7: command tx timeout [ 88.462297][ T5226] Bluetooth: hci8: command tx timeout [ 88.622399][ T5226] Bluetooth: hci9: command tx timeout [ 89.982406][ T5226] Bluetooth: hci7: command tx timeout [ 90.542261][ T5226] Bluetooth: hci8: command tx timeout [ 90.707170][ T5226] Bluetooth: hci9: command tx timeout [ 92.624410][ T5226] Bluetooth: hci8: command tx timeout [ 92.782270][ T5226] Bluetooth: hci9: command tx timeout [ 94.702391][ T5226] Bluetooth: hci8: command tx timeout [ 94.862363][ T5226] Bluetooth: hci9: command tx timeout [ 132.949574][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.955978][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.347758][ T5238] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 138.356139][ T5238] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 138.364206][ T5238] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 138.372818][ T5238] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 138.383454][ T5238] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 138.390889][ T5238] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 138.701899][ T5226] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 138.711309][ T5226] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 138.720842][ T5226] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 138.729309][ T5226] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 138.762469][ T5226] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 138.770758][ T5226] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 140.467708][ T5238] Bluetooth: hci10: command tx timeout [ 140.862297][ T5238] Bluetooth: hci11: command tx timeout [ 142.083009][ T5226] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 142.092871][ T5226] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 142.102336][ T5226] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 142.119299][ T5226] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 142.128354][ T5226] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 142.136337][ T5226] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 142.542256][ T5226] Bluetooth: hci10: command tx timeout [ 142.942308][ T5226] Bluetooth: hci11: command tx timeout [ 144.222290][ T5226] Bluetooth: hci12: command tx timeout [ 144.627675][ T5226] Bluetooth: hci10: command tx timeout [ 145.022213][ T5226] Bluetooth: hci11: command tx timeout [ 146.302222][ T5226] Bluetooth: hci12: command tx timeout [ 146.703157][ T5226] Bluetooth: hci10: command tx timeout [ 146.871674][ T5238] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 146.880409][ T5238] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 146.888512][ T5238] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 146.896632][ T5238] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 146.906258][ T5238] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 146.915323][ T5238] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 147.030232][ T5238] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 147.039095][ T5238] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 147.047212][ T5238] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 147.057166][ T5238] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 147.065620][ T5238] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 147.082609][ T5238] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 147.107308][ T5226] Bluetooth: hci11: command tx timeout [ 148.382303][ T5226] Bluetooth: hci12: command tx timeout [ 148.944031][ T5226] Bluetooth: hci13: command tx timeout [ 149.182258][ T5226] Bluetooth: hci14: command tx timeout [ 150.462204][ T5226] Bluetooth: hci12: command tx timeout [ 151.022348][ T5226] Bluetooth: hci13: command tx timeout [ 151.262208][ T5226] Bluetooth: hci14: command tx timeout [ 153.102269][ T5226] Bluetooth: hci13: command tx timeout [ 153.342259][ T5226] Bluetooth: hci14: command tx timeout [ 155.182316][ T5226] Bluetooth: hci13: command tx timeout [ 155.422178][ T5226] Bluetooth: hci14: command tx timeout [ 181.121811][ T54] Bluetooth: hci0: command 0x0406 tx timeout [ 181.127929][ T5237] Bluetooth: hci4: command 0x0406 tx timeout [ 181.138447][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 181.144628][ T5237] Bluetooth: hci3: command 0x0406 tx timeout [ 181.150656][ T5237] Bluetooth: hci2: command 0x0406 tx timeout [ 194.391403][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.397813][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.597334][ T5237] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 197.608299][ T5237] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 197.618592][ T5237] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 197.635109][ T5237] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 197.643003][ T5237] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 197.650382][ T5237] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 197.981579][ T54] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 197.992650][ T54] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 198.001803][ T54] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 198.013465][ T54] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 198.021645][ T54] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 198.031741][ T54] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 201.663853][ T5232] Bluetooth: hci6: command 0x0406 tx timeout [ 201.669917][ T5232] Bluetooth: hci5: command 0x0406 tx timeout [ 202.128645][ T5416] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 202.138739][ T5416] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 202.148290][ T5416] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 202.156335][ T5416] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 202.169540][ T5416] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 202.180265][ T5416] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 206.717067][ T5232] Bluetooth: hci7: command 0x0406 tx timeout [ 207.580347][ T5422] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 207.593993][ T5422] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 207.602245][ T5422] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 207.612264][ T5422] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 207.619963][ T5422] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 207.628304][ T5422] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 207.832142][ T5430] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 207.852415][ T5430] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 207.860772][ T5430] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 207.869037][ T5430] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 207.878017][ T5430] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3 [ 207.885654][ T5430] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 211.909599][ T5433] Bluetooth: hci8: command 0x0406 tx timeout [ 211.915787][ T5433] Bluetooth: hci9: command 0x0406 tx timeout [ 235.982414][ T30] INFO: task kworker/1:0:25 blocked for more than 143 seconds. [ 235.991054][ T30] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 236.037507][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 236.067538][ T30] task:kworker/1:0 state:D stack:23376 pid:25 tgid:25 ppid:2 flags:0x00004000 [ 236.110030][ T30] Workqueue: events request_firmware_work_func [ 236.206271][ T30] Call Trace: [ 236.209608][ T30] [ 236.257654][ T30] __schedule+0x1895/0x4b30 [ 236.292191][ T30] ? __pfx___schedule+0x10/0x10 [ 236.297956][ T30] ? __pfx_lock_release+0x10/0x10 [ 236.334658][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 236.340181][ T30] ? kthread_data+0x52/0xd0 [ 236.402723][ T30] ? schedule+0x90/0x320 [ 236.407030][ T30] ? wq_worker_sleeping+0x66/0x240 [ 236.462026][ T30] ? schedule+0x90/0x320 [ 236.466331][ T30] schedule+0x14b/0x320 [ 236.470509][ T30] schedule_preempt_disabled+0x13/0x30 [ 236.531463][ T30] __mutex_lock+0x6a7/0xd70 [ 236.557246][ T30] ? __mutex_lock+0x52a/0xd70 [ 236.581831][ T30] ? regdb_fw_cb+0x82/0x1c0 [ 236.590722][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 236.626785][ T30] ? __pfx_regdb_fw_cb+0x10/0x10 [ 236.631777][ T30] regdb_fw_cb+0x82/0x1c0 [ 236.680365][ T30] ? __pfx_regdb_fw_cb+0x10/0x10 [ 236.691307][ T30] request_firmware_work_func+0x1a4/0x280 [ 236.738212][ T30] ? __pfx_request_firmware_work_func+0x10/0x10 [ 236.744777][ T30] ? process_scheduled_works+0x976/0x1850 [ 236.750537][ T30] process_scheduled_works+0xa63/0x1850 [ 236.802707][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 236.823551][ T30] ? assign_work+0x364/0x3d0 [ 236.828201][ T30] worker_thread+0x870/0xd30 [ 236.867204][ T30] ? __kthread_parkme+0x169/0x1d0 [ 236.899206][ T30] ? __pfx_worker_thread+0x10/0x10 [ 236.917404][ T30] kthread+0x2f0/0x390 [ 236.921524][ T30] ? __pfx_worker_thread+0x10/0x10 [ 236.960019][ T30] ? __pfx_kthread+0x10/0x10 [ 236.972100][ T30] ret_from_fork+0x4b/0x80 [ 236.976565][ T30] ? __pfx_kthread+0x10/0x10 [ 236.981172][ T30] ret_from_fork_asm+0x1a/0x30 [ 237.031206][ T30] [ 237.036282][ T30] INFO: task syz-executor:5350 blocked for more than 144 seconds. [ 237.072222][ T30] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 237.079549][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 237.138738][ T30] task:syz-executor state:D stack:21728 pid:5350 tgid:5350 ppid:1 flags:0x00004004 [ 237.171445][ T30] Call Trace: [ 237.182249][ T30] [ 237.185232][ T30] __schedule+0x1895/0x4b30 [ 237.189872][ T30] ? __pfx___schedule+0x10/0x10 [ 237.218237][ T30] ? __pfx_lock_release+0x10/0x10 [ 237.236936][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 237.246456][ T30] ? schedule+0x90/0x320 [ 237.250735][ T30] schedule+0x14b/0x320 [ 237.274662][ T30] schedule_preempt_disabled+0x13/0x30 [ 237.280160][ T30] __mutex_lock+0x6a7/0xd70 [ 237.299141][ T30] ? __mutex_lock+0x52a/0xd70 [ 237.311208][ T30] ? rtnl_newlink+0xab7/0x20a0 [ 237.328183][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 237.337239][ T30] ? __asan_memset+0x23/0x50 [ 237.352696][ T30] ? nla_strscpy+0x113/0x180 [ 237.357327][ T30] rtnl_newlink+0xab7/0x20a0 [ 237.361942][ T30] ? rtnl_newlink+0x4b1/0x20a0 [ 237.378568][ T30] ? rtnl_newlink+0x4b1/0x20a0 [ 237.391031][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 237.407542][ T30] ? __pfx___mutex_trylock_common+0x10/0x10 [ 237.419890][ T30] ? __pfx_lock_release+0x10/0x10 [ 237.442068][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 237.447132][ T30] rtnetlink_rcv_msg+0x73f/0xcf0 [ 237.466862][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 237.483046][ T30] ? __lock_acquire+0x1384/0x2050 [ 237.488110][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 237.516506][ T30] netlink_rcv_skb+0x1e3/0x430 [ 237.521314][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 237.541854][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 237.558915][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 237.570055][ T30] netlink_unicast+0x7f6/0x990 [ 237.586101][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 237.591418][ T30] ? __virt_addr_valid+0x183/0x530 [ 237.633670][ T30] ? __check_object_size+0x48e/0x900 [ 237.639022][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 237.668517][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.679622][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 237.695549][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.700875][ T30] __sock_sendmsg+0x221/0x270 [ 237.722538][ T30] __sys_sendto+0x398/0x4f0 [ 237.727098][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 237.753520][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 237.758765][ T30] ? blkcg_maybe_throttle_current+0x1ab/0xb80 [ 237.787498][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 237.802039][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 237.808422][ T30] __x64_sys_sendto+0xde/0x100 [ 237.834728][ T30] do_syscall_64+0xf3/0x230 [ 237.839299][ T30] ? clear_bhb_loop+0x35/0x90 [ 237.859147][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.880224][ T30] RIP: 0033:0x7fd687d7fd8c [ 237.891356][ T30] RSP: 002b:00007fd68805f6b0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 237.916186][ T30] RAX: ffffffffffffffda RBX: 00007fd688a64620 RCX: 00007fd687d7fd8c [ 237.942195][ T30] RDX: 000000000000003c RSI: 00007fd688a64670 RDI: 0000000000000003 [ 237.950212][ T30] RBP: 0000000000000000 R08: 00007fd68805f704 R09: 000000000000000c [ 237.981054][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 238.002142][ T30] R13: 0000000000000000 R14: 00007fd688a64670 R15: 0000000000000000 [ 238.010171][ T30] [ 238.032231][ T30] INFO: task syz.3.26:5358 blocked for more than 145 seconds. [ 238.055635][ T30] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 238.087556][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 238.102131][ T30] task:syz.3.26 state:D stack:25680 pid:5358 tgid:5358 ppid:5243 flags:0x00000004 [ 238.127064][ T30] Call Trace: [ 238.130382][ T30] [ 238.152132][ T30] __schedule+0x1895/0x4b30 [ 238.156706][ T30] ? __pfx___schedule+0x10/0x10 [ 238.166458][ T30] ? __pfx_lock_release+0x10/0x10 [ 238.171537][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 238.192140][ T30] ? schedule+0x90/0x320 [ 238.196435][ T30] schedule+0x14b/0x320 [ 238.200616][ T30] schedule_preempt_disabled+0x13/0x30 [ 238.232661][ T30] __mutex_lock+0x6a7/0xd70 [ 238.237229][ T30] ? __mutex_lock+0x52a/0xd70 [ 238.258656][ T30] ? ip_mc_drop_socket+0x81/0x280 [ 238.272178][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 238.277260][ T30] ip_mc_drop_socket+0x81/0x280 [ 238.297526][ T30] inet_release+0x96/0x200 [ 238.312069][ T30] sock_close+0xbc/0x240 [ 238.316350][ T30] ? __pfx_sock_close+0x10/0x10 [ 238.321222][ T30] __fput+0x23f/0x880 [ 238.344305][ T30] task_work_run+0x24f/0x310 [ 238.348950][ T30] ? __pfx_task_work_run+0x10/0x10 [ 238.377598][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 238.389461][ T30] syscall_exit_to_user_mode+0x168/0x370 [ 238.406515][ T30] do_syscall_64+0x100/0x230 [ 238.411146][ T30] ? clear_bhb_loop+0x35/0x90 [ 238.432066][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.437995][ T30] RIP: 0033:0x7f823a77def9 [ 238.461086][ T30] RSP: 002b:00007f823aa5fb88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 238.486083][ T30] RAX: 0000000000000000 RBX: 00007f823a937a80 RCX: 00007f823a77def9 [ 238.506727][ T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 238.530505][ T30] RBP: 00007f823a937a80 R08: 0000000000000006 R09: 00007f823aa5fe7f [ 238.539266][ T30] R10: 000000000003fc60 R11: 0000000000000246 R12: 0000000000012ae0 [ 238.552130][ T30] R13: 00007f823aa5fc90 R14: 0000000000000032 R15: ffffffffffffffff [ 238.560151][ T30] [ 238.570271][ T30] INFO: task syz-executor:5366 blocked for more than 145 seconds. [ 238.579974][ T30] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 238.593938][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 238.606248][ T30] task:syz-executor state:D stack:25104 pid:5366 tgid:5366 ppid:1 flags:0x00004004 [ 238.619124][ T30] Call Trace: [ 238.627741][ T30] [ 238.630702][ T30] __schedule+0x1895/0x4b30 [ 238.637930][ T30] ? __pfx___schedule+0x10/0x10 [ 238.646465][ T30] ? __pfx_lock_release+0x10/0x10 [ 238.655450][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 238.660947][ T30] ? schedule+0x90/0x320 [ 238.668930][ T30] schedule+0x14b/0x320 [ 238.678659][ T30] schedule_preempt_disabled+0x13/0x30 [ 238.686686][ T30] __mutex_lock+0x6a7/0xd70 [ 238.691232][ T30] ? __mutex_lock+0x52a/0xd70 [ 238.699978][ T30] ? register_nexthop_notifier+0x84/0x290 [ 238.709986][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 238.719554][ T30] ? __asan_memset+0x23/0x50 [ 238.726679][ T30] register_nexthop_notifier+0x84/0x290 [ 238.735853][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 238.741690][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 238.750515][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 238.761589][ T30] ? __asan_memset+0x23/0x50 [ 238.770041][ T30] ops_init+0x31e/0x590 [ 238.778379][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 238.787888][ T30] setup_net+0x287/0x9e0 [ 238.795837][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 238.801425][ T30] ? __pfx_setup_net+0x10/0x10 [ 238.809214][ T30] copy_net_ns+0x33f/0x570 [ 238.817335][ T30] create_new_namespaces+0x425/0x7b0 [ 238.827350][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 238.836961][ T30] ksys_unshare+0x619/0xc10 [ 238.841507][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 238.849224][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 238.860152][ T30] ? do_syscall_64+0x100/0x230 [ 238.871319][ T30] __x64_sys_unshare+0x38/0x40 [ 238.880184][ T30] do_syscall_64+0xf3/0x230 [ 238.887272][ T30] ? clear_bhb_loop+0x35/0x90 [ 238.896145][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.904632][ T30] RIP: 0033:0x7fb69e17f6f7 [ 238.909076][ T30] RSP: 002b:00007fb69e45ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 238.923650][ T30] RAX: ffffffffffffffda RBX: 00007fb69e1f22ec RCX: 00007fb69e17f6f7 [ 238.931659][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 238.943424][ T30] RBP: 0000000000000000 R08: 00007fb69ee67d60 R09: 0000000000000000 [ 238.951454][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 238.970254][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 238.978603][ T30] [ 238.981706][ T30] INFO: task syz-executor:5370 blocked for more than 146 seconds. [ 239.000353][ T30] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 239.009658][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 239.028008][ T30] task:syz-executor state:D stack:25504 pid:5370 tgid:5370 ppid:1 flags:0x00004006 [ 239.041936][ T30] Call Trace: [ 239.047854][ T30] [ 239.050815][ T30] __schedule+0x1895/0x4b30 [ 239.059141][ T30] ? __pfx___schedule+0x10/0x10 [ 239.069002][ T30] ? __pfx_lock_release+0x10/0x10 [ 239.079720][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 239.088279][ T30] ? schedule+0x90/0x320 [ 239.096121][ T30] schedule+0x14b/0x320 [ 239.100314][ T30] schedule_preempt_disabled+0x13/0x30 [ 239.109930][ T30] __mutex_lock+0x6a7/0xd70 [ 239.119857][ T30] ? __mutex_lock+0x52a/0xd70 [ 239.127098][ T30] ? register_nexthop_notifier+0x84/0x290 [ 239.136933][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 239.144500][ T30] ? __asan_memset+0x23/0x50 [ 239.149131][ T30] register_nexthop_notifier+0x84/0x290 [ 239.158510][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 239.169577][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 239.179557][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 239.189434][ T30] ? __asan_memset+0x23/0x50 [ 239.198281][ T30] ops_init+0x31e/0x590 [ 239.205073][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 239.210499][ T30] setup_net+0x287/0x9e0 [ 239.220072][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 239.228860][ T30] ? __pfx_setup_net+0x10/0x10 [ 239.237215][ T30] copy_net_ns+0x33f/0x570 [ 239.241670][ T30] create_new_namespaces+0x425/0x7b0 [ 239.249842][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 239.259485][ T30] ksys_unshare+0x619/0xc10 [ 239.273898][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 239.278972][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 239.293389][ T30] ? do_syscall_64+0x100/0x230 [ 239.298209][ T30] __x64_sys_unshare+0x38/0x40 [ 239.306782][ T30] do_syscall_64+0xf3/0x230 [ 239.311324][ T30] ? clear_bhb_loop+0x35/0x90 [ 239.319888][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.329513][ T30] RIP: 0033:0x7f908017f6f7 [ 239.337131][ T30] RSP: 002b:00007f908045ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 239.349707][ T30] RAX: ffffffffffffffda RBX: 00007f90801f22ec RCX: 00007f908017f6f7 [ 239.360262][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 239.374759][ T30] RBP: 0000000000000000 R08: 00007f9080e67d60 R09: 0000000000000000 [ 239.386449][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 239.397474][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 239.409553][ T30] [ 239.415188][ T30] INFO: task syz-executor:5376 blocked for more than 146 seconds. [ 239.427727][ T30] Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 239.437651][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 239.450780][ T30] task:syz-executor state:D stack:26496 pid:5376 tgid:5376 ppid:1 flags:0x00004004 [ 239.463646][ T30] Call Trace: [ 239.466956][ T30] [ 239.471351][ T30] __schedule+0x1895/0x4b30 [ 239.481323][ T30] ? __pfx___schedule+0x10/0x10 [ 239.491334][ T30] ? __pfx_lock_release+0x10/0x10 [ 239.500674][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 239.521355][ T30] ? schedule+0x90/0x320 [ 239.528165][ T30] schedule+0x14b/0x320 [ 239.536097][ T30] schedule_preempt_disabled+0x13/0x30 [ 239.541603][ T30] __mutex_lock+0x6a7/0xd70 [ 239.548895][ T30] ? __mutex_lock+0x52a/0xd70 [ 239.558019][ T30] ? register_nexthop_notifier+0x84/0x290 [ 239.566400][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 239.571474][ T30] ? __asan_memset+0x23/0x50 [ 239.588600][ T30] register_nexthop_notifier+0x84/0x290 [ 239.597994][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 239.607471][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 239.616294][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 239.627703][ T30] ? __asan_memset+0x23/0x50 [ 239.634853][ T30] ops_init+0x31e/0x590 [ 239.639052][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 239.648296][ T30] setup_net+0x287/0x9e0 [ 239.655240][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 239.660857][ T30] ? __pfx_setup_net+0x10/0x10 [ 239.670434][ T30] copy_net_ns+0x33f/0x570 [ 239.680424][ T30] create_new_namespaces+0x425/0x7b0 [ 239.689580][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 239.698536][ T30] ksys_unshare+0x619/0xc10 [ 239.707255][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 239.715025][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 239.721060][ T30] ? do_syscall_64+0x100/0x230 [ 239.730984][ T30] __x64_sys_unshare+0x38/0x40 [ 239.738395][ T30] do_syscall_64+0xf3/0x230 [ 239.748500][ T30] ? clear_bhb_loop+0x35/0x90 [ 239.755835][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.761772][ T30] RIP: 0033:0x7f339bf7f6f7 [ 239.771267][ T30] RSP: 002b:00007f339c25ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 239.787599][ T30] RAX: ffffffffffffffda RBX: 00007f339bff22ec RCX: 00007f339bf7f6f7 [ 239.796631][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 239.811601][ T30] RBP: 0000000000000000 R08: 00007f339cc67d60 R09: 0000000000000000 [ 239.820409][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 239.835312][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 239.846013][ T30] [ 239.849148][ T30] [ 239.849148][ T30] Showing all locks held in the system: [ 239.861877][ T30] 3 locks held by kworker/0:0/8: [ 239.869450][ T30] 3 locks held by kworker/1:0/25: [ 239.878171][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 239.897208][ T30] #1: ffffc900001f7d00 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 239.915610][ T30] #2: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: regdb_fw_cb+0x82/0x1c0 [ 239.930887][ T30] 1 lock held by khungtaskd/30: [ 239.936159][ T30] #0: ffffffff8e937ee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 239.954257][ T30] 3 locks held by kworker/1:1/46: [ 239.959317][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 239.977805][ T30] #1: ffffc90000b67d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 239.999100][ T30] #2: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 240.010887][ T30] 5 locks held by kworker/u9:0/54: [ 240.021840][ T30] #0: ffff88807b7ae148 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 240.034312][ T30] #1: ffffc90000bf7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 240.052895][ T30] #2: ffff88807c734d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 240.070591][ T30] #3: ffff88807c734078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 240.080676][ T30] #4: ffffffff8fe384a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 240.098243][ T30] 3 locks held by kworker/u8:8/2975: [ 240.106073][ T30] #0: ffff88802e2a7948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 240.123663][ T30] #1: ffffc90009ed7d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 240.142944][ T30] #2: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 240.159954][ T30] 5 locks held by kworker/u9:1/4625: [ 240.165594][ T30] #0: ffff888140ad3948 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 240.182375][ T30] #1: ffffc9000d92fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 240.204205][ T30] #2: ffff888028c94d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 240.220026][ T30] #3: ffff888028c94078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 240.237904][ T30] #4: ffffffff8e93d478 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 240.250309][ T30] 2 locks held by getty/4979: [ 240.259695][ T30] #0: ffff88802ed8f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 240.271362][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 240.287791][ T30] 5 locks held by kworker/u9:2/5226: [ 240.295927][ T30] #0: ffff88802fc2a148 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 240.313349][ T30] #1: ffffc90003a6fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 240.335154][ T30] #2: ffff888029468d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 240.349779][ T30] #3: ffff888029468078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 240.360983][ T30] #4: ffffffff8fe384a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 240.378496][ T30] 5 locks held by kworker/u9:3/5228: [ 240.384513][ T30] #0: ffff888028e51948 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 240.402684][ T30] #1: ffffc90003c47d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 240.421718][ T30] #2: ffff888028d5cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 240.433083][ T30] #3: ffff888028d5c078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 240.448190][ T30] #4: ffffffff8fe384a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 240.460576][ T30] 4 locks held by kworker/u9:4/5232: [ 240.470664][ T30] #0: ffff8880993b1148 ((wq_completion)hci18#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 240.483344][ T30] #1: ffffc90003c77d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 240.503957][ T30] #2: ffff888056284078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0 [ 240.519286][ T30] #3: ffffffff8fe384a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0 [ 240.531263][ T30] 5 locks held by kworker/u9:5/5233: [ 240.541529][ T30] #0: ffff88814377a948 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 240.567999][ T30] #1: ffffc90003c87d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 240.581022][ T30] #2: ffff888079298d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 240.598450][ T30] #3: ffff888079298078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 240.611466][ T30] #4: ffffffff8fe384a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 240.627595][ T30] 4 locks held by kworker/u9:6/5237: [ 240.633342][ T30] #0: ffff88809c3b7948 ((wq_completion)hci15#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 240.651506][ T30] #1: ffffc90003cc7d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 240.670002][ T30] #2: ffff88803b83c078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0 [ 240.680266][ T30] #3: ffffffff8fe384a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0 [ 240.697887][ T30] 5 locks held by kworker/u9:7/5238: [ 240.705145][ T30] #0: ffff88802fc2e148 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 240.722458][ T30] #1: ffffc90003cd7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 240.741751][ T30] #2: ffff888028d58d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 240.752121][ T30] #3: ffff888028d58078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 240.761846][ T30] #4: ffffffff8fe384a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 240.779347][ T30] 5 locks held by kworker/u9:8/5239: [ 240.787457][ T30] #0: ffff88805795e948 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 240.804685][ T30] #1: ffffc90003ce7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 240.825306][ T30] #2: ffff8880318dcd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 240.839363][ T30] #3: ffff8880318dc078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 240.851605][ T30] #4: ffffffff8fe384a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 240.867182][ T30] 4 locks held by kworker/u9:9/5240: [ 240.875988][ T30] #0: ffff8880511e9948 ((wq_completion)hci16#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 240.890674][ T30] #1: ffffc90003cf7d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 240.910544][ T30] #2: ffff88803c334078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0 [ 240.922087][ T30] #3: ffffffff8fe384a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0 [ 240.938964][ T30] 2 locks held by kworker/1:7/5281: [ 240.947152][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 240.965046][ T30] #1: ffffc90003fc7d00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 240.979091][ T30] 1 lock held by syz.1.2/5295: [ 240.986556][ T30] 2 locks held by syz.0.19/5339: [ 240.991529][ T30] #0: ffff88807f71b208 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 241.007049][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: ipv6_sock_mc_close+0xc9/0x140 [ 241.020792][ T30] 1 lock held by syz-executor/5350: [ 241.029928][ T30] #0: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_newlink+0xab7/0x20a0 [ 241.045245][ T30] 2 locks held by syz-executor/5351: [ 241.050559][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 241.067668][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 241.077407][ T30] 2 locks held by syz.3.26/5358: [ 241.088202][ T30] #0: ffff888023515008 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 241.099580][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_mc_drop_socket+0x81/0x280 [ 241.122681][ T30] 1 lock held by syz.3.26/5359: [ 241.128125][ T30] #0: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 241.144281][ T30] 2 locks held by syz-executor/5366: [ 241.149595][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 241.162920][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 241.178271][ T30] 2 locks held by syz-executor/5370: [ 241.187024][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 241.201341][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 241.218682][ T30] 2 locks held by syz-executor/5376: [ 241.224303][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 241.244171][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 241.260389][ T30] 1 lock held by dhcpcd/5377: [ 241.265720][ T30] #0: ffff88807f6cca08 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 241.281865][ T30] 1 lock held by dhcpcd/5378: [ 241.288336][ T30] #0: ffff88807f6cc408 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 241.304982][ T30] 1 lock held by dhcpcd/5379: [ 241.309682][ T30] #0: ffff88807f714a08 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 241.330315][ T30] 1 lock held by dhcpcd/5380: [ 241.335458][ T30] #0: ffff88807f717a08 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 241.352424][ T30] 1 lock held by dhcpcd/5381: [ 241.357127][ T30] #0: ffff888076fefa08 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 241.374322][ T30] 1 lock held by dhcpcd/5382: [ 241.379030][ T30] #0: ffff888076fed008 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 241.395193][ T30] 2 locks held by syz-executor/5386: [ 241.400503][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 241.418103][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 241.430880][ T30] 2 locks held by syz-executor/5392: [ 241.441462][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 241.452876][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 241.469797][ T30] 2 locks held by syz-executor/5397: [ 241.476610][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 241.490820][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 241.507003][ T30] 2 locks held by syz-executor/5403: [ 241.512721][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 241.530955][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 241.541955][ T30] 2 locks held by syz-executor/5405: [ 241.553207][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 241.568985][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 241.581093][ T30] 2 locks held by syz-executor/5411: [ 241.597959][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 241.618509][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 241.630377][ T30] 2 locks held by syz-executor/5414: [ 241.642901][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 241.658788][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 241.670440][ T30] 4 locks held by kworker/u9:10/5415: [ 241.680751][ T30] #0: ffff888056e19148 ((wq_completion)hci17#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 241.698830][ T30] #1: ffffc900042d7d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 241.713301][ T30] #2: ffff8880816bc078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0 [ 241.730912][ T30] #3: ffffffff8fe384a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0 [ 241.741762][ T30] 5 locks held by kworker/u9:11/5416: [ 241.754228][ T30] #0: ffff88805836d148 ((wq_completion)hci7){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 241.770617][ T30] #1: ffffc90003aafd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 241.789216][ T30] #2: ffff88802e4dcd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 241.799507][ T30] #3: ffff88802e4dc078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 241.818064][ T30] #4: ffffffff8fe384a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 241.831556][ T30] 2 locks held by syz-executor/5421: [ 241.842359][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 241.860311][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 241.870754][ T30] 4 locks held by kworker/u9:12/5422: [ 241.882191][ T30] #0: ffff888067bc3948 ((wq_completion)hci19#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 241.899402][ T30] #1: ffffc90004207d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 241.920135][ T30] #2: ffff888093880078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0 [ 241.937605][ T30] #3: ffffffff8fe384a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0 [ 241.950423][ T30] 5 locks held by kworker/u9:13/5426: [ 241.961900][ T30] #0: ffff888061fa6948 ((wq_completion)hci8){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 241.979262][ T30] #1: ffffc900041e7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 242.000590][ T30] #2: ffff88801e3bcd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 242.017726][ T30] #3: ffff88801e3bc078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 242.028412][ T30] #4: ffffffff8fe384a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 242.045647][ T30] 2 locks held by syz-executor/5429: [ 242.050967][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 242.070375][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 242.081319][ T30] 5 locks held by kworker/u9:14/5430: [ 242.094469][ T30] #0: ffff888059e0a148 ((wq_completion)hci9){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 242.111321][ T30] #1: ffffc90004187d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 242.130112][ T30] #2: ffff88805f164d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 242.153771][ T30] #3: ffff88805f164078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 242.169823][ T30] #4: ffffffff8fe384a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 242.180052][ T30] 2 locks held by syz-executor/5432: [ 242.193039][ T30] #0: ffffffff8fcbf1d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 242.208420][ T30] #1: ffffffff8fccbcc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 242.218925][ T30] [ 242.221273][ T30] ============================================= [ 242.221273][ T30] [ 242.232079][ T30] NMI backtrace for cpu 1 [ 242.236440][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 242.246615][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 242.256686][ T30] Call Trace: [ 242.259978][ T30] [ 242.262922][ T30] dump_stack_lvl+0x241/0x360 [ 242.267626][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 242.272843][ T30] ? __pfx__printk+0x10/0x10 [ 242.277462][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 242.282434][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 242.287915][ T30] ? _printk+0xd5/0x120 [ 242.292091][ T30] ? __pfx__printk+0x10/0x10 [ 242.296701][ T30] ? __wake_up_klogd+0xcc/0x110 [ 242.301568][ T30] ? __pfx__printk+0x10/0x10 [ 242.306178][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 242.311230][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 242.317235][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 242.323248][ T30] watchdog+0xff4/0x1040 [ 242.327514][ T30] ? watchdog+0x1ea/0x1040 [ 242.331952][ T30] ? __pfx_watchdog+0x10/0x10 [ 242.336645][ T30] kthread+0x2f0/0x390 [ 242.340727][ T30] ? __pfx_watchdog+0x10/0x10 [ 242.345422][ T30] ? __pfx_kthread+0x10/0x10 [ 242.350027][ T30] ret_from_fork+0x4b/0x80 [ 242.354465][ T30] ? __pfx_kthread+0x10/0x10 [ 242.359085][ T30] ret_from_fork_asm+0x1a/0x30 [ 242.363882][ T30] [ 242.367689][ T30] Sending NMI from CPU 1 to CPUs 0: [ 242.373437][ C0] NMI backtrace for cpu 0 [ 242.373449][ C0] CPU: 0 UID: 0 PID: 8 Comm: kworker/0:0 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 242.373468][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 242.373479][ C0] Workqueue: events nsim_dev_trap_report_work [ 242.373503][ C0] RIP: 0010:__alloc_skb+0xc2/0x440 [ 242.373524][ C0] Code: 00 00 44 89 7c 24 60 48 8d 7c 24 70 48 89 f8 48 c1 e8 03 48 89 44 24 38 42 0f b6 04 28 84 c0 0f 85 c0 02 00 00 c6 44 24 70 00 <41> 89 dc 41 83 e4 01 31 ff 44 89 e6 e8 ed d6 0d f8 48 c7 c0 e0 4c [ 242.373542][ C0] RSP: 0018:ffffc90000006f80 EFLAGS: 00000297 [ 242.373556][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000006f00 [ 242.373566][ C0] RDX: 0000000000000100 RSI: 0000000000000820 RDI: ffffc90000006ff0 [ 242.373577][ C0] RBP: ffffc90000007050 R08: ffffffff89e486f4 R09: 1ffffffff2039055 [ 242.373588][ C0] R10: dffffc0000000000 R11: fffffbfff2039056 R12: 1ffff92000000dfc [ 242.373600][ C0] R13: dffffc0000000000 R14: 0000000000000820 R15: 0000000000000168 [ 242.373612][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 242.373625][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 242.373637][ C0] CR2: 00007fcd43a94d58 CR3: 000000000e734000 CR4: 00000000003506f0 [ 242.373650][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 242.373660][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 242.373670][ C0] Call Trace: [ 242.373675][ C0] [ 242.373682][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 242.373704][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 242.373725][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 242.373745][ C0] ? nmi_handle+0x2a/0x5a0 [ 242.373766][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 242.373785][ C0] ? nmi_handle+0x14f/0x5a0 [ 242.373799][ C0] ? nmi_handle+0x2a/0x5a0 [ 242.373815][ C0] ? __alloc_skb+0xc2/0x440 [ 242.373832][ C0] ? default_do_nmi+0x63/0x160 [ 242.373847][ C0] ? exc_nmi+0x123/0x1f0 [ 242.373861][ C0] ? end_repeat_nmi+0xf/0x53 [ 242.373881][ C0] ? synproxy_send_client_synack+0x194/0xf30 [ 242.373899][ C0] ? __alloc_skb+0xc2/0x440 [ 242.373917][ C0] ? __alloc_skb+0xc2/0x440 [ 242.373935][ C0] ? __alloc_skb+0xc2/0x440 [ 242.373952][ C0] [ 242.373957][ C0] [ 242.373966][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 242.373988][ C0] synproxy_send_client_synack+0x1ba/0xf30 [ 242.374006][ C0] ? kasan_quarantine_put+0xdc/0x230 [ 242.374027][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 242.374045][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 242.374063][ C0] ? synproxy_pernet+0x45/0x270 [ 242.374082][ C0] nft_synproxy_eval_v4+0x3ca/0x610 [ 242.374101][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 242.374119][ C0] ? nf_ip_checksum+0x13a/0x500 [ 242.374138][ C0] nft_synproxy_do_eval+0x362/0xa60 [ 242.374158][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 242.374178][ C0] ? __pfx_validate_chain+0x10/0x10 [ 242.374198][ C0] nft_do_chain+0x4ad/0x1da0 [ 242.374222][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 242.374237][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 242.374272][ C0] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 242.374293][ C0] nft_do_chain_inet+0x418/0x6b0 [ 242.374311][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 242.374327][ C0] ? ipt_do_table+0x312/0x1860 [ 242.374351][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 242.374366][ C0] nf_hook_slow+0xc3/0x220 [ 242.374382][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 242.374402][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 242.374421][ C0] NF_HOOK+0x29e/0x450 [ 242.374442][ C0] ? NF_HOOK+0x9a/0x450 [ 242.374460][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 242.374480][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 242.374502][ C0] ? ip_rcv_finish+0x406/0x560 [ 242.374522][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 242.374541][ C0] NF_HOOK+0x3a4/0x450 [ 242.374559][ C0] ? __lock_acquire+0x1384/0x2050 [ 242.374579][ C0] ? NF_HOOK+0x9a/0x450 [ 242.374597][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 242.374615][ C0] ? ip_rcv_core+0x801/0xd10 [ 242.374634][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 242.374657][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 242.374676][ C0] __netif_receive_skb+0x2bf/0x650 [ 242.374692][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 242.374710][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 242.374724][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 242.374743][ C0] ? __pfx_lock_release+0x10/0x10 [ 242.374762][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 242.374784][ C0] process_backlog+0x662/0x15b0 [ 242.374801][ C0] ? process_backlog+0x33b/0x15b0 [ 242.374820][ C0] ? __pfx_process_backlog+0x10/0x10 [ 242.374835][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 242.374855][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 242.374876][ C0] __napi_poll+0xcb/0x490 [ 242.374892][ C0] net_rx_action+0x89b/0x1240 [ 242.374916][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 242.374933][ C0] ? sched_clock+0x4a/0x70 [ 242.374956][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 242.374980][ C0] handle_softirqs+0x2c5/0x980 [ 242.375000][ C0] ? do_softirq+0x11b/0x1e0 [ 242.375018][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 242.375039][ C0] do_softirq+0x11b/0x1e0 [ 242.375056][ C0] [ 242.375061][ C0] [ 242.375066][ C0] ? __pfx_do_softirq+0x10/0x10 [ 242.375084][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 242.375105][ C0] ? rcu_is_watching+0x15/0xb0 [ 242.375121][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 242.375139][ C0] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 242.375158][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 242.375176][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 242.375194][ C0] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 242.375215][ C0] nsim_dev_trap_report_work+0x75d/0xaa0 [ 242.375240][ C0] ? process_scheduled_works+0x976/0x1850 [ 242.375263][ C0] process_scheduled_works+0xa63/0x1850 [ 242.375292][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 242.375314][ C0] ? assign_work+0x364/0x3d0 [ 242.375334][ C0] worker_thread+0x870/0xd30 [ 242.375358][ C0] ? __kthread_parkme+0x169/0x1d0 [ 242.375378][ C0] ? __pfx_worker_thread+0x10/0x10 [ 242.375396][ C0] kthread+0x2f0/0x390 [ 242.375410][ C0] ? __pfx_worker_thread+0x10/0x10 [ 242.375428][ C0] ? __pfx_kthread+0x10/0x10 [ 242.375442][ C0] ret_from_fork+0x4b/0x80 [ 242.375460][ C0] ? __pfx_kthread+0x10/0x10 [ 242.375474][ C0] ret_from_fork_asm+0x1a/0x30 [ 242.375500][ C0] [ 243.064745][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 243.071646][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 243.081990][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 243.092063][ T30] Call Trace: [ 243.095356][ T30] [ 243.098295][ T30] dump_stack_lvl+0x241/0x360 [ 243.102992][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 243.108208][ T30] ? __pfx__printk+0x10/0x10 [ 243.112815][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 243.118819][ T30] ? vscnprintf+0x5d/0x90 [ 243.123258][ T30] panic+0x349/0x880 [ 243.127166][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 243.133340][ T30] ? __pfx_panic+0x10/0x10 [ 243.137776][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 243.143161][ T30] ? __irq_work_queue_local+0x137/0x410 [ 243.148730][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 243.154116][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 243.160289][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 243.166463][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 243.172639][ T30] watchdog+0x1033/0x1040 [ 243.176991][ T30] ? watchdog+0x1ea/0x1040 [ 243.181432][ T30] ? __pfx_watchdog+0x10/0x10 [ 243.186121][ T30] kthread+0x2f0/0x390 [ 243.190197][ T30] ? __pfx_watchdog+0x10/0x10 [ 243.194889][ T30] ? __pfx_kthread+0x10/0x10 [ 243.199492][ T30] ret_from_fork+0x4b/0x80 [ 243.203926][ T30] ? __pfx_kthread+0x10/0x10 [ 243.208529][ T30] ret_from_fork_asm+0x1a/0x30 [ 243.213324][ T30] [ 243.216468][ T30] Kernel Offset: disabled [ 243.220782][ T30] Rebooting in 86400 seconds..