last executing test programs: 43.635780777s ago: executing program 3 (id=157): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, 0x0, 0xc0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x3c, 0xb, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfffffffc}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x5}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) 43.284554095s ago: executing program 3 (id=160): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x3}, @NFTA_LOG_PREFIX={0x6, 0x2, 0x1, 0x0, '}\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 43.042062336s ago: executing program 4 (id=162): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20048084}, 0x0) 43.04172257s ago: executing program 3 (id=163): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$vga_arbiter(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='unlock mem\x00'], 0xb) 42.925916984s ago: executing program 0 (id=164): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = socket(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000380)=0xffffffff, 0x4) bind$inet(r1, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c00000000000000000000000000000001040003000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000005b5a463eeb278157e87bebe5000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0x610) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000ac0)=ANY=[@ANYBLOB="03000000000000000a004e2300000009ff010000000000000000000000000001"], 0x90) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000040)=0x4) 42.788463715s ago: executing program 1 (id=166): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, 0x0, 0x0) 42.767257849s ago: executing program 4 (id=167): socket(0xa, 0x3, 0xff) socket$vsock_stream(0x28, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000021c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x4000804}, 0x44001) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 42.497846297s ago: executing program 3 (id=168): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) connect$inet(r0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 42.488542054s ago: executing program 1 (id=169): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$key(0xf, 0x3, 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x5}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x0, 0x8, 0x7}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x40}, 0x8, 0x32}, 0x0, @in=@private=0xa0100fe, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe, 0xc00}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) 42.201815114s ago: executing program 3 (id=171): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff", @ANYRESHEX=r0], 0xc8) dup3(r2, r1, 0x0) 41.96650807s ago: executing program 3 (id=172): memfd_create(0x0, 0x1) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x4048055) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x5d6) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000040) pipe2(0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 40.7730697s ago: executing program 2 (id=175): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x10}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="8000", 0x2, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 40.58863818s ago: executing program 4 (id=176): ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e26, @broadcast}, {0x2, 0x4e24, @multicast2}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0xaf, 0x0, 0x0, 0x0, 0x5, 0x0, 0xc7, 0x0, 0x6}) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) 40.278115943s ago: executing program 4 (id=177): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x7, 0x7, 0x386561e9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20048084}, 0x0) 40.089853408s ago: executing program 0 (id=178): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xf1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2000477d, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, 0x0, 0x208, 0x70bd26, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000045) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000010c0)=ANY=[], 0x1194}, 0x1, 0x0, 0x0, 0x40}, 0x4800) 39.912022209s ago: executing program 2 (id=179): r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f00000000c0)=@in={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4008000}, 0x28008851) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x80c0) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) sendmsg$can_raw(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000000)=@canfd={{0x1}, 0xf8, 0x0, 0x0, 0x0, "0306000000000000009c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fed496e6866856b96b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x0, 0x40041}, 0x88801) 39.865058071s ago: executing program 4 (id=180): timer_create(0x0, 0x0, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) poll(0x0, 0x0, 0x1ad) timer_delete(r0) 39.685386404s ago: executing program 0 (id=181): openat$kvm(0xffffffffffffff9c, 0x0, 0x800, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00'}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000240)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, 0x3, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x48}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 39.546965994s ago: executing program 1 (id=182): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff", @ANYRESHEX=r0], 0xc8) dup3(r2, r1, 0x0) 39.393941846s ago: executing program 2 (id=183): get_mempolicy(&(0x7f0000000080), 0x0, 0xffffffff, &(0x7f0000000000/0xf000)=nil, 0x2) 39.328075924s ago: executing program 0 (id=184): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000140)=ANY=[], 0x8) sendto$inet6(r0, 0x0, 0x30, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 39.288620455s ago: executing program 1 (id=185): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x300, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x92, &(0x7f0000000980)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x5c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x17, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x2, 0x98ca}, @sack_perm={0x4, 0x2}, @window={0x3, 0x3, 0xd7}, @fastopen={0x22, 0x10, "0900c7e2f68e08ddf7b27874d17b"}, @sack={0x5, 0xe, [0x220, 0x130c, 0xabc]}, @md5sig={0x13, 0x12, "8098cf093cc9cd7b8ec814f9bcfdfea9"}, @sack={0x5, 0x6, [0x1]}]}}}}}}}}, 0x0) 39.129253011s ago: executing program 1 (id=186): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 39.073809374s ago: executing program 2 (id=187): ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e26, @broadcast}, {0x2, 0x4e24, @multicast2}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0xaf, 0x0, 0x0, 0x0, 0x5, 0x0, 0xc7, 0x0, 0x6}) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) 39.013401759s ago: executing program 4 (id=188): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) r1 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, r2) getresgid(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 38.830420595s ago: executing program 0 (id=189): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x8000f28, 0x0) splice(r2, 0x0, r1, 0x0, 0xfc, 0xe) write(r0, 0x0, 0x0) 38.665444864s ago: executing program 2 (id=190): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x7, 0x7, 0x386561e9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20048084}, 0x0) 38.610738843s ago: executing program 1 (id=191): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xf1}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2000477d, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, 0x0, 0x208, 0x70bd26, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000045) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000010c0)=ANY=[], 0x1194}, 0x1, 0x0, 0x0, 0x40}, 0x4800) 38.318708108s ago: executing program 2 (id=192): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x1, 0x16, 0xb4, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000007900d8000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) 38.213229899s ago: executing program 0 (id=193): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) munmap(&(0x7f0000003000/0x3000)=nil, 0x3000) 0s ago: executing program 32 (id=172): memfd_create(0x0, 0x1) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x4048055) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x5d6) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000040) pipe2(0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.16' (ED25519) to the list of known hosts. [ 64.503547][ T5604] cgroup: Unknown subsys name 'net' [ 64.584493][ T5604] cgroup: Unknown subsys name 'cpuset' [ 64.593640][ T5604] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.959562][ T5604] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.544368][ T5622] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.547781][ T5625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.551068][ T5626] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.551560][ T5626] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.552588][ T5626] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.553232][ T5626] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.554700][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.569025][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.581496][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.583718][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.584883][ T5626] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.586262][ T5626] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.586660][ T5626] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.588699][ T5626] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.589288][ T5626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.590079][ T5626] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.592208][ T5626] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.592567][ T5626] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.593028][ T5626] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.601207][ T5626] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.607787][ T5626] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.611206][ T5626] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.612225][ T5626] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.621537][ T5626] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.643259][ T4932] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.607369][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.608134][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.608275][ T5632] bridge_slave_0: entered allmulticast mode [ 70.609959][ T5632] bridge_slave_0: entered promiscuous mode [ 70.648938][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.649106][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.649224][ T5632] bridge_slave_1: entered allmulticast mode [ 70.651393][ T5632] bridge_slave_1: entered promiscuous mode [ 70.703167][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.703915][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.704304][ T5628] bridge_slave_0: entered allmulticast mode [ 70.705870][ T5628] bridge_slave_0: entered promiscuous mode [ 70.752453][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.752560][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.752909][ T5628] bridge_slave_1: entered allmulticast mode [ 70.755210][ T5628] bridge_slave_1: entered promiscuous mode [ 70.761437][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.769955][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.770249][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.770360][ T5634] bridge_slave_0: entered allmulticast mode [ 70.773025][ T5634] bridge_slave_0: entered promiscuous mode [ 70.818346][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.830283][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.830463][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.830813][ T5634] bridge_slave_1: entered allmulticast mode [ 70.832873][ T5634] bridge_slave_1: entered promiscuous mode [ 70.847356][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.847443][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.847549][ T5630] bridge_slave_0: entered allmulticast mode [ 70.850269][ T5630] bridge_slave_0: entered promiscuous mode [ 70.904520][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.907630][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.921071][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.921169][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.921280][ T5630] bridge_slave_1: entered allmulticast mode [ 70.923028][ T5630] bridge_slave_1: entered promiscuous mode [ 70.941300][ T5632] team0: Port device team_slave_0 added [ 70.942613][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.942732][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.942844][ T5633] bridge_slave_0: entered allmulticast mode [ 70.945927][ T5633] bridge_slave_0: entered promiscuous mode [ 70.948862][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.948953][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.949393][ T5633] bridge_slave_1: entered allmulticast mode [ 70.951655][ T5633] bridge_slave_1: entered promiscuous mode [ 70.997351][ T5632] team0: Port device team_slave_1 added [ 71.018404][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.022020][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.037224][ T5628] team0: Port device team_slave_0 added [ 71.041598][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.045342][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.089536][ T5628] team0: Port device team_slave_1 added [ 71.109128][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.109217][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.109239][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.114568][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.117730][ T5634] team0: Port device team_slave_0 added [ 71.121392][ T5634] team0: Port device team_slave_1 added [ 71.136052][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.136068][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.136090][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.152085][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.152102][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.152124][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.166138][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.180737][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.180756][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.180781][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.319350][ T5630] team0: Port device team_slave_0 added [ 71.322429][ T5630] team0: Port device team_slave_1 added [ 71.345891][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.345929][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.345950][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.377868][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.377886][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.377908][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.383580][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.383763][ T5633] team0: Port device team_slave_0 added [ 71.383853][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.455296][ T5633] team0: Port device team_slave_1 added [ 71.468077][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.468152][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.468174][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.477395][ T5632] hsr_slave_0: entered promiscuous mode [ 71.479009][ T5632] hsr_slave_1: entered promiscuous mode [ 71.526333][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.526376][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.526742][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.572462][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.572532][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.572554][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.580660][ T5628] hsr_slave_0: entered promiscuous mode [ 71.583499][ T5628] hsr_slave_1: entered promiscuous mode [ 71.584613][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 71.585067][ T5628] Cannot create hsr debugfs directory [ 71.602127][ T5622] Bluetooth: hci2: command tx timeout [ 71.602328][ T5621] Bluetooth: hci0: command tx timeout [ 71.619563][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.619578][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.619599][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.652918][ T5634] hsr_slave_0: entered promiscuous mode [ 71.653884][ T5634] hsr_slave_1: entered promiscuous mode [ 71.654623][ T5634] debugfs: 'hsr0' already exists in 'hsr' [ 71.654640][ T5634] Cannot create hsr debugfs directory [ 71.681866][ T5622] Bluetooth: hci3: command tx timeout [ 71.682021][ T5622] Bluetooth: hci4: command tx timeout [ 71.682169][ T5621] Bluetooth: hci1: command tx timeout [ 71.722485][ T5630] hsr_slave_0: entered promiscuous mode [ 71.723806][ T5630] hsr_slave_1: entered promiscuous mode [ 71.724473][ T5630] debugfs: 'hsr0' already exists in 'hsr' [ 71.724491][ T5630] Cannot create hsr debugfs directory [ 71.873026][ T5633] hsr_slave_0: entered promiscuous mode [ 71.873918][ T5633] hsr_slave_1: entered promiscuous mode [ 71.874562][ T5633] debugfs: 'hsr0' already exists in 'hsr' [ 71.874579][ T5633] Cannot create hsr debugfs directory [ 72.244247][ T5632] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.255506][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.269412][ T5632] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.278261][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.279730][ T5632] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.292982][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.298185][ T5632] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.307916][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.366013][ T5628] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.375409][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.386676][ T5628] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.395684][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.396573][ T5628] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.408360][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.418566][ T5628] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.427457][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.509901][ T5630] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.515551][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.516411][ T5630] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.520680][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.539716][ T5630] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.548182][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.549912][ T5630] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.558450][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.659997][ T5634] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.669371][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.687352][ T5634] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.696517][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.704101][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.712494][ T5634] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.722923][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.747711][ T5634] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.756749][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.809436][ T5633] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.819694][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.820532][ T5633] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.829771][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.837423][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.842420][ T5633] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.855465][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.868746][ T5633] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.877772][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.896676][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.896924][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.921863][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.943357][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.943485][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.005698][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.040059][ T132] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.040445][ T132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.049606][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.077381][ T132] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.077482][ T132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.098623][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.112725][ T132] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.113135][ T132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.158097][ T777] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.158190][ T777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.221671][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.272967][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.307366][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.325989][ T132] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.326110][ T132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.355357][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.357683][ T132] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.357800][ T132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.418386][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.437933][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.455907][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.488218][ T3008] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.488320][ T3008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.517446][ T3008] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.517556][ T3008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.550379][ T5632] veth0_vlan: entered promiscuous mode [ 73.574633][ T5632] veth1_vlan: entered promiscuous mode [ 73.658986][ T5630] veth0_vlan: entered promiscuous mode [ 73.674882][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.677116][ T5632] veth0_macvtap: entered promiscuous mode [ 73.682211][ T5621] Bluetooth: hci0: command tx timeout [ 73.682223][ T4932] Bluetooth: hci2: command tx timeout [ 73.682776][ T5628] veth0_vlan: entered promiscuous mode [ 73.694784][ T5628] veth1_vlan: entered promiscuous mode [ 73.730346][ T5632] veth1_macvtap: entered promiscuous mode [ 73.737586][ T5628] veth0_macvtap: entered promiscuous mode [ 73.740165][ T5630] veth1_vlan: entered promiscuous mode [ 73.761657][ T4932] Bluetooth: hci1: command tx timeout [ 73.762830][ T4932] Bluetooth: hci4: command tx timeout [ 73.762854][ T4932] Bluetooth: hci3: command tx timeout [ 73.795356][ T5628] veth1_macvtap: entered promiscuous mode [ 73.819316][ T5630] veth0_macvtap: entered promiscuous mode [ 73.825567][ T5630] veth1_macvtap: entered promiscuous mode [ 73.845480][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.865854][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.877401][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.882074][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.895516][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.908799][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.922879][ T5634] veth0_vlan: entered promiscuous mode [ 73.944426][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.954141][ T777] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.987730][ T5634] veth1_vlan: entered promiscuous mode [ 74.095015][ T5633] veth0_vlan: entered promiscuous mode [ 74.111103][ T132] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.112047][ T132] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.113104][ T132] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.113348][ T132] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.114102][ T132] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.123036][ T132] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.124105][ T5634] veth0_macvtap: entered promiscuous mode [ 74.125753][ T132] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.129436][ T132] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.133837][ T5634] veth1_macvtap: entered promiscuous mode [ 74.141635][ T132] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.141777][ T132] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.197201][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.214380][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.256975][ T5633] veth1_vlan: entered promiscuous mode [ 74.304609][ T132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.314693][ T132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.342313][ T3008] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.342788][ T3008] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.342823][ T3008] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.342855][ T3008] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.342885][ T3008] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.344396][ T3008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.344413][ T3008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.419562][ T132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.419602][ T132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.474881][ T5633] veth0_macvtap: entered promiscuous mode [ 74.479619][ T5633] veth1_macvtap: entered promiscuous mode [ 74.494213][ T3008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.494250][ T3008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.547136][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.547250][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.616234][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.648647][ T3008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.648686][ T3008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.658701][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.658722][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.660120][ T5630] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.667009][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.748882][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.748917][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.782121][ T777] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.782466][ T777] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.788115][ T777] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.788155][ T777] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.108152][ T3008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.108195][ T3008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.224193][ T5717] syz.3.7 uses obsolete (PF_INET,SOCK_PACKET) [ 75.304684][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.304727][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.413807][ T5721] loop1: detected capacity change from 0 to 8 [ 75.469039][ T5724] Invalid logical block size (-3) [ 75.761340][ T5621] Bluetooth: hci0: command tx timeout [ 75.761516][ T5621] Bluetooth: hci2: command tx timeout [ 75.841316][ T4932] Bluetooth: hci3: command tx timeout [ 75.841361][ T4932] Bluetooth: hci4: command tx timeout [ 75.841400][ T4932] Bluetooth: hci1: command tx timeout [ 75.896336][ T5721] Dev loop1: unable to read RDB block 8 [ 75.896397][ T5721] loop1: unable to read partition table [ 75.896642][ T5721] loop1: partition table beyond EOD, truncated [ 75.898516][ T5721] loop_reread_partitions: partition scan of loop1 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 77.058742][ T5770] netlink: 36 bytes leftover after parsing attributes in process `syz.0.23'. [ 77.821171][ T5791] netlink: 40 bytes leftover after parsing attributes in process `syz.3.31'. [ 77.841486][ T5621] Bluetooth: hci2: command tx timeout [ 77.841535][ T5621] Bluetooth: hci0: command tx timeout [ 77.923047][ T4932] Bluetooth: hci1: command tx timeout [ 77.923983][ T4932] Bluetooth: hci4: command tx timeout [ 77.924007][ T4932] Bluetooth: hci3: command tx timeout [ 78.711740][ T5821] netlink: 40 bytes leftover after parsing attributes in process `syz.2.44'. [ 78.881837][ T5827] program syz.2.47 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.023341][ T5859] netlink: 196 bytes leftover after parsing attributes in process `syz.1.62'. [ 80.155083][ T5862] capability: warning: `syz.1.63' uses 32-bit capabilities (legacy support in use) [ 80.909107][ T5882] netlink: 196 bytes leftover after parsing attributes in process `syz.1.73'. [ 82.798886][ T5934] sctp: [Deprecated]: syz.3.95 (pid 5934) Use of struct sctp_assoc_value in delayed_ack socket option. [ 82.798886][ T5934] Use struct sctp_sack_info instead [ 84.200278][ T5958] program syz.2.106 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 84.547240][ T5968] loop1: detected capacity change from 0 to 8 [ 84.858416][ T5975] netlink: 112 bytes leftover after parsing attributes in process `syz.0.112'. [ 85.090644][ T5968] Dev loop1: unable to read RDB block 8 [ 85.090701][ T5968] loop1: unable to read partition table [ 85.104043][ T5968] loop1: partition table beyond EOD, truncated [ 85.128827][ T5968] loop_reread_partitions: partition scan of loop1 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 85.407761][ T5980] netlink: 4 bytes leftover after parsing attributes in process `syz.0.115'. [ 85.519134][ T5986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.117'. [ 85.913496][ T5990] netlink: 32 bytes leftover after parsing attributes in process `syz.3.120'. [ 85.938149][ T5990] netlink: 32 bytes leftover after parsing attributes in process `syz.3.120'. [ 85.938328][ T5990] Zero length message leads to an empty skb [ 86.773649][ T25] cfg80211: failed to load regulatory.db [ 87.286554][ T6017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.130'. [ 88.551736][ T6046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.145'. [ 99.401096][ C0] sched: DL replenish lagged too much [ 137.272771][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.284622][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.715481][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.722762][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.758340][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 199.767019][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 199.775635][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 199.827206][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 202.333683][ T52] Bluetooth: hci4: command tx timeout [ 256.004981][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.018173][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 295.393242][ T32] INFO: task kworker/1:0:25 blocked for more than 145 seconds. [ 295.412052][ T32] Not tainted syzkaller #0 [ 295.430035][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 295.446769][ T32] task:kworker/1:0 state:D stack:24992 pid:25 tgid:25 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 295.483400][ T32] Workqueue: events reg_todo [ 295.521501][ T32] Call Trace: [ 295.540210][ T32] [ 295.558302][ T32] __schedule+0x17db/0x58f0 [ 295.577802][ T32] ? __pfx___schedule+0x10/0x10 [ 295.596679][ T32] ? schedule+0x90/0x2b0 [ 295.614409][ T32] schedule+0x164/0x2b0 [ 295.632192][ T32] schedule_preempt_disabled+0x13/0x30 [ 295.650120][ T32] __mutex_lock+0x7c1/0x1550 [ 295.667845][ T32] ? lockdep_hardirqs_on+0x7b/0x110 [ 295.685830][ T32] ? __mutex_lock+0x5d4/0x1550 [ 295.704092][ T32] ? reg_process_self_managed_hints+0x8d/0x160 [ 295.722061][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 295.741000][ T32] ? reg_todo+0x8da/0xa40 [ 295.758829][ T32] reg_process_self_managed_hints+0x8d/0x160 [ 295.776849][ T32] reg_todo+0x8df/0xa40 [ 295.796080][ T32] ? process_scheduled_works+0x97a/0x1630 [ 295.814894][ T32] process_scheduled_works+0xc3d/0x1630 [ 295.833457][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 295.851606][ T32] ? assign_work+0x3cf/0x5d0 [ 295.869938][ T32] worker_thread+0xa47/0xfb0 [ 295.888837][ T32] kthread+0x38b/0x480 [ 295.908506][ T32] ? __pfx_worker_thread+0x10/0x10 [ 295.926732][ T32] ? __pfx_kthread+0x10/0x10 [ 295.944982][ T32] ret_from_fork+0x514/0xb70 [ 295.963243][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 295.981247][ T32] ? __switch_to+0xc89/0x1420 [ 295.999675][ T32] ? __pfx_kthread+0x10/0x10 [ 296.018747][ T32] ret_from_fork_asm+0x1a/0x30 [ 296.036669][ T32] [ 296.054911][ T32] [ 296.054911][ T32] Showing all locks held in the system: [ 296.072200][ T32] locks held by kthreadd/2: 1, last CPU#0: [ 296.090234][ T32] #0: ffffffff8eeabc70 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 296.201533][ T32] locks held by kworker/R-kvfre/6: 1, on CPU#1: [ 296.219457][ T32] #0: ffffffff8ebf91e0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 [ 296.329329][ T32] locks held by kworker/0:0/9: 2, last CPU#0: [ 296.347152][ T32] #0: ffff88805845b140 ((wq_completion)wg-crypt-wg2#5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 296.438820][ T32] #1: ffffc900000e7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 296.438885][ T32] locks held by kworker/u8:0/12: 3, last CPU#0: [ 296.438899][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 296.438947][ T32] #1: ffffc90000117c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 296.438995][ T32] #2: ffff8880568e07a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 296.439044][ T32] locks held by kworker/u8:1/13: 3, last CPU#0: [ 296.439056][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 296.439104][ T32] #1: ffffc90000127c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 296.439152][ T32] #2: ffff8880560207a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 296.439200][ T32] locks held by kworker/R-mm_pe/14: 1, on CPU#1: [ 296.439212][ T32] #0: ffffffff8ebf91e0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xc0b/0x10e0 [ 296.439264][ T32] locks held by pr/ttyS0/16: 4, last CPU#0: [ 296.439277][ T32] #0: ffffffff8ec362b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 296.439328][ T32] #1: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3de/0x18b0 [ 296.439379][ T32] #2: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: ip6_input+0x23/0x270 [ 296.439424][ T32] #3: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 296.439469][ T32] locks held by kworker/1:0/25: 4, on CPU#1: [ 296.439481][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 296.439528][ T32] #1: ffffc900001f7c40 (reg_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 296.439574][ T32] #2: ffffffff90250e40 (rtnl_mutex){+.+.}-{4:4}, at: reg_todo+0x1c/0xa40 [ 296.439624][ T32] #3: ffff8880557307a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_process_self_managed_hints+0x8d/0x160 [ 296.439676][ T32] locks held by kworker/1:1/30: 3, on CPU#1: [ 296.439688][ T32] #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 296.439736][ T32] #1: ffffc90000a57c40 ((crda_timeout).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 296.439783][ T32] #2: ffffffff90250e40 (rtnl_mutex){+.+.}-{4:4}, at: crda_timeout_work+0x16/0x80 [ 296.439834][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 296.439847][ T32] #0: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 296.439890][ T32] locks held by kworker/u8:2/37: 3, on CPU#0: [ 296.439902][ T32] #0: ffff888031d27940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 296.439950][ T32] #1: ffffc90000ad7c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 296.439998][ T32] #2: ffffffff90250e40 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 296.440041][ T32] locks held by kworker/u8:3/50: 3, last CPU#0: [ 296.440053][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 296.440100][ T32] #1: ffffc90000bb7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 296.440148][ T32] #2: ffff8880564f07a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 296.440196][ T32] locks held by kworker/u8:4/59: 3, last CPU#0: [ 296.440209][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 296.440257][ T32] #1: ffffc9000200fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 296.440312][ T32] #2: ffff8880558307a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 296.440363][ T32] locks held by kworker/u8:5/132: 3, last CPU#0: [ 296.440376][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 296.440423][ T32] #1: ffffc90002ec7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 296.440471][ T32] #2: ffff888056af07a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 296.440519][ T32] locks held by kworker/u8:6/471: 3, last CPU#0: [ 296.440532][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 296.440579][ T32] #1: ffffc90003467c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 296.440627][ T32] #2: ffff8880561c07a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 296.440674][ T32] locks held by kworker/u8:7/777: 3, last CPU#0: [ 296.440687][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 296.440735][ T32] #1: ffffc90004a37c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 296.457969][ T32] #2: ffff888056b307a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 296.458023][ T32] locks held by kworker/1:2/989: 2, last CPU#1: [ 296.458036][ T32] #0: ffff88805845b140 ((wq_completion)wg-crypt-wg2#5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 296.458087][ T32] #1: ffffc90004f27c40 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 296.458181][ T32] locks held by kworker/u8:8/1169: 3, last CPU#0: [ 296.458194][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 296.458242][ T32] #1: ffffc9000570fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 296.458290][ T32] #2: ffff8880565a07a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 296.458338][ T32] locks held by kworker/u8:9/1473: 3, last CPU#0: [ 296.458350][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 296.458398][ T32] #1: ffffc90005fffc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 296.458446][ T32] #2: ffff8880567407a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 296.458504][ T32] locks held by kworker/u8:10/3008: 3, last CPU#0: [ 296.458517][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 296.458564][ T32] #1: ffffc9000e5e7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 296.458611][ T32] #2: ffff8880557307a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 296.458654][ T32] locks held by kworker/R-bat_e/3226: 1, on CPU#0: [ 296.458664][ T32] #0: ffffffff8ebf91e0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xc0b/0x10e0 [ 296.458709][ T32] locks held by kworker/u9:1/4932: 7, last CPU#0: [ 296.458721][ T32] #0: ffff88807f7d6940 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 296.458766][ T32] #1: ffffc9000f637c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 296.458824][ T32] #2: ffff888031a90ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 296.458874][ T32] #3: ffff888031a900b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 296.458917][ T32] #4: ffffffff903d77c0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x17f/0x370 [ 296.458960][ T32] #5: ffff88807f7d2af8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x9f/0x550 [ 296.459010][ T32] #6: ffffffff8ed62aa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 296.459058][ T32] locks held by kworker/1:3/4944: 3, last CPU#1: [ 296.459077][ T32] #0: ffff888058876140 ((wq_completion)wg-kex-wg2#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 296.459131][ T32] #1: ffffc9000f2a7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 296.459196][ T32] #2: ffff8880576bc888 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 296.459248][ T32] locks held by klogd/4972: 1, on CPU#0: [ 296.459260][ T32] #0: ffff8880256471c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 296.459310][ T32] locks held by udevd/4983: 5, last CPU#0: [ 296.459323][ T32] #0: ffffffff8ee35c10 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x480 [ 296.459370][ T32] #1: ffff88807edb03b8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 296.459415][ T32] #2: ffff88801b097678 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 296.459457][ T32] #3: ffffffff8eeabc70 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 296.459491][ T32] #4: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: is_module_text_address+0x1d/0x1e0 [ 296.459528][ T32] locks held by dhcpcd/5277: 2, last CPU#0: [ 296.459538][ T32] #0: ffffffff8f4ef9f8 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_number_perm+0x219/0x5f0 [ 296.459591][ T32] #1: ffffffff8eeabc70 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 296.459628][ T32] locks held by dhcpcd/5278: 5, last CPU#0: [ 296.459641][ T32] #0: ffffffff8ee35c10 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x10f/0x480 [ 296.459683][ T32] #1: ffff88807edb36b8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 296.459730][ T32] #2: ffff88807aa829f8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 296.459780][ T32] #3: ffffffff8eeabc70 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 296.459821][ T32] #4: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 296.459868][ T32] locks held by kworker/0:2/5349: 4, last CPU#0: [ 296.459881][ T32] #0: ffff88802eefe940 ((wq_completion)wg-kex-wg0#6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 296.459932][ T32] #1: ffffc90002fb7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 296.459990][ T32] #2: ffff88807dbf20e8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 296.460040][ T32] #3: ffffffff8eeabc70 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 296.460082][ T32] locks held by crond/5356: 2, last CPU#0: [ 296.460095][ T32] #0: ffffffff8eeabc70 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 296.460165][ T32] #1: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 296.460210][ T32] locks held by getty/5371: 2, on CPU#1: [ 296.460221][ T32] #0: ffff8880358390a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 296.460284][ T32] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 296.460332][ T32] locks held by kworker/u9:2/5615: 5, on CPU#0: [ 296.460345][ T32] #0: ffff88807cb02940 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 296.460392][ T32] #1: ffffc90004667c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 296.460452][ T32] #2: ffff88807e740ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 296.460501][ T32] #3: ffff88807e7400b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 296.460545][ T32] #4: ffffffff903d77c0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x17f/0x370 [ 296.460594][ T32] locks held by kworker/0:3/5616: 2, last CPU#0: [ 296.460607][ T32] #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 296.460653][ T32] #1: ffffc90004677c40 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 296.460701][ T32] locks held by kworker/u9:4/5622: 5, on CPU#0: [ 296.460714][ T32] #0: ffff88807cb04940 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 296.479537][ T32] #1: ffffc900046c7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 296.479589][ T32] #2: ffff88802c79cea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 296.479639][ T32] #3: ffff88802c79c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 296.479684][ T32] #4: ffffffff903d77c0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x17f/0x370 [ 296.479731][ T32] locks held by kworker/u9:6/5626: 5, on CPU#0: [ 296.479744][ T32] #0: ffff8880354e6940 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 296.479791][ T32] #1: ffffc90004717c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 296.479839][ T32] #2: ffff88802c794ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 296.479886][ T32] #3: ffff88802c7940b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 296.479930][ T32] #4: ffffffff903d77c0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x17f/0x370 [ 296.479974][ T32] locks held by syz-executor/5628: 3, last CPU#0: [ 296.479987][ T32] #0: ffffffff8f4ef9f8 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_check_open_permission+0x1d3/0x470 [ 296.480040][ T32] #1: ffffffff8eeabc70 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 296.480082][ T32] #2: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 296.480129][ T32] locks held by syz-executor/5632: 2, last CPU#0: [ 296.480141][ T32] #0: ffffffff8eeabc70 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 296.480182][ T32] #1: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 296.480227][ T32] locks held by syz-executor/5633: 3, last CPU#0: [ 296.480239][ T32] #0: ffffffff8f4ef9f8 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 296.480296][ T32] #1: ffffffff8eeabc70 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 296.480336][ T32] #2: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 296.480382][ T32] locks held by syz-executor/5634: 3, last CPU#0: [ 296.480394][ T32] #0: ffffffff8f4ef9f8 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 296.480445][ T32] #1: ffffffff8eeabc70 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 296.480485][ T32] #2: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 296.480532][ T32] locks held by kworker/R-wg-cr/5655: 1, on CPU#0: [ 296.480545][ T32] #0: ffffffff8ebf91e0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xc0b/0x10e0 [ 296.480595][ T32] locks held by kworker/R-wg-cr/5657: 1, last CPU#1: [ 296.480607][ T32] #0: ffffffff8ebf91e0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 [ 296.480657][ T32] locks held by kworker/R-wg-cr/5659: 1, on CPU#0: [ 296.480669][ T32] #0: ffffffff8ebf91e0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 [ 296.480718][ T32] locks held by kworker/R-wg-cr/5660: 1, on CPU#0: [ 296.480731][ T32] #0: ffffffff8ebf91e0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xc0b/0x10e0 [ 296.500261][ T32] locks held by kworker/R-wg-cr/5662: 1, on CPU#1: [ 296.500277][ T32] #0: ffffffff8ebf91e0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xc0b/0x10e0 [ 296.500337][ T32] locks held by kworker/R-wg-cr/5663: 1, on CPU#0: [ 296.500351][ T32] #0: ffffffff8ebf91e0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xc0b/0x10e0 [ 296.500401][ T32] locks held by kworker/R-wg-cr/5664: 1, on CPU#0: [ 296.500413][ T32] #0: ffffffff8ebf91e0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 [ 296.500463][ T32] locks held by kworker/R-wg-cr/5665: 1, on CPU#1: [ 296.500476][ T32] #0: ffffffff8ebf91e0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xc0b/0x10e0 [ 296.500524][ T32] locks held by kworker/R-wg-cr/5666: 1, on CPU#1: [ 296.500536][ T32] #0: ffffffff8ebf91e0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 [ 296.500586][ T32] locks held by kworker/R-wg-cr/5667: 1, on CPU#1: [ 296.500598][ T32] #0: ffffffff8ebf91e0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xc0b/0x10e0 [ 296.500649][ T32] locks held by kworker/R-wg-cr/5668: 1, on CPU#1: [ 296.500661][ T32] #0: ffffffff8ebf91e0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xc0b/0x10e0 [ 296.500711][ T32] locks held by kworker/R-wg-cr/5670: 1, on CPU#1: [ 296.500724][ T32] #0: ffffffff8ebf91e0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xc0b/0x10e0 [ 296.520239][ T32] locks held by kworker/R-wg-cr/5671: 1, last CPU#0: [ 296.520254][ T32] #0: ffffffff8ebf91e0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xc0b/0x10e0 [ 296.520308][ T32] locks held by kworker/1:4/5678: 3, last CPU#1: [ 296.520321][ T32] #0: ffff888058442d40 ((wq_completion)wg-kex-wg0#10){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 296.520381][ T32] #1: ffffc90004967c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 296.520440][ T32] #2: ffff8880576baad0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 296.520493][ T32] locks held by kworker/1:5/5679: 2, last CPU#1: [ 296.520505][ T32] #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 296.520553][ T32] #1: ffffc90004977c40 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 296.520603][ T32] locks held by kworker/1:6/5686: 2, last CPU#1: [ 296.520615][ T32] #0: ffff888033d8b940 ((wq_completion)wg-crypt-wg1#5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 296.520668][ T32] #1: ffffc900049e7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 296.520727][ T32] locks held by kworker/0:4/5693: 2, last CPU#0: [ 299.957679][ T32] #0: ffff8880b863bb20 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 299.957748][ T32] #1: ffff8880b8624408 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0 [ 299.957796][ T32] locks held by kworker/1:7/5707: 3, on CPU#1: [ 299.957810][ T32] #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 299.957858][ T32] #1: ffffc90004b57c40 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 299.957906][ T32] #2: ffffffff90250e40 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0xac/0x1110 [ 299.957956][ T32] locks held by kworker/0:6/5757: 4, on CPU#0: [ 299.957969][ T32] #0: ffff888058a90940 ((wq_completion)wg-kex-wg1#8){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 299.958021][ T32] #1: ffffc90004cbfc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 299.958078][ T32] #2: ffff88807eecd440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_response+0x22d/0xbd0 [ 299.958130][ T32] #3: ffff888033885c58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_response+0x843/0xbd0 [ 299.958180][ T32] locks held by syz.3.172/6109: 1, last CPU#0: [ 299.958192][ T32] #0: ffffffff9aee24e0 (nfnl_subsys_ipset){+.+.}-{4:4}, at: call_ad+0x26c/0xb50 [ 299.958240][ T32] locks held by kworker/u8:11/6161: 4, last CPU#0: [ 299.958252][ T32] #0: ffff88802973c140 ((wq_completion)wg-kex-wg0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 299.958298][ T32] #1: ffffc900024cfc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 299.958346][ T32] #2: ffff888027911440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 299.958396][ T32] #3: ffff88807dbf7028 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 299.958454][ T32] locks held by syz-executor/6165: 3, last CPU#0: [ 299.958466][ T32] #0: ffff88802368f2a0 (&sig->cred_guard_mutex){+.+.}-{4:4}, at: bprm_execve+0xbc/0x1590 [ 299.958517][ T32] #1: ffffffff8f4ef9f8 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_bprm_check_security+0xef/0x180 [ 299.958564][ T32] #2: ffffffff8eeabc70 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 299.958608][ T32] [ 299.958613][ T32] ============================================= [ 299.958613][ T32] [ 299.958638][ T32] NMI backtrace for cpu 0 [ 299.958665][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 299.958705][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 299.958719][ T32] Call Trace: [ 299.958725][ T32] [ 299.958733][ T32] dump_stack_lvl+0xe8/0x150 [ 299.958760][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 299.958783][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 299.958813][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 299.958838][ T32] sys_info+0x135/0x170 [ 299.958857][ T32] watchdog+0xfd7/0x1030 [ 299.958881][ T32] ? watchdog+0x1c7/0x1030 [ 299.958905][ T32] kthread+0x38b/0x480 [ 299.958922][ T32] ? __pfx_watchdog+0x10/0x10 [ 299.958937][ T32] ? __pfx_kthread+0x10/0x10 [ 299.958955][ T32] ret_from_fork+0x514/0xb70 [ 299.958975][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 299.959002][ T32] ? __switch_to+0xc89/0x1420 [ 299.959028][ T32] ? __pfx_kthread+0x10/0x10 [ 299.959047][ T32] ret_from_fork_asm+0x1a/0x30 [ 299.959088][ T32] [ 299.959094][ T32] Sending NMI from CPU 0 to CPUs 1: [ 299.959129][ C1] NMI backtrace for cpu 1 [ 299.959142][ C1] CPU: 1 UID: 0 PID: 59 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 299.959162][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 299.959175][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 299.959202][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x6/0x80 [ 299.959231][ C1] Code: e8 5f 57 4c f5 5b e9 99 4a 00 00 cc 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 56 <53> 48 89 f3 49 89 fe 48 83 c7 18 48 8b 74 24 10 e8 a5 3d bc f5 4c [ 299.959246][ C1] RSP: 0018:ffffc90000a18270 EFLAGS: 00000046 [ 299.959262][ C1] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: 1ffffffff358cbb8 [ 299.959276][ C1] RDX: 0000000000000001 RSI: 0000000000000282 RDI: ffffffff9ac65dc8 [ 299.959288][ C1] RBP: 0000000000432110 R08: 0000000000000003 R09: 0000000000000004 [ 299.959299][ C1] R10: dffffc0000000000 R11: fffff5200014303c R12: 0000000000000000 [ 299.959312][ C1] R13: ffff88804726a000 R14: 0000000000000000 R15: 0000000000000000 [ 299.959325][ C1] FS: 0000000000000000(0000) GS:ffff888124dd8000(0000) knlGS:0000000000000000 [ 299.959340][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 299.959353][ C1] CR2: 00007f7f5ecaf350 CR3: 000000007f15e000 CR4: 00000000003526f0 [ 299.959370][ C1] Call Trace: [ 299.959377][ C1] [ 299.959384][ C1] debug_check_no_obj_freed+0x39e/0x450 [ 299.959414][ C1] kfree+0x13e/0x650 [ 299.959438][ C1] ? skb_release_data+0x85e/0xab0 [ 299.959461][ C1] skb_release_data+0x85e/0xab0 [ 299.959486][ C1] __kfree_skb+0x5d/0x210 [ 299.959505][ C1] nft_synproxy_eval_v4+0x36a/0x4e0 [ 299.959528][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 299.959549][ C1] ? nf_ip_checksum+0x13c/0x510 [ 299.959571][ C1] nft_synproxy_do_eval+0x335/0x550 [ 299.959591][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 299.959610][ C1] ? __lock_acquire+0x6df/0x2e50 [ 299.959635][ C1] nft_do_chain+0x48d/0x1b10 [ 299.959661][ C1] ? __lock_acquire+0x6df/0x2e50 [ 299.959678][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 299.959702][ C1] ? ipt_do_table+0x2b9/0x15d0 [ 299.959736][ C1] ? lock_acquire+0x115/0x350 [ 299.959760][ C1] nft_do_chain_inet+0x360/0x4b0 [ 299.959781][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 299.959800][ C1] ? ipt_do_table+0x2b9/0x15d0 [ 299.959832][ C1] ? nf_nat_ipv4_local_in+0x21f/0x720 [ 299.959858][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 299.959878][ C1] nf_hook_slow+0xc5/0x220 [ 299.959908][ C1] NF_HOOK+0x21f/0x3c0 [ 299.959935][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 299.959954][ C1] ? NF_HOOK+0x9e/0x3c0 [ 299.959971][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 299.959990][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 299.960013][ C1] ? ip_local_deliver+0x113/0x190 [ 299.960033][ C1] NF_HOOK+0x336/0x3c0 [ 299.960050][ C1] ? kfree+0x1c5/0x650 [ 299.960073][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x1ea1/0x2c40 [ 299.960104][ C1] ? ieee80211_iface_work+0x78a/0x1010 [ 299.960124][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 299.960143][ C1] ? NF_HOOK+0x9e/0x3c0 [ 299.960160][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 299.960179][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 299.960198][ C1] ? ip_rcv_core+0x88d/0xd50 [ 299.960218][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 299.960236][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 299.960255][ C1] process_backlog+0xa6b/0x18b0 [ 299.960287][ C1] ? process_backlog+0x3de/0x18b0 [ 299.960322][ C1] __napi_poll+0xaa/0x330 [ 299.960351][ C1] net_rx_action+0x61d/0xf50 [ 299.960383][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 299.960409][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 299.960439][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 299.960456][ C1] ? try_to_wake_up+0x8c5/0x14d0 [ 299.960486][ C1] handle_softirqs+0x226/0x860 [ 299.960510][ C1] ? do_softirq+0x77/0xd0 [ 299.960535][ C1] ? cfg80211_inform_single_bss_data+0x1491/0x1be0 [ 299.960568][ C1] do_softirq+0x77/0xd0 [ 299.960592][ C1] [ 299.960598][ C1] [ 299.960605][ C1] __local_bh_enable_ip+0x100/0x140 [ 299.960631][ C1] cfg80211_inform_single_bss_data+0x1491/0x1be0 [ 299.960658][ C1] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 299.960695][ C1] ? _ieee802_11_parse_elems_full+0x2c0/0x48f0 [ 299.960720][ C1] ? cfg80211_inform_bss_data+0x24b/0x3cc0 [ 299.960744][ C1] cfg80211_inform_bss_data+0x263/0x3cc0 [ 299.960772][ C1] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 299.960812][ C1] ? __lock_acquire+0x6df/0x2e50 [ 299.960840][ C1] ? cfg80211_defragment_element+0x3e/0x360 [ 299.960868][ C1] cfg80211_inform_bss_frame_data+0x3c7/0x840 [ 299.960893][ C1] ? ieee80211_bss_info_update+0x30f/0xa50 [ 299.960914][ C1] ieee80211_bss_info_update+0x791/0xa50 [ 299.960945][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 299.960964][ C1] ? sta_info_get+0x4f/0x300 [ 299.960989][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xf15/0x2c40 [ 299.961024][ C1] ieee80211_ibss_rx_queued_mgmt+0x1ce3/0x2c40 [ 299.961062][ C1] ? process_scheduled_works+0xc3d/0x1630 [ 299.961090][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xf15/0x2c40 [ 299.961121][ C1] ? __lock_acquire+0x6df/0x2e50 [ 299.961140][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 299.961184][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 299.961211][ C1] ? kcov_remote_start+0x9c/0x7e0 [ 299.961247][ C1] ? kcov_remote_start+0x1a6/0x7e0 [ 299.961281][ C1] ieee80211_iface_work+0x78a/0x1010 [ 299.961307][ C1] cfg80211_wiphy_work+0x29e/0x420 [ 299.961334][ C1] ? process_scheduled_works+0x97a/0x1630 [ 299.961360][ C1] process_scheduled_works+0xc3d/0x1630 [ 299.961402][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 299.961430][ C1] ? assign_work+0x3cf/0x5d0 [ 299.961456][ C1] worker_thread+0xa47/0xfb0 [ 299.961490][ C1] ? __kthread_parkme+0x71/0x1f0 [ 299.961523][ C1] kthread+0x38b/0x480 [ 299.961541][ C1] ? __pfx_worker_thread+0x10/0x10 [ 299.961567][ C1] ? __pfx_kthread+0x10/0x10 [ 299.961586][ C1] ret_from_fork+0x514/0xb70 [ 299.961606][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 299.961636][ C1] ? __switch_to+0xc89/0x1420 [ 299.961665][ C1] ? __pfx_kthread+0x10/0x10 [ 299.961683][ C1] ret_from_fork_asm+0x1a/0x30 [ 299.961722][ C1] [ 299.969018][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 302.593082][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 302.603160][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 302.613324][ T32] Call Trace: [ 302.616699][ T32] [ 302.619651][ T32] vpanic+0x56d/0xa60 [ 302.623754][ T32] ? __pfx_vpanic+0x10/0x10 [ 302.628290][ T32] ? console_srcu_read_unlock+0x3a/0x60 [ 302.633859][ T32] panic+0xc5/0xd0 [ 302.637730][ T32] ? __pfx_panic+0x10/0x10 [ 302.642167][ T32] ? wq_watchdog_touch+0xf9/0x160 [ 302.647655][ T32] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 302.654106][ T32] watchdog+0x1030/0x1030 [ 302.658566][ T32] ? watchdog+0x1c7/0x1030 [ 302.663009][ T32] kthread+0x38b/0x480 [ 302.667189][ T32] ? __pfx_watchdog+0x10/0x10 [ 302.671912][ T32] ? __pfx_kthread+0x10/0x10 [ 302.676519][ T32] ret_from_fork+0x514/0xb70 [ 302.681231][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 302.686383][ T32] ? __switch_to+0xc89/0x1420 [ 302.691131][ T32] ? __pfx_kthread+0x10/0x10 [ 302.695835][ T32] ret_from_fork_asm+0x1a/0x30 [ 302.700638][ T32] [ 302.703870][ T32] Kernel Offset: disabled [ 302.708211][ T32] Rebooting in 86400 seconds..