last executing test programs: 32.696514248s ago: executing program 1 (id=2): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4e, &(0x7f0000000040)=0x5) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x0, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') 31.593818042s ago: executing program 1 (id=6): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x1}}}}}}, 0x0) 31.285856036s ago: executing program 1 (id=7): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r3 = accept4(r2, 0x0, 0x0, 0x80800) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000) 30.454981286s ago: executing program 3 (id=4): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@ipv4_newrule={0x38, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'geneve1\x00'}, @FRA_GENERIC_POLICY=@FRA_FWMARK={0x8}]}, 0x38}}, 0x0) 30.129845576s ago: executing program 3 (id=8): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x4e, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x0, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r4, 0x0, 0x0) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000280)=ANY=[@ANYBLOB="840000000d066bf7000000000000000005000003100003006269746d61703a706f727400120003006269746d61703a69702c6d6163000000050001000700000011000300686173683a69702c"], 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x8040) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000001280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) inotify_init() sendto(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x20000001, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80) 29.098665192s ago: executing program 2 (id=3): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x20, 0x17, 0x1, "d3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 28.286250229s ago: executing program 1 (id=9): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4e, &(0x7f0000000040)=0x5) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x0, 0x0) mq_unlink(0x0) close(r3) 28.09229282s ago: executing program 4 (id=5): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x1}}}}}}, 0x0) 23.03518331s ago: executing program 1 (id=10): syz_usb_connect(0x5, 0x46, &(0x7f0000000d00)={{0x12, 0x1, 0x250, 0x46, 0xc7, 0xf5, 0x40, 0x11ba, 0x1001, 0x81b0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x0, 0x38, 0x10, 0x6, [{{0x9, 0x4, 0x9d, 0x85, 0x3, 0xb6, 0x2f, 0xde, 0x2, [@uac_as], [{{0x9, 0x5, 0x2, 0xc50a65f2b016ea1f, 0x40, 0x1, 0x7, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x47, 0x7}]}}, {{0x9, 0x5, 0x9, 0x3, 0x3ff, 0x53, 0xf, 0x5}}, {{0x9, 0x5, 0x4, 0x0, 0x600, 0x8, 0x1, 0x2f}}]}}]}}]}}, &(0x7f00000018c0)={0x0, 0x0, 0x1d, &(0x7f0000001580)={0x5, 0xf, 0x1d, 0x1, [@generic={0x18, 0x10, 0x1, "e2d99a091505fc603646e906683a2ed4b2b519c014"}]}, 0x1, [{0x2, &(0x7f0000001640)=@string={0x2}}]}) 22.969091828s ago: executing program 4 (id=11): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 18.416391722s ago: executing program 4 (id=15): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, 0x0, 0x0) listen(r3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) listen(0xffffffffffffffff, 0x0) r4 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0xb0000000}) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) 11.514424325s ago: executing program 4 (id=17): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"a2e3ad21ed0d09f91b5b090987f70906d038e7ff7fc6e5539b0d3d0e8b089b323b6d07060890e0878f0e1ac6e7049b334a959b3e9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070b07580936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0931a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5bcd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383701d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b6080000007a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39dd0000000039ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb06ffc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00b98e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb15da202d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d877a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x8e, &(0x7f0000001500)=ANY=[@ANYBLOB="1201010202000040"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x1, 0x803, 0x0) socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_emit_vhci(0x0, 0xf8) 9.949127136s ago: executing program 4 (id=19): r0 = socket$inet(0x2, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018080000000000000000000000a020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYRES32=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="90", 0x1, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000280)="fd", 0x1, 0x0, 0x0, 0x0) write(r2, &(0x7f00000002c0)="f420", 0x2) shutdown(r2, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000380)={'syz1', "6234ddb385942f22ab617da3797661ec485871aa9e23a392b9a66fc1a509069690c357ccd4b4c5cb5c00c6d9e0780282efd72c4d5216d95f16cd2cfa353390c611ccf2e63153f1abb38eedca245d64d3e861ffe34702d5a119a78e45a560d1b857a30bb4625d7cb55b97c501c0211a"}, 0x73) ioctl$KVM_SET_IRQCHIP(r4, 0x4048aec9, &(0x7f0000000740)={0x3, 0x0, @ioapic={0x0, 0x4, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xb8}]}}) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @local, @loopback}, 0xc) r5 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r5, 0x110, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f0000000280), 0x10) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000140)={0x6, {{0x2, 0x0, @multicast1}}}, 0x88) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) 7.897763384s ago: executing program 0 (id=20): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe8c, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x200, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r6}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = add_key(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000140)="d8", 0x1, r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r8 = syz_io_uring_setup(0x7dca, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x2ec4, &(0x7f00000003c0)={0x0, 0xffffff7d}, &(0x7f0000000040)=0x0, &(0x7f0000000280)) syz_io_uring_submit(r10, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r8, 0x184c, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x20000000, 0x4000000000003, 0x2}) socket$rds(0x15, 0x5, 0x0) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r11, &(0x7f0000000040)=0x800, 0x12) 6.727209233s ago: executing program 0 (id=21): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_procfs(0x0, 0x0) add_key$user(0x0, &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x7dca, 0x0, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x2ec4, &(0x7f00000003c0)={0x0, 0xffffff7d}, &(0x7f0000000040)=0x0, &(0x7f0000000280)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) 6.578371592s ago: executing program 0 (id=22): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, 0x0, 0x0) listen(r3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) listen(0xffffffffffffffff, 0x0) r4 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0xb0000000}) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) 1.423552506s ago: executing program 0 (id=23): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xa, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 1.290856917s ago: executing program 0 (id=24): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 0s ago: executing program 0 (id=25): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xb8, r4, 0x800, 0x70bd27, 0x1d, {}, [@TIPC_NLA_BEARER={0xa4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000000}, 0x19) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'ip6tnl0\x00'}) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000000b2e0500a40bf85edaca8300"], 0x0}, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000001580)=""/4091, 0xffb}], 0x1) ioctl$HIDIOCSFLAG(r6, 0x4004480f, &(0x7f0000000580)=0x2) ioctl$HIDIOCGUSAGE(r6, 0xc018480b, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='memory.events\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xa, &(0x7f0000000000)=r7, 0x4) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.79' (ED25519) to the list of known hosts. [ 67.677400][ T5204] cgroup: Unknown subsys name 'net' [ 67.834043][ T5204] cgroup: Unknown subsys name 'cpuset' [ 67.842117][ T5204] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.402018][ T5204] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.553472][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.569880][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.673333][ T5224] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.681711][ T5224] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.688158][ T5225] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.689370][ T5224] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.696744][ T5225] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.705887][ T5224] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.718736][ T5224] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.720003][ T5225] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.726560][ T5224] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.740951][ T5225] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.749556][ T5231] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.758860][ T5231] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.760468][ T4609] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.766993][ T5231] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.776081][ T4609] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.781313][ T5231] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.789147][ T4609] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.794745][ T5231] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.802328][ T4609] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 71.809321][ T5231] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.815458][ T4609] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.823691][ T5231] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 71.829451][ T4609] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 71.836655][ T5231] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.845300][ T4609] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.875731][ T4609] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.883344][ T4609] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.893804][ T4609] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.901660][ T4609] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 71.909101][ T4609] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.361078][ T5228] chnl_net:caif_netlink_parms(): no params data found [ 72.371754][ T5216] chnl_net:caif_netlink_parms(): no params data found [ 72.429401][ T5214] chnl_net:caif_netlink_parms(): no params data found [ 72.444283][ T5227] chnl_net:caif_netlink_parms(): no params data found [ 72.580062][ T5215] chnl_net:caif_netlink_parms(): no params data found [ 72.620390][ T5216] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.627909][ T5216] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.635630][ T5216] bridge_slave_0: entered allmulticast mode [ 72.642774][ T5216] bridge_slave_0: entered promiscuous mode [ 72.651640][ T5216] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.658735][ T5216] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.665960][ T5216] bridge_slave_1: entered allmulticast mode [ 72.673041][ T5216] bridge_slave_1: entered promiscuous mode [ 72.684024][ T5228] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.691370][ T5228] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.698539][ T5228] bridge_slave_0: entered allmulticast mode [ 72.705810][ T5228] bridge_slave_0: entered promiscuous mode [ 72.749509][ T5228] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.756790][ T5228] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.764222][ T5228] bridge_slave_1: entered allmulticast mode [ 72.771405][ T5228] bridge_slave_1: entered promiscuous mode [ 72.785239][ T5214] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.792653][ T5214] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.803623][ T5214] bridge_slave_0: entered allmulticast mode [ 72.810627][ T5214] bridge_slave_0: entered promiscuous mode [ 72.832101][ T5216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.862332][ T5214] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.869525][ T5214] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.877259][ T5214] bridge_slave_1: entered allmulticast mode [ 72.884720][ T5214] bridge_slave_1: entered promiscuous mode [ 72.893805][ T5216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.910566][ T5227] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.917639][ T5227] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.925643][ T5227] bridge_slave_0: entered allmulticast mode [ 72.932598][ T5227] bridge_slave_0: entered promiscuous mode [ 72.978486][ T5227] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.987982][ T5227] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.997607][ T5227] bridge_slave_1: entered allmulticast mode [ 73.004820][ T5227] bridge_slave_1: entered promiscuous mode [ 73.020793][ T5228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.043579][ T5216] team0: Port device team_slave_0 added [ 73.062953][ T5228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.084525][ T5214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.096380][ T5216] team0: Port device team_slave_1 added [ 73.112872][ T5227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.124381][ T5227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.150981][ T5214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.190562][ T5215] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.197744][ T5215] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.205454][ T5215] bridge_slave_0: entered allmulticast mode [ 73.216826][ T5215] bridge_slave_0: entered promiscuous mode [ 73.224718][ T5215] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.232234][ T5215] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.239431][ T5215] bridge_slave_1: entered allmulticast mode [ 73.246313][ T5215] bridge_slave_1: entered promiscuous mode [ 73.269478][ T5216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.277521][ T5216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.304201][ T5216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.327257][ T5228] team0: Port device team_slave_0 added [ 73.352459][ T5214] team0: Port device team_slave_0 added [ 73.370322][ T5216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.377326][ T5216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.403956][ T5216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.424306][ T5227] team0: Port device team_slave_0 added [ 73.432819][ T5227] team0: Port device team_slave_1 added [ 73.440096][ T5228] team0: Port device team_slave_1 added [ 73.456168][ T5214] team0: Port device team_slave_1 added [ 73.464374][ T5215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.477651][ T5215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.517632][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.524979][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.551416][ T5228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.598537][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.605656][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.631780][ T5228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.667523][ T5215] team0: Port device team_slave_0 added [ 73.676763][ T5216] hsr_slave_0: entered promiscuous mode [ 73.684022][ T5216] hsr_slave_1: entered promiscuous mode [ 73.692149][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.699123][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.725306][ T5227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.738113][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.745236][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.771182][ T5227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.785217][ T5214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.792280][ T5214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.818464][ T5214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.831000][ T5215] team0: Port device team_slave_1 added [ 73.843713][ T5214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.850725][ T5214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.877603][ T5235] Bluetooth: hci4: command tx timeout [ 73.883498][ T5214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.950461][ T5235] Bluetooth: hci3: command tx timeout [ 73.950514][ T5226] Bluetooth: hci2: command tx timeout [ 73.956070][ T4609] Bluetooth: hci1: command tx timeout [ 73.962182][ T5231] Bluetooth: hci0: command tx timeout [ 73.980848][ T5215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.987837][ T5215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.014226][ T5215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.058407][ T5227] hsr_slave_0: entered promiscuous mode [ 74.065763][ T5227] hsr_slave_1: entered promiscuous mode [ 74.072831][ T5227] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.080773][ T5227] Cannot create hsr debugfs directory [ 74.086862][ T5215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.094151][ T5215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.120630][ T5215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.134789][ T5228] hsr_slave_0: entered promiscuous mode [ 74.142342][ T5228] hsr_slave_1: entered promiscuous mode [ 74.149203][ T5228] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.157041][ T5228] Cannot create hsr debugfs directory [ 74.188401][ T5214] hsr_slave_0: entered promiscuous mode [ 74.195792][ T5214] hsr_slave_1: entered promiscuous mode [ 74.202466][ T5214] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.210167][ T5214] Cannot create hsr debugfs directory [ 74.267977][ T5215] hsr_slave_0: entered promiscuous mode [ 74.274611][ T5215] hsr_slave_1: entered promiscuous mode [ 74.281298][ T5215] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.288882][ T5215] Cannot create hsr debugfs directory [ 74.604032][ T5216] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.626622][ T5216] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.636843][ T5216] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.647574][ T5216] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.709369][ T5228] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.732086][ T5228] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.742244][ T5228] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.757908][ T5228] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.778362][ T5215] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.807257][ T5215] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.839006][ T5215] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.862378][ T5215] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.913521][ T5227] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.928237][ T5227] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.955746][ T5227] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.965834][ T5227] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.013305][ T5216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.056237][ T5214] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.088998][ T5214] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.104017][ T5216] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.127404][ T5214] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.140297][ T5214] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.163748][ T5228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.186945][ T1836] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.194351][ T1836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.207136][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.214377][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.297909][ T5228] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.324942][ T5227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.344137][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.351362][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.405817][ T5215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.418449][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.425634][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.438675][ T5227] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.485035][ T5215] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.498250][ T1836] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.506292][ T1836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.544746][ T1836] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.551902][ T1836] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.568669][ T1836] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.575848][ T1836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.585687][ T1836] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.592930][ T1836] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.679219][ T5214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.734010][ T5215] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.788248][ T5214] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.836177][ T1836] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.843402][ T1836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.884525][ T1836] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.891683][ T1836] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.950432][ T5226] Bluetooth: hci4: command tx timeout [ 75.964251][ T5227] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.003082][ T5216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.014078][ T5214] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.030547][ T5231] Bluetooth: hci0: command tx timeout [ 76.036075][ T5226] Bluetooth: hci2: command tx timeout [ 76.042212][ T5231] Bluetooth: hci3: command tx timeout [ 76.045209][ T5235] Bluetooth: hci1: command tx timeout [ 76.133246][ T5215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.234052][ T5216] veth0_vlan: entered promiscuous mode [ 76.265332][ T5216] veth1_vlan: entered promiscuous mode [ 76.376904][ T5228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.396287][ T5215] veth0_vlan: entered promiscuous mode [ 76.418722][ T5216] veth0_macvtap: entered promiscuous mode [ 76.433434][ T5216] veth1_macvtap: entered promiscuous mode [ 76.450936][ T5215] veth1_vlan: entered promiscuous mode [ 76.478369][ T5227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.511522][ T5216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.543015][ T5228] veth0_vlan: entered promiscuous mode [ 76.555738][ T5216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.569312][ T5214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.584589][ T5216] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.606075][ T5216] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.615778][ T5216] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.625147][ T5216] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.655701][ T5228] veth1_vlan: entered promiscuous mode [ 76.692707][ T5215] veth0_macvtap: entered promiscuous mode [ 76.718931][ T5215] veth1_macvtap: entered promiscuous mode [ 76.754350][ T5227] veth0_vlan: entered promiscuous mode [ 76.801550][ T5215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.814505][ T5215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.827743][ T5215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.847395][ T5227] veth1_vlan: entered promiscuous mode [ 76.871274][ T5228] veth0_macvtap: entered promiscuous mode [ 76.898981][ T5228] veth1_macvtap: entered promiscuous mode [ 76.911920][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.928662][ T5215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.930139][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.942449][ T5215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.966509][ T5215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.004441][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.008886][ T5215] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.021511][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.022588][ T5215] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.039310][ T5215] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.049289][ T5215] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.099010][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.114641][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.124617][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.139487][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.157953][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.171796][ T5227] veth0_macvtap: entered promiscuous mode [ 77.185660][ T5216] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.216325][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.231147][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.241555][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.252374][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.264411][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.283871][ T5227] veth1_macvtap: entered promiscuous mode [ 77.308940][ T5214] veth0_vlan: entered promiscuous mode [ 77.334417][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.345439][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.356451][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.367542][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.378093][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.397120][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.409461][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.423231][ T5228] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.439523][ T5228] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.454645][ T5228] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.465647][ T5228] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.541373][ T5214] veth1_vlan: entered promiscuous mode [ 77.575374][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.600355][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.618016][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.641697][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.651684][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.662264][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.674623][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.110664][ T5235] Bluetooth: hci4: command tx timeout [ 78.120273][ T5235] Bluetooth: hci1: command tx timeout [ 78.126159][ T5226] Bluetooth: hci2: command tx timeout [ 78.134868][ T5231] Bluetooth: hci3: command tx timeout [ 78.140809][ T5235] Bluetooth: hci0: command tx timeout [ 78.276473][ T5227] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.309850][ T5227] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.328278][ T5227] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.337455][ T5227] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.472502][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.494661][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.508386][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.528036][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.688201][ T5214] veth0_macvtap: entered promiscuous mode [ 78.757616][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.778866][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.824490][ T5214] veth1_macvtap: entered promiscuous mode [ 79.185096][ T5214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.207192][ T5214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.226205][ T5214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.255350][ T5214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.271804][ T5214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.287771][ T5214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.299247][ T5214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.329044][ T5214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.385501][ T5214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.454811][ T3632] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.501264][ T5214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.512675][ T3632] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.578594][ T5214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.636992][ T5214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.699987][ T5214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.751332][ T5214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.806052][ T5214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.856243][ T5214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.931802][ T5214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.977556][ T5214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.059353][ T5214] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.101823][ T5214] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.125325][ T5214] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.151193][ T5214] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.190757][ T5235] Bluetooth: hci0: command tx timeout [ 80.196318][ T5235] Bluetooth: hci3: command tx timeout [ 80.202378][ T5235] Bluetooth: hci2: command tx timeout [ 80.208331][ T5235] Bluetooth: hci1: command tx timeout [ 80.214285][ T5235] Bluetooth: hci4: command tx timeout [ 80.243557][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.290534][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.089644][ T5315] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8'. [ 81.123754][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.189853][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.258446][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.327126][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.472400][ T938] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 81.581286][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.589164][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.737613][ T938] usb 3-1: Using ep0 maxpacket: 32 [ 81.779145][ T938] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 81.831789][ T5321] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1'. [ 81.861946][ T938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.947976][ T938] usb 3-1: config 0 descriptor?? [ 82.030198][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.038715][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.047276][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.050506][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 82.139850][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 82.190161][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 82.310087][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 82.429767][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 82.440314][ T0] NOHZ tick-stop error: local softirq work is pending, handler #180!!! [ 82.521145][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 84.221041][ T938] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 86.063297][ T938] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 86.793542][ T938] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 86.838312][ T938] usb 3-1: media controller created [ 87.015266][ T938] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 91.159863][ T5304] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 91.365538][ T938] az6027: usb out operation failed. (-71) [ 91.371752][ T938] stb0899_attach: Driver disabled by Kconfig [ 91.377769][ T938] az6027: no front-end attached [ 91.377769][ T938] [ 91.523594][ T5304] usb 2-1: config 0 has an invalid interface number: 157 but max is 0 [ 91.681776][ T938] az6027: usb out operation failed. (-71) [ 91.687573][ T938] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 91.720082][ T5304] usb 2-1: config 0 has no interface number 0 [ 91.920062][ T5304] usb 2-1: config 0 interface 157 altsetting 133 endpoint 0x9 has an invalid bInterval 83, changing to 10 [ 92.006635][ T938] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 92.133228][ T5304] usb 2-1: config 0 interface 157 altsetting 133 endpoint 0x4 has invalid maxpacket 1536, setting to 64 [ 92.421588][ T938] dvb-usb: schedule remote query interval to 400 msecs. [ 92.428614][ T938] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 92.504603][ T5304] usb 2-1: config 0 interface 157 has no altsetting 0 [ 92.895309][ T5304] usb 2-1: language id specifier not provided by device, defaulting to English [ 95.897453][ T938] usb 3-1: USB disconnect, device number 2 [ 96.909742][ C0] sched: DL replenish lagged too much [ 97.451953][ T5304] usb 2-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=81.b0 [ 97.484695][ T5304] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.602863][ T5304] usb 2-1: Product: syz [ 97.727021][ T5304] usb 2-1: config 0 descriptor?? [ 97.820218][ T5304] usb 2-1: can't set config #0, error -71 [ 97.833049][ T938] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 97.930646][ T5304] usb 2-1: USB disconnect, device number 2 [ 98.820942][ T5235] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 98.838226][ T5235] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 98.846596][ T5235] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 98.855044][ T5235] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 98.864987][ T5235] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 98.872963][ T5235] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 99.106899][ T5419] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 99.182856][ T5305] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 99.270281][ T5235] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 99.278895][ T5235] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 99.288316][ T5235] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 99.298556][ T5235] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 99.306622][ T5235] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 99.327349][ T5235] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 99.488019][ T5305] usb 5-1: unable to get BOS descriptor or descriptor too short [ 99.540749][ T5305] usb 5-1: no configurations [ 99.570062][ T5305] usb 5-1: can't read configurations, error -22 [ 99.730524][ T5235] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 99.739549][ T5235] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 99.748428][ T5235] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 99.761660][ T5235] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 99.770315][ T5235] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 99.789280][ T5235] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 100.010773][ T5304] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 100.206462][ T5304] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 100.219806][ T5304] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.236168][ T5304] usb 1-1: Product: syz [ 100.242077][ T5304] usb 1-1: Manufacturer: syz [ 100.246731][ T5304] usb 1-1: SerialNumber: syz [ 100.280852][ T5304] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 100.425070][ T938] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 101.097715][ T5305] usb 1-1: USB disconnect, device number 2 [ 101.150294][ T5235] Bluetooth: hci5: command tx timeout [ 101.390976][ T5235] Bluetooth: hci6: command tx timeout [ 101.470710][ T938] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 101.486246][ T938] ath9k_htc: Failed to initialize the device [ 101.501075][ T5305] usb 1-1: ath9k_htc: USB layer deinitialized [ 101.871480][ T5235] Bluetooth: hci1: command tx timeout [ 102.643050][ T5437] 9pnet_fd: Insufficient options for proto=fd [ 103.230399][ T5235] Bluetooth: hci5: command tx timeout [ 103.480846][ T5235] Bluetooth: hci6: command tx timeout [ 103.949995][ T5235] Bluetooth: hci1: command tx timeout [ 105.310395][ T5235] Bluetooth: hci5: command tx timeout [ 105.550275][ T5235] Bluetooth: hci6: command tx timeout [ 106.030081][ T5235] Bluetooth: hci1: command tx timeout [ 107.393185][ T5235] Bluetooth: hci5: command tx timeout [ 107.630198][ T5235] Bluetooth: hci6: command tx timeout [ 108.109831][ T5235] Bluetooth: hci1: command tx timeout [ 110.440079][ T5304] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 110.604872][ T5304] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.621009][ T5304] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 110.638007][ T5304] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 110.665029][ T5304] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.689042][ T5304] usb 1-1: config 0 descriptor?? [ 111.153894][ T5304] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 111.223817][ T5304] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 111.673961][ T5231] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 111.683146][ T5231] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 111.692459][ T5231] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 111.704181][ T5231] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 111.714806][ T5231] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 111.728048][ T5231] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 113.800578][ T5235] Bluetooth: hci2: command tx timeout [ 115.881921][ T5235] Bluetooth: hci2: command tx timeout [ 117.960035][ T5235] Bluetooth: hci2: command tx timeout [ 120.030045][ T5235] Bluetooth: hci2: command tx timeout [ 121.478499][ T5493] plantronics 0003:047F:FFFF.0001: timeout initializing reports [ 121.605469][ T5231] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 121.617504][ T5231] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 121.625759][ T5231] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 121.638666][ T5231] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 121.659964][ T5231] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 121.671155][ T5231] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 123.710164][ T5231] Bluetooth: hci4: command tx timeout [ 125.790240][ T5231] Bluetooth: hci4: command tx timeout [ 127.870139][ T5231] Bluetooth: hci4: command tx timeout [ 129.950120][ T5231] Bluetooth: hci4: command tx timeout [ 132.999296][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.005779][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 153.762351][ T5235] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 153.771412][ T5235] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 153.780296][ T5235] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 153.805933][ T5235] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 153.813889][ T5235] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 153.828469][ T5235] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 154.184262][ T5231] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 154.209946][ T5231] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 154.218913][ T5231] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 154.229962][ T5231] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 154.240661][ T5231] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 154.248266][ T5231] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 155.949949][ T5235] Bluetooth: hci3: command tx timeout [ 156.280105][ T5235] Bluetooth: hci7: command tx timeout [ 158.030105][ T5235] Bluetooth: hci3: command tx timeout [ 158.352180][ T5235] Bluetooth: hci7: command tx timeout [ 158.858949][ T5231] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 158.872175][ T5231] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 158.880433][ T5231] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 158.889205][ T5231] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 158.900986][ T5231] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 158.916388][ T5231] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 160.109891][ T5235] Bluetooth: hci3: command tx timeout [ 160.440148][ T5235] Bluetooth: hci7: command tx timeout [ 160.990072][ T5235] Bluetooth: hci8: command tx timeout [ 162.199904][ T5235] Bluetooth: hci3: command tx timeout [ 162.520183][ T5235] Bluetooth: hci7: command tx timeout [ 163.079957][ T5235] Bluetooth: hci8: command tx timeout [ 165.167976][ T5235] Bluetooth: hci8: command tx timeout [ 167.230021][ T5235] Bluetooth: hci8: command tx timeout [ 171.959397][ T5231] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 171.971982][ T5231] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 171.999066][ T5231] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 172.007687][ T5231] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 172.018832][ T5231] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 172.030421][ T5231] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 174.110016][ T5231] Bluetooth: hci9: command tx timeout [ 176.200049][ T5231] Bluetooth: hci9: command tx timeout [ 178.280596][ T5231] Bluetooth: hci9: command tx timeout [ 180.350067][ T5231] Bluetooth: hci9: command tx timeout [ 182.115194][ T5235] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 182.123948][ T5235] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 182.135684][ T5235] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 182.144142][ T5235] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 182.153711][ T5235] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 182.170391][ T5235] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 184.269984][ T5235] Bluetooth: hci10: command tx timeout [ 186.359960][ T5235] Bluetooth: hci10: command tx timeout [ 188.430092][ T5235] Bluetooth: hci10: command tx timeout [ 190.519930][ T5235] Bluetooth: hci10: command tx timeout [ 194.435722][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.466765][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.521818][ T5235] Bluetooth: hci0: command 0x0406 tx timeout [ 213.986653][ T5235] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 213.997468][ T5235] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 214.008457][ T5235] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 214.018334][ T5235] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 214.030381][ T5235] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 214.038761][ T5235] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 214.434566][ T5231] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 214.443167][ T5231] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 214.452072][ T5231] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 214.462708][ T5231] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 214.473938][ T5231] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 214.482014][ T5231] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 216.109897][ T5235] Bluetooth: hci11: command tx timeout [ 216.509840][ T5235] Bluetooth: hci12: command tx timeout [ 218.195585][ T5235] Bluetooth: hci11: command tx timeout [ 218.589890][ T5235] Bluetooth: hci12: command tx timeout [ 219.915835][ T5231] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 219.924477][ T5231] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 219.932489][ T5231] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 219.942442][ T5231] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 219.952577][ T5231] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 219.971155][ T5231] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 220.269900][ T5224] Bluetooth: hci11: command tx timeout [ 220.670069][ T5224] Bluetooth: hci12: command tx timeout [ 222.030201][ T5224] Bluetooth: hci13: command tx timeout [ 222.128335][ T5226] Bluetooth: hci6: command 0x0406 tx timeout [ 222.134633][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 222.143715][ T5224] Bluetooth: hci5: command 0x0406 tx timeout [ 222.359965][ T5235] Bluetooth: hci11: command tx timeout [ 222.749827][ T5235] Bluetooth: hci12: command tx timeout [ 224.110033][ T5235] Bluetooth: hci13: command tx timeout [ 226.202153][ T5235] Bluetooth: hci13: command tx timeout [ 228.270061][ T5235] Bluetooth: hci13: command tx timeout [ 232.539925][ T4609] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 232.561782][ T4609] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 232.570311][ T4609] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 232.578771][ T4609] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 232.590863][ T4609] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 232.598836][ T4609] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 234.669871][ T4609] Bluetooth: hci14: command tx timeout [ 236.119510][ T8] cfg80211: failed to load regulatory.db [ 236.749996][ T4609] Bluetooth: hci14: command tx timeout [ 237.486132][ T4609] Bluetooth: hci2: command 0x0406 tx timeout [ 238.830001][ T5235] Bluetooth: hci14: command tx timeout [ 240.909985][ T5235] Bluetooth: hci14: command tx timeout [ 242.438334][ T4609] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 242.451060][ T4609] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 242.459810][ T4609] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 242.486303][ T4609] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 242.495173][ T4609] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 242.503157][ T4609] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 244.601792][ T4609] Bluetooth: hci15: command tx timeout [ 246.669960][ T4609] Bluetooth: hci15: command tx timeout [ 247.714554][ T4609] Bluetooth: hci4: command 0x0406 tx timeout [ 248.749954][ T5235] Bluetooth: hci15: command tx timeout [ 250.829908][ T5235] Bluetooth: hci15: command tx timeout [ 254.590120][ T30] INFO: task kworker/1:7:5305 blocked for more than 143 seconds. [ 254.597966][ T30] Not tainted 6.11.0-syzkaller-11558-g075dbe9f6e3c #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 254.643921][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 254.700100][ T30] task:kworker/1:7 state:D stack:24048 pid:5305 tgid:5305 ppid:2 flags:0x00004000 [ 254.807357][ T30] Workqueue: events bpf_prog_free_deferred [ 254.909177][ T30] Call Trace: [ 254.931970][ T30] [ 254.935024][ T30] __schedule+0x1843/0x4ae0 [ 254.939616][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 255.029720][ T30] ? schedule+0x90/0x320 [ 255.034096][ T30] ? __pfx___schedule+0x10/0x10 [ 255.039041][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 255.084959][ T30] ? __pfx_lock_release+0x10/0x10 [ 255.098749][ T30] ? kick_pool+0x1bd/0x620 [ 255.106811][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 255.118700][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 255.127278][ T30] ? schedule+0x90/0x320 [ 255.138868][ T30] schedule+0x14b/0x320 [ 255.146572][ T30] schedule_preempt_disabled+0x13/0x30 [ 255.162082][ T30] __mutex_lock+0x6a7/0xd70 [ 255.166700][ T30] ? __mutex_lock+0x52a/0xd70 [ 255.180047][ T30] ? bpf_prog_dev_bound_destroy+0x76/0x590 [ 255.186135][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 255.200838][ T30] bpf_prog_dev_bound_destroy+0x76/0x590 [ 255.206751][ T30] ? __pfx_bpf_prog_dev_bound_destroy+0x10/0x10 [ 255.219685][ T30] ? rcu_is_watching+0x15/0xb0 [ 255.224585][ T30] ? bpf_prog_free_deferred+0x375/0x710 [ 255.244277][ T30] bpf_prog_free_deferred+0x3c5/0x710 [ 255.254716][ T30] ? process_scheduled_works+0x976/0x1850 [ 255.268794][ T30] process_scheduled_works+0xa63/0x1850 [ 255.279417][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 255.291497][ T30] ? assign_work+0x364/0x3d0 [ 255.296201][ T30] worker_thread+0x870/0xd30 [ 255.307337][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 255.318106][ T30] ? __kthread_parkme+0x169/0x1d0 [ 255.328328][ T30] ? __pfx_worker_thread+0x10/0x10 [ 255.338981][ T30] kthread+0x2f0/0x390 [ 255.348833][ T30] ? __pfx_worker_thread+0x10/0x10 [ 255.359218][ T30] ? __pfx_kthread+0x10/0x10 [ 255.367191][ T30] ret_from_fork+0x4b/0x80 [ 255.381171][ T30] ? __pfx_kthread+0x10/0x10 [ 255.388222][ T30] ret_from_fork_asm+0x1a/0x30 [ 255.398926][ T30] [ 255.405586][ T30] INFO: task syz-executor:5426 blocked for more than 144 seconds. [ 255.421149][ T30] Not tainted 6.11.0-syzkaller-11558-g075dbe9f6e3c #0 [ 255.428536][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 255.443706][ T30] task:syz-executor state:D stack:24128 pid:5426 tgid:5426 ppid:1 flags:0x00000004 [ 255.457953][ T30] Call Trace: [ 255.466241][ T30] [ 255.478673][ T30] __schedule+0x1843/0x4ae0 [ 255.492916][ T30] ? __pfx___schedule+0x10/0x10 [ 255.497903][ T30] ? __pfx_lock_release+0x10/0x10 [ 255.508150][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 255.515626][ T30] ? schedule+0x90/0x320 [ 255.526369][ T30] schedule+0x14b/0x320 [ 255.534864][ T30] schedule_preempt_disabled+0x13/0x30 [ 255.546966][ T30] __mutex_lock+0x6a7/0xd70 [ 255.558271][ T30] ? __mutex_lock+0x52a/0xd70 [ 255.566168][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 255.580063][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 255.585217][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 255.602898][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 255.608161][ T30] ? __lock_acquire+0x1384/0x2050 [ 255.620253][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 255.625863][ T30] netlink_rcv_skb+0x1e3/0x430 [ 255.638419][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 255.646306][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 255.659352][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 255.665082][ T30] netlink_unicast+0x7f6/0x990 [ 255.679717][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 255.685134][ T30] ? __virt_addr_valid+0x183/0x530 [ 255.698068][ T30] ? __check_object_size+0x48e/0x900 [ 255.705660][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 255.718250][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.724042][ T30] ? __might_fault+0xaa/0x120 [ 255.728815][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.740126][ T30] __sock_sendmsg+0x221/0x270 [ 255.744943][ T30] __sys_sendto+0x39b/0x4f0 [ 255.749531][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 255.763520][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 255.769615][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 255.787977][ T30] ? exc_page_fault+0x590/0x8c0 [ 255.797935][ T30] __x64_sys_sendto+0xde/0x100 [ 255.806618][ T30] do_syscall_64+0xf3/0x230 [ 255.820057][ T30] ? clear_bhb_loop+0x35/0x90 [ 255.824883][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.838991][ T30] RIP: 0033:0x7f9da5d7fdcc [ 255.844530][ T30] RSP: 002b:00007ffd16884270 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 255.860032][ T30] RAX: ffffffffffffffda RBX: 00007f9da6a64620 RCX: 00007f9da5d7fdcc [ 255.868088][ T30] RDX: 0000000000000028 RSI: 00007f9da6a64670 RDI: 0000000000000003 [ 255.887261][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.893743][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.915392][ T30] RBP: 0000000000000000 R08: 00007ffd168842c4 R09: 000000000000000c [ 255.932573][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 255.948068][ T30] R13: 0000000000000000 R14: 00007f9da6a64670 R15: 0000000000000000 [ 255.956647][ T30] [ 255.967710][ T30] INFO: task syz.4.19:5431 blocked for more than 144 seconds. [ 255.975716][ T30] Not tainted 6.11.0-syzkaller-11558-g075dbe9f6e3c #0 [ 255.996189][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 256.005628][ T30] task:syz.4.19 state:D stack:27424 pid:5431 tgid:5428 ppid:5214 flags:0x00000004 [ 256.024515][ T30] Call Trace: [ 256.027878][ T30] [ 256.035225][ T30] __schedule+0x1843/0x4ae0 [ 256.047078][ T30] ? __pfx___schedule+0x10/0x10 [ 256.054104][ T30] ? __pfx_lock_release+0x10/0x10 [ 256.059282][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 256.069695][ T30] ? schedule+0x90/0x320 [ 256.074073][ T30] schedule+0x14b/0x320 [ 256.078322][ T30] schedule_preempt_disabled+0x13/0x30 [ 256.093719][ T30] __mutex_lock+0x6a7/0xd70 [ 256.098371][ T30] ? __mutex_lock+0x52a/0xd70 [ 256.108253][ T30] ? do_ip_setsockopt+0x127d/0x3cd0 [ 256.120262][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 256.125422][ T30] ? __pfx_lock_release+0x10/0x10 [ 256.137641][ T30] ? mark_lock+0x9a/0x360 [ 256.148084][ T30] do_ip_setsockopt+0x127d/0x3cd0 [ 256.159686][ T30] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 256.165299][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 256.180714][ T30] ip_setsockopt+0x63/0x100 [ 256.188271][ T30] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 256.201028][ T30] do_sock_setsockopt+0x3af/0x720 [ 256.206197][ T30] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 256.218486][ T30] ? __fget_files+0x29/0x470 [ 256.226506][ T30] ? __fget_files+0x3f3/0x470 [ 256.237402][ T30] ? __fget_files+0x29/0x470 [ 256.244679][ T30] __sys_setsockopt+0x1a2/0x250 [ 256.250076][ T30] __x64_sys_setsockopt+0xb5/0xd0 [ 256.255315][ T30] do_syscall_64+0xf3/0x230 [ 256.269495][ T30] ? clear_bhb_loop+0x35/0x90 [ 256.279884][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.285880][ T30] RIP: 0033:0x7f2530f7df39 [ 256.303246][ T30] RSP: 002b:00007f2531db7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 256.318269][ T30] RAX: ffffffffffffffda RBX: 00007f2531136058 RCX: 00007f2530f7df39 [ 256.328203][ T30] RDX: 0000000000000027 RSI: 0000000000000000 RDI: 0000000000000003 [ 256.344854][ T30] RBP: 00007f2530ff0216 R08: 000000000000000c R09: 0000000000000000 [ 256.358989][ T30] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 256.371995][ T30] R13: 0000000000000001 R14: 00007f2531136058 R15: 00007ffc0efeeb88 [ 256.386450][ T30] [ 256.395843][ T30] INFO: task syz.4.19:5432 blocked for more than 145 seconds. [ 256.410535][ T30] Not tainted 6.11.0-syzkaller-11558-g075dbe9f6e3c #0 [ 256.418123][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 256.435493][ T30] task:syz.4.19 state:D stack:23168 pid:5432 tgid:5428 ppid:5214 flags:0x00000004 [ 256.448233][ T30] Call Trace: [ 256.457661][ T30] [ 256.465239][ T30] __schedule+0x1843/0x4ae0 [ 256.476148][ T30] ? __pfx___schedule+0x10/0x10 [ 256.484652][ T30] ? __pfx_lock_release+0x10/0x10 [ 256.499771][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 256.505334][ T30] ? schedule+0x90/0x320 [ 256.518860][ T30] schedule+0x14b/0x320 [ 256.523515][ T30] schedule_preempt_disabled+0x13/0x30 [ 256.529060][ T30] __mutex_lock+0x6a7/0xd70 [ 256.540227][ T30] ? __mutex_lock+0x52a/0xd70 [ 256.545098][ T30] ? do_ip_setsockopt+0x127d/0x3cd0 [ 256.556946][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 256.562455][ T30] ? mark_lock+0x9a/0x360 [ 256.566905][ T30] do_ip_setsockopt+0x127d/0x3cd0 [ 256.581410][ T30] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 256.586900][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 256.606767][ T30] ip_setsockopt+0x63/0x100 [ 256.615254][ T30] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 256.626013][ T30] do_sock_setsockopt+0x3af/0x720 [ 256.634943][ T30] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 256.644504][ T30] ? __fget_files+0x29/0x470 [ 256.649191][ T30] ? __fget_files+0x3f3/0x470 [ 256.659059][ T30] ? __fget_files+0x29/0x470 [ 256.666942][ T30] __sys_setsockopt+0x1a2/0x250 [ 256.676856][ T30] __x64_sys_setsockopt+0xb5/0xd0 [ 256.686107][ T30] do_syscall_64+0xf3/0x230 [ 256.695505][ T30] ? clear_bhb_loop+0x35/0x90 [ 256.706359][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.718901][ T30] RIP: 0033:0x7f2530f7df39 [ 256.730283][ T30] RSP: 002b:00007f2531d96038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 256.738822][ T30] RAX: ffffffffffffffda RBX: 00007f2531136130 RCX: 00007f2530f7df39 [ 256.750280][ T30] RDX: 000000000000002a RSI: 0000000000000000 RDI: 0000000000000003 [ 256.758362][ T30] RBP: 00007f2530ff0216 R08: 0000000000000088 R09: 0000000000000000 [ 256.774618][ T30] R10: 0000000020000140 R11: 0000000000000246 R12: 0000000000000000 [ 256.787330][ T30] R13: 0000000000000000 R14: 00007f2531136130 R15: 00007ffc0efeeb88 [ 256.802404][ T30] [ 256.805599][ T30] [ 256.805599][ T30] Showing all locks held in the system: [ 256.819699][ T30] 3 locks held by kworker/0:0/8: [ 256.824920][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 256.846422][ T30] #1: ffffc900000d7d00 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 256.860659][ T30] #2: ffffffff8fcbe808 (rtnl_mutex){+.+.}-{3:3}, at: regdb_fw_cb+0x82/0x1c0 [ 256.869611][ T30] 1 lock held by ksoftirqd/0/16: [ 256.884546][ T30] 1 lock held by khungtaskd/30: [ 256.889594][ T30] #0: ffffffff8e937da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 256.916063][ T30] 3 locks held by kworker/u8:4/64: [ 256.923264][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 256.944234][ T30] #1: ffffc900015d7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 256.964676][ T30] #2: ffffffff8fcbe808 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 256.977150][ T30] 5 locks held by kworker/0:2/941: [ 256.986985][ T30] 2 locks held by getty/4971: [ 256.997702][ T30] #0: ffff88814bef40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 257.015150][ T30] #1: ffffc90002efe2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 257.029541][ T30] 3 locks held by kworker/1:6/5304: [ 257.039746][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 257.059681][ T30] #1: ffffc90004387d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 257.080002][ T30] #2: ffffffff8fcbe808 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 257.096277][ T30] 3 locks held by kworker/1:7/5305: [ 257.103438][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 257.125917][ T30] #1: ffffc900043cfd00 ((work_completion)(&aux->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 257.140532][ T30] #2: ffffffff8fcbe808 (rtnl_mutex){+.+.}-{3:3}, at: bpf_prog_dev_bound_destroy+0x76/0x590 [ 257.162387][ T30] 2 locks held by syz.3.8/5314: [ 257.167312][ T30] #0: ffffffff8fcbe808 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 257.182927][ T30] #1: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 257.200093][ T30] 3 locks held by kworker/u8:11/5369: [ 257.205552][ T30] #0: ffff88814bcbb948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 257.228624][ T30] #1: ffffc90004ae7d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 257.250806][ T30] #2: ffffffff8fcbe808 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 257.267175][ T30] 4 locks held by kworker/u8:21/5402: [ 257.276176][ T30] #0: ffff88801baeb148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 257.293539][ T30] #1: ffffc90004f37d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 257.310777][ T30] #2: ffffffff8fcb1d10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 257.329728][ T30] #3: ffffffff8fcbe808 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 257.340361][ T30] 1 lock held by syz-executor/5415: [ 257.345666][ T30] #0: ffffffff8fcbe808 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 257.363133][ T30] 1 lock held by syz-executor/5426: [ 257.368440][ T30] #0: ffffffff8fcbe808 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 257.385654][ T30] 1 lock held by syz.4.19/5431: [ 257.395981][ T30] #0: ffffffff8fcbe808 (rtnl_mutex){+.+.}-{3:3}, at: do_ip_setsockopt+0x127d/0x3cd0 [ 257.409680][ T30] 1 lock held by syz.4.19/5432: [ 257.418005][ T30] #0: ffffffff8fcbe808 (rtnl_mutex){+.+.}-{3:3}, at: do_ip_setsockopt+0x127d/0x3cd0 [ 257.439198][ T30] 1 lock held by syz.0.25/5493: [ 257.444532][ T30] #0: ffffffff8fcbe808 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 257.459678][ T30] 1 lock held by syz-executor/5504: [ 257.464952][ T30] #0: ffffffff8fcbe808 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 257.482379][ T30] 1 lock held by syz-executor/5507: [ 257.487734][ T30] #0: ffffffff8fcbe808 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 257.507051][ T30] 1 lock held by syz-executor/5513: [ 257.514415][ T30] #0: ffffffff8fcbe808 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 257.529691][ T30] 1 lock held by syz-executor/5518: [ 257.534959][ T30] #0: ffffffff8fcbe808 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 257.554854][ T30] 1 lock held by syz-executor/5521: [ 257.563630][ T30] #0: ffffffff8fcbe808 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 257.579277][ T30] 1 lock held by syz-executor/5526: [ 257.587638][ T30] #0: ffffffff8fcbe808 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 257.604083][ T30] 1 lock held by syz-executor/5531: [ 257.609387][ T30] #0: ffffffff8fcbe808 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 257.626005][ T30] 1 lock held by syz-executor/5538: [ 257.641993][ T30] #0: ffffffff8fcbe808 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 257.663964][ T30] 1 lock held by syz-executor/5542: [ 257.669441][ T30] #0: ffffffff8fcbe808 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 257.682737][ T30] 1 lock held by syz-executor/5545: [ 257.688039][ T30] #0: ffffffff8fcbe808 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 257.703327][ T30] 1 lock held by syz-executor/5556: [ 257.708629][ T30] #0: ffffffff8fcbe808 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 257.727404][ T30] 1 lock held by syz-executor/5564: [ 257.738424][ T30] #0: ffffffff8fcbe808 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 257.751408][ T30] [ 257.753838][ T30] ============================================= [ 257.753838][ T30] [ 257.771768][ T30] NMI backtrace for cpu 1 [ 257.776149][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-11558-g075dbe9f6e3c #0 [ 257.786442][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 257.796617][ T30] Call Trace: [ 257.799922][ T30] [ 257.802888][ T30] dump_stack_lvl+0x241/0x360 [ 257.807607][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.812836][ T30] ? __pfx__printk+0x10/0x10 [ 257.817488][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 257.822482][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 257.827981][ T30] ? _printk+0xd5/0x120 [ 257.832185][ T30] ? __pfx__printk+0x10/0x10 [ 257.836815][ T30] ? __wake_up_klogd+0xcc/0x110 [ 257.841701][ T30] ? __pfx__printk+0x10/0x10 [ 257.846344][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 257.851412][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 257.857438][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 257.863461][ T30] watchdog+0xff4/0x1040 [ 257.867743][ T30] ? watchdog+0x1ea/0x1040 [ 257.872206][ T30] ? __pfx_watchdog+0x10/0x10 [ 257.876932][ T30] kthread+0x2f0/0x390 [ 257.881030][ T30] ? __pfx_watchdog+0x10/0x10 [ 257.885751][ T30] ? __pfx_kthread+0x10/0x10 [ 257.890374][ T30] ret_from_fork+0x4b/0x80 [ 257.894830][ T30] ? __pfx_kthread+0x10/0x10 [ 257.899452][ T30] ret_from_fork_asm+0x1a/0x30 [ 257.904272][ T30] [ 257.908469][ T30] Sending NMI from CPU 1 to CPUs 0: [ 257.914592][ C0] NMI backtrace for cpu 0 [ 257.914605][ C0] CPU: 0 UID: 0 PID: 941 Comm: kworker/0:2 Not tainted 6.11.0-syzkaller-11558-g075dbe9f6e3c #0 [ 257.914626][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 257.914637][ C0] Workqueue: events nsim_dev_trap_report_work [ 257.914663][ C0] RIP: 0010:unwind_next_frame+0x101/0x22d0 [ 257.914698][ C0] Code: 24 48 81 c3 88 00 00 00 48 89 d8 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 c7 19 00 00 f6 03 03 0f 85 35 18 00 00 48 89 6c 24 50 <49> 8d 6d 35 48 89 e8 48 c1 e8 03 48 89 44 24 28 42 0f b6 04 20 84 [ 257.914718][ C0] RSP: 0018:ffffc90000006bb0 EFLAGS: 00000246 [ 257.914733][ C0] RAX: 1ffff92000000d9a RBX: 0000000000000000 RCX: ffffffff9a38d903 [ 257.914746][ C0] RDX: dffffc0000000000 RSI: ffffffff8a1725fe RDI: 0000000000000001 [ 257.914759][ C0] RBP: ffffc90000006cd0 R08: 000000000000000b R09: ffffc90000006d70 [ 257.914771][ C0] R10: ffffc90000006cd0 R11: ffffffff81806750 R12: dffffc0000000000 [ 257.914797][ C0] R13: ffffc90000006c80 R14: ffffffff8a1725fe R15: 0000000000000000 [ 257.914809][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 257.914824][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 257.914838][ C0] CR2: 0000001b31b1bff8 CR3: 000000000e734000 CR4: 00000000003506f0 [ 257.914855][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 257.914865][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 257.914876][ C0] Call Trace: [ 257.914881][ C0] [ 257.914888][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 257.914909][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 257.914935][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 257.914955][ C0] ? nmi_handle+0x2a/0x5a0 [ 257.914982][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 257.915006][ C0] ? nmi_handle+0x14f/0x5a0 [ 257.915023][ C0] ? nmi_handle+0x2a/0x5a0 [ 257.915040][ C0] ? unwind_next_frame+0x101/0x22d0 [ 257.915065][ C0] ? default_do_nmi+0x63/0x160 [ 257.915087][ C0] ? exc_nmi+0x123/0x1f0 [ 257.915107][ C0] ? end_repeat_nmi+0xf/0x53 [ 257.915137][ C0] ? NF_HOOK+0x29e/0x450 [ 257.915156][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 257.915178][ C0] ? NF_HOOK+0x29e/0x450 [ 257.915196][ C0] ? unwind_next_frame+0x101/0x22d0 [ 257.915222][ C0] ? unwind_next_frame+0x101/0x22d0 [ 257.915249][ C0] ? unwind_next_frame+0x101/0x22d0 [ 257.915279][ C0] [ 257.915284][ C0] [ 257.915294][ C0] ? nf_hook_slow+0xc3/0x220 [ 257.915318][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 257.915344][ C0] arch_stack_walk+0x11c/0x150 [ 257.915364][ C0] ? NF_HOOK+0x29e/0x450 [ 257.915384][ C0] stack_trace_save+0x118/0x1d0 [ 257.915407][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 257.915430][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 257.915456][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 257.915483][ C0] kasan_save_track+0x3f/0x80 [ 257.915504][ C0] ? kasan_save_track+0x3f/0x80 [ 257.915525][ C0] ? kasan_save_free_info+0x40/0x50 [ 257.915543][ C0] ? __kasan_slab_free+0x59/0x70 [ 257.915568][ C0] ? kfree+0x1a0/0x440 [ 257.915582][ C0] ? skb_release_data+0x6a0/0x8a0 [ 257.915600][ C0] ? consume_skb+0x9f/0xf0 [ 257.915614][ C0] ? nft_synproxy_eval_v4+0x3d2/0x610 [ 257.915639][ C0] ? nft_synproxy_do_eval+0x362/0xa60 [ 257.915663][ C0] ? nft_do_chain+0x4ad/0x1da0 [ 257.915689][ C0] ? nft_do_chain_inet+0x418/0x6b0 [ 257.915716][ C0] ? nf_hook_slow+0xc3/0x220 [ 257.915736][ C0] ? NF_HOOK+0x29e/0x450 [ 257.915774][ C0] kasan_save_free_info+0x40/0x50 [ 257.915792][ C0] __kasan_slab_free+0x59/0x70 [ 257.915814][ C0] ? skb_release_data+0x6a0/0x8a0 [ 257.915833][ C0] kfree+0x1a0/0x440 [ 257.915849][ C0] ? rcuref_put+0x1e3/0x240 [ 257.915864][ C0] ? skb_release_data+0x6a0/0x8a0 [ 257.915883][ C0] skb_release_data+0x6a0/0x8a0 [ 257.915906][ C0] consume_skb+0x9f/0xf0 [ 257.915922][ C0] nft_synproxy_eval_v4+0x3d2/0x610 [ 257.915950][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 257.915977][ C0] ? validate_chain+0x11e/0x5920 [ 257.915997][ C0] ? nf_ip_checksum+0x13a/0x500 [ 257.916025][ C0] nft_synproxy_do_eval+0x362/0xa60 [ 257.916053][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 257.916077][ C0] ? validate_chain+0x11e/0x5920 [ 257.916098][ C0] ? __pfx_validate_chain+0x10/0x10 [ 257.916123][ C0] nft_do_chain+0x4ad/0x1da0 [ 257.916157][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 257.916181][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 257.916217][ C0] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 257.916236][ C0] nft_do_chain_inet+0x418/0x6b0 [ 257.916265][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 257.916290][ C0] ? ipt_do_table+0x312/0x1860 [ 257.916323][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 257.916351][ C0] nf_hook_slow+0xc3/0x220 [ 257.916373][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 257.916393][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 257.916416][ C0] NF_HOOK+0x29e/0x450 [ 257.916436][ C0] ? NF_HOOK+0x9a/0x450 [ 257.916453][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 257.916473][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 257.916495][ C0] ? ip_rcv_finish+0x406/0x560 [ 257.916515][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 257.916535][ C0] NF_HOOK+0x3a4/0x450 [ 257.916556][ C0] ? __lock_acquire+0x1384/0x2050 [ 257.916581][ C0] ? NF_HOOK+0x9a/0x450 [ 257.916598][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 257.916615][ C0] ? ip_rcv_core+0x801/0xd10 [ 257.916635][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 257.916657][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 257.916677][ C0] __netif_receive_skb+0x2bf/0x650 [ 257.916703][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 257.916728][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 257.916748][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 257.916773][ C0] ? __pfx_lock_release+0x10/0x10 [ 257.916798][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 257.916828][ C0] process_backlog+0x662/0x15b0 [ 257.916855][ C0] ? process_backlog+0x33b/0x15b0 [ 257.916881][ C0] ? __pfx_process_backlog+0x10/0x10 [ 257.916903][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 257.916929][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 257.916956][ C0] __napi_poll+0xcb/0x490 [ 257.916981][ C0] net_rx_action+0x89b/0x1240 [ 257.917014][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 257.917039][ C0] ? sched_clock+0x4a/0x70 [ 257.917066][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 257.917097][ C0] handle_softirqs+0x2c5/0x980 [ 257.917125][ C0] ? do_softirq+0x11b/0x1e0 [ 257.917148][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 257.917174][ C0] do_softirq+0x11b/0x1e0 [ 257.917195][ C0] [ 257.917200][ C0] [ 257.917207][ C0] ? __pfx_do_softirq+0x10/0x10 [ 257.917228][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 257.917256][ C0] ? rcu_is_watching+0x15/0xb0 [ 257.917277][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 257.917300][ C0] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 257.917319][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 257.917345][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 257.917367][ C0] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 257.917389][ C0] nsim_dev_trap_report_work+0x75d/0xaa0 [ 257.917419][ C0] ? process_scheduled_works+0x976/0x1850 [ 257.917442][ C0] process_scheduled_works+0xa63/0x1850 [ 257.917478][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 257.917505][ C0] ? assign_work+0x364/0x3d0 [ 257.917529][ C0] worker_thread+0x870/0xd30 [ 257.917560][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 257.917585][ C0] ? __kthread_parkme+0x169/0x1d0 [ 257.917610][ C0] ? __pfx_worker_thread+0x10/0x10 [ 257.917633][ C0] kthread+0x2f0/0x390 [ 257.917648][ C0] ? __pfx_worker_thread+0x10/0x10 [ 257.917671][ C0] ? __pfx_kthread+0x10/0x10 [ 257.917690][ C0] ret_from_fork+0x4b/0x80 [ 257.917714][ C0] ? __pfx_kthread+0x10/0x10 [ 257.917730][ C0] ret_from_fork_asm+0x1a/0x30 [ 257.917762][ C0] [ 258.720979][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 258.727891][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-11558-g075dbe9f6e3c #0 [ 258.738082][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 258.748169][ T30] Call Trace: [ 258.751471][ T30] [ 258.754425][ T30] dump_stack_lvl+0x241/0x360 [ 258.759140][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.764374][ T30] ? __pfx__printk+0x10/0x10 [ 258.769005][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 258.775037][ T30] ? vscnprintf+0x5d/0x90 [ 258.779408][ T30] panic+0x349/0x880 [ 258.783348][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 258.789541][ T30] ? __pfx_panic+0x10/0x10 [ 258.793999][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 258.799408][ T30] ? __irq_work_queue_local+0x137/0x410 [ 258.804994][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 258.810420][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 258.816607][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 258.822801][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 258.828997][ T30] watchdog+0x1033/0x1040 [ 258.833367][ T30] ? watchdog+0x1ea/0x1040 [ 258.837828][ T30] ? __pfx_watchdog+0x10/0x10 [ 258.842544][ T30] kthread+0x2f0/0x390 [ 258.846661][ T30] ? __pfx_watchdog+0x10/0x10 [ 258.851377][ T30] ? __pfx_kthread+0x10/0x10 [ 258.856014][ T30] ret_from_fork+0x4b/0x80 [ 258.860470][ T30] ? __pfx_kthread+0x10/0x10 [ 258.865090][ T30] ret_from_fork_asm+0x1a/0x30 [ 258.869906][ T30] [ 258.873205][ T30] Kernel Offset: disabled [ 258.877555][ T30] Rebooting in 86400 seconds..