last executing test programs: 2m9.917397357s ago: executing program 1 (id=90): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) 2m5.107423453s ago: executing program 1 (id=109): socket$netlink(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) socket$inet6(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000200)={@val={0xa, 0x200}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, "042000", 0x8, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x1b59, 0x8}}}}}}}, 0x42) 2m2.531287455s ago: executing program 4 (id=122): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40010102, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r2, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) 2m0.406860288s ago: executing program 4 (id=124): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086dd"], 0xfdef) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$kcm(0x1e, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x2b, 0x80801, 0x1) connect$l2tp6(r2, &(0x7f0000000080)={0xa, 0x0, 0x292, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x2}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) r4 = syz_open_dev$sndctrl(&(0x7f0000002b80), 0x1, 0x8000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc2c45513, &(0x7f0000002e00)={{0x9, 0x7, 0x3, 0x7ff, 'syz0\x00', 0x7b}, 0x0, [0x1, 0x100, 0x1000, 0x6950, 0x1d1, 0x7fffffff, 0x5, 0x5, 0xbc0, 0xd89e, 0x15b, 0x8001, 0x5948, 0x5, 0x2, 0x8004a7, 0x9, 0x5, 0xb, 0x2, 0x3ff, 0x400, 0x2000040, 0x10040002, 0x9, 0x0, 0x2, 0x887f, 0x803, 0x3, 0xffffffff, 0x6, 0xffffffff, 0xfff, 0x3ff, 0x1, 0x5, 0x9, 0x3, 0x6, 0x100003, 0x3, 0xbfff8007, 0x200000e, 0xa, 0x0, 0x1, 0x400004, 0x5, 0x4, 0x9, 0x7fffffff, 0x3fe, 0x1ff, 0xb, 0xfffff647, 0x408, 0x4, 0x4000001, 0x9, 0x9, 0x5, 0x5, 0x8, 0x98, 0xc0, 0x8, 0xa, 0x4, 0x3, 0x7f, 0x10004, 0x22, 0x80000001, 0x6a2, 0xb, 0x4, 0x0, 0x8, 0x1e2, 0x7, 0x4, 0x1, 0x8, 0x2, 0x11002, 0x1, 0x5, 0x0, 0xcbe, 0x8, 0xff, 0x4, 0xfffffff9, 0xf8a, 0x58a0, 0xfc13, 0x9, 0x895, 0xc, 0x9, 0x89, 0xfffffffe, 0xa1a9, 0x8e0b2, 0x9, 0x3, 0x12, 0x3, 0x3, 0xfffffff8, 0x3, 0x2, 0x1, 0x2bd, 0x0, 0xe, 0x5, 0x8, 0x2, 0xfff, 0xfff, 0x3, 0x7, 0x2, 0x1007, 0x6, 0x6]}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r7, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="200026bd7000fbdbdf254b00000008000300", @ANYRES32=r9, @ANYBLOB="44007d8040000200ec528a5e0c838ec472a639298d05bb3b8276de7a9f04161244793724523d668b0608b4c27b280d4c06a5160600000099a3fb5639b6a5a1c528621333fe03aa5e0be1"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) 1m57.281687721s ago: executing program 1 (id=139): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x4}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}}, 0x0) close(0xffffffffffffffff) 1m57.062998385s ago: executing program 1 (id=141): socket$xdp(0x2c, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000001000)={'full', 0x20, 0x1, 0x20, 0xffffffffffffffff}, 0x2f) 1m56.695997531s ago: executing program 1 (id=142): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x50}}, 0x4000850) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 1m56.379400503s ago: executing program 1 (id=144): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000002c0)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) pread64(r0, 0x0, 0x0, 0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000003c0)=0x2000) 1m52.054856717s ago: executing program 0 (id=160): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x129, 0x0, 0x0, @fd=r0}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1m51.838143347s ago: executing program 0 (id=162): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x1e, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}, 0x0) socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="070000000400000080000000"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = socket(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000000000000000010011a801000f4800400058008000900000000000800038030000180050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d80500060000000000130002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018000180140004004d2906d0880fc8acc30fe2020f9849675000018014000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af080001000000000008000100000000006000018005000600000000000500060000000000080001000000000005000600000000000c00020073797a746e6c30000800010000000000130002006272696467655f736c6176655f30000014000500e078d277f38ed3a40a448f3f6b6763e83c000c8008", @ANYRES8=0x0, @ANYRES64=r3], 0x270}}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 1m51.150936865s ago: executing program 0 (id=167): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a5c000000060a0b0400000000454db63102000000300004802c0001800b0001006e756d67656e00001c00028008000240000056a7080003400000000008000140000000110900010073797a30000000000900020073797a3200000000"], 0x84}, 0x1, 0x0, 0x0, 0x40050}, 0x0) 1m51.104156198s ago: executing program 4 (id=168): close(0xffffffffffffffff) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e20, 0x80000, @mcast1, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=ANY=[], 0x28}, 0x1400c0c0) 1m50.773529955s ago: executing program 4 (id=172): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x2c, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x129, 0x0, 0x0, @fd=r0}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1m50.607709244s ago: executing program 0 (id=174): syz_emit_ethernet(0x60, &(0x7f0000002340)={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0x9, 0x6, "a4f293", 0x2a, 0x11, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[@srh={0x5e, 0x0, 0x4, 0x0, 0x0, 0x28, 0x1}], {0x4e20, 0x4e21, 0x22, 0x0, @gue={{0x1, 0x1, 0x0, 0x7, 0x100, @void}, "26bc4d426df105a1b58f88af5302632add03e74e5238"}}}}}}}, 0x0) 1m50.579437604s ago: executing program 4 (id=175): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000d80), 0x0, 0x820b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x40, 0x0, 0x0) 1m50.29661505s ago: executing program 0 (id=177): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r0, 0x0, 0x1400c0c0) 1m50.281090358s ago: executing program 4 (id=178): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086dd"], 0xfdef) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$kcm(0x1e, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x2b, 0x80801, 0x1) connect$l2tp6(r2, &(0x7f0000000080)={0xa, 0x0, 0x292, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x2}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) r4 = syz_open_dev$sndctrl(&(0x7f0000002b80), 0x1, 0x8000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc2c45513, &(0x7f0000002e00)={{0x9, 0x7, 0x3, 0x7ff, 'syz0\x00', 0x7b}, 0x0, [0x1, 0x100, 0x1000, 0x6950, 0x1d1, 0x7fffffff, 0x5, 0x5, 0xbc0, 0xd89e, 0x15b, 0x8001, 0x5948, 0x5, 0x2, 0x8004a7, 0x9, 0x5, 0xb, 0x2, 0x3ff, 0x400, 0x2000040, 0x10040002, 0x9, 0x0, 0x2, 0x887f, 0x803, 0x3, 0xffffffff, 0x6, 0xffffffff, 0xfff, 0x3ff, 0x1, 0x5, 0x9, 0x3, 0x6, 0x100003, 0x3, 0xbfff8007, 0x200000e, 0xa, 0x0, 0x1, 0x400004, 0x5, 0x4, 0x9, 0x7fffffff, 0x3fe, 0x1ff, 0xb, 0xfffff647, 0x408, 0x4, 0x4000001, 0x9, 0x9, 0x5, 0x5, 0x8, 0x98, 0xc0, 0x8, 0xa, 0x4, 0x3, 0x7f, 0x10004, 0x22, 0x80000001, 0x6a2, 0xb, 0x4, 0x0, 0x8, 0x1e2, 0x7, 0x4, 0x1, 0x8, 0x2, 0x11002, 0x1, 0x5, 0x0, 0xcbe, 0x8, 0xff, 0x4, 0xfffffff9, 0xf8a, 0x58a0, 0xfc13, 0x9, 0x895, 0xc, 0x9, 0x89, 0xfffffffe, 0xa1a9, 0x8e0b2, 0x9, 0x3, 0x12, 0x3, 0x3, 0xfffffff8, 0x3, 0x2, 0x1, 0x2bd, 0x0, 0xe, 0x5, 0x8, 0x2, 0xfff, 0xfff, 0x3, 0x7, 0x2, 0x1007, 0x6, 0x6]}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r7, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="200026bd7000fbdbdf254b00000008000300", @ANYRES32=r9, @ANYBLOB="44007d8040000200ec528a5e0c838ec472a639298d05bb3b8276de7a9f04161244793724523d668b0608b4c27b280d4c06a5160600000099a3fb5639b6a5a1c528621333fe03aa5e0be1"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) 1m43.538279541s ago: executing program 0 (id=180): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000002c0)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000003c0)=0x2000) 1m40.900743735s ago: executing program 32 (id=144): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000002c0)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) pread64(r0, 0x0, 0x0, 0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000003c0)=0x2000) 1m40.836451829s ago: executing program 3 (id=193): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x50}}, 0x4000850) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 1m40.70028755s ago: executing program 3 (id=194): socket$xdp(0x2c, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffc}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1m40.086110502s ago: executing program 3 (id=196): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000540), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={0x40, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x40}}, 0x0) 1m39.713359273s ago: executing program 3 (id=197): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x2c, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x129, 0x0, 0x0, @fd=r0}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1m39.43674487s ago: executing program 3 (id=200): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0xe, 0x1c, 0x66, 0x0, 0xf, 0x11, 0x0, @local, @empty=0xe0000001}, {0x4e24, 0x4e20, 0x8}}}}}, 0x0) 1m39.143552505s ago: executing program 3 (id=202): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a3000"], 0xfc}}, 0x0) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="000008e8aaaaaaaaaaaaaaaaaaaaaaaa88a80c0081003d00080045190014df64000008"], 0x2e) 1m34.500957274s ago: executing program 33 (id=178): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086dd"], 0xfdef) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$kcm(0x1e, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x2b, 0x80801, 0x1) connect$l2tp6(r2, &(0x7f0000000080)={0xa, 0x0, 0x292, @ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x2}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) r4 = syz_open_dev$sndctrl(&(0x7f0000002b80), 0x1, 0x8000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc2c45513, &(0x7f0000002e00)={{0x9, 0x7, 0x3, 0x7ff, 'syz0\x00', 0x7b}, 0x0, [0x1, 0x100, 0x1000, 0x6950, 0x1d1, 0x7fffffff, 0x5, 0x5, 0xbc0, 0xd89e, 0x15b, 0x8001, 0x5948, 0x5, 0x2, 0x8004a7, 0x9, 0x5, 0xb, 0x2, 0x3ff, 0x400, 0x2000040, 0x10040002, 0x9, 0x0, 0x2, 0x887f, 0x803, 0x3, 0xffffffff, 0x6, 0xffffffff, 0xfff, 0x3ff, 0x1, 0x5, 0x9, 0x3, 0x6, 0x100003, 0x3, 0xbfff8007, 0x200000e, 0xa, 0x0, 0x1, 0x400004, 0x5, 0x4, 0x9, 0x7fffffff, 0x3fe, 0x1ff, 0xb, 0xfffff647, 0x408, 0x4, 0x4000001, 0x9, 0x9, 0x5, 0x5, 0x8, 0x98, 0xc0, 0x8, 0xa, 0x4, 0x3, 0x7f, 0x10004, 0x22, 0x80000001, 0x6a2, 0xb, 0x4, 0x0, 0x8, 0x1e2, 0x7, 0x4, 0x1, 0x8, 0x2, 0x11002, 0x1, 0x5, 0x0, 0xcbe, 0x8, 0xff, 0x4, 0xfffffff9, 0xf8a, 0x58a0, 0xfc13, 0x9, 0x895, 0xc, 0x9, 0x89, 0xfffffffe, 0xa1a9, 0x8e0b2, 0x9, 0x3, 0x12, 0x3, 0x3, 0xfffffff8, 0x3, 0x2, 0x1, 0x2bd, 0x0, 0xe, 0x5, 0x8, 0x2, 0xfff, 0xfff, 0x3, 0x7, 0x2, 0x1007, 0x6, 0x6]}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r7, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="200026bd7000fbdbdf254b00000008000300", @ANYRES32=r9, @ANYBLOB="44007d8040000200ec528a5e0c838ec472a639298d05bb3b8276de7a9f04161244793724523d668b0608b4c27b280d4c06a5160600000099a3fb5639b6a5a1c528621333fe03aa5e0be1"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) 1m27.75714037s ago: executing program 34 (id=180): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000002c0)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, 0x0) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000003c0)=0x2000) 1m22.445487503s ago: executing program 35 (id=202): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a3000"], 0xfc}}, 0x0) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="000008e8aaaaaaaaaaaaaaaaaaaaaaaa88a80c0081003d00080045190014df64000008"], 0x2e) 28.98293526s ago: executing program 2 (id=245): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004e884}, 0x3000000) 28.168052214s ago: executing program 2 (id=246): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x2000000000000) 26.114649551s ago: executing program 2 (id=247): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, 0x0, 0x4) 18.2572567s ago: executing program 2 (id=248): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r3, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) 17.761317052s ago: executing program 2 (id=249): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x2f00, &(0x7f00000004c0)={0x0, 0xe8e2, 0x400, 0x20001, 0x2d6}) r3 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x6) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000019080)=0x1) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003280), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x3000c041) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_drvinfo={0x3, "653c1b4e82844461df245d602e571157637b2b264d65f76409a869d62cec2666", "2e2bb08b16c51ac62f5a95c880e2467137a74f00e71e64160700", "aed417062feee7c199b98743ad7e98588e00", "9fcc63648d5ca6f91b8d245971ee8a08460e7400", "21acd16f247aae4d9e6d207292339e96294b6d8b1491fae6922d6d21831cdac0", "81f44df52305410a0af0460a", 0x4, 0x5, 0x6, 0x7, 0x7ffffffd}}) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='hfs\x00', 0x8000, 0x0) 16.256088372s ago: executing program 2 (id=250): r0 = socket(0x10, 0x3, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48f8e70010000df127bd70001c00ff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 0s ago: executing program 36 (id=250): r0 = socket(0x10, 0x3, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48f8e70010000df127bd70001c00ff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.17' (ED25519) to the list of known hosts. [ 75.245295][ T5581] cgroup: Unknown subsys name 'net' [ 75.486560][ T5581] cgroup: Unknown subsys name 'cpuset' [ 75.531647][ T5581] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.247612][ T5581] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.650475][ T5603] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.677691][ T5606] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.710299][ T5609] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.723241][ T5616] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.729754][ T5609] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.742478][ T5616] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.745123][ T5609] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.764958][ T5619] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.769316][ T5617] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.772377][ T5617] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.777534][ T5609] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.781530][ T5617] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.782010][ T5609] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.783159][ T5609] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.784137][ T5617] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.784586][ T5609] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.785246][ T5609] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.789522][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.789952][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.790691][ T5609] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.791532][ T5609] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.793672][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.795566][ T5609] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.831361][ T5615] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.842099][ T5606] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.862962][ T5606] Bluetooth: hci3: command tx timeout [ 81.941954][ T5606] Bluetooth: hci4: command tx timeout [ 81.942068][ T5606] Bluetooth: hci0: command tx timeout [ 81.942145][ T5606] Bluetooth: hci2: command tx timeout [ 82.021211][ T5603] Bluetooth: hci1: command tx timeout [ 82.329397][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.329925][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.330071][ T5596] bridge_slave_0: entered allmulticast mode [ 82.334138][ T5596] bridge_slave_0: entered promiscuous mode [ 82.338412][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.338524][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.338981][ T5597] bridge_slave_0: entered allmulticast mode [ 82.347346][ T5597] bridge_slave_0: entered promiscuous mode [ 82.389049][ T5598] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.389163][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.389269][ T5598] bridge_slave_0: entered allmulticast mode [ 82.390655][ T5598] bridge_slave_0: entered promiscuous mode [ 82.405047][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.405142][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.405386][ T5596] bridge_slave_1: entered allmulticast mode [ 82.442158][ T5596] bridge_slave_1: entered promiscuous mode [ 82.444071][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.444195][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.444302][ T5597] bridge_slave_1: entered allmulticast mode [ 82.445738][ T5597] bridge_slave_1: entered promiscuous mode [ 82.489229][ T5598] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.489338][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.489483][ T5598] bridge_slave_1: entered allmulticast mode [ 82.492187][ T5598] bridge_slave_1: entered promiscuous mode [ 82.539058][ T5594] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.539161][ T5594] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.539269][ T5594] bridge_slave_0: entered allmulticast mode [ 82.540695][ T5594] bridge_slave_0: entered promiscuous mode [ 82.600818][ T5594] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.600942][ T5594] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.603633][ T5594] bridge_slave_1: entered allmulticast mode [ 82.606155][ T5594] bridge_slave_1: entered promiscuous mode [ 82.635350][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.638364][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.674086][ T5598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.677755][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.679671][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.679899][ T5595] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.679973][ T5595] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.680065][ T5595] bridge_slave_0: entered allmulticast mode [ 82.691988][ T5595] bridge_slave_0: entered promiscuous mode [ 82.726570][ T5598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.757201][ T5595] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.757267][ T5595] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.757547][ T5595] bridge_slave_1: entered allmulticast mode [ 82.759082][ T5595] bridge_slave_1: entered promiscuous mode [ 82.763883][ T5594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.830878][ T5594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.848470][ T5596] team0: Port device team_slave_0 added [ 82.850381][ T5597] team0: Port device team_slave_0 added [ 82.886165][ T5598] team0: Port device team_slave_0 added [ 82.888073][ T5596] team0: Port device team_slave_1 added [ 82.889576][ T5597] team0: Port device team_slave_1 added [ 82.896490][ T5595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.920972][ T5598] team0: Port device team_slave_1 added [ 82.948843][ T5595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.950429][ T5594] team0: Port device team_slave_0 added [ 83.006391][ T5594] team0: Port device team_slave_1 added [ 83.023506][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.023518][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.023530][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.025394][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.025407][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.025427][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.068878][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.068893][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.068918][ T5598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.071359][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.071374][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.071395][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.075468][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.075480][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.075516][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.078770][ T5595] team0: Port device team_slave_0 added [ 83.099094][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.099109][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.099130][ T5598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.134447][ T5595] team0: Port device team_slave_1 added [ 83.135426][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.135438][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.135458][ T5594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.175464][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.175479][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.175500][ T5594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.259267][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.259281][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.259302][ T5595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.347980][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.347996][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.348017][ T5595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.365253][ T5596] hsr_slave_0: entered promiscuous mode [ 83.366664][ T5596] hsr_slave_1: entered promiscuous mode [ 83.406368][ T5597] hsr_slave_0: entered promiscuous mode [ 83.407625][ T5597] hsr_slave_1: entered promiscuous mode [ 83.408567][ T5597] debugfs: 'hsr0' already exists in 'hsr' [ 83.409444][ T5597] Cannot create hsr debugfs directory [ 83.454117][ T5598] hsr_slave_0: entered promiscuous mode [ 83.455797][ T5598] hsr_slave_1: entered promiscuous mode [ 83.456755][ T5598] debugfs: 'hsr0' already exists in 'hsr' [ 83.456776][ T5598] Cannot create hsr debugfs directory [ 83.525629][ T5594] hsr_slave_0: entered promiscuous mode [ 83.526871][ T5594] hsr_slave_1: entered promiscuous mode [ 83.527967][ T5594] debugfs: 'hsr0' already exists in 'hsr' [ 83.527990][ T5594] Cannot create hsr debugfs directory [ 83.941295][ T5603] Bluetooth: hci3: command tx timeout [ 84.021533][ T5606] Bluetooth: hci0: command tx timeout [ 84.021565][ T5606] Bluetooth: hci4: command tx timeout [ 84.021802][ T5603] Bluetooth: hci2: command tx timeout [ 84.102828][ T5603] Bluetooth: hci1: command tx timeout [ 84.407464][ T5595] hsr_slave_0: entered promiscuous mode [ 84.408288][ T5595] hsr_slave_1: entered promiscuous mode [ 84.408817][ T5595] debugfs: 'hsr0' already exists in 'hsr' [ 84.408833][ T5595] Cannot create hsr debugfs directory [ 85.058325][ T5596] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.095576][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.109704][ T5596] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.149937][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.191580][ T5596] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.227900][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.230424][ T5596] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.275116][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.375848][ T5597] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.394876][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.399363][ T5597] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.426479][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.428621][ T5597] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.477045][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.502006][ T5597] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.535618][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.706587][ T5594] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.739639][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.746154][ T5594] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.786104][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.791324][ T5594] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.834005][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.858577][ T5594] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.894767][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.021324][ T5603] Bluetooth: hci3: command tx timeout [ 86.028966][ T5595] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.064426][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.070928][ T5595] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.104237][ T5603] Bluetooth: hci2: command tx timeout [ 86.104268][ T5603] Bluetooth: hci4: command tx timeout [ 86.104286][ T5603] Bluetooth: hci0: command tx timeout [ 86.147775][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.153118][ T5595] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.174166][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.183858][ T4911] Bluetooth: hci1: command tx timeout [ 86.185743][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.210639][ T5595] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.255334][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.372971][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.392440][ T5598] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 86.436289][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.450549][ T5598] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 86.474732][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.479776][ T5598] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 86.517709][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.531393][ T5598] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 86.575186][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.585051][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.585264][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.620699][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.646251][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.646381][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.759857][ T5597] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.806644][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.806752][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.810153][ T5594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.873689][ T36] cfg80211: failed to load regulatory.db [ 86.877836][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.877959][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.041335][ T5594] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.127027][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.127234][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.167089][ T5595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.175361][ T167] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.175481][ T167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.329584][ T5595] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.361847][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.409819][ T183] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.410038][ T183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.474196][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.474440][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.554749][ T5598] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.625843][ T167] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.630243][ T167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.729539][ T167] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.729692][ T167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.024990][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.102609][ T4911] Bluetooth: hci3: command tx timeout [ 88.181169][ T4911] Bluetooth: hci0: command tx timeout [ 88.181207][ T4911] Bluetooth: hci4: command tx timeout [ 88.181227][ T4911] Bluetooth: hci2: command tx timeout [ 88.261564][ T5603] Bluetooth: hci1: command tx timeout [ 88.431525][ T5596] veth0_vlan: entered promiscuous mode [ 88.526371][ T5596] veth1_vlan: entered promiscuous mode [ 88.544846][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.814416][ T5594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.820674][ T5596] veth0_macvtap: entered promiscuous mode [ 88.870830][ T5596] veth1_macvtap: entered promiscuous mode [ 88.930615][ T5597] veth0_vlan: entered promiscuous mode [ 89.008846][ T5597] veth1_vlan: entered promiscuous mode [ 89.018425][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.070443][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.147782][ T196] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.166413][ T5595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.173903][ T196] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.198537][ T196] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.237290][ T196] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.256835][ T5594] veth0_vlan: entered promiscuous mode [ 89.403089][ T5597] veth0_macvtap: entered promiscuous mode [ 89.418567][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.429916][ T5594] veth1_vlan: entered promiscuous mode [ 89.519002][ T5597] veth1_macvtap: entered promiscuous mode [ 89.757339][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.760430][ T5595] veth0_vlan: entered promiscuous mode [ 89.795754][ T167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.795773][ T167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.827508][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.850898][ T5594] veth0_macvtap: entered promiscuous mode [ 89.904067][ T55] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.909790][ T5595] veth1_vlan: entered promiscuous mode [ 89.920044][ T5594] veth1_macvtap: entered promiscuous mode [ 89.930038][ T196] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.934739][ T196] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.935017][ T196] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.080886][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.080904][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.112969][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.246272][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.430977][ T55] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.470604][ T196] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.549848][ T196] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.566938][ T196] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.577926][ T5595] veth0_macvtap: entered promiscuous mode [ 90.624845][ T196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.624865][ T196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.718854][ T5595] veth1_macvtap: entered promiscuous mode [ 90.997029][ T5598] veth0_vlan: entered promiscuous mode [ 91.074277][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.074295][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.369810][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.438658][ T5796] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6'. [ 91.469392][ T5796] bond0: entered promiscuous mode [ 91.469413][ T5796] bond_slave_0: entered promiscuous mode [ 91.469648][ T5796] bond_slave_1: entered promiscuous mode [ 91.496178][ T5796] gretap0: entered promiscuous mode [ 91.497398][ T5796] hsr1: entered promiscuous mode [ 91.499942][ T5598] veth1_vlan: entered promiscuous mode [ 91.512431][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.611596][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.611614][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.667861][ T167] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.669875][ T167] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.683835][ T167] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.798267][ T167] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.886258][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.419237][ T1344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.419256][ T1344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.640630][ T5814] syz.1.12 uses obsolete (PF_INET,SOCK_PACKET) [ 92.847885][ T5598] veth0_macvtap: entered promiscuous mode [ 92.880858][ T5598] veth1_macvtap: entered promiscuous mode [ 94.614993][ T1185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.615017][ T1185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.820393][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.002791][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.002851][ T167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.002865][ T167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.227531][ T183] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.240180][ T183] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.260588][ T1185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.268442][ T1185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.386012][ T5843] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 96.517070][ T5843] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 96.517217][ T5843] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 96.517332][ T5843] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 96.569997][ T5843] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 96.571384][ T5843] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 96.571522][ T5843] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 96.571640][ T5843] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 96.571756][ T5843] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 96.571879][ T5843] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 96.644349][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.644367][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.242079][ T1345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.242098][ T1345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.443152][ T5873] netlink: 'syz.2.30': attribute type 2 has an invalid length. [ 101.698190][ T5894] net_ratelimit: 1912 callbacks suppressed [ 101.698206][ T5894] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 101.896271][ T5894] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 101.896425][ T5894] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 101.896540][ T5894] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 101.896656][ T5894] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 101.896768][ T5894] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 101.907149][ T5894] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 101.907295][ T5894] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 101.907407][ T5894] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 101.907514][ T5894] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 102.695423][ T5906] netlink: 40 bytes leftover after parsing attributes in process `syz.1.40'. [ 103.172327][ T5918] netlink: 20 bytes leftover after parsing attributes in process `syz.0.43'. [ 103.309350][ T5918] Zero length message leads to an empty skb [ 104.519027][ T5938] netlink: 16 bytes leftover after parsing attributes in process `syz.4.49'. [ 105.288496][ T5941] netlink: 36 bytes leftover after parsing attributes in process `syz.1.50'. [ 106.886504][ T5938] bond0: entered promiscuous mode [ 106.886525][ T5938] bond_slave_0: entered promiscuous mode [ 106.886743][ T5938] bond_slave_1: entered promiscuous mode [ 106.914156][ T5938] gretap0: entered promiscuous mode [ 106.915084][ T5938] debugfs: 'hsr1' already exists in 'hsr' [ 106.915100][ T5938] Cannot create hsr debugfs directory [ 106.915113][ T5938] hsr1: entered promiscuous mode [ 107.132701][ T5945] netlink: 20 bytes leftover after parsing attributes in process `syz.4.52'. [ 107.311383][ T5950] net_ratelimit: 631 callbacks suppressed [ 107.311403][ T5950] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 107.363795][ T5950] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 107.363926][ T5950] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 107.364037][ T5950] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 107.367344][ T5950] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 107.367484][ T5950] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 107.367616][ T5950] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 107.367733][ T5950] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 107.367876][ T5950] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 107.367995][ T5950] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 109.976038][ T5975] netlink: 'syz.1.63': attribute type 2 has an invalid length. [ 110.384596][ T5991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.69'. [ 112.956894][ T5997] net_ratelimit: 4409 callbacks suppressed [ 112.956923][ T5997] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 112.957330][ T5997] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 112.957734][ T5997] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 112.958137][ T5997] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 112.958530][ T5997] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 112.991855][ T5997] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 112.992249][ T5997] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 112.992893][ T5997] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 112.993319][ T5997] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 112.993662][ T5997] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 120.359783][ T6036] netlink: 16 bytes leftover after parsing attributes in process `syz.4.80'. [ 122.665630][ T6064] netlink: 'syz.3.88': attribute type 2 has an invalid length. [ 128.047659][ T6124] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 疽m%AAZZI % [ 128.430465][ T6157] netlink: 16 bytes leftover after parsing attributes in process `syz.0.112'. [ 128.651893][ T6157] bond0: entered promiscuous mode [ 128.651916][ T6157] bond_slave_0: entered promiscuous mode [ 128.652146][ T6157] bond_slave_1: entered promiscuous mode [ 128.698033][ T6157] gretap0: entered promiscuous mode [ 128.705903][ T6157] debugfs: 'hsr1' already exists in 'hsr' [ 128.705929][ T6157] Cannot create hsr debugfs directory [ 128.705952][ T6157] hsr1: entered promiscuous mode [ 129.756774][ T5603] Bluetooth: hci2: link tx timeout [ 129.756951][ T5603] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 131.889501][ T5603] Bluetooth: hci2: command 0x0406 tx timeout [ 132.271607][ T6202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.129'. [ 133.457852][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.457943][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.781052][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 133.851053][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 133.951062][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 134.634727][ T6223] net_ratelimit: 54 callbacks suppressed [ 134.634754][ T6223] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 136.191430][ T6248] netlink: 40 bytes leftover after parsing attributes in process `syz.0.143'. [ 136.865371][ T6257] netlink: 20 bytes leftover after parsing attributes in process `syz.2.146'. [ 137.313347][ T6264] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 140.466690][ T6304] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 140.883406][ T6311] netlink: 7 bytes leftover after parsing attributes in process `syz.3.163'. [ 141.025305][ T6310] netlink: 'syz.0.162': attribute type 43 has an invalid length. [ 141.161883][ T6315] netlink: 20 bytes leftover after parsing attributes in process `syz.2.164'. [ 150.302378][ T824] hid-generic 0005:0007:0007.0001: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 150.471637][ T6377] netlink: 40 bytes leftover after parsing attributes in process `syz.2.189'. [ 152.547528][ T5603] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 152.575237][ T5603] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 152.596615][ T5603] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 152.618877][ T5603] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 152.619760][ T5603] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 153.693118][ T6416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.202'. [ 153.693188][ T6416] netlink: 60 bytes leftover after parsing attributes in process `syz.3.202'. [ 154.284109][ T6422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.204'. [ 154.284129][ T6422] netlink: 24 bytes leftover after parsing attributes in process `syz.2.204'. [ 154.284754][ T6422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.204'. [ 154.284769][ T6422] netlink: 24 bytes leftover after parsing attributes in process `syz.2.204'. [ 154.754193][ T4911] Bluetooth: hci5: command tx timeout [ 155.825206][ T6426] Set syz1 is full, maxelem 2076 reached [ 156.821204][ T4911] Bluetooth: hci5: command tx timeout [ 158.901209][ T4911] Bluetooth: hci5: command tx timeout [ 158.964309][ T5603] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 158.971373][ T5603] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 158.975344][ T5603] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 158.987046][ T5603] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 158.991231][ T5603] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 161.006723][ T4911] Bluetooth: hci5: command tx timeout [ 161.231164][ T4911] Bluetooth: hci2: command tx timeout [ 162.978047][ T6460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.214'. [ 162.978066][ T6460] netlink: 24 bytes leftover after parsing attributes in process `syz.2.214'. [ 162.980264][ T6460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.214'. [ 162.980282][ T6460] netlink: 24 bytes leftover after parsing attributes in process `syz.2.214'. [ 163.305206][ T4911] Bluetooth: hci2: command tx timeout [ 164.192205][ T6392] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.351066][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 164.391042][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c8!!! [ 164.464997][ T6392] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.465572][ T6392] bridge_slave_0: entered allmulticast mode [ 164.504353][ T6469] netlink: 20 bytes leftover after parsing attributes in process `syz.2.216'. [ 164.516158][ T6392] bridge_slave_0: entered promiscuous mode [ 164.622784][ T6392] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.622992][ T6392] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.989881][ T6392] bridge_slave_1: entered allmulticast mode [ 165.042111][ T6392] bridge_slave_1: entered promiscuous mode [ 165.389308][ T4911] Bluetooth: hci2: command tx timeout [ 165.738391][ T6392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.473029][ T6392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.728683][ T5606] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 166.763103][ T5606] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 166.766248][ T5606] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 166.781411][ T5606] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 166.792049][ T5606] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 167.462369][ T4911] Bluetooth: hci2: command tx timeout [ 168.138611][ T6392] team0: Port device team_slave_0 added [ 168.293525][ T6392] team0: Port device team_slave_1 added [ 168.984583][ T4911] Bluetooth: hci6: command tx timeout [ 171.061388][ T4911] Bluetooth: hci6: command tx timeout [ 173.141456][ T4911] Bluetooth: hci6: command tx timeout [ 173.544475][ T5606] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 173.568190][ T5606] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 173.581430][ T5606] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 173.606712][ T5606] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 173.629051][ T5606] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 175.221243][ T4911] Bluetooth: hci6: command tx timeout [ 175.701312][ T4911] Bluetooth: hci0: command tx timeout [ 177.835345][ T4911] Bluetooth: hci0: command tx timeout [ 179.237982][ T6392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.237997][ T6392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.238019][ T6392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.256234][ T6392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.256257][ T6392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.256278][ T6392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.861887][ T4911] Bluetooth: hci0: command tx timeout [ 181.133922][ T6392] hsr_slave_0: entered promiscuous mode [ 181.136837][ T6514] netlink: 44 bytes leftover after parsing attributes in process `syz.2.225'. [ 181.155756][ T6392] hsr_slave_1: entered promiscuous mode [ 181.212931][ T6392] debugfs: 'hsr0' already exists in 'hsr' [ 181.212958][ T6392] Cannot create hsr debugfs directory [ 181.941276][ T4911] Bluetooth: hci0: command tx timeout [ 193.995696][ T6548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.233'. [ 193.995729][ T6548] netlink: 12 bytes leftover after parsing attributes in process `syz.2.233'. [ 194.146967][ T6549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.233'. [ 194.146999][ T6549] netlink: 12 bytes leftover after parsing attributes in process `syz.2.233'. [ 194.352021][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.352087][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.186214][ T1185] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.266611][ T6552] netlink: 12 bytes leftover after parsing attributes in process `syz.2.234'. [ 205.037141][ T148] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.361131][ T148] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.746314][ T5606] Bluetooth: hci1: command 0x0406 tx timeout [ 206.829398][ T1344] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.494928][ T1344] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.511546][ T6443] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.511674][ T6443] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.511917][ T6443] bridge_slave_0: entered allmulticast mode [ 207.525359][ T6443] bridge_slave_0: entered promiscuous mode [ 209.717580][ T6443] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.717688][ T6443] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.717906][ T6443] bridge_slave_1: entered allmulticast mode [ 209.817643][ T6443] bridge_slave_1: entered promiscuous mode [ 213.771715][ T6443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.793844][ T5606] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 213.827247][ T5606] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 213.842141][ T5606] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 213.903985][ T5606] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 214.011487][ T5606] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 214.286753][ T6443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.095165][ T6443] team0: Port device team_slave_0 added [ 216.134298][ T4911] Bluetooth: hci3: command tx timeout [ 217.782577][ T6443] team0: Port device team_slave_1 added [ 218.182270][ T5606] Bluetooth: hci3: command tx timeout [ 220.302568][ T5606] Bluetooth: hci3: command tx timeout [ 221.929486][ T4911] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 221.954283][ T4911] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 221.971501][ T4911] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 222.018710][ T4911] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 222.187471][ T4911] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 222.344996][ T4911] Bluetooth: hci3: command tx timeout [ 225.999752][ T5606] Bluetooth: hci4: command tx timeout [ 226.414354][ T6473] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.414485][ T6473] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.414720][ T6473] bridge_slave_0: entered allmulticast mode [ 226.457586][ T6473] bridge_slave_0: entered promiscuous mode [ 228.021740][ T5606] Bluetooth: hci4: command tx timeout [ 228.510896][ T6487] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.524909][ T6487] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.525161][ T6487] bridge_slave_0: entered allmulticast mode [ 228.569795][ T6487] bridge_slave_0: entered promiscuous mode [ 228.598214][ T4911] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 228.633116][ T4911] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 228.635038][ T4911] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 228.637452][ T4911] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 228.706383][ T4911] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 228.979987][ T6487] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.980144][ T6487] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.980400][ T6487] bridge_slave_1: entered allmulticast mode [ 229.031867][ T6487] bridge_slave_1: entered promiscuous mode [ 230.001064][ T0] NOHZ tick-stop error: local softirq work is pending, handler #88!!! [ 230.101717][ T4911] Bluetooth: hci4: command tx timeout [ 230.196877][ T6487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.990639][ T4911] Bluetooth: hci2: command tx timeout [ 231.241763][ T6487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.226888][ T4911] Bluetooth: hci4: command tx timeout [ 233.141472][ T5603] Bluetooth: hci2: command tx timeout [ 233.146889][ T5606] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 233.223952][ T5606] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 233.259854][ T5606] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 233.666292][ T5606] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 233.700925][ T5606] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 235.852013][ T4911] Bluetooth: hci2: command tx timeout [ 235.861697][ T5606] Bluetooth: hci5: command tx timeout [ 237.067985][ T6654] netlink: 8 bytes leftover after parsing attributes in process `syz.2.250'. [ 237.068018][ T6654] netlink: 12 bytes leftover after parsing attributes in process `syz.2.250'. [ 237.132532][ T6655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.250'. [ 237.132562][ T6655] netlink: 12 bytes leftover after parsing attributes in process `syz.2.250'. [ 237.861454][ T4911] Bluetooth: hci2: command tx timeout [ 237.941246][ T5606] Bluetooth: hci5: command tx timeout [ 240.021173][ T5606] Bluetooth: hci5: command tx timeout [ 242.101555][ T5606] Bluetooth: hci5: command tx timeout [ 255.787888][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.787955][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.898834][ T4911] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 255.914736][ T4911] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 255.920255][ T4911] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 255.943487][ T4911] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 255.944310][ T4911] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 256.835091][ T6571] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.835226][ T6571] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.836628][ T6571] bridge_slave_0: entered allmulticast mode [ 256.903898][ T6571] bridge_slave_0: entered promiscuous mode [ 257.423815][ T6571] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.423933][ T6571] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.424173][ T6571] bridge_slave_1: entered allmulticast mode [ 257.455866][ T6571] bridge_slave_1: entered promiscuous mode [ 258.185389][ T5606] Bluetooth: hci0: command tx timeout [ 260.261233][ T5606] Bluetooth: hci0: command tx timeout [ 260.973243][ T6571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.253911][ T6571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.341387][ T5606] Bluetooth: hci0: command tx timeout [ 262.863021][ T6600] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.863143][ T6600] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.863397][ T6600] bridge_slave_0: entered allmulticast mode [ 262.895797][ T6600] bridge_slave_0: entered promiscuous mode [ 263.025244][ T6571] team0: Port device team_slave_0 added [ 263.025585][ T6600] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.025779][ T6600] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.026377][ T6600] bridge_slave_1: entered allmulticast mode [ 263.102846][ T6600] bridge_slave_1: entered promiscuous mode [ 263.602344][ T6571] team0: Port device team_slave_1 added [ 264.421218][ T5606] Bluetooth: hci0: command tx timeout [ 265.013807][ T6600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.219650][ T6571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.219667][ T6571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 265.219688][ T6571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.313774][ T6600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.903541][ T6571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.903557][ T6571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 265.903579][ T6571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.776932][ T6600] team0: Port device team_slave_0 added [ 268.391320][ T6600] team0: Port device team_slave_1 added [ 269.888547][ T6623] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.888759][ T6623] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.889021][ T6623] bridge_slave_0: entered allmulticast mode [ 269.897365][ T6623] bridge_slave_0: entered promiscuous mode [ 273.652110][ T6623] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.652222][ T6623] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.652806][ T6623] bridge_slave_1: entered allmulticast mode [ 273.674890][ T6623] bridge_slave_1: entered promiscuous mode [ 276.258654][ T6600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.258670][ T6600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.258689][ T6600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.694122][ T6634] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.694241][ T6634] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.699002][ T6634] bridge_slave_0: entered allmulticast mode [ 276.714634][ T6634] bridge_slave_0: entered promiscuous mode [ 276.723691][ T6600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.723706][ T6600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.723726][ T6600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.282195][ T4911] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 277.310192][ T4911] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 277.315263][ T4911] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 277.469697][ T4911] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 277.470491][ T4911] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 277.597914][ T6634] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.598034][ T6634] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.598270][ T6634] bridge_slave_1: entered allmulticast mode [ 277.611957][ T6634] bridge_slave_1: entered promiscuous mode [ 279.122839][ T6623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.355965][ T4911] Bluetooth: hci6: command tx timeout [ 280.421918][ T6623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.677662][ T5606] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 281.711683][ T5606] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 281.713648][ T5606] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 281.715570][ T5606] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 281.716959][ T5606] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 282.421210][ T4911] Bluetooth: hci6: command tx timeout [ 283.861177][ T4911] Bluetooth: hci3: command tx timeout [ 284.501209][ T4911] Bluetooth: hci6: command tx timeout [ 284.947949][ T6634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.289660][ T6634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.315142][ T6623] team0: Port device team_slave_0 added [ 285.519646][ T6623] team0: Port device team_slave_1 added [ 285.807101][ T6634] team0: Port device team_slave_0 added [ 285.942854][ T4911] Bluetooth: hci3: command tx timeout [ 285.949653][ T6634] team0: Port device team_slave_1 added [ 286.581474][ T4911] Bluetooth: hci6: command tx timeout [ 287.107940][ T5606] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 287.172417][ T5606] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 287.193538][ T5606] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 287.203840][ T5606] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 287.204797][ T5606] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 288.021176][ T4911] Bluetooth: hci3: command tx timeout [ 288.799884][ T6623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.799899][ T6623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 288.799921][ T6623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.301421][ T4911] Bluetooth: hci4: command tx timeout [ 290.111276][ T4911] Bluetooth: hci3: command tx timeout [ 290.999944][ T6634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.999961][ T6634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.999981][ T6634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.102472][ T6634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.102487][ T6634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 291.102507][ T6634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.381141][ T4911] Bluetooth: hci4: command tx timeout [ 292.910629][ T5606] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 292.966012][ T5606] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 292.968618][ T5606] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 292.997808][ T5606] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 292.999724][ T5606] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 293.501152][ T4911] Bluetooth: hci4: command tx timeout [ 295.142506][ T4911] Bluetooth: hci2: command tx timeout [ 295.541258][ T4911] Bluetooth: hci4: command tx timeout [ 297.221507][ T4911] Bluetooth: hci2: command tx timeout [ 299.311363][ T4911] Bluetooth: hci2: command tx timeout [ 301.360908][ T6679] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.371747][ T6679] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.372020][ T6679] bridge_slave_0: entered allmulticast mode [ 301.377404][ T6679] bridge_slave_0: entered promiscuous mode [ 301.381750][ T4911] Bluetooth: hci2: command tx timeout [ 301.907881][ T6679] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.908000][ T6679] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.908246][ T6679] bridge_slave_1: entered allmulticast mode [ 301.934795][ T6679] bridge_slave_1: entered promiscuous mode [ 303.906023][ T6443] syz-executor (6443) used greatest stack depth: 18744 bytes left [ 303.922476][ T6392] syz-executor (6392) used greatest stack depth: 18528 bytes left [ 307.035063][ T6679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.155031][ T6679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.880411][ T1185] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.232005][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.232074][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.272125][ T5606] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 317.293868][ T5606] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 317.314352][ T5606] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 317.319044][ T5606] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 317.335627][ T5606] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 319.461266][ T5606] Bluetooth: hci5: command tx timeout [ 321.544410][ T5606] Bluetooth: hci5: command tx timeout [ 323.776495][ T5606] Bluetooth: hci5: command tx timeout [ 325.781683][ T4911] Bluetooth: hci5: command tx timeout [ 336.948833][ T5606] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 336.978708][ T5606] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 336.979852][ T5606] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 336.988130][ T5606] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 336.990919][ T5606] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 339.221554][ T4911] Bluetooth: hci0: command tx timeout [ 340.489330][ T6717] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg2": -EINTR [ 341.142468][ T5606] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 341.188988][ T5606] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 341.190138][ T5606] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 341.301449][ T5606] Bluetooth: hci0: command tx timeout [ 341.428619][ T5606] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 341.522061][ T5606] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 343.391713][ T4911] Bluetooth: hci0: command tx timeout [ 343.621489][ T4911] Bluetooth: hci6: command tx timeout [ 345.811194][ T4911] Bluetooth: hci0: command tx timeout [ 345.811230][ T4911] Bluetooth: hci6: command tx timeout [ 346.793905][ T6730] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg2": -EINTR [ 347.861119][ T5603] Bluetooth: hci6: command tx timeout [ 349.941297][ T5603] Bluetooth: hci6: command tx timeout [ 351.173294][ T5606] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 351.230248][ T5606] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 351.272476][ T5606] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 351.276423][ T5606] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 351.277182][ T5606] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 353.471379][ T5606] Bluetooth: hci3: command tx timeout [ 354.812725][ T5603] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 354.862644][ T5603] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 354.868277][ T5603] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 354.870096][ T5603] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 354.871943][ T5603] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 355.621226][ T5603] Bluetooth: hci3: command tx timeout [ 357.702374][ T5606] Bluetooth: hci3: command tx timeout [ 357.781223][ T5606] Bluetooth: hci7: command tx timeout [ 359.791212][ T5606] Bluetooth: hci3: command tx timeout [ 359.871280][ T5606] Bluetooth: hci7: command tx timeout [ 361.941816][ T5606] Bluetooth: hci7: command tx timeout [ 364.022721][ T5606] Bluetooth: hci7: command tx timeout [ 377.239355][ T5603] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 377.282593][ T5603] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 377.285186][ T5603] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 377.323278][ T5603] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 377.345490][ T5603] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 378.665511][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.665624][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.461173][ T5606] Bluetooth: hci2: command tx timeout [ 381.541234][ T5606] Bluetooth: hci2: command tx timeout [ 382.526027][ T38] INFO: task syz-executor:6487 blocked for more than 143 seconds. [ 382.526069][ T38] Not tainted syzkaller #0 [ 382.526078][ T38] Blocked by coredump. [ 382.526083][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 382.526090][ T38] task:syz-executor state:D stack:20304 pid:6487 tgid:6487 ppid:1 task_flags:0x40054c flags:0x00080003 [ 382.526151][ T38] Call Trace: [ 382.526158][ T38] [ 382.526170][ T38] __schedule+0x16dc/0x5500 [ 382.526360][ T38] ? __pfx___schedule+0x10/0x10 [ 382.526409][ T38] rt_mutex_schedule+0x76/0xf0 [ 382.526462][ T38] rt_mutex_slowlock_block+0x55c/0x680 [ 382.526500][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 382.526525][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 382.526548][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 382.526582][ T38] ? rcu_barrier+0x4c/0x530 [ 382.526659][ T38] ? rcu_barrier+0x4c/0x530 [ 382.526685][ T38] ? rcu_barrier+0x4c/0x530 [ 382.526704][ T38] mutex_lock_nested+0x168/0x1d0 [ 382.526724][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 382.526751][ T38] rcu_barrier+0x4c/0x530 [ 382.526781][ T38] netdev_run_todo+0x2ff/0x10d0 [ 382.526839][ T38] ? __pfx_netif_state_change+0x10/0x10 [ 382.526887][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 382.526922][ T38] ? kasan_quarantine_put+0xbb/0x1f0 [ 382.527001][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 382.527027][ T38] ? netdev_state_change+0x1bc/0x210 [ 382.527072][ T38] tun_chr_close+0x13f/0x1c0 [ 382.527147][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 382.527169][ T38] __fput+0x42a/0xa80 [ 382.527220][ T38] task_work_run+0x1d9/0x270 [ 382.527301][ T38] ? __pfx_task_work_run+0x10/0x10 [ 382.527326][ T38] ? do_exit+0x735/0x2360 [ 382.527395][ T38] ? kmem_cache_free+0x187/0x6c0 [ 382.527441][ T38] ? put_net+0x191/0x260 [ 382.527483][ T38] ? do_exit+0x735/0x2360 [ 382.527511][ T38] do_exit+0x73a/0x2360 [ 382.527533][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 382.527551][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 382.527575][ T38] ? __pfx_do_exit+0x10/0x10 [ 382.527598][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 382.527620][ T38] ? rt_spin_lock+0x1e0/0x400 [ 382.527649][ T38] ? rt_spin_unlock+0x157/0x200 [ 382.527674][ T38] do_group_exit+0x22d/0x2f0 [ 382.527697][ T38] ? rt_spin_unlock+0x163/0x200 [ 382.527722][ T38] get_signal+0x121b/0x12c0 [ 382.527809][ T38] arch_do_signal_or_restart+0xbb/0x860 [ 382.527861][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 382.527881][ T38] ? kmem_cache_free+0x526/0x6c0 [ 382.527918][ T38] exit_to_user_mode_loop+0x104/0x730 [ 382.527959][ T38] ? rcu_is_watching+0x15/0xb0 [ 382.527980][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.528000][ T38] do_syscall_64+0x353/0x580 [ 382.528046][ T38] ? clear_bhb_loop+0x40/0x90 [ 382.528066][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.528083][ T38] RIP: 0033:0x7f574c05e6ce [ 382.528105][ T38] RSP: 002b:00007ffdb87a2188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 382.528124][ T38] RAX: 0000000000000028 RBX: 000055555f1be500 RCX: 00007f574c05e6ce [ 382.528136][ T38] RDX: 0000000000000028 RSI: 00007f574ce546[ 382.528136][ T38] RDX: 0000000000000028 RSI: 00007f574ce54670 RDI: 0000000000000003 [ 382.528147][ T38] RBP: 0000000000000001 R08: 00007ffdb87a2204 R09: 000000000000000c [ 382.528157][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 382.528167][ T38] R13: 0000000000000000 R14: 00007f574ce54670 R15: 0000000000000000 [ 382.528196][ T38] [ 382.528253][ T38] [ 382.528253][ T38] Showing all locks held in the system: [ 382.528265][ T38] 3 locks held by kworker/u8:0/12: [ 382.528276][ T38] #0: ffff8880330f9138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 382.528322][ T38] #1: ffffc90000117c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 382.528372][ T38] #2: ffffffff8f5b17b8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x123/0x16e0 [ 382.528453][ T38] 4 locks held by ksoftirqd/0/15: [ 382.528466][ T38] 1 lock held by khungtaskd/38: [ 382.528475][ T38] #0: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 382.587665][ T38] 9 locks held by kworker/u8:2/43: [ 382.587684][ T38] 3 locks held by kworker/u8:5/82: [ 382.587694][ T38] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 382.587746][ T38] #1: ffffc900015afc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 382.587789][ T38] #2: ffffffff8f5b17b8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 382.587951][ T38] 6 locks held by kworker/u8:10/1185: [ 382.587962][ T38] #0: ffff88801aea0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 382.588005][ T38] #1: ffffc900062e7c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 382.588047][ T38] #2: ffffffff8f5a2c00 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 382.588085][ T38] #3: ffff88805ffbb160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 382.588158][ T38] #4: ffff88803addc310 (&devlink->lock_key){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 382.588201][ T38] #5: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 382.588261][ T38] 2 locks held by getty/5348: [ 382.588271][ T38] #0: ffff888035e9d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 382.588344][ T38] #1: ffffc90003cc62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 382.588428][ T38] 1 lock held by syz-executor/6473: [ 382.588438][ T38] #0: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 382.588482][ T38] 1 lock held by syz-executor/6487: [ 382.588492][ T38] #0: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 382.588536][ T38] 1 lock held by syz-executor/6571: [ 382.588545][ T38] #0: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 382.588589][ T38] 1 lock held by syz-executor/6600: [ 382.588598][ T38] #0: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 382.588642][ T38] 1 lock held by syz-executor/6623: [ 382.588651][ T38] #0: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 382.588694][ T38] 1 lock held by syz-executor/6634: [ 382.588703][ T38] #0: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 382.588747][ T38] 2 locks held by syz.2.250/6654: [ 382.588756][ T38] #0: ffffffff8fafb260 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 382.588801][ T38] #1: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 382.588844][ T38] 2 locks held by syz.2.250/6655: [ 382.588854][ T38] #0: ffffffff8fafb260 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 382.588905][ T38] #1: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 382.588950][ T38] 1 lock held by syz-executor/6679: [ 382.588959][ T38] #0: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 382.589004][ T38] 1 lock held by syz-executor/6709: [ 382.589013][ T38] #0: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 382.589056][ T38] 1 lock held by syz-executor/6717: [ 382.589066][ T38] #0: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 382.589109][ T38] 1 lock held by syz-executor/6730: [ 382.589118][ T38] #0: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 382.589162][ T38] 1 lock held by syz-executor/6746: [ 382.589171][ T38] #0: ffffffff8e1c91b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 382.589216][ T38] 1 lock held by syz-executor/6774: [ 382.589226][ T38] 2 locks held by syz-executor/6800: [ 382.589235][ T38] #0: ffffffff8ed16628 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 382.589279][ T38] #1: ffffffff8f5b17b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 382.589327][ T38] 1 lock held by syz-executor/6818: [ 382.589336][ T38] #0: ffffffff8f5b17b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 382.589383][ T38] 2 locks held by syz-executor/6834: [ 382.589392][ T38] #0: ffffffff8fafaff8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 382.589435][ T38] #1: ffffffff8f5b17b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 382.589481][ T38] 1 lock held by syz-executor/6842: [ 382.898607][ T38] #0: ffffffff8f5b17b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 382.898676][ T38] 1 lock held by syz-executor/6873: [ 382.898687][ T38] #0: ffffffff8f5b17b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 382.898744][ T38] [ 382.898749][ T38] ============================================= [ 382.898749][ T38] [ 382.898766][ T38] NMI backtrace for cpu 0 [ 382.898866][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 382.898890][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 382.898905][ T38] Call Trace: [ 382.898913][ T38] [ 382.898921][ T38] dump_stack_lvl+0xe8/0x150 [ 382.898999][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 382.899050][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 382.899114][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 382.899140][ T38] sys_info+0x135/0x170 [ 382.899184][ T38] watchdog+0xfd7/0x1030 [ 382.899264][ T38] ? watchdog+0x1c7/0x1030 [ 382.899294][ T38] kthread+0x388/0x470 [ 382.899317][ T38] ? __pfx_watchdog+0x10/0x10 [ 382.899338][ T38] ? __pfx_kthread+0x10/0x10 [ 382.899359][ T38] ret_from_fork+0x514/0xb70 [ 382.899411][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 382.899434][ T38] ? __switch_to+0xc89/0x1420 [ 382.899457][ T38] ? __pfx_kthread+0x10/0x10 [ 382.899480][ T38] ret_from_fork_asm+0x1a/0x30 [ 382.899512][ T38] [ 382.899529][ T38] Sending NMI from CPU 0 to CPUs 1: [ 382.899558][ C1] NMI backtrace for cpu 1 [ 382.899571][ C1] CPU: 1 UID: 0 PID: 28 Comm: rcuc/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 382.899587][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 382.899596][ C1] RIP: 0010:unwind_next_frame+0x1f6/0x2550 [ 382.899670][ C1] Code: 08 8b 15 9d c9 3c 0c 8d 42 ff 44 39 f8 0f 86 6c 04 00 00 44 89 f8 4c 8d 2c 85 ec 91 e5 90 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 <84> c0 4c 89 e3 0f 85 66 1d 00 00 45 8b 6d 00 44 89 f8 ff c0 4c 8d [ 382.899682][ C1] RSP: 0018:ffffc90000a2eb60 EFLAGS: 00000a07 [ 382.899695][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000080000000 [ 382.899705][ C1] RDX: 00000000000a475c RSI: ffffffff8bca6660 RDI: ffffffff8bca6620 [ 382.899716][ C1] RBP: ffffffff897972ff R08: ffffffff8176e25f R09: 0000000000000000 [ 382.899726][ C1] R10: 0000000000000000 R11: ffffffff8e1c3000 R12: dffffc0000000000 [ 382.899736][ C1] R13: ffffffff910777b4 R14: ffffc90000a2ec08 R15: 0000000000087972 [ 382.899751][ C1] FS: 0000000000000000(0000) GS:ffff888125d45000(0000) knlGS:0000000000000000 [ 382.899763][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 382.899773][ C1] CR2: 00007ffc5ed5dd94 CR3: 000000000dfb0000 CR4: 00000000003526f0 [ 382.899786][ C1] Call Trace: [ 382.899792][ C1] [ 382.899800][ C1] ? nft_do_chain_inet+0x360/0x4b0 [ 382.899850][ C1] ? unwind_next_frame+0x8f/0x2550 [ 382.899866][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 382.899911][ C1] arch_stack_walk+0x11b/0x150 [ 382.899950][ C1] ? nft_do_chain_inet+0x360/0x4b0 [ 382.899972][ C1] stack_trace_save+0xa9/0x100 [ 382.899991][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 382.900010][ C1] ? kfree+0x1c5/0x6c0 [ 382.900060][ C1] ? __lock_acquire+0x683/0x2ce0 [ 382.900099][ C1] kasan_save_track+0x3e/0x80 [ 382.900112][ C1] ? kasan_save_track+0x3e/0x80 [ 382.900124][ C1] ? kasan_save_free_info+0x40/0x50 [ 382.900142][ C1] ? __kasan_slab_free+0x5c/0x80 [ 382.900155][ C1] ? kmem_cache_free+0x187/0x6c0 [ 382.900169][ C1] ? nft_synproxy_eval_v4+0x36a/0x4e0 [ 382.900239][ C1] ? nft_synproxy_do_eval+0x335/0x550 [ 382.900257][ C1] ? nft_do_chain+0x48d/0x1b10 [ 382.900319][ C1] ? nft_do_chain_inet+0x360/0x4b0 [ 382.900361][ C1] ? nft_synproxy_eval_v4+0x36a/0x4e0 [ 382.900380][ C1] kasan_save_free_info+0x40/0x50 [ 382.900397][ C1] __kasan_slab_free+0x5c/0x80 [ 382.900411][ C1] kmem_cache_free+0x187/0x6c0 [ 382.900426][ C1] ? nft_synproxy_eval_v4+0x36a/0x4e0 [ 382.900447][ C1] nft_synproxy_eval_v4+0x36a/0x4e0 [ 382.900470][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 382.900490][ C1] ? nf_ip_checksum+0x13c/0x510 [ 382.900559][ C1] nft_synproxy_do_eval+0x335/0x550 [ 382.900579][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 382.900607][ C1] nft_do_chain+0x48d/0x1b10 [ 382.900626][ C1] ? ktime_get+0x1f5/0x220 [ 382.900688][ C1] ? lapic_next_event+0x11/0x20 [ 382.900704][ C1] ? __pfx_clockevents_program_event+0x10/0x10 [ 382.900767][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 382.900801][ C1] ? __lock_acquire+0x683/0x2ce0 [ 382.900818][ C1] nft_do_chain_inet+0x360/0x4b0 [ 382.900839][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 382.900863][ C1] ? NF_HOOK+0x9e/0x3c0 [ 382.900926][ C1] ? NF_HOOK+0x9e/0x3c0 [ 382.900941][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 382.900961][ C1] nf_hook_slow+0xc5/0x220 [ 382.900981][ C1] NF_HOOK+0x21f/0x3c0 [ 382.900996][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 382.901013][ C1] ? NF_HOOK+0x9e/0x3c0 [ 382.901024][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 382.901038][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 382.901055][ C1] ? ip_local_deliver+0x113/0x190 [ 382.901072][ C1] NF_HOOK+0x336/0x3c0 [ 382.901087][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 382.901101][ C1] ? NF_HOOK+0x9e/0x3c0 [ 382.901115][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 382.901131][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 382.901148][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 382.901162][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 382.901176][ C1] ? process_backlog+0x261/0xc50 [ 382.901196][ C1] process_backlog+0x564/0xc50 [ 382.901232][ C1] __napi_poll+0xae/0x550 [ 382.901252][ C1] net_rx_action+0x621/0xd70 [ 382.901277][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 382.901295][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 382.901314][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 382.901396][ C1] handle_softirqs+0x1d9/0x6c0 [ 382.901418][ C1] __local_bh_enable_ip+0x170/0x2b0 [ 382.901436][ C1] rcu_cpu_kthread+0xf96/0x1480 [ 382.901457][ C1] ? rcu_cpu_kthread+0x20b/0x1480 [ 382.901476][ C1] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 382.901492][ C1] ? schedule+0x90/0x2b0 [ 382.901517][ C1] smpboot_thread_fn+0x57c/0xa80 [ 382.901559][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 382.901581][ C1] kthread+0x388/0x470 [ 382.901600][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 382.901617][ C1] ? __pfx_kthread+0x10/0x10 [ 382.901636][ C1] ret_from_fork+0x514/0xb70 [ 382.901657][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 382.901677][ C1] ? __switch_to+0xc89/0x1420 [ 382.901696][ C1] ? __pfx_kthread+0x10/0x10 [ 382.901716][ C1] ret_from_fork_asm+0x1a/0x30 [ 382.901738][ C1] [ 383.022913][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 383.022935][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 383.022955][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 383.022965][ T38] Call Trace: [ 383.022972][ T38] [ 383.022979][ T38] vpanic+0x56c/0xa60 [ 383.023003][ T38] ? __pfx___schedule+0x10/0x10 [ 383.023030][ T38] ? __pfx_vpanic+0x10/0x10 [ 383.023056][ T38] panic+0xc5/0xd0 [ 383.023072][ T38] ? __pfx_panic+0x10/0x10 [ 383.023087][ T38] ? preempt_schedule_common+0x82/0xd0 [ 383.023104][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 383.023185][ T38] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 383.023212][ T38] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 383.023245][ T38] watchdog+0x1030/0x1030 [ 383.023278][ T38] ? watchdog+0x1c7/0x1030 [ 383.023307][ T38] kthread+0x388/0x470 [ 383.023329][ T38] ? __pfx_watchdog+0x10/0x10 [ 383.023349][ T38] ? __pfx_kthread+0x10/0x10 [ 383.023372][ T38] ret_from_fork+0x514/0xb70 [ 383.023399][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 383.023422][ T38] ? __switch_to+0xc89/0x1420 [ 383.023445][ T38] ? __pfx_kthread+0x10/0x10 [ 383.023469][ T38] ret_from_fork_asm+0x1a/0x30 [ 383.023501][ T38] [ 383.023656][ T38] Kernel Offset: disabled