last executing test programs: 3m29.452696935s ago: executing program 3 (id=47): socket(0x2a, 0x2, 0xe2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x6, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x10}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0xd5}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x80000000}}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000340)=ANY=[], 0x3c}}, 0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000000)="240000001e005f80004000000000000002000000010000000000080008000100000000ff", 0x24) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff, 0x10, 0x0, @void}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000004180)={0x2020}, 0x2020) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) epoll_create(0x2) socket(0x23, 0x2, 0x0) 3m24.910607173s ago: executing program 3 (id=52): mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) unshare(0x400) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) 3m24.345907953s ago: executing program 3 (id=55): sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) shutdown(r3, 0x1) 3m21.988284302s ago: executing program 3 (id=60): getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, &(0x7f0000000080)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r1, 0x4020744f, &(0x7f0000000000)=0x10010000) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/236) write$binfmt_aout(r2, &(0x7f0000000100)=ANY=[], 0xfce1) 3m21.557755823s ago: executing program 3 (id=64): prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_bt_hci(r3, 0x800448d3, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000b00)=0x6) io_setup(0x7, &(0x7f0000000280)) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) brk(0x20ffc004) 3m17.811180441s ago: executing program 3 (id=70): lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x57, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r1, 0x3) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) 3m2.251962511s ago: executing program 32 (id=70): lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x57, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r1, 0x3) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) 2m53.902372024s ago: executing program 1 (id=90): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000002000000000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2m48.067876913s ago: executing program 1 (id=92): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) syz_open_procfs(0x0, 0x0) pivot_root(0x0, 0x0) syz_clone(0x120e1100, 0x0, 0x13, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$binfmt_misc(r6, 0x0, 0x4) 2m41.883950177s ago: executing program 1 (id=97): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0xab3, 0x2d0142) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000240)=0xffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x4, 0xffffffffffffffff, r0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0), 0x700, 0x0) getrlimit(0x9, &(0x7f0000000300)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) fsopen(&(0x7f00000002c0)='qnx6\x00', 0x1) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') chown(&(0x7f0000000280)='./file0\x00', 0x0, 0xffffffffffffffff) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000780)='./bus\x00') setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) 2m37.907803413s ago: executing program 1 (id=101): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0xab3, 0x2d0142) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000240)=0xffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x4, 0xffffffffffffffff, r0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) chdir(&(0x7f00000001c0)='./bus\x00') mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0), 0x700, 0x0) getrlimit(0x9, &(0x7f0000000300)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) fsopen(&(0x7f00000002c0)='qnx6\x00', 0x1) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') chown(&(0x7f0000000280)='./file0\x00', 0x0, 0xffffffffffffffff) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000780)='./bus\x00') setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) 2m33.464187401s ago: executing program 1 (id=106): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0xab3, 0x2d0142) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000240)=0xffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x4, 0xffffffffffffffff, r0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) chdir(&(0x7f00000001c0)='./bus\x00') mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0), 0x700, 0x0) getrlimit(0x9, &(0x7f0000000300)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) fsopen(&(0x7f00000002c0)='qnx6\x00', 0x1) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') chown(&(0x7f0000000280)='./file0\x00', 0x0, 0xffffffffffffffff) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000780)='./bus\x00') setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) 2m22.412700214s ago: executing program 1 (id=118): socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xa, 0xd}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004010}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x117, &(0x7f0000000100), &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffbfd, 0x0, 0x4) syz_io_uring_submit(0x0, r6, 0x0) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200c8855, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) 2m7.260784357s ago: executing program 33 (id=118): socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xa, 0xd}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004010}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x117, &(0x7f0000000100), &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffbfd, 0x0, 0x4) syz_io_uring_submit(0x0, r6, 0x0) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200c8855, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) 1m55.136324934s ago: executing program 2 (id=138): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000540), 0x4) socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0xfffffffffffff800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000240)={0xc}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000280)={0x28, 0x0, 0x0, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800000}) close(r4) 1m52.4281326s ago: executing program 2 (id=140): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f00000020c0)=""/4094) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0xa07, &(0x7f0000000200)={0x0, 0xcc72, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 1m51.895466826s ago: executing program 4 (id=141): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x455}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r5 = dup3(r1, r0, 0x0) read$watch_queue(r5, &(0x7f0000000580)=""/199, 0xc7) 1m49.308456138s ago: executing program 4 (id=143): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0xab3, 0x2d0142) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000240)=0xffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x4, 0xffffffffffffffff, r0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0), 0x700, 0x0) getrlimit(0x9, &(0x7f0000000300)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) fsopen(&(0x7f00000002c0)='qnx6\x00', 0x1) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chown(&(0x7f0000000280)='./file0\x00', 0x0, 0xffffffffffffffff) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000780)='./bus\x00') setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) 1m49.307868796s ago: executing program 0 (id=144): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1857cc401095553e0a000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) writev(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1) socket$nl_route(0x10, 0x3, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x41, 0xb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) 1m47.317765165s ago: executing program 0 (id=145): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000540), 0x4) socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0xfffffffffffff800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000240)={0xc}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000280)={0x28, 0x0, 0x0, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800000}) close(r4) 1m47.144971325s ago: executing program 4 (id=146): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x455}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r5 = dup3(r1, r0, 0x0) read$watch_queue(r5, &(0x7f0000000580)=""/199, 0xc7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) 1m47.087413156s ago: executing program 2 (id=147): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) pivot_root(0x0, 0x0) syz_clone(0x120e1100, 0x0, 0x13, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$binfmt_misc(r6, 0x0, 0x4) 1m39.981290307s ago: executing program 4 (id=148): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f00000020c0)=""/4094) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0xa07, &(0x7f0000000200)={0x0, 0xcc72, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 1m39.595702591s ago: executing program 0 (id=149): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000540), 0x4) socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0xfffffffffffff800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000240)={0xc}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000280)={0x28, 0x0, 0x0, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800000}) close(r4) 1m39.331701477s ago: executing program 2 (id=150): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) 1m36.595563343s ago: executing program 2 (id=151): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x455}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r5 = dup3(r1, r0, 0x0) read$watch_queue(r5, &(0x7f0000000580)=""/199, 0xc7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) 1m36.588839398s ago: executing program 0 (id=152): prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_bt_hci(r3, 0x800448d3, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) brk(0x20ffc004) 1m35.176599125s ago: executing program 0 (id=153): syz_emit_ethernet(0x2a, &(0x7f0000000400)={@broadcast, @random="05009211d49c", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x88, 0x0, @private=0xa010101, @broadcast}, @address_request={0x11, 0x0, 0x0, 0x7e}}}}}, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000340)=0x0) quotactl$Q_GETQUOTA(0xffffffff80000702, &(0x7f0000000240)=@nbd={'/dev/nbd', 0x0}, r0, &(0x7f00000004c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYBLOB="da2261875f58323cf5704ca92bdcc7e39a892ad9ce2e9482b397d74faa777043c79850203e844203a9e244"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0xac, &(0x7f0000000140)=""/172, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000280)={0x10, 0x0, 0x1, 0x2ffffffff}, 0xc) r6 = socket$inet(0x2, 0x2, 0x1) bind$inet(r6, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10) sendmsg$inet(r6, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x1}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) socket$inet6_sctp(0xa, 0x1, 0x84) 1m34.414577354s ago: executing program 4 (id=154): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) ioprio_set$uid(0x3, 0x0, 0x4004) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e23, 0x4, @loopback, 0xa}]}, &(0x7f0000000340)=0x10) socket(0x2000000000000021, 0x2, 0x10000000000002) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180800000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x595000, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40040, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x0, 0x13, r4, 0x0) 1m32.263197529s ago: executing program 2 (id=155): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7, 0xe00}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0xc9100100, 0x0, 0x0) 1m14.236119782s ago: executing program 0 (id=156): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f0000000080)={0x1, 0xfffffffe, 0x0, 0x8, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x1, 0xfffffffe, 0x2}) ioctl$SNDRV_PCM_IOCTL_FORWARD(0xffffffffffffffff, 0x40084149, &(0x7f0000000180)=0x8000000000000000) 1m14.146425663s ago: executing program 4 (id=157): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x6, r1, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x4, r1, r1, 0x3, 0x8000000000, 0x3ffd}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x2, r1, 0x0, &(0x7f0000000280)="e1", 0x1, 0x6}) 0s ago: executing program 34 (id=155): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7, 0xe00}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0xc9100100, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.13' (ED25519) to the list of known hosts. [ 70.341439][ T5808] cgroup: Unknown subsys name 'net' [ 70.460964][ T5808] cgroup: Unknown subsys name 'cpuset' [ 70.469451][ T5808] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.659803][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.666410][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.990990][ T5808] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 74.436210][ T5822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.444180][ T5822] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.471163][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.478955][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.487204][ T5827] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 74.495616][ T5827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.504464][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.511789][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.519485][ T5827] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 74.521308][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.527714][ T5827] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.536630][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.541228][ T5827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.549276][ T5836] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 74.554846][ T5827] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.562036][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.570253][ T5827] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 74.583052][ T5827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.595903][ T5827] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 74.606413][ T5827] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 74.614777][ T5827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.615849][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.623751][ T5827] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 74.630728][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 74.637149][ T5827] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 74.644206][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.651411][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.666922][ T5827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.675850][ T5825] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 74.683788][ T5827] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.055089][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 75.114930][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 75.202281][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 75.280411][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 75.338961][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 75.360754][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.371334][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.379196][ T5818] bridge_slave_0: entered allmulticast mode [ 75.386330][ T5818] bridge_slave_0: entered promiscuous mode [ 75.396633][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.403760][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.411256][ T5818] bridge_slave_1: entered allmulticast mode [ 75.418565][ T5818] bridge_slave_1: entered promiscuous mode [ 75.441051][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.448784][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.456056][ T5820] bridge_slave_0: entered allmulticast mode [ 75.463001][ T5820] bridge_slave_0: entered promiscuous mode [ 75.526238][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.533398][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.540718][ T5820] bridge_slave_1: entered allmulticast mode [ 75.547950][ T5820] bridge_slave_1: entered promiscuous mode [ 75.615421][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.625282][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.633697][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.641024][ T5826] bridge_slave_0: entered allmulticast mode [ 75.648399][ T5826] bridge_slave_0: entered promiscuous mode [ 75.658897][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.670710][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.689578][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.696827][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.703983][ T5828] bridge_slave_0: entered allmulticast mode [ 75.711375][ T5828] bridge_slave_0: entered promiscuous mode [ 75.724398][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.742865][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.750137][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.757832][ T5826] bridge_slave_1: entered allmulticast mode [ 75.764695][ T5826] bridge_slave_1: entered promiscuous mode [ 75.789282][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.796607][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.803813][ T5828] bridge_slave_1: entered allmulticast mode [ 75.810980][ T5828] bridge_slave_1: entered promiscuous mode [ 75.845690][ T5820] team0: Port device team_slave_0 added [ 75.855461][ T5820] team0: Port device team_slave_1 added [ 75.882799][ T5818] team0: Port device team_slave_0 added [ 75.891427][ T5818] team0: Port device team_slave_1 added [ 75.922468][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.932669][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.940467][ T5831] bridge_slave_0: entered allmulticast mode [ 75.948935][ T5831] bridge_slave_0: entered promiscuous mode [ 75.965958][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.977911][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.001002][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.011381][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.018921][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.026274][ T5831] bridge_slave_1: entered allmulticast mode [ 76.033258][ T5831] bridge_slave_1: entered promiscuous mode [ 76.056941][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.063948][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.090109][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.131592][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.139906][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.167422][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.179776][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.187445][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.213433][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.228997][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.248078][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.255067][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.281033][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.295405][ T5826] team0: Port device team_slave_0 added [ 76.330223][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.342234][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.357752][ T5826] team0: Port device team_slave_1 added [ 76.411018][ T5820] hsr_slave_0: entered promiscuous mode [ 76.418653][ T5820] hsr_slave_1: entered promiscuous mode [ 76.429095][ T5828] team0: Port device team_slave_0 added [ 76.449016][ T5831] team0: Port device team_slave_0 added [ 76.472159][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.479588][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.506126][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.518888][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.525891][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.551967][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.571128][ T5828] team0: Port device team_slave_1 added [ 76.579425][ T5831] team0: Port device team_slave_1 added [ 76.598896][ T5818] hsr_slave_0: entered promiscuous mode [ 76.605724][ T5818] hsr_slave_1: entered promiscuous mode [ 76.612625][ T5818] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.621475][ T5827] Bluetooth: hci0: command tx timeout [ 76.627215][ T5818] Cannot create hsr debugfs directory [ 76.687840][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.694840][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.699999][ T5827] Bluetooth: hci1: command tx timeout [ 76.721467][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.739321][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.746661][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.773249][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.785115][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.792500][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.818541][ T5827] Bluetooth: hci4: command tx timeout [ 76.818988][ T5827] Bluetooth: hci3: command tx timeout [ 76.824456][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.830014][ T5827] Bluetooth: hci2: command tx timeout [ 76.848434][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.855593][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.881665][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.940984][ T5826] hsr_slave_0: entered promiscuous mode [ 76.948186][ T5826] hsr_slave_1: entered promiscuous mode [ 76.954391][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.962290][ T5826] Cannot create hsr debugfs directory [ 77.006692][ T5831] hsr_slave_0: entered promiscuous mode [ 77.013268][ T5831] hsr_slave_1: entered promiscuous mode [ 77.019962][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.028106][ T5831] Cannot create hsr debugfs directory [ 77.112193][ T5828] hsr_slave_0: entered promiscuous mode [ 77.119165][ T5828] hsr_slave_1: entered promiscuous mode [ 77.125415][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.133462][ T5828] Cannot create hsr debugfs directory [ 77.426143][ T5818] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.438239][ T5818] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.448500][ T5818] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.471052][ T5818] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.530129][ T5820] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.547398][ T5820] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.570648][ T5820] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.588265][ T5820] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.636945][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.654261][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.675065][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.685493][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.751546][ T5826] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.779920][ T5826] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.819335][ T5826] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.840025][ T5826] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.860740][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.898336][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.910055][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.920288][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.944007][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.973551][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.017447][ T3525] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.024751][ T3525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.041800][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.049062][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.073572][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.109841][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.131083][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.155011][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.162183][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.179573][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.195298][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.202456][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.248088][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.255224][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.275135][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.302271][ T1117] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.309502][ T1117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.395378][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.434993][ T3525] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.442204][ T3525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.482459][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.499559][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.506763][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.609208][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.625357][ T5826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.681146][ T3525] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.688327][ T3525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.697421][ T5827] Bluetooth: hci0: command tx timeout [ 78.735913][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.747454][ T3525] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.755227][ T3525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.778506][ T5827] Bluetooth: hci1: command tx timeout [ 78.857143][ T54] Bluetooth: hci3: command tx timeout [ 78.860673][ T5822] Bluetooth: hci4: command tx timeout [ 78.862651][ T5827] Bluetooth: hci2: command tx timeout [ 79.019564][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.032629][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.066983][ T5818] veth0_vlan: entered promiscuous mode [ 79.101804][ T5818] veth1_vlan: entered promiscuous mode [ 79.144125][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.221181][ T5818] veth0_macvtap: entered promiscuous mode [ 79.248067][ T5831] veth0_vlan: entered promiscuous mode [ 79.267346][ T5818] veth1_macvtap: entered promiscuous mode [ 79.293454][ T5831] veth1_vlan: entered promiscuous mode [ 79.325364][ T5820] veth0_vlan: entered promiscuous mode [ 79.347174][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.379701][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.403168][ T5831] veth0_macvtap: entered promiscuous mode [ 79.432712][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.452894][ T5818] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.462945][ T5818] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.474790][ T5818] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.483796][ T5818] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.501740][ T5831] veth1_macvtap: entered promiscuous mode [ 79.509576][ T5820] veth1_vlan: entered promiscuous mode [ 79.555374][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.572968][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.593714][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.623691][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.635183][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.648334][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.681849][ T5831] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.693133][ T5831] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.702244][ T5831] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.711149][ T5831] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.812747][ T5828] veth0_vlan: entered promiscuous mode [ 79.850653][ T5820] veth0_macvtap: entered promiscuous mode [ 79.871752][ T5828] veth1_vlan: entered promiscuous mode [ 79.882467][ T5820] veth1_macvtap: entered promiscuous mode [ 79.893807][ T5826] veth0_vlan: entered promiscuous mode [ 79.901708][ T3525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.920029][ T3525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.929180][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.938136][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.955053][ T5828] veth0_macvtap: entered promiscuous mode [ 79.989613][ T5826] veth1_vlan: entered promiscuous mode [ 80.014400][ T5828] veth1_macvtap: entered promiscuous mode [ 80.043695][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.048967][ T3525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.052707][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.064144][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.079506][ T3525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.084684][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.097554][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.108509][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.120554][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.134154][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.147386][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.157843][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.170891][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.181163][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.191774][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.202669][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.223131][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.234149][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.244636][ T5820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.256195][ T5820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.268738][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.292397][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.306359][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.316634][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.327639][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.337631][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.348519][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.360673][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.375218][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 80.386952][ T5820] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.403802][ T5820] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.413820][ T5820] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.422827][ T5820] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.440860][ T5826] veth0_macvtap: entered promiscuous mode [ 80.453452][ T5826] veth1_macvtap: entered promiscuous mode [ 80.511926][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.562582][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.583084][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.602763][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.613017][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.623875][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.634069][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.645304][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.657698][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.668552][ T5828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.679605][ T5828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.689100][ T5828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.701643][ T5828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.797213][ T5827] Bluetooth: hci0: command tx timeout [ 80.805892][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.826987][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.843431][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.866775][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.867775][ T5827] Bluetooth: hci1: command tx timeout [ 80.885865][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.896849][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.907165][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.917795][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.928790][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.945791][ T5822] Bluetooth: hci2: command tx timeout [ 80.951506][ T5822] Bluetooth: hci3: command tx timeout [ 80.958405][ T5827] Bluetooth: hci4: command tx timeout [ 81.828734][ T5826] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.838279][ T5826] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.890245][ T5826] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.911517][ T5826] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.021025][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.044284][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.179370][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.187602][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.295678][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.323100][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.338397][ T5904] syz.2.3 (5904): drop_caches: 2 [ 82.422801][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.431253][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.452751][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.465943][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.667319][ T3525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.704244][ T3525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.919839][ T5924] 9pnet_virtio: no channels available for device syz [ 82.967881][ T54] Bluetooth: hci0: command tx timeout [ 82.973655][ T5822] Bluetooth: hci1: command tx timeout [ 83.017957][ T5827] Bluetooth: hci2: command tx timeout [ 83.024065][ T54] Bluetooth: hci4: command tx timeout [ 83.030054][ T5822] Bluetooth: hci3: command tx timeout [ 84.471435][ T5928] 9pnet_virtio: no channels available for device syz [ 87.529462][ T975] cfg80211: failed to load regulatory.db [ 90.226494][ T5955] 9pnet_virtio: no channels available for device syz [ 90.985649][ T5958] 9pnet_virtio: no channels available for device syz [ 93.085574][ T5970] 9pnet_virtio: no channels available for device syz [ 95.144895][ T5986] fuse: Bad value for 'fd' [ 96.527489][ T5988] 9pnet_virtio: no channels available for device syz [ 98.184054][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807220c000: rx timeout, send abort [ 98.193939][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807220fc00: rx timeout, send abort [ 98.202681][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807220c000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 98.218336][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807220fc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 99.357503][ T5993] netlink: 100 bytes leftover after parsing attributes in process `syz.3.22'. [ 100.284427][ T5962] syz.4.16 (5962): drop_caches: 2 [ 101.338856][ T6002] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 102.134261][ T6012] 9pnet_virtio: no channels available for device syz [ 103.795457][ T5975] syz.2.18 (5975): drop_caches: 2 [ 104.517514][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.541197][ T6029] 9pnet_virtio: no channels available for device syz [ 105.557222][ T5906] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 105.661967][ T6029] overlayfs: failed to resolve './file1': -2 [ 105.671197][ T6026] 9pnet_virtio: no channels available for device syz [ 106.096578][ T5906] usb 1-1: Using ep0 maxpacket: 16 [ 106.285649][ T5906] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 106.300074][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 106.319085][ T5906] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 106.334186][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.498746][ T5906] usb 1-1: Product: syz [ 106.503419][ T5906] usb 1-1: Manufacturer: syz [ 106.508149][ T5906] usb 1-1: SerialNumber: syz [ 106.517825][ T5906] usb 1-1: config 0 descriptor?? [ 106.531679][ T5906] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 106.542335][ T5906] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 107.596110][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 107.628205][ T6037] netlink: 100 bytes leftover after parsing attributes in process `syz.4.35'. [ 107.668973][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.709126][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 107.719163][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 107.727796][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.736396][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.910431][ T5906] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 107.920479][ T5906] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 107.930558][ T5906] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 107.943168][ T5906] em28xx 1-1:0.0: No AC97 audio processor [ 108.866429][ T5906] usb 1-1: USB disconnect, device number 2 [ 108.874079][ T5906] em28xx 1-1:0.0: Disconnecting em28xx [ 108.886472][ T5906] em28xx 1-1:0.0: Freeing device [ 109.067489][ T6046] fuse: Bad value for 'fd' [ 109.413807][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 109.491369][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 109.889350][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 110.113741][ T6058] 9pnet_virtio: no channels available for device syz [ 111.265381][ C1] vcan0: j1939_tp_rxtimer: 0xffff888029883c00: rx timeout, send abort [ 111.273814][ C1] vcan0: j1939_tp_rxtimer: 0xffff888029883800: rx timeout, send abort [ 111.283454][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888029883c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 111.297963][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888029883800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 112.277921][ T6075] 9pnet_virtio: no channels available for device syz [ 113.457935][ T6083] 9pnet_virtio: no channels available for device syz [ 113.525252][ T6084] overlayfs: failed to resolve './file0': -2 [ 113.882240][ T6091] Zero length message leads to an empty skb [ 118.377058][ T6112] netlink: 100 bytes leftover after parsing attributes in process `syz.0.53'. [ 119.586440][ T6121] 9pnet_virtio: no channels available for device syz [ 120.983673][ T6131] 9pnet_virtio: no channels available for device syz [ 125.059911][ T6161] netlink: 100 bytes leftover after parsing attributes in process `syz.1.67'. [ 127.873121][ T6174] fuse: Bad value for 'fd' [ 128.145536][ T6163] 9pnet_virtio: no channels available for device syz [ 131.051434][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802133b800: rx timeout, send abort [ 131.229198][ T6181] 9pnet_virtio: no channels available for device syz [ 131.559797][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802133b800: abort rx timeout. Force session deactivation [ 133.131640][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.138140][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 142.702435][ T6229] 9pnet_virtio: no channels available for device syz [ 143.082261][ T6234] fuse: Bad value for 'fd' [ 145.500248][ C0] vcan0: j1939_tp_rxtimer: 0xffff888025300800: rx timeout, send abort [ 145.508647][ C0] vcan0: j1939_tp_rxtimer: 0xffff888025300000: rx timeout, send abort [ 145.526236][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888025300800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 145.540710][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888025300000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 148.477662][ T6246] netlink: 100 bytes leftover after parsing attributes in process `syz.0.86'. [ 148.967166][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 148.994669][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 149.970232][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 152.996071][ C1] sched: DL replenish lagged too much [ 154.515430][ T5827] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 154.555345][ T5827] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 154.566313][ T5827] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 156.617466][ T5827] Bluetooth: hci4: command tx timeout [ 158.876339][ T5827] Bluetooth: hci4: command tx timeout [ 158.945377][ T1117] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.031071][ T6248] chnl_net:caif_netlink_parms(): no params data found [ 160.939732][ T5827] Bluetooth: hci4: command tx timeout [ 161.063900][ T1117] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.408653][ T6287] 9pnet_virtio: no channels available for device syz [ 163.016192][ T5827] Bluetooth: hci4: command tx timeout [ 164.881080][ T6300] 9pnet_virtio: no channels available for device syz [ 166.021377][ T6305] netlink: 100 bytes leftover after parsing attributes in process `syz.2.102'. [ 167.149920][ T6310] 9pnet_virtio: no channels available for device syz [ 169.373359][ T6316] 9pnet_virtio: no channels available for device syz [ 175.011646][ T6334] 9pnet_virtio: no channels available for device syz [ 175.830904][ T6339] 9pnet_virtio: no channels available for device syz [ 177.355996][ T6350] 9pnet_virtio: no channels available for device syz [ 192.335683][ T6399] overlayfs: failed to resolve './file0': -2 [ 194.555267][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.563712][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.193035][ T5822] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 196.203186][ T5822] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 196.215900][ T5822] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 196.224646][ T5822] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 196.233251][ T5822] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 196.241898][ T5822] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 198.623245][ T5822] Bluetooth: hci5: command tx timeout [ 199.354107][ T1117] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.336419][ T5834] Bluetooth: hci5: command tx timeout [ 202.074913][ T5834] Bluetooth: hci0: command 0x0406 tx timeout [ 202.084763][ T5825] Bluetooth: hci1: command 0x0406 tx timeout [ 202.094952][ T5825] Bluetooth: hci2: command 0x0406 tx timeout [ 202.175731][ T1117] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.557284][ T6248] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg2": -EINTR [ 203.055963][ T6442] 9pnet_virtio: no channels available for device syz [ 203.531464][ T5822] Bluetooth: hci5: command tx timeout [ 205.705101][ T5822] Bluetooth: hci5: command tx timeout [ 208.046808][ T1117] bridge_slave_1: left allmulticast mode [ 208.100360][ T1117] bridge_slave_1: left promiscuous mode [ 208.163430][ T1117] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.853575][ T5827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 208.869436][ T5827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 208.882446][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 208.895720][ T5827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 208.909467][ T5827] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 208.923529][ T5827] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 209.424074][ T1117] bridge_slave_0: left allmulticast mode [ 210.080280][ T1117] bridge_slave_0: left promiscuous mode [ 210.096513][ T1117] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.037999][ T5827] Bluetooth: hci2: command tx timeout [ 213.096431][ T5827] Bluetooth: hci2: command tx timeout [ 215.013783][ T6492] 9pnet_virtio: no channels available for device syz [ 215.232479][ T5827] Bluetooth: hci2: command tx timeout [ 221.467427][ T5827] Bluetooth: hci2: command tx timeout [ 227.400187][ T1117] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.584577][ T1117] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.603953][ T1117] bond0 (unregistering): Released all slaves [ 262.816508][ T5827] Bluetooth: hci3: command tx timeout [ 287.445442][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 287.462734][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.866501][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 320.882154][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.852807][ T5827] Bluetooth: hci5: command 0x0406 tx timeout [ 379.796456][ T30] INFO: task kworker/u8:5:796 blocked for more than 164 seconds. [ 379.804511][ T30] Not tainted 6.13.0-rc2-syzkaller-00159-gf932fb9b4074 #0 [ 379.866445][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.872911][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.936035][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 379.944915][ T30] task:kworker/u8:5 state:D stack:22456 pid:796 tgid:796 ppid:2 flags:0x00004000 [ 379.999700][ T5825] Bluetooth: hci2: command 0x0406 tx timeout [ 380.213107][ T30] Workqueue: events_unbound linkwatch_event [ 380.316046][ T30] Call Trace: [ 380.319405][ T30] [ 380.322409][ T30] __schedule+0x17fb/0x4be0 [ 380.356035][ T30] ? __pfx___schedule+0x10/0x10 [ 380.360994][ T30] ? __pfx_lock_release+0x10/0x10 [ 380.376091][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 380.382066][ T30] ? kthread_data+0x52/0xd0 [ 380.396008][ T30] ? schedule+0x90/0x320 [ 380.401228][ T30] ? wq_worker_sleeping+0x66/0x240 [ 380.416566][ T30] ? schedule+0x90/0x320 [ 380.420902][ T30] schedule+0x14b/0x320 [ 380.425108][ T30] schedule_preempt_disabled+0x13/0x30 [ 380.446140][ T30] __mutex_lock+0x7e7/0xee0 [ 380.450746][ T30] ? __mutex_lock+0x5ef/0xee0 [ 380.455498][ T30] ? linkwatch_event+0xe/0x60 [ 380.476042][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 380.481170][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 380.487262][ T30] ? process_scheduled_works+0x976/0x1840 [ 380.493040][ T30] linkwatch_event+0xe/0x60 [ 380.497673][ T30] process_scheduled_works+0xa66/0x1840 [ 380.504245][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 380.519720][ T30] ? assign_work+0x364/0x3d0 [ 380.524413][ T30] worker_thread+0x870/0xd30 [ 380.529218][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 380.535178][ T30] ? __kthread_parkme+0x169/0x1d0 [ 380.540418][ T30] ? __pfx_worker_thread+0x10/0x10 [ 380.545663][ T30] kthread+0x2f0/0x390 [ 380.549889][ T30] ? __pfx_worker_thread+0x10/0x10 [ 380.555054][ T30] ? __pfx_kthread+0x10/0x10 [ 380.559850][ T30] ret_from_fork+0x4b/0x80 [ 380.564396][ T30] ? __pfx_kthread+0x10/0x10 [ 380.569108][ T30] ret_from_fork_asm+0x1a/0x30 [ 380.573942][ T30] [ 380.577122][ T30] INFO: task dhcpcd:5490 blocked for more than 142 seconds. [ 380.584790][ T30] Not tainted 6.13.0-rc2-syzkaller-00159-gf932fb9b4074 #0 [ 380.592605][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 380.601376][ T30] task:dhcpcd state:D stack:20248 pid:5490 tgid:5490 ppid:5489 flags:0x00000002 [ 380.612207][ T30] Call Trace: [ 380.615521][ T30] [ 380.618993][ T30] __schedule+0x17fb/0x4be0 [ 380.623579][ T30] ? __pfx___schedule+0x10/0x10 [ 380.628642][ T30] ? __pfx_lock_release+0x10/0x10 [ 380.633717][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 380.639738][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 380.645677][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 380.652090][ T30] ? schedule+0x90/0x320 [ 380.656411][ T30] schedule+0x14b/0x320 [ 380.660624][ T30] schedule_preempt_disabled+0x13/0x30 [ 380.666188][ T30] __mutex_lock+0x7e7/0xee0 [ 380.670741][ T30] ? __mutex_lock+0x5ef/0xee0 [ 380.675465][ T30] ? rtnl_dumpit+0x99/0x200 [ 380.680107][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 380.685183][ T30] ? __build_skb_around+0x245/0x3d0 [ 380.690491][ T30] ? __alloc_skb+0x28f/0x440 [ 380.695123][ T30] ? __kasan_slab_free+0x59/0x70 [ 380.700287][ T30] ? __pfx___alloc_skb+0x10/0x10 [ 380.705268][ T30] ? __pfx_rtnl_dump_all+0x10/0x10 [ 380.710950][ T30] rtnl_dumpit+0x99/0x200 [ 380.715339][ T30] netlink_dump+0x64d/0xe10 [ 380.720498][ T30] ? __pfx_netlink_dump+0x10/0x10 [ 380.725598][ T30] ? netlink_recvmsg+0x60a/0x11d0 [ 380.730713][ T30] ? netlink_recvmsg+0x60a/0x11d0 [ 380.735785][ T30] netlink_recvmsg+0x6bb/0x11d0 [ 380.740908][ T30] ? __pfx_netlink_recvmsg+0x10/0x10 [ 380.746328][ T30] ? __pfx___might_resched+0x10/0x10 [ 380.751667][ T30] ? __might_fault+0xaa/0x120 [ 380.756428][ T30] ? __pfx_lock_release+0x10/0x10 [ 380.761517][ T30] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 380.767009][ T30] ? __pfx_netlink_recvmsg+0x10/0x10 [ 380.772528][ T30] sock_recvmsg+0x22f/0x280 [ 380.777385][ T30] ____sys_recvmsg+0x1c6/0x480 [ 380.782223][ T30] ? __pfx_____sys_recvmsg+0x10/0x10 [ 380.787662][ T30] __sys_recvmsg+0x291/0x390 [ 380.792317][ T30] ? __pfx___sys_recvmsg+0x10/0x10 [ 380.797610][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 380.804080][ T30] ? do_syscall_64+0x100/0x230 [ 380.808999][ T30] ? do_syscall_64+0xb6/0x230 [ 380.814659][ T30] do_syscall_64+0xf3/0x230 [ 380.819287][ T30] ? clear_bhb_loop+0x35/0x90 [ 380.824040][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.830089][ T30] RIP: 0033:0x7f58bc7a891e [ 380.834570][ T30] RSP: 002b:00007ffe865527b8 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 380.843127][ T30] RAX: ffffffffffffffda RBX: 00007ffe865538e0 RCX: 00007f58bc7a891e [ 380.851212][ T30] RDX: 0000000000000000 RSI: 00007ffe86553800 RDI: 0000000000000005 [ 380.859390][ T30] RBP: 00007ffe86553870 R08: 00007ffe865537e4 R09: 000000000000000c [ 380.867474][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 380.875503][ T30] R13: 00007ffe865537e4 R14: 00007ffe86553800 R15: 00007ffe865537f0 [ 380.883623][ T30] [ 380.887020][ T30] INFO: task syz-executor:6409 blocked for more than 143 seconds. [ 380.894875][ T30] Not tainted 6.13.0-rc2-syzkaller-00159-gf932fb9b4074 #0 [ 380.902689][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 380.911448][ T30] task:syz-executor state:D stack:21280 pid:6409 tgid:6409 ppid:6408 flags:0x00000000 [ 380.922561][ T30] Call Trace: [ 380.925895][ T30] [ 380.929360][ T30] __schedule+0x17fb/0x4be0 [ 380.933954][ T30] ? __pfx___schedule+0x10/0x10 [ 380.938964][ T30] ? __pfx_lock_release+0x10/0x10 [ 380.944051][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 380.950152][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 380.956290][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 380.962685][ T30] ? schedule+0x90/0x320 [ 380.967060][ T30] schedule+0x14b/0x320 [ 380.971275][ T30] schedule_preempt_disabled+0x13/0x30 [ 380.977073][ T30] __mutex_lock+0x7e7/0xee0 [ 380.981818][ T30] ? __mutex_lock+0x5ef/0xee0 [ 380.986777][ T30] ? rtnl_newlink+0xbcb/0x2150 [ 380.991692][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 380.996841][ T30] ? cap_capable+0x1b4/0x250 [ 381.001484][ T30] ? safesetid_security_capable+0xb2/0x1d0 [ 381.007447][ T30] ? ns_capable+0x8a/0xf0 [ 381.011845][ T30] ? rtnl_link_get_net_capable+0x168/0x340 [ 381.018189][ T30] rtnl_newlink+0xbcb/0x2150 [ 381.022860][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 381.028812][ T30] ? __pfx_validate_chain+0x10/0x10 [ 381.034097][ T30] ? validate_chain+0x11e/0x5920 [ 381.039268][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 381.044384][ T30] ? __pfx_lock_release+0x10/0x10 [ 381.049595][ T30] ? __pfx_validate_chain+0x10/0x10 [ 381.054856][ T30] ? mark_lock+0x9a/0x360 [ 381.059319][ T30] ? __lock_acquire+0x1397/0x2100 [ 381.064456][ T30] ? __pfx_lock_release+0x10/0x10 [ 381.069612][ T30] ? __lock_acquire+0x1397/0x2100 [ 381.074706][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 381.079845][ T30] rtnetlink_rcv_msg+0x791/0xcf0 [ 381.084844][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 381.090066][ T30] ? __lock_acquire+0x1397/0x2100 [ 381.095160][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 381.100786][ T30] netlink_rcv_skb+0x1e3/0x430 [ 381.105613][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 381.111339][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 381.117206][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 381.122471][ T30] netlink_unicast+0x7f6/0x990 [ 381.127781][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 381.133139][ T30] ? __virt_addr_valid+0x45f/0x530 [ 381.138353][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 381.143435][ T30] ? __check_object_size+0x47a/0x730 [ 381.148883][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 381.153723][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.159168][ T30] ? __might_fault+0xaa/0x120 [ 381.163915][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.169432][ T30] __sock_sendmsg+0x221/0x270 [ 381.174175][ T30] __sys_sendto+0x363/0x4c0 [ 381.178906][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 381.183998][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 381.189508][ T30] ? blkcg_maybe_throttle_current+0x1ab/0xb80 [ 381.195656][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 381.201757][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 381.208207][ T30] __x64_sys_sendto+0xde/0x100 [ 381.213033][ T30] do_syscall_64+0xf3/0x230 [ 381.217704][ T30] ? clear_bhb_loop+0x35/0x90 [ 381.223337][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.229427][ T30] RIP: 0033:0x7f7c7a787bac [ 381.233890][ T30] RSP: 002b:00007fff7cf8d4f0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 381.242421][ T30] RAX: ffffffffffffffda RBX: 00007f7c7b4a4620 RCX: 00007f7c7a787bac [ 381.250529][ T30] RDX: 0000000000000038 RSI: 00007f7c7b4a4670 RDI: 0000000000000003 [ 381.258634][ T30] RBP: 0000000000000000 R08: 00007fff7cf8d544 R09: 000000000000000c [ 381.266718][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 381.274755][ T30] R13: 0000000000000000 R14: 00007f7c7b4a4670 R15: 0000000000000000 [ 381.282902][ T30] [ 381.286022][ T30] INFO: task syz-executor:6469 blocked for more than 165 seconds. [ 381.293854][ T30] Not tainted 6.13.0-rc2-syzkaller-00159-gf932fb9b4074 #0 [ 381.301663][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 381.310477][ T30] task:syz-executor state:D stack:25272 pid:6469 tgid:6469 ppid:6436 flags:0x00004000 [ 381.320817][ T30] Call Trace: [ 381.325062][ T30] [ 381.328092][ T30] __schedule+0x17fb/0x4be0 [ 381.332674][ T30] ? __pfx___schedule+0x10/0x10 [ 381.337672][ T30] ? __pfx_lock_release+0x10/0x10 [ 381.342841][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 381.348881][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 381.354838][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 381.361317][ T30] ? schedule+0x90/0x320 [ 381.365617][ T30] schedule+0x14b/0x320 [ 381.369921][ T30] schedule_preempt_disabled+0x13/0x30 [ 381.375537][ T30] __mutex_lock+0x7e7/0xee0 [ 381.380170][ T30] ? __mutex_lock+0x5ef/0xee0 [ 381.384907][ T30] ? inet_rtm_newaddr+0x47e/0x1bd0 [ 381.390174][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 381.395265][ T30] ? __lock_acquire+0x1397/0x2100 [ 381.400506][ T30] ? __nla_parse+0x40/0x60 [ 381.404988][ T30] inet_rtm_newaddr+0x47e/0x1bd0 [ 381.410114][ T30] ? rcu_read_unlock+0x87/0xa0 [ 381.414933][ T30] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 381.420490][ T30] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 381.426409][ T30] rtnetlink_rcv_msg+0x791/0xcf0 [ 381.431417][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 381.437142][ T30] ? __lock_acquire+0x1397/0x2100 [ 381.442239][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 381.447868][ T30] netlink_rcv_skb+0x1e3/0x430 [ 381.452695][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 381.458329][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 381.463706][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 381.469070][ T30] netlink_unicast+0x7f6/0x990 [ 381.473956][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 381.482916][ T30] ? __virt_addr_valid+0x45f/0x530 [ 381.491773][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 381.500646][ T30] ? __check_object_size+0x47a/0x730 [ 381.509544][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 381.514405][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.523131][ T30] ? __might_fault+0xaa/0x120 [ 381.531559][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.540713][ T30] __sock_sendmsg+0x221/0x270 [ 381.545485][ T30] __sys_sendto+0x363/0x4c0 [ 381.553380][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 381.561842][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 381.571418][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 381.581378][ T30] ? exc_page_fault+0x590/0x8b0 [ 381.589636][ T30] __x64_sys_sendto+0xde/0x100 [ 381.594486][ T30] do_syscall_64+0xf3/0x230 [ 381.602651][ T30] ? clear_bhb_loop+0x35/0x90 [ 381.610994][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.620458][ T30] RIP: 0033:0x7f1f8bf87bac [ 381.624947][ T30] RSP: 002b:00007ffcd2f4c4e0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 381.637340][ T30] RAX: ffffffffffffffda RBX: 00007f1f8cca4620 RCX: 00007f1f8bf87bac [ 381.645385][ T30] RDX: 0000000000000028 RSI: 00007f1f8cca4670 RDI: 0000000000000003 [ 381.657455][ T30] RBP: 0000000000000000 R08: 00007ffcd2f4c534 R09: 000000000000000c [ 381.665512][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 381.677084][ T30] R13: 0000000000000000 R14: 00007f1f8cca4670 R15: 0000000000000000 [ 381.685136][ T30] [ 381.691829][ T30] [ 381.691829][ T30] Showing all locks held in the system: [ 381.702968][ T30] 3 locks held by kworker/u8:0/11: [ 381.711417][ T30] 1 lock held by khungtaskd/30: [ 381.719711][ T30] #0: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 381.733300][ T30] 3 locks held by kworker/1:1/51: [ 381.742579][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 381.757983][ T30] #1: ffffc90000bb7d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 381.772363][ T30] #2: ffffffff8fc9f048 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 381.786459][ T30] 3 locks held by kworker/u8:3/52: [ 381.791635][ T30] 4 locks held by kworker/u9:0/54: [ 381.800393][ T30] #0: ffff888058456148 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 381.814877][ T30] #1: ffffc90000be7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 381.831237][ T30] #2: ffff88807f6dcd80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1ec/0x400 [ 381.845195][ T30] #3: ffff88807f6dc078 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1e4/0x11f0 [ 381.859023][ T30] 3 locks held by kworker/u8:4/80: [ 381.864290][ T30] 2 locks held by kswapd0/88: [ 381.872610][ T30] 2 locks held by kswapd1/90: [ 381.880985][ T30] 3 locks held by kworker/u8:5/796: [ 381.889680][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 381.905412][ T30] #1: ffffc90003447d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 381.919805][ T30] #2: ffffffff8fc9f048 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 381.932794][ T30] 4 locks held by kworker/u8:6/1095: [ 381.942141][ T30] 3 locks held by kworker/u8:7/1117: [ 381.951184][ T30] #0: ffff88801baeb148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 381.965519][ T30] #1: ffffc90003ea7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 381.979745][ T30] #2: ffffffff8fc92b90 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x16a/0xd50 [ 381.992714][ T30] 3 locks held by kworker/u8:9/1149: [ 382.001628][ T30] 3 locks held by kworker/R-ipv6_/3169: [ 382.010817][ T30] #0: ffff88814d71c148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 382.026191][ T30] #1: ffffc9000beafc80 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 382.057146][ T30] #2: ffffffff8fc9f048 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 382.070815][ T30] 1 lock held by klogd/5185: [ 382.075479][ T30] 4 locks held by udevd/5196: [ 382.083738][ T30] 2 locks held by dhcpcd/5490: [ 382.092313][ T30] #0: ffff88805d7a86c8 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: netlink_dump+0xcb/0xe10 [ 382.105691][ T30] #1: ffffffff8fc9f048 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x99/0x200 [ 382.118185][ T30] 2 locks held by getty/5577: [ 382.122934][ T30] #0: ffff888031a1d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 382.237591][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 382.258627][ T30] 2 locks held by syz-executor/5808: [ 382.264015][ T30] 1 lock held by syz-executor/5820: [ 382.286124][ T30] 1 lock held by syz-executor/5826: [ 382.301416][ T30] 4 locks held by kworker/u9:4/5827: [ 382.326449][ T30] #0: ffff888056ce6948 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 382.347332][ T30] #1: ffffc90004067d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 382.378149][ T30] #2: ffff888028f9cd80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1ec/0x400 [ 382.398438][ T30] #3: ffff888028f9c078 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1e4/0x11f0 [ 382.486107][ T30] 2 locks held by syz-executor/6248: [ 382.491488][ T30] #0: ffffffff8fc9f048 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0 [ 382.517098][ T30] #1: ffffffff8e93cff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x830 [ 382.538116][ T30] 2 locks held by syz-executor/6409: [ 382.543477][ T30] #0: ffffffff90187190 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x22/0x250 [ 382.577479][ T30] #1: ffffffff8fc9f048 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xbcb/0x2150 [ 382.596630][ T30] 1 lock held by syz-executor/6469: [ 382.601929][ T30] #0: ffffffff8fc9f048 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bd0 [ 382.637094][ T30] 2 locks held by kworker/u8:13/6541: [ 382.642549][ T30] [ 382.644911][ T30] ============================================= [ 382.644911][ T30] [ 382.667343][ T30] NMI backtrace for cpu 0 [ 382.671757][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc2-syzkaller-00159-gf932fb9b4074 #0 [ 382.682388][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 382.692489][ T30] Call Trace: [ 382.695805][ T30] [ 382.698774][ T30] dump_stack_lvl+0x241/0x360 [ 382.703514][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 382.708774][ T30] ? __pfx__printk+0x10/0x10 [ 382.713428][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 382.718425][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 382.724111][ T30] ? _printk+0xd5/0x120 [ 382.728313][ T30] ? __pfx__printk+0x10/0x10 [ 382.732951][ T30] ? __wake_up_klogd+0xcc/0x110 [ 382.737878][ T30] ? __pfx__printk+0x10/0x10 [ 382.742618][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 382.747724][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 382.754223][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 382.760315][ T30] watchdog+0xff6/0x1040 [ 382.764881][ T30] ? watchdog+0x1ea/0x1040 [ 382.769368][ T30] ? __pfx_watchdog+0x10/0x10 [ 382.774134][ T30] kthread+0x2f0/0x390 [ 382.778278][ T30] ? __pfx_watchdog+0x10/0x10 [ 382.782996][ T30] ? __pfx_kthread+0x10/0x10 [ 382.787633][ T30] ret_from_fork+0x4b/0x80 [ 382.792088][ T30] ? __pfx_kthread+0x10/0x10 [ 382.796727][ T30] ret_from_fork_asm+0x1a/0x30 [ 382.801610][ T30] [ 382.808548][ T30] Sending NMI from CPU 0 to CPUs 1: [ 382.813844][ C1] NMI backtrace for cpu 1 [ 382.813860][ C1] CPU: 1 UID: 0 PID: 5196 Comm: udevd Not tainted 6.13.0-rc2-syzkaller-00159-gf932fb9b4074 #0 [ 382.813882][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 382.813893][ C1] RIP: 0010:lockdep_hardirqs_on_prepare+0x34b/0x780 [ 382.813920][ C1] Code: 48 c1 e8 03 0f b6 04 10 84 c0 0f 85 2b 03 00 00 83 3b 00 0f 84 f7 00 00 00 41 0f b6 04 17 84 c0 0f 85 3c 03 00 00 41 83 3e 00 <0f> 8e e0 00 00 00 4c 8b 64 24 10 49 8d 9c 24 e0 0a 00 00 49 81 c4 [ 382.813935][ C1] RSP: 0018:ffffc900038c72c0 EFLAGS: 00000002 [ 382.813952][ C1] RAX: 0000000000000000 RBX: ffff888072e764c0 RCX: ffffffff817b117a [ 382.813965][ C1] RDX: dffffc0000000000 RSI: 0000000000000008 RDI: ffffffff9426e8b0 [ 382.813978][ C1] RBP: ffffc900038c7368 R08: ffffffff9426e8b7 R09: 1ffffffff284dd16 [ 382.813992][ C1] R10: dffffc0000000000 R11: fffffbfff284dd17 R12: ffff888072e765a0 [ 382.814006][ C1] R13: 0000000000000004 R14: ffff888072e764d8 R15: 1ffff1100e5cec9b [ 382.814019][ C1] FS: 00007f488e999c80(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 382.814035][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 382.814048][ C1] CR2: 00007f47a31495b8 CR3: 0000000071ce0000 CR4: 00000000003526f0 [ 382.814064][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 382.814074][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 382.814086][ C1] Call Trace: [ 382.814092][ C1] [ 382.814099][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 382.814121][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 382.814141][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 382.814167][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 382.814194][ C1] ? nmi_handle+0x14f/0x5a0 [ 382.814214][ C1] ? nmi_handle+0x2a/0x5a0 [ 382.814234][ C1] ? lockdep_hardirqs_on_prepare+0x34b/0x780 [ 382.814253][ C1] ? default_do_nmi+0x63/0x160 [ 382.814272][ C1] ? exc_nmi+0x123/0x1f0 [ 382.814290][ C1] ? end_repeat_nmi+0xf/0x53 [ 382.814329][ C1] ? mark_lock+0x9a/0x360 [ 382.814350][ C1] ? lockdep_hardirqs_on_prepare+0x34b/0x780 [ 382.814369][ C1] ? lockdep_hardirqs_on_prepare+0x34b/0x780 [ 382.814389][ C1] ? lockdep_hardirqs_on_prepare+0x34b/0x780 [ 382.814408][ C1] [ 382.814414][ C1] [ 382.814422][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 382.814443][ C1] ? rcu_is_watching+0x15/0xb0 [ 382.814467][ C1] trace_hardirqs_on+0x28/0x40 [ 382.814484][ C1] _raw_spin_unlock_irqrestore+0x8f/0x140 [ 382.814507][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 382.814533][ C1] debug_check_no_obj_freed+0x561/0x580 [ 382.814567][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 382.814596][ C1] ? page_ext_get+0x20/0x2a0 [ 382.814621][ C1] ? page_ext_get+0x1d6/0x2a0 [ 382.814648][ C1] free_unref_page+0x4c6/0x1000 [ 382.814674][ C1] __put_partials+0x160/0x1c0 [ 382.814694][ C1] ? put_cpu_partial+0x14c/0x250 [ 382.814717][ C1] put_cpu_partial+0x17c/0x250 [ 382.814738][ C1] ? put_cpu_partial+0x70/0x250 [ 382.814762][ C1] __slab_free+0x290/0x380 [ 382.814785][ C1] ? __phys_addr+0xba/0x170 [ 382.814805][ C1] qlist_free_all+0x9a/0x140 [ 382.814828][ C1] ? anon_vma_fork+0x1fa/0x580 [ 382.814850][ C1] kasan_quarantine_reduce+0x14f/0x170 [ 382.814875][ C1] __kasan_slab_alloc+0x23/0x80 [ 382.814899][ C1] ? anon_vma_fork+0x141/0x580 [ 382.814920][ C1] kmem_cache_alloc_noprof+0x1d9/0x380 [ 382.814950][ C1] anon_vma_fork+0x1fa/0x580 [ 382.814970][ C1] ? dup_userfaultfd+0xaa/0x5e0 [ 382.814992][ C1] copy_mm+0xcfc/0x1f90 [ 382.815026][ C1] ? __pfx_copy_mm+0x10/0x10 [ 382.815057][ C1] ? __init_rwsem+0x122/0x160 [ 382.815081][ C1] ? copy_signal+0x51c/0x640 [ 382.815108][ C1] copy_process+0x1845/0x3d50 [ 382.815139][ C1] ? copy_process+0x9fa/0x3d50 [ 382.815168][ C1] ? __pfx_copy_process+0x10/0x10 [ 382.815195][ C1] ? __pfx_sk_setsockopt+0x10/0x10 [ 382.815216][ C1] kernel_clone+0x223/0x870 [ 382.815235][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 382.815258][ C1] __x64_sys_clone+0x258/0x2a0 [ 382.815277][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 382.815304][ C1] ? do_syscall_64+0x100/0x230 [ 382.815331][ C1] ? do_syscall_64+0xb6/0x230 [ 382.815356][ C1] do_syscall_64+0xf3/0x230 [ 382.815381][ C1] ? clear_bhb_loop+0x35/0x90 [ 382.815408][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.815433][ C1] RIP: 0033:0x7f488e4fca12 [ 382.815448][ C1] Code: 41 5d 41 5e 41 5f c3 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 10 48 8b 15 e7 43 0f 00 f7 d8 64 89 02 48 83 [ 382.815463][ C1] RSP: 002b:00007ffe3bff1608 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 382.815481][ C1] RAX: ffffffffffffffda RBX: 000055fd18542701 RCX: 00007f488e4fca12 [ 382.815494][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 382.815505][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 000055fd1852a910 [ 382.815516][ C1] R10: 00007f488e999f50 R11: 0000000000000246 R12: 000055fd1852a500 [ 382.815529][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 000055fd1852a910 [ 382.815546][ C1] [ 383.319865][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 383.326775][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc2-syzkaller-00159-gf932fb9b4074 #0 [ 383.337325][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 383.347426][ T30] Call Trace: [ 383.350757][ T30] [ 383.353729][ T30] dump_stack_lvl+0x241/0x360 [ 383.358469][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 383.363828][ T30] ? __pfx__printk+0x10/0x10 [ 383.368472][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 383.374519][ T30] ? vscnprintf+0x5d/0x90 [ 383.378914][ T30] panic+0x349/0x880 [ 383.382885][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 383.389218][ T30] ? __pfx_panic+0x10/0x10 [ 383.393719][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 383.399172][ T30] ? __irq_work_queue_local+0x137/0x410 [ 383.404798][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 383.410234][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 383.416478][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 383.422763][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 383.429018][ T30] watchdog+0x1035/0x1040 [ 383.433419][ T30] ? watchdog+0x1ea/0x1040 [ 383.437907][ T30] ? __pfx_watchdog+0x10/0x10 [ 383.442733][ T30] kthread+0x2f0/0x390 [ 383.446876][ T30] ? __pfx_watchdog+0x10/0x10 [ 383.451719][ T30] ? __pfx_kthread+0x10/0x10 [ 383.456351][ T30] ret_from_fork+0x4b/0x80 [ 383.460812][ T30] ? __pfx_kthread+0x10/0x10 [ 383.465424][ T30] ret_from_fork_asm+0x1a/0x30 [ 383.470228][ T30] [ 383.473557][ T30] Kernel Offset: disabled [ 383.477944][ T30] Rebooting in 86400 seconds..