last executing test programs: 1.597054321s ago: executing program 3 (id=4): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000a80)={{0x2, 0x8000, @dev={0xac, 0x14, 0x14, 0x2a}}, {0x0, @random="0000a85d4f76"}, 0x1c, {0x2, 0x4e22, @loopback}, 'veth0\x00'}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/218, 0xda}], 0x1, 0xffff, 0x0) 1.494545105s ago: executing program 3 (id=6): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000003c0)={r1, 0xae05, 0x4, 0x5, 0x9, 0x5}, 0x14) 1.390608652s ago: executing program 3 (id=7): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x3a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x0, 0x0, 0xec, 0x4, 0x0, @rand_addr=0x64010102, @multicast1}, {0xfffe, 0x0, 0x18, 0x0, @wg=@data}}}}}, 0x0) 1.272003204s ago: executing program 3 (id=8): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0x2a}, 0x48, 0xffffffffffffffff) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r2 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000003c0)={0x3, &(0x7f0000000300)=[{0x13, 0x35, 0x7f, 0x9}, {0x8, 0x80, 0x1a, 0x5}, {0x8, 0x8, 0x2, 0x7}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) keyctl$KEYCTL_MOVE(0x4, r2, r1, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x4, r0, r0, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r6 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r6, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="92", 0x1}], 0x1}}], 0x2, 0x7c9ce320e12d300) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001800dd8d000000000000000002000000fd0000060000000006001500070000000c0016"], 0x30}}, 0x0) 1.114027036s ago: executing program 0 (id=1): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "77746a315690a576", "07f217bd2e511e465bbbd5de32b495b2f9044677d4d588360663af84db44be59", "9bba8c07", "f37f20e2ff799aae"}, 0x38) write$binfmt_script(r0, &(0x7f0000000240)={'#! ', './file0'}, 0xfc94) shutdown(r0, 0x1) 956.117351ms ago: executing program 0 (id=9): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x180, 0xa, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x21}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000f089d382d89fbc7025d2b1f83ea7412d70b97ced99938765b76bc7b76bbce9700701b3d3eaa6ccf9c10d3b74bf5bd6fa40870afaf186946062b6174ef82f7560f70f15866a44e38d716e89d4e0095aa63ebc617715ad96586f5821bfd117a1d02125586e16522e6f9a2a4605094c0bfce7cb83e2621707f06cbe33d10000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='f2fs_gc_end\x00', r5, 0x0, 0x7}, 0xf) socket$inet6_sctp(0xa, 0x5, 0x84) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f00000001c0)=0x1) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0xd4) dup2(r7, r7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$BLKTRACESETUP(r7, 0x1276, 0x0) 710.363123ms ago: executing program 0 (id=10): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0xfdcd, 0x0, @wg=@data}}}}}, 0x0) 556.356913ms ago: executing program 0 (id=11): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x79}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}, 0x0) 246.306483ms ago: executing program 0 (id=12): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000a80)={{0x2, 0x8000, @dev={0xac, 0x14, 0x14, 0x2a}}, {0x0, @random="0000a85d4f76"}, 0x1c, {0x2, 0x4e22, @loopback}, 'veth0\x00'}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/218, 0xda}], 0x1, 0xffff, 0x0) 200.87006ms ago: executing program 1 (id=2): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r2 = dup(r1) ioctl$TIOCL_SETSEL(r2, 0x541c, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0, 0x6}) ioctl$MON_IOCX_GETX(r3, 0x80089203, 0x0) 0s ago: executing program 0 (id=13): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x13) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) r4 = syz_open_procfs(r3, &(0x7f0000000040)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0x40086610, &(0x7f0000000180)={@desc={0x1, 0x0, @desc1}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.240' (ED25519) to the list of known hosts. [ 51.244998][ T5207] cgroup: Unknown subsys name 'net' [ 51.396261][ T5207] cgroup: Unknown subsys name 'cpuset' [ 51.404132][ T5207] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.729347][ T5207] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 54.845017][ T5234] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.853392][ T5225] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 54.854083][ T5234] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.861221][ T5225] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 54.870769][ T5234] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 54.883051][ T5234] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.887664][ T5235] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 54.891396][ T5234] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 54.905695][ T5225] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.906559][ T5234] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 54.914374][ T5225] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.922310][ T5234] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 54.928405][ T5225] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 54.935298][ T5234] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 54.940897][ T5237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.949550][ T5234] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 54.957337][ T5237] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.963177][ T5234] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 54.969424][ T5237] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 54.977535][ T5234] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 54.987343][ T5237] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 54.991107][ T5234] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 54.997198][ T5225] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.013853][ T5225] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 55.021995][ T5237] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 55.031594][ T5225] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 55.039587][ T5237] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 55.047510][ T5237] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 55.054974][ T5225] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 55.062496][ T5237] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 55.456847][ T5218] chnl_net:caif_netlink_parms(): no params data found [ 55.512352][ T5217] chnl_net:caif_netlink_parms(): no params data found [ 55.537835][ T5220] chnl_net:caif_netlink_parms(): no params data found [ 55.659505][ T5231] chnl_net:caif_netlink_parms(): no params data found [ 55.697012][ T5218] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.705769][ T5218] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.713630][ T5218] bridge_slave_0: entered allmulticast mode [ 55.720317][ T5218] bridge_slave_0: entered promiscuous mode [ 55.731198][ T5223] chnl_net:caif_netlink_parms(): no params data found [ 55.763555][ T5218] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.770988][ T5218] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.779405][ T5218] bridge_slave_1: entered allmulticast mode [ 55.786832][ T5218] bridge_slave_1: entered promiscuous mode [ 55.811651][ T5217] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.818898][ T5217] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.826542][ T5217] bridge_slave_0: entered allmulticast mode [ 55.833511][ T5217] bridge_slave_0: entered promiscuous mode [ 55.876585][ T5220] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.884079][ T5220] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.891319][ T5220] bridge_slave_0: entered allmulticast mode [ 55.899348][ T5220] bridge_slave_0: entered promiscuous mode [ 55.907293][ T5217] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.914976][ T5217] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.922112][ T5217] bridge_slave_1: entered allmulticast mode [ 55.929005][ T5217] bridge_slave_1: entered promiscuous mode [ 55.954208][ T5218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.966333][ T5218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.980859][ T5220] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.988631][ T5220] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.996436][ T5220] bridge_slave_1: entered allmulticast mode [ 56.003897][ T5220] bridge_slave_1: entered promiscuous mode [ 56.017672][ T5231] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.025285][ T5231] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.035734][ T5231] bridge_slave_0: entered allmulticast mode [ 56.042565][ T5231] bridge_slave_0: entered promiscuous mode [ 56.073169][ T5217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.082766][ T5231] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.090087][ T5231] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.097935][ T5231] bridge_slave_1: entered allmulticast mode [ 56.105004][ T5231] bridge_slave_1: entered promiscuous mode [ 56.121734][ T5218] team0: Port device team_slave_0 added [ 56.140794][ T5217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.161561][ T5218] team0: Port device team_slave_1 added [ 56.179016][ T5220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.221417][ T5220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.243897][ T5217] team0: Port device team_slave_0 added [ 56.251556][ T5231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.264484][ T5231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.280036][ T5223] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.287599][ T5223] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.295344][ T5223] bridge_slave_0: entered allmulticast mode [ 56.302395][ T5223] bridge_slave_0: entered promiscuous mode [ 56.316911][ T5217] team0: Port device team_slave_1 added [ 56.339450][ T5218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.346643][ T5218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.373070][ T5218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.385589][ T5223] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.396173][ T5223] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.403580][ T5223] bridge_slave_1: entered allmulticast mode [ 56.410334][ T5223] bridge_slave_1: entered promiscuous mode [ 56.432085][ T5217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.439257][ T5217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.465587][ T5217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.487028][ T5231] team0: Port device team_slave_0 added [ 56.493594][ T5218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.500582][ T5218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.526923][ T5218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.557633][ T5220] team0: Port device team_slave_0 added [ 56.567498][ T5217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.574558][ T5217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.600777][ T5217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.613321][ T5231] team0: Port device team_slave_1 added [ 56.638582][ T5220] team0: Port device team_slave_1 added [ 56.678373][ T5223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.690175][ T5223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.709036][ T5220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.718364][ T5220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.745179][ T5220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.765320][ T5231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.772367][ T5231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.798952][ T5231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.834402][ T5220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.841387][ T5220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.868108][ T5220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.880130][ T5231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.887599][ T5231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.913798][ T5231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.944631][ T5217] hsr_slave_0: entered promiscuous mode [ 56.951121][ T5217] hsr_slave_1: entered promiscuous mode [ 56.985839][ T5223] team0: Port device team_slave_0 added [ 57.002230][ T5218] hsr_slave_0: entered promiscuous mode [ 57.009076][ T5218] hsr_slave_1: entered promiscuous mode [ 57.015970][ T5218] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.024054][ T5218] Cannot create hsr debugfs directory [ 57.043190][ T5233] Bluetooth: hci1: command tx timeout [ 57.057070][ T5223] team0: Port device team_slave_1 added [ 57.068882][ T5231] hsr_slave_0: entered promiscuous mode [ 57.075369][ T5231] hsr_slave_1: entered promiscuous mode [ 57.081360][ T5231] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.089137][ T5231] Cannot create hsr debugfs directory [ 57.122602][ T5237] Bluetooth: hci2: command tx timeout [ 57.122610][ T5226] Bluetooth: hci4: command tx timeout [ 57.122896][ T5237] Bluetooth: hci0: command tx timeout [ 57.139228][ T5233] Bluetooth: hci3: command tx timeout [ 57.171968][ T5223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.179120][ T5223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.205995][ T5223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.219421][ T5223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.226670][ T5223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.253093][ T5223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.290399][ T5220] hsr_slave_0: entered promiscuous mode [ 57.296765][ T5220] hsr_slave_1: entered promiscuous mode [ 57.306755][ T5220] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.314535][ T5220] Cannot create hsr debugfs directory [ 57.443723][ T5223] hsr_slave_0: entered promiscuous mode [ 57.450624][ T5223] hsr_slave_1: entered promiscuous mode [ 57.457311][ T5223] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.465277][ T5223] Cannot create hsr debugfs directory [ 57.630211][ T5217] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.654558][ T5217] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.664829][ T5217] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.688055][ T5217] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.758223][ T5231] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.769297][ T5231] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.779567][ T5231] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.789861][ T5231] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.869097][ T5218] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.888885][ T5217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.904649][ T5218] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.914418][ T5218] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.924308][ T5218] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.948507][ T5217] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.994443][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.001808][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.025390][ T5220] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.035960][ T5220] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.049660][ T3341] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.056915][ T3341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.078583][ T5220] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.110686][ T5220] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.164069][ T5223] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.185601][ T5223] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.206811][ T5223] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.240317][ T5223] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.345303][ T5231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.403505][ T5231] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.445732][ T5218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.464107][ T5220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.472088][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.479302][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.509880][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.517134][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.575407][ T5218] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.596209][ T5220] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.606657][ T3341] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.614033][ T3341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.636438][ T5223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.646765][ T5217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.657798][ T3341] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.664982][ T3341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.677146][ T4539] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.684291][ T4539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.720345][ T4539] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.727563][ T4539] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.766058][ T5223] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.854305][ T3341] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.861563][ T3341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.892210][ T4539] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.899422][ T4539] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.948575][ T5217] veth0_vlan: entered promiscuous mode [ 58.970660][ T5231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.987524][ T5217] veth1_vlan: entered promiscuous mode [ 59.042253][ T5223] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.104138][ T5217] veth0_macvtap: entered promiscuous mode [ 59.118241][ T5217] veth1_macvtap: entered promiscuous mode [ 59.125301][ T5233] Bluetooth: hci1: command tx timeout [ 59.151905][ T5231] veth0_vlan: entered promiscuous mode [ 59.201445][ T5217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.208956][ T5233] Bluetooth: hci0: command tx timeout [ 59.213174][ T5233] Bluetooth: hci3: command tx timeout [ 59.220334][ T5233] Bluetooth: hci4: command tx timeout [ 59.225776][ T5237] Bluetooth: hci2: command tx timeout [ 59.254243][ T5231] veth1_vlan: entered promiscuous mode [ 59.291052][ T5217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.304580][ T5217] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.314563][ T5217] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.323752][ T5217] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.332559][ T5217] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.361724][ T5218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.399100][ T5220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.465969][ T5231] veth0_macvtap: entered promiscuous mode [ 59.508823][ T5231] veth1_macvtap: entered promiscuous mode [ 59.525533][ T5223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.566043][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.584847][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.596945][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.631970][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.645028][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.658124][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.669381][ T3341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.691102][ T3341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.705873][ T5218] veth0_vlan: entered promiscuous mode [ 59.714860][ T5231] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.728042][ T5231] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.737273][ T5231] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.746326][ T5231] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.787068][ T5220] veth0_vlan: entered promiscuous mode [ 59.811279][ T5218] veth1_vlan: entered promiscuous mode [ 59.830281][ T4539] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.850399][ T5220] veth1_vlan: entered promiscuous mode [ 59.859606][ T4539] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.955249][ T5218] veth0_macvtap: entered promiscuous mode [ 59.971732][ T5217] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 59.980116][ T3003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.989333][ T5218] veth1_macvtap: entered promiscuous mode [ 60.010935][ T3003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.063853][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.075216][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.085523][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.096887][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.109656][ T5218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.120896][ T5220] veth0_macvtap: entered promiscuous mode [ 60.167979][ T5220] veth1_macvtap: entered promiscuous mode [ 60.176025][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.187632][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.197596][ T5218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.209344][ T5218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.221161][ T5218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.238982][ T5218] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.250299][ T4539] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.250576][ T5218] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.282439][ T4539] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.284221][ T5218] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.300920][ T5218] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.361001][ T5223] veth0_vlan: entered promiscuous mode [ 60.384413][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.404206][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.414799][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.425526][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.431666][ T29] audit: type=1326 audit(1727652404.486:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5308 comm="syz.3.8" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f406eb7dff9 code=0x0 [ 60.435448][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.435492][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.443645][ T5220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.507628][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.536810][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.548662][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.559743][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.590565][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.607719][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.621118][ T5220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.654180][ T5223] veth1_vlan: entered promiscuous mode [ 60.690186][ T5220] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.707955][ T5220] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.718013][ T5220] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.738245][ T5318] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 60.738297][ T5220] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.754328][ T5318] No such timeout policy "syz0" [ 60.797025][ T4539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.805470][ T4539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.848421][ T5223] veth0_macvtap: entered promiscuous mode [ 60.891933][ T5223] veth1_macvtap: entered promiscuous mode [ 60.906362][ T4539] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.919404][ T4539] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.008106][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.028425][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.039227][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.050006][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.065557][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.081269][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.095645][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.118821][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.131150][ T5223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.143889][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.154909][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.165518][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.185266][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.199023][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.210210][ T5233] Bluetooth: hci1: command tx timeout [ 61.223546][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.238510][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.250406][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.272579][ T5223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.294019][ T5233] Bluetooth: hci4: command tx timeout [ 61.300454][ T5233] Bluetooth: hci0: command tx timeout [ 61.306681][ T5225] Bluetooth: hci2: command tx timeout [ 61.306875][ T5233] Bluetooth: hci3: command tx timeout [ 61.608199][ T5223] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.669826][ T5223] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.714355][ T5223] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.756693][ T5223] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.789529][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.858254][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.872874][ T5331] EXT4-fs (sda1): resizing filesystem from 262144 to 1 blocks [ 61.904388][ T5331] EXT4-fs warning (device sda1): ext4_resize_fs:2040: can't shrink FS - resize aborted [ 62.008547][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.048554][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.213056][ T4539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.246464][ T4539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.334667][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.357934][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.282866][ T5233] Bluetooth: hci1: command tx timeout [ 63.363096][ T5233] Bluetooth: hci3: command tx timeout [ 63.368854][ T5237] Bluetooth: hci2: command tx timeout [ 63.374513][ T5237] Bluetooth: hci0: command tx timeout [ 63.379955][ T5237] Bluetooth: hci4: command tx timeout [ 71.723152][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.747283][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 85.242305][ C1] sched: DL replenish lagged too much [ 115.645737][ T25] cfg80211: failed to load regulatory.db [ 133.125892][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.132329][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 181.300094][ T5234] Bluetooth: hci2: command 0x0406 tx timeout [ 181.306252][ T5234] Bluetooth: hci1: command 0x0406 tx timeout [ 181.312405][ T5225] Bluetooth: hci3: command 0x0406 tx timeout [ 181.318565][ T5225] Bluetooth: hci0: command 0x0406 tx timeout [ 181.324743][ T5234] Bluetooth: hci4: command 0x0406 tx timeout [ 194.572884][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.579434][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 215.043224][ T30] INFO: task syz-executor:5207 blocked for more than 143 seconds. [ 215.051128][ T30] Not tainted 6.11.0-syzkaller-12113-ge7ed34365879 #0 [ 215.097755][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 215.131300][ T30] task:syz-executor state:D stack:21456 pid:5207 tgid:5207 ppid:5205 flags:0x00000002 [ 215.151124][ T30] Call Trace: [ 215.163541][ T30] [ 215.169664][ T30] __schedule+0x1843/0x4ae0 [ 215.186811][ T30] ? __pfx___schedule+0x10/0x10 [ 215.195120][ T30] ? __pfx_lock_release+0x10/0x10 [ 215.200211][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 215.228032][ T30] ? schedule+0x90/0x320 [ 215.239551][ T30] schedule+0x14b/0x320 [ 215.252322][ T30] start_this_handle+0x55d/0x2110 [ 215.257486][ T30] ? __kasan_slab_alloc+0x66/0x80 [ 215.277824][ T30] ? __pfx_start_this_handle+0x10/0x10 [ 215.295299][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 215.301456][ T30] ? jbd2__journal_start+0x14d/0x5d0 [ 215.331272][ T30] ? rcu_is_watching+0x15/0xb0 [ 215.340617][ T30] ? jbd2__journal_start+0x14d/0x5d0 [ 215.352178][ T30] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 215.368105][ T30] ? kmem_cache_alloc_noprof+0x185/0x2a0 [ 215.382624][ T30] jbd2__journal_start+0x2da/0x5d0 [ 215.387810][ T30] __ext4_journal_start_sb+0x239/0x600 [ 215.418534][ T30] ext4_dirty_inode+0x92/0x110 [ 215.431630][ T30] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 215.442329][ T30] __mark_inode_dirty+0x2ee/0xe90 [ 215.447429][ T30] file_update_time+0x3b3/0x430 [ 215.469576][ T30] ext4_page_mkwrite+0x206/0xdf0 [ 215.487272][ T30] ? __pfx_filemap_fault+0x10/0x10 [ 215.502334][ T30] ? pte_alloc_one+0x442/0x5d0 [ 215.507187][ T30] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 215.528487][ T30] ? pte_alloc_one+0x442/0x5d0 [ 215.548241][ T30] do_page_mkwrite+0x198/0x480 [ 215.558660][ T30] handle_pte_fault+0x11fa/0x6800 [ 215.572495][ T30] ? mark_lock+0x9a/0x360 [ 215.576897][ T30] ? __pfx_handle_pte_fault+0x10/0x10 [ 215.595837][ T30] ? reacquire_held_locks+0x3eb/0x690 [ 215.617257][ T30] ? lock_vma_under_rcu+0x34b/0x790 [ 215.627298][ T30] ? __thp_vma_allowable_orders+0x932/0x9f0 [ 215.645302][ T30] handle_mm_fault+0x1053/0x1ad0 [ 215.650509][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 215.679704][ T30] ? lock_vma_under_rcu+0x602/0x790 [ 215.692397][ T30] ? lock_vma_under_rcu+0x1dd/0x790 [ 215.697691][ T30] ? exc_page_fault+0x113/0x8c0 [ 215.725790][ T30] exc_page_fault+0x459/0x8c0 [ 215.730560][ T30] asm_exc_page_fault+0x26/0x30 [ 215.751025][ T30] RIP: 0033:0x7f16f8c563d5 [ 215.772418][ T30] RSP: 002b:00007ffd60ac3b10 EFLAGS: 00010202 [ 215.778567][ T30] RAX: 00007f16f4bff4cc RBX: 00007ffd60ac3c10 RCX: 0000000000000000 [ 215.817792][ T30] RDX: 00007f16f4bff4c8 RSI: 0000000000000008 RDI: 00007ffd60ac3c10 [ 215.841726][ T30] RBP: 00000000000003e6 R08: 0000000000000000 R09: 0000000000000000 [ 215.861175][ T30] R10: 00007ffd60ac3bf0 R11: 0000000000000000 R12: 0000000000000000 [ 215.884530][ T30] R13: 0000000000000b34 R14: fffffffffffff4cc R15: 0000000000000b34 [ 215.909125][ T30] [ 215.918505][ T30] INFO: task syz-executor:5220 blocked for more than 144 seconds. [ 215.945660][ T30] Not tainted 6.11.0-syzkaller-12113-ge7ed34365879 #0 [ 215.992366][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 216.001109][ T30] task:syz-executor state:D stack:19536 pid:5220 tgid:5220 ppid:5214 flags:0x00000000 [ 216.041952][ T30] Call Trace: [ 216.052455][ T30] [ 216.055455][ T30] __schedule+0x1843/0x4ae0 [ 216.060011][ T30] ? __pfx___schedule+0x10/0x10 [ 216.091046][ T30] ? __pfx_lock_release+0x10/0x10 [ 216.102075][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 216.120754][ T30] ? schedule+0x90/0x320 [ 216.132532][ T30] schedule+0x14b/0x320 [ 216.136772][ T30] start_this_handle+0x55d/0x2110 [ 216.141854][ T30] ? jbd2__journal_start+0x14d/0x5d0 [ 216.172342][ T30] ? __pfx_start_this_handle+0x10/0x10 [ 216.177989][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 216.199626][ T30] ? jbd2__journal_start+0x14d/0x5d0 [ 216.214585][ T30] ? rcu_is_watching+0x15/0xb0 [ 216.219418][ T30] ? jbd2__journal_start+0x14d/0x5d0 [ 216.244579][ T30] ? kmem_cache_alloc_noprof+0x185/0x2a0 [ 216.250392][ T30] jbd2__journal_start+0x2da/0x5d0 [ 216.270466][ T30] __ext4_journal_start_sb+0x239/0x600 [ 216.281359][ T30] __ext4_new_inode+0x1488/0x4380 [ 216.301716][ T30] ? tomoyo_path_number_perm+0x208/0x880 [ 216.316407][ T30] ? __pfx_smack_log+0x10/0x10 [ 216.321323][ T30] ? __pfx___ext4_new_inode+0x10/0x10 [ 216.349710][ T30] ? smack_inode_permission+0x2dc/0x380 [ 216.367950][ T30] ext4_mkdir+0x425/0xcf0 [ 216.372563][ T30] ? __pfx_ext4_mkdir+0x10/0x10 [ 216.377543][ T30] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 216.398837][ T30] ? security_inode_mkdir+0xbe/0x340 [ 216.415526][ T30] vfs_mkdir+0x2f9/0x4f0 [ 216.437595][ T30] do_mkdirat+0x264/0x3a0 [ 216.442011][ T30] ? __pfx_do_mkdirat+0x10/0x10 [ 216.462574][ T30] ? getname_flags+0x1e3/0x540 [ 216.467417][ T30] __x64_sys_mkdirat+0x87/0xa0 [ 216.472224][ T30] do_syscall_64+0xf3/0x230 [ 216.508312][ T30] ? clear_bhb_loop+0x35/0x90 [ 216.513154][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.519102][ T30] RIP: 0033:0x7fbb1317c897 [ 216.546959][ T30] RSP: 002b:00007fffe83621a8 EFLAGS: 00000206 ORIG_RAX: 0000000000000102 [ 216.572421][ T30] RAX: ffffffffffffffda RBX: 00007fbb131f0685 RCX: 00007fbb1317c897 [ 216.580462][ T30] RDX: 00000000000001ff RSI: 00007fbb131f0685 RDI: 00000000ffffff9c [ 216.607867][ T30] RBP: 00007fbb13336a38 R08: 0000000000000000 R09: 0000000000000000 [ 216.632306][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 216.640350][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 216.678186][ T30] [ 216.684868][ T30] INFO: task syz-executor:5223 blocked for more than 144 seconds. [ 216.712479][ T30] Not tainted 6.11.0-syzkaller-12113-ge7ed34365879 #0 [ 216.719831][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 216.757826][ T30] task:syz-executor state:D stack:19968 pid:5223 tgid:5223 ppid:5216 flags:0x00000000 [ 216.782324][ T30] Call Trace: [ 216.785666][ T30] [ 216.788634][ T30] __schedule+0x1843/0x4ae0 [ 216.822383][ T30] ? __pfx___schedule+0x10/0x10 [ 216.851129][ T30] ? __pfx_lock_release+0x10/0x10 [ 216.862095][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 216.879870][ T30] ? schedule+0x90/0x320 [ 216.891868][ T30] schedule+0x14b/0x320 [ 216.906291][ T30] start_this_handle+0x55d/0x2110 [ 216.911493][ T30] ? jbd2__journal_start+0x14d/0x5d0 [ 216.936912][ T30] ? __pfx_start_this_handle+0x10/0x10 [ 216.952626][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 216.958785][ T30] ? jbd2__journal_start+0x14d/0x5d0 [ 217.007401][ T30] ? rcu_is_watching+0x15/0xb0 [ 217.024676][ T30] ? jbd2__journal_start+0x14d/0x5d0 [ 217.030133][ T30] ? kmem_cache_alloc_noprof+0x185/0x2a0 [ 217.056490][ T30] jbd2__journal_start+0x2da/0x5d0 [ 217.061687][ T30] __ext4_journal_start_sb+0x239/0x600 [ 217.085636][ T30] __ext4_new_inode+0x1488/0x4380 [ 217.090740][ T30] ? tomoyo_path_number_perm+0x208/0x880 [ 217.112069][ T30] ? __pfx_smack_log+0x10/0x10 [ 217.131373][ T30] ? __pfx___ext4_new_inode+0x10/0x10 [ 217.152407][ T30] ? smack_inode_permission+0x2dc/0x380 [ 217.159961][ T30] ext4_mkdir+0x425/0xcf0 [ 217.174525][ T30] ? __pfx_ext4_mkdir+0x10/0x10 [ 217.179459][ T30] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 217.200564][ T30] ? security_inode_mkdir+0xbe/0x340 [ 217.219604][ T30] vfs_mkdir+0x2f9/0x4f0 [ 217.232441][ T30] do_mkdirat+0x264/0x3a0 [ 217.247933][ T30] ? __pfx_do_mkdirat+0x10/0x10 [ 217.262128][ T30] ? getname_flags+0x1e3/0x540 [ 217.277244][ T30] __x64_sys_mkdirat+0x87/0xa0 [ 217.282184][ T30] do_syscall_64+0xf3/0x230 [ 217.302092][ T30] ? clear_bhb_loop+0x35/0x90 [ 217.311825][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.327775][ T30] RIP: 0033:0x7f3ad697c897 [ 217.341476][ T30] RSP: 002b:00007ffe71dd56e8 EFLAGS: 00000202 ORIG_RAX: 0000000000000102 [ 217.364578][ T30] RAX: ffffffffffffffda RBX: 00007f3ad69f0685 RCX: 00007f3ad697c897 [ 217.388444][ T30] RDX: 00000000000001ff RSI: 00007f3ad69f0685 RDI: 00000000ffffff9c [ 217.412336][ T30] RBP: 00007f3ad6b36a38 R08: 0000000000000000 R09: 0000000000000000 [ 217.420647][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000c [ 217.458186][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 217.482375][ T30] [ 217.485608][ T30] INFO: task syz.0.13:5328 blocked for more than 145 seconds. [ 217.507213][ T30] Not tainted 6.11.0-syzkaller-12113-ge7ed34365879 #0 [ 217.526509][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 217.552344][ T30] task:syz.0.13 state:D stack:23808 pid:5328 tgid:5328 ppid:5231 flags:0x00000004 [ 217.580583][ T30] Call Trace: [ 217.592392][ T30] [ 217.595405][ T30] __schedule+0x1843/0x4ae0 [ 217.599962][ T30] ? __pfx___schedule+0x10/0x10 [ 217.627874][ T30] ? __pfx_lock_release+0x10/0x10 [ 217.637888][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 217.660217][ T30] ? schedule+0x90/0x320 [ 217.678308][ T30] schedule+0x14b/0x320 [ 217.682635][ T30] start_this_handle+0x55d/0x2110 [ 217.687817][ T30] ? __kasan_slab_alloc+0x66/0x80 [ 217.709081][ T30] ? __pfx_start_this_handle+0x10/0x10 [ 217.729774][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 217.746611][ T30] ? jbd2__journal_start+0x14d/0x5d0 [ 217.759367][ T30] ? rcu_is_watching+0x15/0xb0 [ 217.777644][ T30] ? jbd2__journal_start+0x14d/0x5d0 [ 217.797252][ T30] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 217.808288][ T30] ? kmem_cache_alloc_noprof+0x185/0x2a0 [ 217.822399][ T30] jbd2__journal_start+0x2da/0x5d0 [ 217.827594][ T30] __ext4_journal_start_sb+0x239/0x600 [ 217.861778][ T30] ext4_dirty_inode+0x92/0x110 [ 217.872195][ T30] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 217.892487][ T30] __mark_inode_dirty+0x2ee/0xe90 [ 217.897604][ T30] file_update_time+0x3b3/0x430 [ 217.915982][ T30] ext4_page_mkwrite+0x206/0xdf0 [ 217.921010][ T30] ? __pfx_filemap_fault+0x10/0x10 [ 217.942406][ T30] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 217.948043][ T30] ? pte_offset_map_nolock+0x137/0x1f0 [ 218.002481][ T30] do_page_mkwrite+0x198/0x480 [ 218.007334][ T30] handle_pte_fault+0x11fa/0x6800 [ 218.037917][ T30] ? mark_lock+0x9a/0x360 [ 218.052114][ T30] ? __pfx_handle_pte_fault+0x10/0x10 [ 218.066310][ T30] ? reacquire_held_locks+0x3eb/0x690 [ 218.071755][ T30] ? lock_vma_under_rcu+0x34b/0x790 [ 218.098272][ T30] ? __pfx_reacquire_held_locks+0x10/0x10 [ 218.108901][ T30] handle_mm_fault+0x1053/0x1ad0 [ 218.127996][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 218.139565][ T30] ? lock_vma_under_rcu+0x602/0x790 [ 218.152333][ T30] ? lock_vma_under_rcu+0x1dd/0x790 [ 218.157620][ T30] ? exc_page_fault+0x113/0x8c0 [ 218.180485][ T30] exc_page_fault+0x459/0x8c0 [ 218.197734][ T30] asm_exc_page_fault+0x26/0x30 [ 218.210556][ T30] RIP: 0033:0x7f052125d366 [ 218.222391][ T30] RSP: 002b:00007ffe0c8ad300 EFLAGS: 00010202 [ 218.228531][ T30] RAX: 0000000000007008 RBX: 00007f0522065720 RCX: 0000000000000000 [ 218.251749][ T30] RDX: 0000001b31e19000 RSI: 0000000000000008 RDI: 00007f0522065720 [ 218.277978][ T30] RBP: ffffffff81a438ec R08: 00007f0520a01060 R09: 00007f0521522000 [ 218.302306][ T30] R10: 000000008135a67d R11: 0000000000000001 R12: 000000000000022c [ 218.310386][ T30] R13: 00007f0521536018 R14: 0000000000000067 R15: ffffffffffff9000 [ 218.342435][ T30] ? bpf_opcode_in_insntable+0xc/0x60 [ 218.347907][ T30] [ 218.365863][ T30] [ 218.365863][ T30] Showing all locks held in the system: [ 218.388227][ T30] 1 lock held by khungtaskd/30: [ 218.400362][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 218.427489][ T30] 4 locks held by kworker/u8:7/3003: [ 218.442359][ T30] #0: ffff888143aa2948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 218.478751][ T30] #1: ffffc9000a1d7d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 218.508521][ T30] #2: ffff88814cb320e0 (&type->s_umount_key#32){++++}-{3:3}, at: super_trylock_shared+0x22/0xf0 [ 218.539174][ T30] #3: ffff88814cb34b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1bf/0x3c0 [ 218.567087][ T30] 1 lock held by klogd/4664: [ 218.588656][ T30] 2 locks held by getty/4978: [ 218.593728][ T30] #0: ffff88802e8e40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 218.627870][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 218.652343][ T30] 2 locks held by syz-executor/5207: [ 218.657695][ T30] #0: ffff88802f7732f8 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x34b/0x790 [ 218.694861][ T30] #1: ffff88814cb32518 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1ef/0xdf0 [ 218.720528][ T30] 2 locks held by syz-executor/5220: [ 218.737199][ T30] #0: ffff88814cb32420 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x3f/0x90 [ 218.762358][ T30] #1: ffff8880782d83f8 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: filename_create+0x260/0x540 [ 218.790911][ T30] 2 locks held by syz-executor/5223: [ 218.802171][ T30] #0: ffff88814cb32420 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x3f/0x90 [ 218.811951][ T30] #1: ffff8880782e2b98 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: filename_create+0x260/0x540 [ 218.856084][ T30] 7 locks held by kworker/1:4/5294: [ 218.861348][ T30] 2 locks held by syz.0.13/5328: [ 218.897460][ T30] #0: ffff8880794d3808 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x34b/0x790 [ 218.926608][ T30] #1: ffff88814cb32518 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1ef/0xdf0 [ 218.950102][ T30] 3 locks held by syz.0.13/5331: [ 218.980487][ T30] #0: ffff88814cb32420 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write_file+0x5e/0x200 [ 219.018211][ T30] #1: ffff88814cb36160 (&journal->j_barrier){+.+.}-{3:3}, at: jbd2_journal_lock_updates+0x2b4/0x380 [ 219.045992][ T30] #2: ffff88814cb363e8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: jbd2_journal_flush+0x1ce/0xc10 [ 219.071774][ T30] [ 219.078892][ T30] ============================================= [ 219.078892][ T30] [ 219.102456][ T30] NMI backtrace for cpu 0 [ 219.106858][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-12113-ge7ed34365879 #0 [ 219.117056][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 219.127140][ T30] Call Trace: [ 219.130443][ T30] [ 219.133489][ T30] dump_stack_lvl+0x241/0x360 [ 219.138203][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 219.143529][ T30] ? __pfx__printk+0x10/0x10 [ 219.148239][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 219.153214][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 219.158700][ T30] ? _printk+0xd5/0x120 [ 219.162877][ T30] ? __pfx__printk+0x10/0x10 [ 219.167856][ T30] ? __wake_up_klogd+0xcc/0x110 [ 219.172733][ T30] ? __pfx__printk+0x10/0x10 [ 219.177442][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 219.182493][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 219.188497][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 219.194506][ T30] watchdog+0xff4/0x1040 [ 219.198775][ T30] ? watchdog+0x1ea/0x1040 [ 219.203222][ T30] ? __pfx_watchdog+0x10/0x10 [ 219.208015][ T30] kthread+0x2f0/0x390 [ 219.212118][ T30] ? __pfx_watchdog+0x10/0x10 [ 219.216918][ T30] ? __pfx_kthread+0x10/0x10 [ 219.221549][ T30] ret_from_fork+0x4b/0x80 [ 219.225989][ T30] ? __pfx_kthread+0x10/0x10 [ 219.230657][ T30] ret_from_fork_asm+0x1a/0x30 [ 219.235458][ T30] [ 219.239543][ T30] Sending NMI from CPU 0 to CPUs 1: [ 219.245512][ C1] NMI backtrace for cpu 1 [ 219.245525][ C1] CPU: 1 UID: 0 PID: 5294 Comm: kworker/1:4 Not tainted 6.11.0-syzkaller-12113-ge7ed34365879 #0 [ 219.245544][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 219.245555][ C1] Workqueue: events nsim_dev_trap_report_work [ 219.245580][ C1] RIP: 0010:unwind_next_frame+0x12d/0x22d0 [ 219.245599][ C1] Code: 6d 35 48 89 e8 48 c1 e8 03 48 89 44 24 28 42 0f b6 04 20 84 c0 0f 85 b8 19 00 00 4c 0f be 7d 00 48 8b 44 24 30 42 80 3c 20 00 <48> 8b 5c 24 18 74 08 48 89 df e8 d4 11 ba 00 4c 03 3b 49 ff cf 4c [ 219.245619][ C1] RSP: 0018:ffffc90000a174d0 EFLAGS: 00000246 [ 219.245632][ C1] RAX: 1ffff92000142ebd RBX: 0000000000000000 RCX: ffffffff9a397903 [ 219.245645][ C1] RDX: dffffc0000000000 RSI: ffffffff89ef9d92 RDI: 0000000000000001 [ 219.245656][ C1] RBP: ffffc90000a175d5 R08: 000000000000000d R09: ffffc90000a17690 [ 219.245668][ C1] R10: ffffc90000a175f0 R11: ffffffff81808f00 R12: dffffc0000000000 [ 219.245680][ C1] R13: ffffc90000a175a0 R14: ffffffff89ef9d92 R15: 0000000000000000 [ 219.245692][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 219.245706][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 219.245718][ C1] CR2: 000000110c3caafa CR3: 000000000e734000 CR4: 00000000003526f0 [ 219.245731][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 219.245746][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 219.245757][ C1] Call Trace: [ 219.245763][ C1] [ 219.245770][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 219.245790][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 219.245815][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 219.245834][ C1] ? nmi_handle+0x2a/0x5a0 [ 219.245857][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 219.245878][ C1] ? nmi_handle+0x14f/0x5a0 [ 219.245894][ C1] ? nmi_handle+0x2a/0x5a0 [ 219.245910][ C1] ? unwind_next_frame+0x12d/0x22d0 [ 219.245925][ C1] ? default_do_nmi+0x63/0x160 [ 219.245946][ C1] ? exc_nmi+0x123/0x1f0 [ 219.245964][ C1] ? end_repeat_nmi+0xf/0x53 [ 219.245979][ C1] ? nft_synproxy_do_eval+0x362/0xa60 [ 219.246005][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 219.246026][ C1] ? nft_synproxy_do_eval+0x362/0xa60 [ 219.246049][ C1] ? unwind_next_frame+0x12d/0x22d0 [ 219.246064][ C1] ? unwind_next_frame+0x12d/0x22d0 [ 219.246080][ C1] ? unwind_next_frame+0x12d/0x22d0 [ 219.246096][ C1] [ 219.246101][ C1] [ 219.246111][ C1] ? nft_synproxy_eval_v4+0x3ca/0x610 [ 219.246135][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 219.246154][ C1] arch_stack_walk+0x11c/0x150 [ 219.246174][ C1] ? nft_synproxy_do_eval+0x362/0xa60 [ 219.246198][ C1] stack_trace_save+0x118/0x1d0 [ 219.246218][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 219.246241][ C1] save_stack+0xfb/0x1f0 [ 219.246261][ C1] ? mark_lock+0x9a/0x360 [ 219.246276][ C1] ? __pfx_save_stack+0x10/0x10 [ 219.246294][ C1] ? post_alloc_hook+0x1f3/0x230 [ 219.246312][ C1] ? get_page_from_freelist+0x3039/0x3180 [ 219.246333][ C1] ? __alloc_pages_noprof+0x256/0x6c0 [ 219.246353][ C1] ? alloc_pages_mpol_noprof+0x3e8/0x680 [ 219.246367][ C1] ? alloc_slab_page+0x6a/0x120 [ 219.246387][ C1] ? allocate_slab+0x5a/0x2f0 [ 219.246406][ C1] ? ___slab_alloc+0xcd1/0x14b0 [ 219.246424][ C1] ? __slab_alloc+0x58/0xa0 [ 219.246441][ C1] ? __kmalloc_node_track_caller_noprof+0x281/0x440 [ 219.246458][ C1] ? kmalloc_reserve+0x111/0x2a0 [ 219.246474][ C1] ? __alloc_skb+0x1f3/0x440 [ 219.246489][ C1] ? synproxy_send_client_synack+0x1ba/0xf30 [ 219.246510][ C1] ? nft_synproxy_eval_v4+0x3ca/0x610 [ 219.246532][ C1] ? nft_synproxy_do_eval+0x362/0xa60 [ 219.246560][ C1] __set_page_owner+0x92/0x800 [ 219.246579][ C1] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 219.246597][ C1] ? get_page_from_freelist+0x87b/0x3180 [ 219.246619][ C1] ? __pfx_lock_release+0x10/0x10 [ 219.246641][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 219.246665][ C1] post_alloc_hook+0x1f3/0x230 [ 219.246685][ C1] get_page_from_freelist+0x3039/0x3180 [ 219.246710][ C1] ? get_stack_info_noinstr+0x1a/0x130 [ 219.246730][ C1] ? deref_stack_reg+0x17c/0x210 [ 219.246752][ C1] ? __asan_memset+0x23/0x50 [ 219.246784][ C1] __alloc_pages_noprof+0x256/0x6c0 [ 219.246806][ C1] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 219.246836][ C1] alloc_pages_mpol_noprof+0x3e8/0x680 [ 219.246854][ C1] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 219.246878][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 219.246900][ C1] ? net_rx_action+0x89b/0x1240 [ 219.246921][ C1] ? alloc_pages_noprof+0x43/0x170 [ 219.246937][ C1] alloc_slab_page+0x6a/0x120 [ 219.246958][ C1] allocate_slab+0x5a/0x2f0 [ 219.246979][ C1] ___slab_alloc+0xcd1/0x14b0 [ 219.246998][ C1] ? __alloc_skb+0x1f3/0x440 [ 219.247016][ C1] ? __alloc_skb+0x1f3/0x440 [ 219.247031][ C1] __slab_alloc+0x58/0xa0 [ 219.247050][ C1] __kmalloc_node_track_caller_noprof+0x281/0x440 [ 219.247068][ C1] ? __alloc_skb+0x1f3/0x440 [ 219.247084][ C1] ? __alloc_skb+0x1f3/0x440 [ 219.247099][ C1] kmalloc_reserve+0x111/0x2a0 [ 219.247116][ C1] __alloc_skb+0x1f3/0x440 [ 219.247134][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 219.247154][ C1] synproxy_send_client_synack+0x1ba/0xf30 [ 219.247178][ C1] ? kasan_quarantine_put+0xdc/0x230 [ 219.247198][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 219.247221][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 219.247245][ C1] ? synproxy_pernet+0x45/0x270 [ 219.247268][ C1] nft_synproxy_eval_v4+0x3ca/0x610 [ 219.247294][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 219.247318][ C1] ? nf_ip_checksum+0x13a/0x500 [ 219.247335][ C1] nft_synproxy_do_eval+0x362/0xa60 [ 219.247360][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 219.247386][ C1] ? __pfx_validate_chain+0x10/0x10 [ 219.247408][ C1] nft_do_chain+0x4ad/0x1da0 [ 219.247430][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 219.247444][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 219.247476][ C1] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 219.247495][ C1] nft_do_chain_inet+0x418/0x6b0 [ 219.247518][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 219.247540][ C1] ? ipt_do_table+0x312/0x1860 [ 219.247570][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 219.247592][ C1] nf_hook_slow+0xc3/0x220 [ 219.247613][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 219.247632][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 219.247650][ C1] NF_HOOK+0x29e/0x450 [ 219.247669][ C1] ? NF_HOOK+0x9a/0x450 [ 219.247686][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 219.247704][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 219.247725][ C1] ? ip_rcv_finish+0x406/0x560 [ 219.247755][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 219.247773][ C1] NF_HOOK+0x3a4/0x450 [ 219.247789][ C1] ? __lock_acquire+0x1384/0x2050 [ 219.247812][ C1] ? NF_HOOK+0x9a/0x450 [ 219.247829][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 219.247845][ C1] ? ip_rcv_core+0x801/0xd10 [ 219.247864][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 219.247885][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 219.247903][ C1] __netif_receive_skb+0x2bf/0x650 [ 219.247924][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 219.247946][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 219.247964][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 219.247987][ C1] ? __pfx_lock_release+0x10/0x10 [ 219.248009][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 219.248034][ C1] process_backlog+0x662/0x15b0 [ 219.248055][ C1] ? process_backlog+0x33b/0x15b0 [ 219.248079][ C1] ? __pfx_process_backlog+0x10/0x10 [ 219.248099][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 219.248123][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 219.248147][ C1] __napi_poll+0xcb/0x490 [ 219.248168][ C1] net_rx_action+0x89b/0x1240 [ 219.248198][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 219.248221][ C1] ? sched_clock+0x4a/0x70 [ 219.248247][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 219.248274][ C1] handle_softirqs+0x2c5/0x980 [ 219.248297][ C1] ? do_softirq+0x11b/0x1e0 [ 219.248317][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 219.248342][ C1] do_softirq+0x11b/0x1e0 [ 219.248360][ C1] [ 219.248366][ C1] [ 219.248372][ C1] ? __pfx_do_softirq+0x10/0x10 [ 219.248391][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 219.248415][ C1] ? rcu_is_watching+0x15/0xb0 [ 219.248434][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 219.248454][ C1] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 219.248473][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 219.248494][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 219.248514][ C1] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 219.248535][ C1] nsim_dev_trap_report_work+0x75d/0xaa0 [ 219.248560][ C1] ? process_scheduled_works+0x976/0x1850 [ 219.248582][ C1] process_scheduled_works+0xa63/0x1850 [ 219.248615][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 219.248640][ C1] ? assign_work+0x364/0x3d0 [ 219.248662][ C1] worker_thread+0x870/0xd30 [ 219.248686][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 219.248709][ C1] ? __kthread_parkme+0x169/0x1d0 [ 219.248733][ C1] ? __pfx_worker_thread+0x10/0x10 [ 219.248759][ C1] kthread+0x2f0/0x390 [ 219.248774][ C1] ? __pfx_worker_thread+0x10/0x10 [ 219.248794][ C1] ? __pfx_kthread+0x10/0x10 [ 219.248809][ C1] ret_from_fork+0x4b/0x80 [ 219.248830][ C1] ? __pfx_kthread+0x10/0x10 [ 219.248846][ C1] ret_from_fork_asm+0x1a/0x30 [ 219.248874][ C1] [ 220.292583][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 220.299496][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-12113-ge7ed34365879 #0 [ 220.309680][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 220.319758][ T30] Call Trace: [ 220.323052][ T30] [ 220.326000][ T30] dump_stack_lvl+0x241/0x360 [ 220.330709][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 220.335931][ T30] ? __pfx__printk+0x10/0x10 [ 220.340536][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 220.346548][ T30] ? vscnprintf+0x5d/0x90 [ 220.350903][ T30] panic+0x349/0x880 [ 220.354824][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 220.361008][ T30] ? __pfx_panic+0x10/0x10 [ 220.365511][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 220.371179][ T30] ? __irq_work_queue_local+0x137/0x410 [ 220.377145][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 220.382597][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 220.388804][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 220.395000][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 220.401189][ T30] watchdog+0x1033/0x1040 [ 220.405551][ T30] ? watchdog+0x1ea/0x1040 [ 220.410011][ T30] ? __pfx_watchdog+0x10/0x10 [ 220.414719][ T30] kthread+0x2f0/0x390 [ 220.418812][ T30] ? __pfx_watchdog+0x10/0x10 [ 220.423537][ T30] ? __pfx_kthread+0x10/0x10 [ 220.428160][ T30] ret_from_fork+0x4b/0x80 [ 220.432603][ T30] ? __pfx_kthread+0x10/0x10 [ 220.437226][ T30] ret_from_fork_asm+0x1a/0x30 [ 220.442032][ T30] [ 220.445374][ T30] Kernel Offset: disabled [ 220.449700][ T30] Rebooting in 86400 seconds..