last executing test programs: 2m50.71367018s ago: executing program 0 (id=18): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000140)=@req3={0x10000, 0x1, 0x100, 0x100, 0x0, 0xd}, 0x1c) 2m47.246348575s ago: executing program 0 (id=21): r0 = socket(0x10, 0x803, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6(0x10, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x40, 0x0, 0xff, r4}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_RT_PRIORITY={0x8, 0x9, 0x8}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x48}}, 0x400c0c0) 2m38.134254505s ago: executing program 0 (id=34): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xa6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 2m35.173068348s ago: executing program 0 (id=35): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './cgroup/../file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdir(0x0, 0x7f) socket(0x6, 0x5, 0x80000400) kexec_load(0x20, 0x0, &(0x7f0000000180), 0x0) 2m25.844771985s ago: executing program 0 (id=47): openat$drirender128(0xffffffffffffff9c, 0x0, 0x8382, 0x0) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x20000080) bpf$ITER_CREATE(0xb, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2m20.075786634s ago: executing program 0 (id=51): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x40286608, 0x0) 2m4.973935242s ago: executing program 32 (id=51): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x40286608, 0x0) 1m40.437768515s ago: executing program 1 (id=93): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x48050) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xc, 0x6c033, 0xffffffffffffffff, 0x0) 1m37.862799353s ago: executing program 1 (id=97): ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x100, 0x103) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='nilfs2\x00', 0x1000021, 0x0) ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, &(0x7f0000000080)) 1m36.324875992s ago: executing program 1 (id=98): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd09000084"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000040), &(0x7f0000000040), 0x800, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000cc0)=""/129, &(0x7f0000000cc0), &(0x7f0000000d80), 0x6c, r3}, 0x38) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m30.374827195s ago: executing program 1 (id=105): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x54e, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, 0x0, 0x0) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x2}) setns(0xc9, 0x0) r3 = socket(0x2a, 0x2, 0x9) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, 0x0) 1m28.551085768s ago: executing program 1 (id=106): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) read$FUSE(r0, &(0x7f00000071c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x9104, 0x40, 0x0, 0x6, 0x3fffff, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f00000041c0)={0x2020}, 0x2020) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0) dup3(r2, r0, 0x80000) r3 = syz_ublk_setup_io_uring(0xc, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x7, 0xe26, 0x0, 0x0, 0x1000, 0x10000}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x20fb89, 0x800, 0x1, 0x32c}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8, 0x2, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x400, 0x3, 0xbfffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x871629fa8e45411f, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8a2, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 1m26.321199048s ago: executing program 1 (id=112): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) write(0xffffffffffffffff, &(0x7f0000000180)='100000', 0x6) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) socket$kcm(0x11, 0x200000000000002, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000d00)={0x0, 'syz_tun\x00', {0x4}, 0xa}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff) socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1db) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 1m10.941651792s ago: executing program 33 (id=112): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) write(0xffffffffffffffff, &(0x7f0000000180)='100000', 0x6) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) socket$kcm(0x11, 0x200000000000002, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000d00)={0x0, 'syz_tun\x00', {0x4}, 0xa}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff) socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1db) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 1m2.358352188s ago: executing program 3 (id=138): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f0000000000)={0xfff, 0x1, 0x3, 0xa, 0x4}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x20004, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r4}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r5) close_range(r0, 0xffffffffffffffff, 0x0) 59.597932773s ago: executing program 3 (id=140): openat(0xffffffffffffff9c, 0x0, 0x0, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa35, 0x2, 0x1000002, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8197, 0x200, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 55.903317622s ago: executing program 3 (id=143): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x102, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 49.091461149s ago: executing program 3 (id=148): r0 = syz_open_procfs(0x0, &(0x7f0000019140)='net/fib_trie\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0x4000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40103d0b, 0x0) 45.157277937s ago: executing program 3 (id=150): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x4000) open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x9101) openat(0xffffffffffffff9c, 0x0, 0x40080, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x3ba9bfc6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e24, @empty}, 0x10, &(0x7f00000016c0)=[{}], 0x1}}], 0x1, 0x4000800) 41.271729058s ago: executing program 3 (id=152): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="000204"], 0x18) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001840), 0x3b, 0x0) 25.751651373s ago: executing program 34 (id=152): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="000204"], 0x18) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001840), 0x3b, 0x0) 12.300249327s ago: executing program 4 (id=186): socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r1, 0x0, 0x0, 0x1000f4) sendfile(r1, r1, 0x0, 0x40000000800) 11.875061301s ago: executing program 4 (id=188): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) timer_getoverrun(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) 10.341701223s ago: executing program 4 (id=189): socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) r0 = fsopen(&(0x7f0000000200)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 9.133634618s ago: executing program 4 (id=191): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(r0, &(0x7f0000000300)='1', 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) close(0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='1', 0x1) 8.116110843s ago: executing program 4 (id=192): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x18000000000002a0, 0x1c, 0x0, &(0x7f00000011c0)="b9feddc1ddcccdf175537d53888edfcef6e296510cff24fc83423368", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$fault_inject(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x2, 0x80805, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) 5.877299481s ago: executing program 4 (id=193): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$tun(r0, &(0x7f0000000180)={@val={0x0, 0xf8}, @val={0x2, 0x3, 0x7, 0x9, 0x7, 0x101}, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @empty, @broadcast, @rand_addr=0x64010101}}, 0x2a) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x8, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(0xffffffffffffffff, 0x40084149, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, 0x0, 0x0) unshare(0x20000400) ioctl$FIDEDUPERANGE(r0, 0xc0189436, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) 5.833692208s ago: executing program 2 (id=194): socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) io_submit(0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r2, 0xc138fd03, &(0x7f0000000300)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000063") ioctl(r2, 0xc138fd0a, &(0x7f0000000300)) 4.588598147s ago: executing program 2 (id=195): r0 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000200), 0x0, 0x0, 0x0, r0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000002000)='./sys\x00', &(0x7f0000002040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./sys/bus/acpi/devices/PNP0501:00/status\x00', 0x0, 0x0) read(r3, &(0x7f0000000c80)=""/265, 0x109) write$eventfd(0xffffffffffffffff, 0x0, 0x0) 2.636091139s ago: executing program 2 (id=196): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, 0x0, 0x0) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) io_uring_enter(r3, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 1.372341998s ago: executing program 2 (id=197): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@abs={0x0, 0x0, 0x14e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 375.183352ms ago: executing program 2 (id=198): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000280)=""/50, 0x32}], 0x1}, 0xfff}], 0x1, 0x0, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb0", 0x3}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r7 = dup(r1) syz_ublk_setup_queues(r7, r6, &(0x7f0000000180)={0x0, 0x3e80, 0x800, 0x1, 0x32c, 0x0, r2}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x200015a, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x40, 0x10001, 0x2a5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x10000, 0x7, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbe, 0x0, r2}}], 0x1, &(0x7f0000000340)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x5c0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 0s ago: executing program 2 (id=199): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x18}}, 0x0) io_setup(0x202, 0x0) io_submit(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, &(0x7f00000001c0)) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000100), 0x4) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @timestamp={0xd, 0x0, 0x0, 0x40, 0xf, 0x3, 0xd7df, 0xbd}}}}}, 0x0) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000040)=0x8, 0x4) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.7' (ED25519) to the list of known hosts. [ 74.679235][ T5572] cgroup: Unknown subsys name 'net' [ 74.920505][ T5572] cgroup: Unknown subsys name 'cpuset' [ 74.975328][ T5572] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.583438][ T5572] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.033984][ T5591] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.044593][ T5591] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.048154][ T5591] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.049630][ T5591] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.051147][ T5591] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.100134][ T5591] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.109925][ T5591] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.111271][ T5591] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.115803][ T5597] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.116867][ T5597] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.121880][ T4900] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.146544][ T4900] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.154505][ T4900] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.158232][ T4900] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.158985][ T4900] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.182081][ T5597] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.219019][ T5597] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.225379][ T5588] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.236552][ T5588] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.240260][ T5597] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.322625][ T5595] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.335433][ T5595] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.336285][ T5595] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.343072][ T5595] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.346233][ T5595] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.157586][ T5595] Bluetooth: hci3: command tx timeout [ 81.234948][ T5595] Bluetooth: hci4: command tx timeout [ 81.394950][ T5595] Bluetooth: hci1: command tx timeout [ 81.395109][ T5588] Bluetooth: hci2: command tx timeout [ 81.395238][ T5597] Bluetooth: hci0: command tx timeout [ 81.538572][ T5582] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.539652][ T5582] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.539765][ T5582] bridge_slave_0: entered allmulticast mode [ 81.541331][ T5582] bridge_slave_0: entered promiscuous mode [ 81.635339][ T5582] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.635463][ T5582] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.635993][ T5582] bridge_slave_1: entered allmulticast mode [ 81.639709][ T5582] bridge_slave_1: entered promiscuous mode [ 81.676542][ T5585] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.676665][ T5585] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.676827][ T5585] bridge_slave_0: entered allmulticast mode [ 81.679652][ T5585] bridge_slave_0: entered promiscuous mode [ 81.766594][ T5586] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.766752][ T5586] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.767249][ T5586] bridge_slave_0: entered allmulticast mode [ 81.770193][ T5586] bridge_slave_0: entered promiscuous mode [ 81.773239][ T5585] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.773358][ T5585] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.773505][ T5585] bridge_slave_1: entered allmulticast mode [ 81.830583][ T5585] bridge_slave_1: entered promiscuous mode [ 81.883142][ T5586] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.883287][ T5586] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.883431][ T5586] bridge_slave_1: entered allmulticast mode [ 81.895601][ T5586] bridge_slave_1: entered promiscuous mode [ 81.916824][ T5583] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.916907][ T5583] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.917001][ T5583] bridge_slave_0: entered allmulticast mode [ 81.918464][ T5583] bridge_slave_0: entered promiscuous mode [ 81.948560][ T5582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.980079][ T5583] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.980274][ T5583] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.980431][ T5583] bridge_slave_1: entered allmulticast mode [ 81.982823][ T5583] bridge_slave_1: entered promiscuous mode [ 81.984101][ T5584] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.984166][ T5584] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.984252][ T5584] bridge_slave_0: entered allmulticast mode [ 81.995930][ T5584] bridge_slave_0: entered promiscuous mode [ 82.003984][ T5582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.078952][ T5585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.094748][ T5584] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.095763][ T5584] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.095933][ T5584] bridge_slave_1: entered allmulticast mode [ 82.098367][ T5584] bridge_slave_1: entered promiscuous mode [ 82.127218][ T5586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.131475][ T5585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.176682][ T5586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.199572][ T5583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.223862][ T5582] team0: Port device team_slave_0 added [ 82.251102][ T5583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.254006][ T5584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.259185][ T5582] team0: Port device team_slave_1 added [ 82.282249][ T5585] team0: Port device team_slave_0 added [ 82.307616][ T5584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.309175][ T5586] team0: Port device team_slave_0 added [ 82.311094][ T5585] team0: Port device team_slave_1 added [ 82.355803][ T5586] team0: Port device team_slave_1 added [ 82.379927][ T5583] team0: Port device team_slave_0 added [ 82.381178][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.381191][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.381216][ T5582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.446077][ T5583] team0: Port device team_slave_1 added [ 82.446711][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.446721][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.446735][ T5582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.449042][ T5584] team0: Port device team_slave_0 added [ 82.464067][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.464082][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.464106][ T5585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.503250][ T5584] team0: Port device team_slave_1 added [ 82.504033][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.504045][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.504069][ T5586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.507054][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.507068][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.507092][ T5585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.556964][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.556981][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.557006][ T5586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.573543][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.573560][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.573585][ T5583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.638151][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.638167][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.638192][ T5583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.640161][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.640173][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.640197][ T5584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.681810][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.681827][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.681851][ T5584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.716960][ T5582] hsr_slave_0: entered promiscuous mode [ 82.718350][ T5582] hsr_slave_1: entered promiscuous mode [ 82.821705][ T5585] hsr_slave_0: entered promiscuous mode [ 82.822947][ T5585] hsr_slave_1: entered promiscuous mode [ 82.823940][ T5585] debugfs: 'hsr0' already exists in 'hsr' [ 82.825965][ T5585] Cannot create hsr debugfs directory [ 82.880448][ T5586] hsr_slave_0: entered promiscuous mode [ 82.881673][ T5586] hsr_slave_1: entered promiscuous mode [ 82.882634][ T5586] debugfs: 'hsr0' already exists in 'hsr' [ 82.882657][ T5586] Cannot create hsr debugfs directory [ 82.938726][ T5583] hsr_slave_0: entered promiscuous mode [ 82.939531][ T5583] hsr_slave_1: entered promiscuous mode [ 82.940079][ T5583] debugfs: 'hsr0' already exists in 'hsr' [ 82.940099][ T5583] Cannot create hsr debugfs directory [ 83.000406][ T5584] hsr_slave_0: entered promiscuous mode [ 83.001193][ T5584] hsr_slave_1: entered promiscuous mode [ 83.001751][ T5584] debugfs: 'hsr0' already exists in 'hsr' [ 83.001773][ T5584] Cannot create hsr debugfs directory [ 83.235045][ T5597] Bluetooth: hci3: command tx timeout [ 83.314973][ T5597] Bluetooth: hci4: command tx timeout [ 83.474954][ T5588] Bluetooth: hci2: command tx timeout [ 83.474989][ T5588] Bluetooth: hci1: command tx timeout [ 83.475072][ T5597] Bluetooth: hci0: command tx timeout [ 84.378131][ T5582] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.416322][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.423440][ T5582] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.450961][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.454232][ T5582] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.488821][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.513912][ T5582] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.552159][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.719721][ T5586] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.752712][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.754585][ T5586] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.798770][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.801968][ T5586] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.840453][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.862851][ T5586] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.900282][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.046145][ T5583] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.068289][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.072538][ T5583] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.129013][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.131887][ T5583] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.160101][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.189307][ T5583] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.218490][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.315006][ T5597] Bluetooth: hci3: command tx timeout [ 85.349342][ T5584] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.391442][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.404230][ T5584] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.405467][ T5597] Bluetooth: hci4: command tx timeout [ 85.438245][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.447702][ T5584] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.491988][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.513409][ T5584] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.550259][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.556119][ T5597] Bluetooth: hci1: command tx timeout [ 85.569216][ T5597] Bluetooth: hci0: command tx timeout [ 85.569245][ T5597] Bluetooth: hci2: command tx timeout [ 85.581492][ T5582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.714253][ T5585] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.738913][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.761918][ T5582] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.762206][ T5585] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.787702][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.800210][ T5585] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.838446][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.841869][ T5585] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.877726][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.903804][ T1185] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.904034][ T1185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.954430][ T5586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.987115][ T164] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.987365][ T164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.093473][ T5586] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.122862][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.123370][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.173250][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.173393][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.256685][ T5583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.402626][ T5584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.410061][ T5583] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.489373][ T194] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.489577][ T194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.557523][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.557651][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.614602][ T5584] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.659968][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.663991][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.686416][ T5585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.713334][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.713519][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.749395][ T31] cfg80211: failed to load regulatory.db [ 86.866665][ T5585] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.919995][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.922217][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.998657][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.000136][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.395817][ T5595] Bluetooth: hci3: command tx timeout [ 87.475087][ T5595] Bluetooth: hci4: command tx timeout [ 87.492158][ T5582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.635097][ T5597] Bluetooth: hci0: command tx timeout [ 87.635131][ T5597] Bluetooth: hci1: command tx timeout [ 87.635660][ T5595] Bluetooth: hci2: command tx timeout [ 87.898105][ T5586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.926715][ T5582] veth0_vlan: entered promiscuous mode [ 88.008224][ T5582] veth1_vlan: entered promiscuous mode [ 88.210007][ T5583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.291199][ T5586] veth0_vlan: entered promiscuous mode [ 88.353238][ T5582] veth0_macvtap: entered promiscuous mode [ 88.384399][ T5586] veth1_vlan: entered promiscuous mode [ 88.407195][ T5582] veth1_macvtap: entered promiscuous mode [ 88.589531][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.612849][ T5584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.640542][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.679683][ T5585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.693601][ T5586] veth0_macvtap: entered promiscuous mode [ 88.737203][ T5586] veth1_macvtap: entered promiscuous mode [ 88.919052][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.052586][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.103292][ T5584] veth0_vlan: entered promiscuous mode [ 89.203778][ T5585] veth0_vlan: entered promiscuous mode [ 89.211425][ T5584] veth1_vlan: entered promiscuous mode [ 89.211795][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.211818][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.361198][ T5583] veth0_vlan: entered promiscuous mode [ 89.440093][ T5585] veth1_vlan: entered promiscuous mode [ 89.532151][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.532172][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.622592][ T5583] veth1_vlan: entered promiscuous mode [ 89.754936][ T1185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.754958][ T1185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.816292][ T5584] veth0_macvtap: entered promiscuous mode [ 89.862047][ T5584] veth1_macvtap: entered promiscuous mode [ 89.937289][ T194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.937308][ T194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.940492][ T5582] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 89.954387][ T5585] veth0_macvtap: entered promiscuous mode [ 90.010995][ T5585] veth1_macvtap: entered promiscuous mode [ 90.070906][ T5583] veth0_macvtap: entered promiscuous mode [ 90.089911][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.119210][ T5583] veth1_macvtap: entered promiscuous mode [ 90.140717][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.206938][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.264353][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.275970][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.395958][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.981717][ T3372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.981737][ T3372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.425594][ T164] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.494733][ T5796] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.908073][ T2941] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.908096][ T2941] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.985506][ T67] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.118895][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.118917][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.395072][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.395093][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.544866][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.564866][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.574886][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.584864][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.594863][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.604868][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.614864][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.624865][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.634870][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.644867][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 97.599733][ T5808] capability: warning: `syz.0.1' uses deprecated v2 capabilities in a way that may be insecure [ 99.166292][ T3372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.166315][ T3372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.546930][ T67] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.561943][ T2941] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.561964][ T2941] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.875060][ T194] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.875271][ T194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.875449][ T1185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.915678][ T194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.916437][ T1185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.939056][ T1185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.939339][ T1185] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.039810][ T1185] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.040316][ T1185] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.235991][ T194] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.236048][ T194] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.236077][ T194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.236104][ T194] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.236132][ T194] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.236161][ T194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.236186][ T194] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.236213][ T194] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.570862][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 103.121593][ T10] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 103.688185][ T5828] fido_id[5828]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 106.148080][ T10] libceph: connect (1)[c::]:6789 error -101 [ 106.618584][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 106.742853][ T5835] ceph: No mds server is up or the cluster is laggy [ 108.386660][ T203] libceph: connect (1)[c::]:6789 error -101 [ 108.386779][ T203] libceph: mon0 (1)[c::]:6789 connect error [ 108.409604][ T5724] libceph: connect (1)[c::]:6789 error -101 [ 108.409792][ T5724] libceph: mon0 (1)[c::]:6789 connect error [ 108.750916][ T9] libceph: connect (1)[c::]:6789 error -101 [ 108.751122][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 110.659639][ T5859] block nbd1: NBD_DISCONNECT [ 110.942792][ T5863] binder: 5861:5863 ioctl c0306201 200000000180 returned -14 [ 110.943556][ T5863] binder: 5861:5863 ioctl c0306201 0 returned -14 [ 116.610947][ T5898] random: crng reseeded on system resumption [ 121.148733][ T5916] Bluetooth: MGMT ver 1.23 [ 121.168401][ T5916] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 122.938188][ T1174] rpcbind: server 127.0.0.1 not responding, timed out [ 126.026233][ T5703] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 126.632580][ T5940] syz.3.43 (5940) used greatest stack depth: 16104 bytes left [ 128.647248][ T5944] input: syz1 as /devices/virtual/input/input5 [ 130.143536][ T5703] usb 3-1: device not accepting address 2, error -71 [ 133.224376][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.224499][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.358887][ T5977] overlayfs: conflicting options: nfs_export=on,index=off [ 139.935095][ T5990] vivid-000: disconnect [ 140.437105][ T5985] vivid-000: reconnect [ 147.011365][ T6028] Zero length message leads to an empty skb [ 151.553298][ T5588] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 151.582198][ T5588] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 152.158722][ T5588] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 152.243113][ T5588] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 152.269218][ T5588] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 155.873957][ T5595] Bluetooth: hci5: command tx timeout [ 156.454055][ T36] audit: type=1800 audit(1791444987.478:2): pid=6065 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.66" name="(" dev="sda1" ino=2048 res=0 errno=0 [ 159.074840][ T5595] Bluetooth: hci5: command tx timeout [ 159.328378][ T36] audit: type=1800 audit(1791444990.388:3): pid=6077 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.73" name=08 dev="sda1" ino=2049 res=0 errno=0 [ 162.287079][ T5595] Bluetooth: hci5: command tx timeout [ 164.355474][ T5595] Bluetooth: hci5: command tx timeout [ 167.953124][ T36] audit: type=1804 audit(1791444999.008:4): pid=6119 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.83" name="/newroot/23/file1" dev="fuse" ino=1 res=1 errno=0 [ 170.836473][ T6133] overlayfs: failed to resolve './file0': -2 [ 184.202475][ T5703] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 187.519653][ T5703] usb 3-1: device descriptor read/all, error -71 [ 193.404919][ T6267] FAULT_INJECTION: forcing a failure. [ 193.404919][ T6267] name failslab, interval 1, probability 0, space 0, times 1 [ 193.404974][ T6267] CPU: 0 UID: 0 PID: 6267 Comm: syz.2.115 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 193.405001][ T6267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 193.405020][ T6267] Call Trace: [ 193.405028][ T6267] [ 193.405037][ T6267] dump_stack_lvl+0xe8/0x150 [ 193.405088][ T6267] should_fail_ex+0x46b/0x600 [ 193.405120][ T6267] ? __alloc_empty_sheaf+0x28/0x40 [ 193.405157][ T6267] should_failslab+0xa8/0x100 [ 193.405180][ T6267] ? __alloc_empty_sheaf+0x28/0x40 [ 193.405204][ T6267] __kmalloc_flags_noprof+0x128/0x810 [ 193.405234][ T6267] ? rt_spin_unlock+0x159/0x200 [ 193.405261][ T6267] ? __alloc_empty_sheaf+0x28/0x40 [ 193.405294][ T6267] __alloc_empty_sheaf+0x28/0x40 [ 193.405319][ T6267] __pcs_replace_empty_main+0x479/0x690 [ 193.405345][ T6267] ? rt_spin_trylock+0x13a/0x2b0 [ 193.405379][ T6267] kmem_cache_alloc_noprof+0x45d/0x690 [ 193.405406][ T6267] ? sctp_get_port_local+0x749/0x17a0 [ 193.405435][ T6267] ? sctp_get_port_local+0x749/0x17a0 [ 193.405470][ T6267] sctp_get_port_local+0x749/0x17a0 [ 193.405510][ T6267] ? sctp_get_port_local+0x50c/0x17a0 [ 193.405540][ T6267] ? __pfx_sctp_get_port_local+0x10/0x10 [ 193.405571][ T6267] ? sctp_bind_addr_match+0x30/0x2b0 [ 193.405596][ T6267] ? sctp_bind_addr_match+0x28b/0x2b0 [ 193.405627][ T6267] sctp_do_bind+0x4d9/0x9a0 [ 193.405665][ T6267] sctp_connect_new_asoc+0x270/0x6b0 [ 193.405697][ T6267] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 193.405727][ T6267] ? __local_bh_enable_ip+0x1ad/0x2b0 [ 193.405753][ T6267] ? lockdep_hardirqs_on+0x7b/0x110 [ 193.405776][ T6267] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 193.405800][ T6267] ? security_sctp_bind_connect+0x7e/0x2c0 [ 193.405831][ T6267] sctp_sendmsg+0x1506/0x2a50 [ 193.405879][ T6267] ? __pfx_sctp_sendmsg+0x10/0x10 [ 193.405906][ T6267] ? smack_socket_sendmsg+0x4b8/0x5a0 [ 193.405939][ T6267] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 193.405990][ T6267] ? sock_rps_record_flow+0x19/0x350 [ 193.406020][ T6267] ? inet_sendmsg+0x298/0x320 [ 193.406049][ T6267] ? __pfx_inet_sendmsg+0x10/0x10 [ 193.406073][ T6267] sock_sendmsg_nosec+0x10e/0x180 [ 193.406108][ T6267] __sys_sendto+0x41e/0x5d0 [ 193.406146][ T6267] ? __pfx___sys_sendto+0x10/0x10 [ 193.406204][ T6267] ? rcu_is_watching+0x16/0xb0 [ 193.406243][ T6267] __x64_sys_sendto+0xde/0x100 [ 193.406270][ T6267] do_syscall_64+0x166/0x520 [ 193.406294][ T6267] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.406315][ T6267] ? clear_bhb_loop+0x70/0xc0 [ 193.406341][ T6267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.406361][ T6267] RIP: 0033:0x7f554dc6e199 [ 193.406392][ T6267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.406410][ T6267] RSP: 002b:00007f554bec6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 193.406437][ T6267] RAX: ffffffffffffffda RBX: 00007f554def5fa0 RCX: 00007f554dc6e199 [ 193.406453][ T6267] RDX: 0000000000034000 RSI: 0000200000000300 RDI: 0000000000000003 [ 193.406467][ T6267] RBP: 00007f554dd058e0 R08: 0000200000000000 R09: 000000000000001c [ 193.406481][ T6267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.406493][ T6267] R13: 00007f554def6038 R14: 00007f554def5fa0 R15: 00007ffc355758d8 [ 193.406526][ T6267] [ 194.212057][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.212140][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.067114][ T6288] program syz.2.119 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 198.520727][ T6293] binder_alloc: 6290: binder_alloc_buf, no vma [ 203.917678][ T5597] Bluetooth: hci2: command 0x0406 tx timeout [ 203.988633][ T5597] Bluetooth: hci4: command 0x0406 tx timeout [ 203.994962][ T5597] Bluetooth: hci3: command 0x0406 tx timeout [ 207.130341][ T5595] Bluetooth: hci0: command 0x0406 tx timeout [ 207.598206][ T5595] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 207.603015][ T5595] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 207.617055][ T5595] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 207.624292][ T5595] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 207.628572][ T5595] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 207.888042][ T5595] Bluetooth: hci1: command 0x0406 tx timeout [ 210.355115][ T60] Bluetooth: hci6: command tx timeout [ 213.004260][ T5597] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 213.554858][ T5597] Bluetooth: hci6: command tx timeout [ 213.560425][ T5597] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 213.593390][ T5597] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 213.610837][ T5597] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 213.612145][ T5597] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 215.646600][ T60] Bluetooth: hci6: command tx timeout [ 215.729347][ T60] Bluetooth: hci7: command tx timeout [ 218.136327][ T60] Bluetooth: hci6: command tx timeout [ 218.136367][ T60] Bluetooth: hci7: command tx timeout [ 220.196413][ T5597] Bluetooth: hci7: command tx timeout [ 222.696414][ T5597] Bluetooth: hci7: command tx timeout [ 232.639913][ T60] Bluetooth: hci4: command 0x0406 tx timeout [ 234.154587][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 234.804872][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 234.806321][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 234.858275][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 234.861842][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.861867][ T9] usb 5-1: Product: syz [ 234.861881][ T9] usb 5-1: Manufacturer: syz [ 234.861896][ T9] usb 5-1: SerialNumber: syz [ 234.952395][ T9] usb 5-1: config 0 descriptor?? [ 235.033415][ T9] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 235.033451][ T9] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 236.069392][ T9] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 236.956988][ T9] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 236.958681][ T9] em28xx 5-1:0.0: board has no eeprom [ 238.839022][ T9] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 238.839056][ T9] em28xx 5-1:0.0: dvb set to bulk mode. [ 238.842779][ T5724] em28xx 5-1:0.0: Binding DVB extension [ 239.010716][ T6439] em28xx 5-1:0.0: writing to i2c device at 0xe failed (error=-5) [ 239.013647][ T9] usb 5-1: USB disconnect, device number 2 [ 239.107717][ T9] em28xx 5-1:0.0: Disconnecting em28xx [ 239.204625][ T5724] em28xx 5-1:0.0: Registering input extension [ 239.212872][ T9] em28xx 5-1:0.0: Closing input extension [ 239.340784][ T9] em28xx: Freeing device [ 243.644027][ T6469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.159'. [ 250.580205][ T60] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 250.608877][ T60] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 250.613176][ T60] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 250.652167][ T60] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 250.653722][ T60] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 253.808769][ T5597] Bluetooth: hci8: command tx timeout [ 255.375229][ T9] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 255.524888][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 255.548113][ T9] usb 3-1: New USB device found, idVendor=413c, idProduct=81d7, bcdDevice=ed.a6 [ 255.551772][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.551796][ T9] usb 3-1: Product: syz [ 255.551811][ T9] usb 3-1: Manufacturer: syz [ 255.551824][ T9] usb 3-1: SerialNumber: syz [ 255.649582][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.649668][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.688399][ T10] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 255.690053][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 255.690084][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 255.690178][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.779054][ T10] usb 5-1: config 0 descriptor?? [ 255.885451][ T5597] Bluetooth: hci8: command tx timeout [ 255.907236][ T9] usb 3-1: USB disconnect, device number 6 [ 256.325581][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 256.325688][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 256.428175][ T10] usb 5-1: USB disconnect, device number 3 [ 259.018073][ T5597] Bluetooth: hci8: command tx timeout [ 261.075546][ T5597] Bluetooth: hci8: command tx timeout [ 262.823120][ T6572] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5583] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[6572] [ 263.803838][ T36] audit: type=1800 audit(1791445094.858:5): pid=6576 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.186" name="syzkaller0" dev="sda1" ino=2054 res=0 errno=0 [ 266.417377][ T60] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 266.460695][ T60] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 266.462357][ T60] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 266.471321][ T60] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 266.473410][ T60] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 267.420571][ T6602] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 270.169636][ T60] Bluetooth: hci9: command tx timeout [ 272.694498][ T60] Bluetooth: hci9: command tx timeout [ 272.901441][ T5597] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 272.932678][ T5597] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 272.934673][ T5597] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 272.937216][ T5597] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 272.956999][ T5597] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 274.755772][ T5597] Bluetooth: hci9: command tx timeout [ 275.699889][ T5597] Bluetooth: hci10: command tx timeout [ 276.835146][ T5597] Bluetooth: hci9: command tx timeout [ 277.714911][ T5597] Bluetooth: hci10: command tx timeout [ 278.194942][ T5597] Bluetooth: hci5: command 0x0406 tx timeout [ 279.794994][ T60] Bluetooth: hci10: command tx timeout [ 281.874942][ T60] Bluetooth: hci10: command tx timeout [ 281.875026][ T37] INFO: task kworker/1:2:1003 blocked for more than 145 seconds. [ 281.875045][ T37] Not tainted syzkaller #0 [ 281.875054][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 281.875063][ T37] task:kworker/1:2 state:D stack:22824 pid:1003 tgid:1003 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 281.875115][ T37] Workqueue: events_power_efficient crda_timeout_work [ 281.875149][ T37] Call Trace: [ 281.875156][ T37] [ 281.875170][ T37] __schedule+0x16d9/0x5700 [ 281.875221][ T37] ? __pfx___schedule+0x10/0x10 [ 281.875257][ T37] rt_mutex_schedule+0x76/0xf0 [ 281.875282][ T37] rt_mutex_slowlock_block+0x55e/0x690 [ 281.875317][ T37] ? rt_mutex_slowlock_block+0x33c/0x690 [ 281.875347][ T37] rt_mutex_slowlock+0x2d4/0x780 [ 281.875377][ T37] ? rt_mutex_slowlock+0x1f2/0x780 [ 281.875404][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 281.875448][ T37] ? crda_timeout_work+0x16/0x80 [ 281.875482][ T37] ? crda_timeout_work+0x16/0x80 [ 281.875508][ T37] mutex_lock_nested+0x168/0x1d0 [ 281.875534][ T37] ? rcu_is_watching+0x16/0xb0 [ 281.875563][ T37] ? process_scheduled_works+0x97a/0x1630 [ 281.875591][ T37] crda_timeout_work+0x16/0x80 [ 281.875618][ T37] process_scheduled_works+0xc3d/0x1630 [ 281.875675][ T37] ? __pfx_process_scheduled_works+0x10/0x10 [ 281.875707][ T37] ? assign_work+0x3cf/0x5d0 [ 281.875738][ T37] worker_thread+0xa47/0xfb0 [ 281.875778][ T37] ? __kthread_parkme+0x71/0x1f0 [ 281.875829][ T37] kthread+0x38b/0x470 [ 281.875849][ T37] ? __pfx_worker_thread+0x10/0x10 [ 281.875874][ T37] ? __pfx_kthread+0x10/0x10 [ 281.875895][ T37] ret_from_fork+0x514/0xb70 [ 281.875919][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 281.875939][ T37] ? __switch_to+0xc89/0x1420 [ 281.875969][ T37] ? __pfx_kthread+0x10/0x10 [ 281.875991][ T37] ret_from_fork_asm+0x1a/0x30 [ 281.876027][ T37] [ 281.876175][ T37] [ 281.876175][ T37] Showing all locks held in the system: [ 281.876190][ T37] locks held by kworker/u8:1/13: 1, last CPU#1: [ 281.876203][ T37] #0: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: process_scheduled_works+0x97a/0x1630 [ 281.876260][ T37] locks held by khungtaskd/37: 1, last CPU#0: [ 281.876274][ T37] #0: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 281.876324][ T37] locks held by kworker/u8:3/50: 3, on CPU#0: [ 281.876338][ T37] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 281.876416][ T37] #1: ffffc90000bc7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 281.876470][ T37] #2: ffff88805f460938 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 281.876524][ T37] locks held by kworker/u8:4/67: 3, on CPU#1: [ 281.876538][ T37] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 281.876591][ T37] #1: ffffc9000152fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 281.876644][ T37] #2: ffff8880658a0938 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 281.876699][ T37] locks held by kworker/u8:5/144: 3, on CPU#1: [ 281.876713][ T37] #0: ffff8880331e2938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 281.876766][ T37] #1: ffffc9000417fc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 281.876825][ T37] #2: ffffffff8f5d5a78 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 281.876881][ T37] locks held by kworker/1:2/1003: 3, on CPU#1: [ 281.876894][ T37] #0: ffff88813ff26538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 281.876948][ T37] #1: ffffc90006507c40 ((crda_timeout).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 281.877000][ T37] #2: ffffffff8f5d5a78 (rtnl_mutex){+.+.}-{4:4}, at: crda_timeout_work+0x16/0x80 [ 281.877070][ T37] locks held by getty/5337: 2, on CPU#1: [ 281.877084][ T37] #0: ffff88803343a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 281.877134][ T37] #1: ffffc900044c32e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 281.877195][ T37] locks held by kworker/1:7/5856: 4, on CPU#1: [ 281.877209][ T37] #0: ffff88813ff27938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 281.877262][ T37] #1: ffffc90006667c40 (reg_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 281.877313][ T37] #2: ffffffff8f5d5a78 (rtnl_mutex){+.+.}-{4:4}, at: reg_todo+0x1c/0xa70 [ 281.877367][ T37] #3: ffff88805f460938 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_process_self_managed_hints+0x8d/0x160 [ 281.877423][ T37] locks held by syz.0.51/5971: 1, on CPU#0: [ 281.877437][ T37] #0: ffffffff8f5d5a78 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3dd/0x1e70 [ 281.877493][ T37] locks held by syz-executor/6046: 1, on CPU#0: [ 281.877507][ T37] #0: ffffffff8f5d5a78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 281.877559][ T37] locks held by syz.1.112/6258: 2, on CPU#0: [ 281.877572][ T37] #0: ffffffff8f5b6b38 (vlan_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x5ee/0x7f0 [ 281.877625][ T37] #1: ffffffff8f5d5a78 (rtnl_mutex){+.+.}-{4:4}, at: vlan_ioctl_handler+0xf0/0x630 [ 281.877676][ T37] locks held by syz-executor/6333: 1, on CPU#0: [ 281.877690][ T37] #0: ffffffff8f5d5a78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 281.877739][ T37] locks held by syz-executor/6353: 1, on CPU#0: [ 281.877753][ T37] #0: ffffffff8f5d5a78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 281.877809][ T37] locks held by syz.3.152/6427: 1, on CPU#0: [ 281.877823][ T37] #0: ffffffff8f5d5a78 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 281.877877][ T37] locks held by syz-executor/6511: 1, on CPU#0: [ 281.877890][ T37] #0: ffffffff8f5d5a78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 281.877940][ T37] locks held by syz-executor/6589: 1, on CPU#1: [ 281.877954][ T37] #0: ffffffff8f5d5a78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 281.878003][ T37] locks held by syz.4.193/6617: 1, on CPU#1: [ 281.878017][ T37] #0: ffffffff8f5d5a78 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3dd/0x1e70 [ 281.878072][ T37] locks held by syz-executor/6628: 1, on CPU#0: [ 281.878086][ T37] #0: ffffffff8f5d5a78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 281.878135][ T37] locks held by syz.2.199/6655: 1, on CPU#1: [ 281.878148][ T37] #0: ffffffff8f5d5a78 (rtnl_mutex){+.+.}-{4:4}, at: ip_mroute_setsockopt+0x137/0x10d0 [ 281.878196][ T37] locks held by syz.2.199/6656: 1, on CPU#0: [ 281.878209][ T37] #0: ffffffff8f5d5a78 (rtnl_mutex){+.+.}-{4:4}, at: ip_mroute_setsockopt+0x137/0x10d0 [ 281.878256][ T37] locks held by syz.2.199/6657: 1, on CPU#1: [ 281.878270][ T37] #0: ffffffff8f5d5a78 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_setsockopt+0xe95/0x2e30 [ 281.878324][ T37] locks held by syz.2.199/6658: 1, on CPU#0: [ 281.878337][ T37] #0: ffffffff8f5d5a78 (rtnl_mutex){+.+.}-{4:4}, at: ip_mroute_setsockopt+0x137/0x10d0 [ 281.878384][ T37] locks held by syz.2.199/6659: 1, on CPU#1: [ 281.878398][ T37] #0: ffffffff8f5d5a78 (rtnl_mutex){+.+.}-{4:4}, at: ip_mroute_setsockopt+0x137/0x10d0 [ 281.878445][ T37] [ 281.878451][ T37] ============================================= [ 281.878451][ T37] [ 281.878460][ T37] NMI backtrace for cpu 0 [ 281.878474][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 281.878502][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 281.878513][ T37] Call Trace: [ 281.878521][ T37] [ 281.878528][ T37] dump_stack_lvl+0xe8/0x150 [ 281.878556][ T37] nmi_cpu_backtrace+0x274/0x2d0 [ 281.878584][ T37] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 281.878606][ T37] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 281.878637][ T37] sys_info+0x135/0x170 [ 281.878661][ T37] watchdog+0xfd7/0x1030 [ 281.878693][ T37] ? watchdog+0x1c7/0x1030 [ 281.878724][ T37] kthread+0x38b/0x470 [ 281.878743][ T37] ? __pfx_watchdog+0x10/0x10 [ 281.878766][ T37] ? __pfx_kthread+0x10/0x10 [ 281.878787][ T37] ret_from_fork+0x514/0xb70 [ 281.878813][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 281.878832][ T37] ? __switch_to+0xc89/0x1420 [ 281.878861][ T37] ? __pfx_kthread+0x10/0x10 [ 281.878882][ T37] ret_from_fork_asm+0x1a/0x30 [ 281.878915][ T37] [ 281.878922][ T37] Sending NMI from CPU 0 to CPUs 1: [ 281.878950][ C1] NMI backtrace for cpu 1 [ 281.878963][ C1] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 281.878982][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 281.878992][ C1] Workqueue: bat_events batadv_dat_purge [ 281.879016][ C1] RIP: 0010:__lock_acquire+0x950/0x2de0 [ 281.879039][ C1] Code: 27 10 0e 00 4d 89 f5 0f 85 22 02 00 00 48 83 7c 24 38 00 0f 84 b6 01 00 00 49 8b 45 f8 25 ff 1f 00 00 48 0f a3 05 f0 7d 09 12 <0f> 83 62 01 00 00 48 69 c0 c8 00 00 00 48 8d 80 90 94 4c 93 e9 81 [ 281.879052][ C1] RSP: 0018:ffffc900001277b8 EFLAGS: 00000003 [ 281.879069][ C1] RAX: 0000000000000ad0 RBX: 00000000ad011412 RCX: 00000000b729abec [ 281.879081][ C1] RDX: 000000008a51b457 RSI: 00000000857a5186 RDI: ffff88801cabddc0 [ 281.879092][ C1] RBP: 9b73b23800000000 R08: ffffffff8b5b8282 R09: 0000000000000000 [ 281.879104][ C1] R10: dffffc0000000000 R11: fffffbfff1f645b0 R12: 0000000000004000 [ 281.879116][ C1] R13: ffff88801cabeaa0 R14: ffff88801cabeaa0 R15: 0000000000000005 [ 281.879128][ C1] FS: 0000000000000000(0000) GS:ffff888125cc2000(0000) knlGS:0000000000000000 [ 281.879142][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 281.879154][ C1] CR2: 00007fced4ffa180 CR3: 000000000dfb0000 CR4: 00000000003526f0 [ 281.879169][ C1] Call Trace: [ 281.879175][ C1] [ 281.879185][ C1] ? __lock_acquire+0x747/0x2de0 [ 281.879209][ C1] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 281.879235][ C1] lock_acquire+0x115/0x350 [ 281.879255][ C1] ? rt_spin_lock+0x1e2/0x400 [ 281.879280][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 281.879300][ C1] rt_spin_lock+0x1fe/0x400 [ 281.879326][ C1] ? rt_spin_lock+0x1e2/0x400 [ 281.879347][ C1] ? __local_bh_enable+0x1e3/0x2f0 [ 281.879369][ C1] ? __pfx_rt_spin_lock+0x10/0x10 [ 281.879391][ C1] ? rcu_is_watching+0x16/0xb0 [ 281.879413][ C1] ? __local_bh_disable_ip+0x3d/0x420 [ 281.879434][ C1] ? __batadv_dat_purge+0xae/0x400 [ 281.879456][ C1] ? __pfx_batadv_dat_to_purge+0x10/0x10 [ 281.879479][ C1] __batadv_dat_purge+0x131/0x400 [ 281.879501][ C1] ? __batadv_dat_purge+0xae/0x400 [ 281.879522][ C1] ? __pfx_batadv_dat_to_purge+0x10/0x10 [ 281.879545][ C1] ? process_scheduled_works+0x97a/0x1630 [ 281.879567][ C1] batadv_dat_purge+0x20/0x70 [ 281.879587][ C1] process_scheduled_works+0xc3d/0x1630 [ 281.879620][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 281.879644][ C1] ? assign_work+0x3cf/0x5d0 [ 281.879666][ C1] worker_thread+0xa47/0xfb0 [ 281.879698][ C1] kthread+0x38b/0x470 [ 281.879713][ C1] ? __pfx_worker_thread+0x10/0x10 [ 281.879734][ C1] ? __pfx_kthread+0x10/0x10 [ 281.879750][ C1] ret_from_fork+0x514/0xb70 [ 281.879767][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 281.879782][ C1] ? __switch_to+0xc89/0x1420 [ 281.879804][ C1] ? __pfx_kthread+0x10/0x10 [ 281.879821][ C1] ret_from_fork_asm+0x1a/0x30 [ 281.879842][ C1] [ 281.879953][ T37] Kernel panic - not syncing: hung_task: blocked tasks [ 282.987442][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 282.997049][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 283.007081][ T37] Call Trace: [ 283.010354][ T37] [ 283.013265][ T37] vpanic+0x56d/0xa60 [ 283.017240][ T37] ? __pfx_vpanic+0x10/0x10 [ 283.021748][ T37] ? console_srcu_read_unlock+0x3a/0x60 [ 283.027289][ T37] panic+0xc5/0xd0 [ 283.030997][ T37] ? __pfx_panic+0x10/0x10 [ 283.035393][ T37] ? wq_watchdog_touch+0xf9/0x160 [ 283.040404][ T37] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 283.046545][ T37] watchdog+0x1030/0x1030 [ 283.050866][ T37] ? watchdog+0x1c7/0x1030 [ 283.055283][ T37] kthread+0x38b/0x470 [ 283.059336][ T37] ? __pfx_watchdog+0x10/0x10 [ 283.063995][ T37] ? __pfx_kthread+0x10/0x10 [ 283.068569][ T37] ret_from_fork+0x514/0xb70 [ 283.073145][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 283.078261][ T37] ? __switch_to+0xc89/0x1420 [ 283.082924][ T37] ? __pfx_kthread+0x10/0x10 [ 283.087494][ T37] ret_from_fork_asm+0x1a/0x30 [ 283.092248][ T37] [ 283.095390][ T37] Kernel Offset: disabled [ 283.099702][ T37] Rebooting in 86400 seconds..