last executing test programs: 5m32.009190431s ago: executing program 1 (id=9): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) mount$cgroup(0x0, 0x0, 0x0, 0x2008000, &(0x7f0000000680)={[{@name={'name', 0x3d, '+$!&%]-[(+\xfc\xe3T\xcd\x87\xca\x1b:\x17\x8a\x8fM\xe5\xc9\xaa\xaf|\xd4\xe2\xce\v\x0fAV\xedc7V\xef\xea\xa1\xe3\x1d\xff\x10\xe0\xa2\x10\'\xfa\xe7\x97\x86\xdc\xdf}\xd0Ddhp\xb9\vl\x85\xd5H\"\v\'\xaa\xe7$\x91\xf2\xc8\x81\xeb\x03\xf3\xe7\xd5\r\xb6\x00\xd6\x05;G\x84\x02x\x0f\xc3\xa7\xf2\x10Hp\xffDz\x06\xb0\xf8?\"\xdc@h\xf3D\x84j8\x88s\x00\x85\xae\x98x>7\xf1I\x0eI\x86\xb6g\xd9N\x9e\xd2\x9d\xab\x9e\xc78\xa2\xaa(tWMO\xe2\xc8\xd4I\xe8S\xc4\xc9\xc49W\x9a\xd4J\xd3\xc3\x90\xe2\xd9Z?\xa5\x8b\xb4]d\x9cL^\x1b\xf6\f\xe0\xf7N\xaf\x17\x13\xdaN\x7f\xebU\x06\xccz\xc9\xf6RY\xa1\xc7\xa5|E\xfa\xea[\xe3\x06ME\xb2z\x00[z(s>m\xfd\xe5wYP\xb1\x00*R\xa0\t\x9abF\xbb7\xe5\xc9'}}]}) syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_int(r1, 0x0, 0x8, 0x0, 0x0) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x11, 0xff7ffffffffffffc, 0x2, 0xffffffffffffffff, 0xfffffffffffffffe, 0x9, 0x2, 0x8}, 0x0, &(0x7f0000000400)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0x5e51, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x4, 0x0, 0x5, 0x5}, 0x0, 0x0) 5m30.077737541s ago: executing program 1 (id=11): setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x18) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000008d82, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, 0x0, 0x0) sysinfo(0x0) r1 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 5m29.23772703s ago: executing program 1 (id=14): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000640)="f3", 0xf000}], 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$xdp(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) shmget(0x1, 0x3000, 0x78000a04, &(0x7f0000768000/0x3000)=nil) 5m27.609314822s ago: executing program 0 (id=17): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x18) creat(&(0x7f00000001c0)='./file0\x00', 0xd931d3864d39dc41) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000083c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000100)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x8000}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0xfffffffffffffffc, {0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x1fd, &(0x7f0000000480)=0x0) io_submit(r7, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0xf0, r6, &(0x7f00000000c0)='!', 0xb7f40}]) 5m23.858753968s ago: executing program 0 (id=23): sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8c4}, 0x4000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r1, 0x4) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000180)={0x0, 0x0, "a4cd91", 0x9}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000040)="05000000010000", 0x7) 5m22.348830489s ago: executing program 0 (id=25): shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000040)=""/170) r0 = shmget(0x2, 0x3000, 0x80, &(0x7f0000ffc000/0x3000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000100)=""/65) 5m21.837079962s ago: executing program 0 (id=27): getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000030000000060a010400000000000000000100000008000b40000000000900010073797a3000000000050007400800000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x2004c899}, 0x0) recvmmsg(r3, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x73) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000004c000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800b0001007470726f7879000014000280080001400000000208000340000000100900010073797a300000000009"], 0xa0}}, 0x40880) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) r6 = socket(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r6, @ANYRES16=r7], 0x4c}}, 0x40000) 5m19.469339073s ago: executing program 1 (id=30): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) 5m19.251827861s ago: executing program 0 (id=31): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$keyring(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r4, 0xee01, 0x0) add_key(&(0x7f0000000040)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000019200), 0x0, r4) syz_usb_connect(0x0, 0x36, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='percpu_alloc_percpu\x00', r7}, 0x18) 5m18.086550257s ago: executing program 1 (id=33): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x18) creat(&(0x7f00000001c0)='./file0\x00', 0xd931d3864d39dc41) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000083c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000100)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x8000}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0xfffffffffffffffc, {0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x1fd, &(0x7f0000000480)=0x0) io_submit(r7, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0xf0, r6, &(0x7f00000000c0)='!', 0xb7f40}]) 5m15.25438708s ago: executing program 0 (id=36): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_CMAP(r0, 0x4b71, 0x0) timer_create(0x0, 0x0, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket(0x2, 0x3, 0xff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$l2tp(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) socket$kcm(0x29, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) socket(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0xf36}], 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x1040) sendto$inet(r1, &(0x7f0000000280)="12f0dda7f17f60b7c78be42301125e6cb51c467f", 0x14, 0x800, &(0x7f00000001c0)={0x2, 0x4e22, @multicast2}, 0x10) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) 5m13.305474123s ago: executing program 1 (id=43): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, 0x0, 0x820) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000001b40)={'\x00', {0x2, 0x4e20, @private=0xa010100}}) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='gfs2\x00', 0x2000010, &(0x7f0000000100)='barrier') r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40046f41, 0x0) r4 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) fsopen(0x0, 0x8a65e3c40875ee9f) syz_open_dev$sndpcmp(&(0x7f00000010c0), 0x0, 0x1a7e24) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000340)=0xc) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r2) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}}, 0x4040840) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x15c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) socket(0x10, 0x3, 0x0) 4m56.796084995s ago: executing program 32 (id=36): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_CMAP(r0, 0x4b71, 0x0) timer_create(0x0, 0x0, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket(0x2, 0x3, 0xff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$l2tp(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) socket$kcm(0x29, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) socket(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0xf36}], 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x1040) sendto$inet(r1, &(0x7f0000000280)="12f0dda7f17f60b7c78be42301125e6cb51c467f", 0x14, 0x800, &(0x7f00000001c0)={0x2, 0x4e22, @multicast2}, 0x10) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) 4m56.591244884s ago: executing program 33 (id=43): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, 0x0, 0x820) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000001b40)={'\x00', {0x2, 0x4e20, @private=0xa010100}}) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='gfs2\x00', 0x2000010, &(0x7f0000000100)='barrier') r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40046f41, 0x0) r4 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) fsopen(0x0, 0x8a65e3c40875ee9f) syz_open_dev$sndpcmp(&(0x7f00000010c0), 0x0, 0x1a7e24) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000340)=0xc) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r2) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}}, 0x4040840) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x15c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) socket(0x10, 0x3, 0x0) 17.05889318s ago: executing program 4 (id=448): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = socket(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a", @ANYRES32=r5], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x20000004) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x30, r6, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, 0x0) munlock(&(0x7f0000867000/0x4000)=nil, 0x4000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8000) sched_setattr(0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x20000045, 0x0, 0x0) 13.819119386s ago: executing program 4 (id=453): syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x11, 0xff7ffffffffffffc, 0x2, 0xffffffffffffffff, 0xfffffffffffffffe, 0x9, 0x2, 0x8}, 0x0, &(0x7f0000000400)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0x5e51, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x4, 0x0, 0x5, 0x5}, 0x0, 0x0) 12.66937541s ago: executing program 4 (id=455): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000780)={@private0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x6, 0x8, 0x3, 0x500, 0x3, 0x3020000}) r4 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x4) r6 = openat$cgroup_ro(r5, &(0x7f0000001100)='cpu.stat\x00', 0x5000000, 0x0) readv(r6, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) 11.295880621s ago: executing program 3 (id=456): timerfd_create(0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x4002) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) dup(0xffffffffffffffff) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x13, 0xffffffffffffffff, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="04040b3b1c8fd5635d"], 0xd) shmget(0x0, 0x3000, 0x200, &(0x7f0000ffd000/0x3000)=nil) 10.943914961s ago: executing program 3 (id=457): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}}, 0x0) 10.545156573s ago: executing program 3 (id=458): set_mempolicy(0x3, &(0x7f0000000040)=0xf, 0x6) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x2) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc}) add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d80000001b0001000000000000000000fc00000000000000", @ANYRES32=0x0, @ANYBLOB], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000480), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb78a405e0483020b990102030109022400010000000009040000025c291d0009050900000000000009050b01"], 0x0) syz_usb_connect$cdc_ecm(0x0, 0x6a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x58, 0x1, 0x1, 0x70, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xfd, 0x3, 0x2, 0x6, 0x0, 0x5, {{0xb, 0x24, 0x6, 0x0, 0x0, "d18b1893e78c"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x3, 0x8, 0x86}, [@ncm={0x6, 0x24, 0x1a, 0x4}, @country_functional={0x8, 0x24, 0x7, 0x5, 0x1, [0x8]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x7, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x0, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x3, 0x0, 0x6}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x5, 0x6, 0x0, 0x20, 0x8}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x448}}, {0xc5, &(0x7f0000000180)=@string={0xc5, 0x3, "588546a199f06af82b48779416754070e57616d2832e9a2c158ae6a7d08a98d24ae5bb9276a4f1aa12eaf19baf7f115bcf6c71122ef5749b74f0061d1758244ab672d66070fcb29545f3bbc2a8b994f41ab16d91d5de68af6f8005b6571091c9aa7a13d566580548e2fee7c8f77e50e071d86c6936480c4860ea9af5f169af2be94a93e1efc87a42937c48822a9d9098e65133d93aeb42e2c1c62f62d7a111da423e1f25fda958d801f047aa589272aac5bda09451fda6e80594dbe6c9f41eca77d8bb"}}, {0xa7, &(0x7f0000000280)=ANY=[@ANYBLOB="a70340545d1bbd8cc45bfeef280980c0c2a87edca678298bbca8df31bff6eace966816c0c1e3a57e01e3e7c0bedc0c1cd1b21a2db91637fdd12dbfc4a2de6c29b2bb41e866ee774e88efeb13360f6198b0099bbfa98d97680c25ecf4c03444322f940f0bde6db2b7b62ae5b91a3d4e42321f4f10219d23aa2479286ef701471564ab691c3d322609d9d7905bd6064a7286050e0982e366886ff5e659f8e06fb2309b2452878375"]}, {0xd0, &(0x7f0000000340)=@string={0xd0, 0x3, "74c98b6b61a75c8838f1f658b36b371536b77e35045c6cb193f862ad37632a2515ceedc0ce0c0ab44020c1a56e279979afc1845cd393234372055a6f2164520799b01de2a5cd0636984c86a23d62807c30fd970b257cba91ac6fce55b934504c7a0c7703174425d263003a8442e7589c0974c9bd238b86d951623116388473f7d15980992e3da7ca2a413760d4ebc9c6b9e4689416dff22f3537bb9193b91b74bb503b84ff163ab2a68cae280546e30c2f56cb173865109fece15f7e6af33f7ec8beef1bc2e4770bb2e5e1f1df28"}}]}) userfaultfd(0x801) 8.268373811s ago: executing program 2 (id=460): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, 0x0) r2 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsopen(0x0, 0x8a65e3c40875ee9f) syz_open_dev$sndpcmp(0x0, 0x0, 0x1a7e24) socket(0x10, 0x3, 0x0) 7.309314497s ago: executing program 2 (id=461): syz_clone3(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) close(r1) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40081271, &(0x7f0000000980)=0x4000) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='qnx4\x00', 0x208000, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0) 6.651916186s ago: executing program 4 (id=462): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x70}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}, 0xc0c6) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 6.289410168s ago: executing program 2 (id=463): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xa005, 0x10100}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x2c020400) vmsplice(r5, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0xc4}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfad", 0x9b}], 0x2, 0x0) write$binfmt_script(r5, &(0x7f0000000400)={'#! ', './file0'}, 0xb) 4.921245677s ago: executing program 2 (id=464): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000008c000000000000006100"], 0x0, 0x29, 0x0, 0x4}, 0x28) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="100000000400001a08feffff0400000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000340)={0x0, 0x3}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(r2) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) read$FUSE(r2, &(0x7f00000021c0)={0x2020}, 0x2020) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xf, 0xd, &(0x7f00000003c0)=ANY=[@ANYRES64=0x0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffa14e1e88b75fb48b4e9ebfb4d4011a78b5091346db30b0cfce24ef13"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000001000000400000002000000000", @ANYRES32=0x0], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x4) close(r3) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc008001b0007000200060001c00200bc24eab556a705251e618294ff4051f60a84c9f4d4938037e786a6d000106b062e586ee5a687e2ea91ed", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) 3.002437148s ago: executing program 3 (id=465): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) connect$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r4, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0x3f}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0xa5}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0x53}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000140)}], 0x1}}], 0x3, 0x4000000) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) open(0x0, 0x1a1342, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x32}, 0x28) 1.499149509s ago: executing program 3 (id=466): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x0, 0x4}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f00000005c0)) 1.418032454s ago: executing program 4 (id=467): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) symlink(0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x8003b, [0x8000, 0xc95a, 0xf, 0x401, 0x83, 0x2, 0x100, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff, 0x6, 0x1, 0x7, 0x5, 0x6, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x3, 0x7, 0x4, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x400006, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x0, 0x4da5, 0x8100, 0x1, 0x40], [0x80, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x6, 0x7, 0x2, 0xfffffff8, 0x5, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x1, 0x66abcbd2, 0x2, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0xff, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0xd, 0x1, 0xfe000000, 0x8, 0xfffff274, 0x4, 0x9, 0x3, 0x3, 0x80000000, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0x1, 0x100, 0x3, 0x9, 0x5, 0x7fff, 0xfffffffc, 0x5, 0xb, 0x4, 0x5, 0x5, 0x10002, 0x8001ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x2950bfaf, 0xb, 0xa2, 0x4, 0x1002, 0x8, 0xb1, 0xac8, 0xbf, 0x1, 0x3, 0x9, 0x12b, 0x4, 0xfffffffd, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807fb, 0x2006, 0x80a2ed, 0x5, 0x40000025], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0xd, 0x4183, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x110, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x4000100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x224, 0x2, 0x5, 0x4, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x1fe, 0xb, 0x1]}, 0x45c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b15, &(0x7f00000002c0)={'wlan0\x00'}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[], 0x48) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) dup(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 924.55801ms ago: executing program 2 (id=468): write$char_usb(0xffffffffffffffff, &(0x7f0000000640)="fc8bc8089bb2", 0x6) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 497.609483ms ago: executing program 2 (id=469): socket$kcm(0x10, 0x2, 0x4) r0 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000700)=[@in={0x2, 0x4e20, @empty}]}, 0x0) syz_open_dev$cec(&(0x7f0000000400), 0x0, 0x80200) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000002340)={0x2020}, 0x1d79) syz_io_uring_setup(0x1e1e, &(0x7f0000000380)={0x0, 0x86f9, 0x800, 0x3, 0x2e2}, &(0x7f0000000140), &(0x7f0000000100)) socket(0x29, 0xa, 0x105) openat$kvm(0xffffffffffffff9c, 0x0, 0x32842, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000100)={0x28, 0x6, 0x0, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) ioctl$TCFLSH(r2, 0x400455c8, 0x4) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r5, 0x5607, 0x41) capset(&(0x7f0000000080)={0x20071026}, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000002300)={0x0, 0x3e, &(0x7f00000022c0)={&(0x7f0000000180)={0x20, 0x1410, 0x1, 0x72bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x20000}]}, 0x20}, 0x1, 0x0, 0x0, 0x240048c5}, 0x0) 456.757504ms ago: executing program 4 (id=470): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000780)={@private0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x6, 0x8, 0x3, 0x500, 0x3, 0x3020000}) r4 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x4) r6 = openat$cgroup_ro(r5, &(0x7f0000001100)='cpu.stat\x00', 0x5000000, 0x0) readv(r6, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) 0s ago: executing program 3 (id=471): r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6000, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_MASTER={0x8, 0xa, 0x2}]}, 0x20}}, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_io_uring_setup(0x498, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_enter(r7, 0x627, 0x4c1, 0x43, 0x0, 0x0) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2, 0x0, 0x0, 0x8084}, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004107f540f30c7593de1a000000010902240001000000000904000002bee4f900090503000000000000090504"], 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.218' (ED25519) to the list of known hosts. [ 82.498854][ T5823] cgroup: Unknown subsys name 'net' [ 82.712596][ T5823] cgroup: Unknown subsys name 'cpuset' [ 82.748363][ T5823] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.396048][ T5823] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.014108][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.016675][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.032349][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.037158][ T1564] cfg80211: failed to load regulatory.db [ 87.053492][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.070046][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.125969][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.135245][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.137405][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.155886][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.156847][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.171127][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.173781][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.180808][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.190093][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.191592][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.326175][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.339133][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.342336][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.343699][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.345650][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.346649][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.349161][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.349930][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.362914][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.363753][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.048568][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 88.444608][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 88.466785][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 88.521065][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 88.620501][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 88.950760][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.952264][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.953187][ T5834] bridge_slave_0: entered allmulticast mode [ 88.955596][ T5834] bridge_slave_0: entered promiscuous mode [ 89.099157][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.099317][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.099558][ T5834] bridge_slave_1: entered allmulticast mode [ 89.102321][ T5834] bridge_slave_1: entered promiscuous mode [ 89.119366][ T59] Bluetooth: hci0: command tx timeout [ 89.277890][ T5843] Bluetooth: hci1: command tx timeout [ 89.278147][ T59] Bluetooth: hci2: command tx timeout [ 89.437943][ T5843] Bluetooth: hci4: command tx timeout [ 89.438830][ T59] Bluetooth: hci3: command tx timeout [ 89.638906][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.753088][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.753226][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.753419][ T5845] bridge_slave_0: entered allmulticast mode [ 89.756136][ T5845] bridge_slave_0: entered promiscuous mode [ 89.862552][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.939312][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.939475][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.939683][ T5840] bridge_slave_0: entered allmulticast mode [ 89.942541][ T5840] bridge_slave_0: entered promiscuous mode [ 89.946053][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.946266][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.946449][ T5845] bridge_slave_1: entered allmulticast mode [ 89.949479][ T5845] bridge_slave_1: entered promiscuous mode [ 90.191150][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.191393][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.191610][ T5840] bridge_slave_1: entered allmulticast mode [ 90.194370][ T5840] bridge_slave_1: entered promiscuous mode [ 90.280013][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.280153][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.280425][ T5838] bridge_slave_0: entered allmulticast mode [ 90.283545][ T5838] bridge_slave_0: entered promiscuous mode [ 90.360188][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.360299][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.360510][ T5846] bridge_slave_0: entered allmulticast mode [ 90.363385][ T5846] bridge_slave_0: entered promiscuous mode [ 90.591468][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.591608][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.591787][ T5838] bridge_slave_1: entered allmulticast mode [ 90.593564][ T5838] bridge_slave_1: entered promiscuous mode [ 90.596982][ T5834] team0: Port device team_slave_0 added [ 90.597465][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.604175][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.604394][ T5846] bridge_slave_1: entered allmulticast mode [ 90.607055][ T5846] bridge_slave_1: entered promiscuous mode [ 90.740815][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.819857][ T5834] team0: Port device team_slave_1 added [ 90.893469][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.903390][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.103454][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.197810][ T59] Bluetooth: hci0: command tx timeout [ 91.201549][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.289280][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.357966][ T5843] Bluetooth: hci1: command tx timeout [ 91.359668][ T59] Bluetooth: hci2: command tx timeout [ 91.478061][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.479074][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.479084][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.479097][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.483046][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.518068][ T5843] Bluetooth: hci4: command tx timeout [ 91.518237][ T59] Bluetooth: hci3: command tx timeout [ 91.613567][ T5845] team0: Port device team_slave_0 added [ 91.690045][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.690063][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.690088][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.982741][ T5840] team0: Port device team_slave_0 added [ 91.985316][ T5845] team0: Port device team_slave_1 added [ 92.140343][ T5840] team0: Port device team_slave_1 added [ 92.231294][ T5838] team0: Port device team_slave_0 added [ 92.234771][ T5846] team0: Port device team_slave_0 added [ 92.390423][ T5838] team0: Port device team_slave_1 added [ 92.393440][ T5846] team0: Port device team_slave_1 added [ 92.481037][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.481052][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.481068][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.723777][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.723796][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.723810][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.724982][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.724995][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.725018][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.011152][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.011168][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.011190][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.022434][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.022450][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.022472][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.166743][ T5834] hsr_slave_0: entered promiscuous mode [ 93.168376][ T5834] hsr_slave_1: entered promiscuous mode [ 93.170888][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.170901][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.170923][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.191947][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.191963][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.191986][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.198750][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.198766][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.198790][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.278132][ T59] Bluetooth: hci0: command tx timeout [ 93.437991][ T59] Bluetooth: hci2: command tx timeout [ 93.438024][ T59] Bluetooth: hci1: command tx timeout [ 93.607986][ T59] Bluetooth: hci4: command tx timeout [ 93.608154][ T5843] Bluetooth: hci3: command tx timeout [ 93.615676][ T5845] hsr_slave_0: entered promiscuous mode [ 93.616910][ T5845] hsr_slave_1: entered promiscuous mode [ 93.622235][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 93.622355][ T5845] Cannot create hsr debugfs directory [ 93.964164][ T5840] hsr_slave_0: entered promiscuous mode [ 93.964959][ T5840] hsr_slave_1: entered promiscuous mode [ 93.965684][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 93.965703][ T5840] Cannot create hsr debugfs directory [ 94.119592][ T5846] hsr_slave_0: entered promiscuous mode [ 94.122238][ T5846] hsr_slave_1: entered promiscuous mode [ 94.123273][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 94.123295][ T5846] Cannot create hsr debugfs directory [ 94.235546][ T5838] hsr_slave_0: entered promiscuous mode [ 94.236323][ T5838] hsr_slave_1: entered promiscuous mode [ 94.236867][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 94.236884][ T5838] Cannot create hsr debugfs directory [ 95.358472][ T5843] Bluetooth: hci0: command tx timeout [ 95.518003][ T59] Bluetooth: hci2: command tx timeout [ 95.518049][ T5843] Bluetooth: hci1: command tx timeout [ 95.677768][ T5843] Bluetooth: hci3: command tx timeout [ 95.677797][ T5843] Bluetooth: hci4: command tx timeout [ 95.819378][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.869063][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.911533][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.970191][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.074506][ T5845] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.120343][ T5845] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.166754][ T5845] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.216751][ T5845] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.370559][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.423282][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.457706][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.514266][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.695867][ T5846] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.739350][ T5846] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.800294][ T5846] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.851388][ T5846] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 97.036424][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.036672][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.093126][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.135078][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.182173][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.281908][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.292792][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.350633][ T3560] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.351296][ T3560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.405558][ T3560] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.405684][ T3560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.458889][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.511225][ T1374] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.511441][ T1374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.556394][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.564195][ T161] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.564429][ T161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.674580][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.732989][ T161] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.733115][ T161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.758890][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.802865][ T161] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.803043][ T161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.992217][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.013038][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.083932][ T161] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.087858][ T161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.159895][ T1374] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.160108][ T1374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.205072][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.273386][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.273627][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.323067][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.327861][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.394951][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.625726][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.883868][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.911527][ T5834] veth0_vlan: entered promiscuous mode [ 99.013385][ T5834] veth1_vlan: entered promiscuous mode [ 99.255718][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.256325][ T5840] veth0_vlan: entered promiscuous mode [ 99.326599][ T5834] veth0_macvtap: entered promiscuous mode [ 99.335201][ T5840] veth1_vlan: entered promiscuous mode [ 99.366950][ T5834] veth1_macvtap: entered promiscuous mode [ 99.469031][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.490821][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.524767][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.570098][ T5846] veth0_vlan: entered promiscuous mode [ 99.577368][ T5840] veth0_macvtap: entered promiscuous mode [ 99.604198][ T4660] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.621052][ T4660] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.622840][ T5845] veth0_vlan: entered promiscuous mode [ 99.624000][ T4660] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.627396][ T5840] veth1_macvtap: entered promiscuous mode [ 99.657066][ T4660] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.686760][ T5846] veth1_vlan: entered promiscuous mode [ 99.748154][ T5845] veth1_vlan: entered promiscuous mode [ 99.913355][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.965888][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.028413][ T5838] veth0_vlan: entered promiscuous mode [ 100.057293][ T3560] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.071633][ T3560] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.071658][ T3560] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.093712][ T3560] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.107784][ T3560] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.126951][ T3560] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.133470][ T5846] veth0_macvtap: entered promiscuous mode [ 100.155275][ T5838] veth1_vlan: entered promiscuous mode [ 100.223747][ T5845] veth0_macvtap: entered promiscuous mode [ 100.226134][ T5846] veth1_macvtap: entered promiscuous mode [ 100.270565][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.270585][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.321746][ T5845] veth1_macvtap: entered promiscuous mode [ 100.435948][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.519315][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.556984][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.557003][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.579879][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.595466][ T5838] veth0_macvtap: entered promiscuous mode [ 100.606615][ T1374] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.634707][ T1374] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.679645][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.679728][ T1374] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.728429][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.761014][ T5838] veth1_macvtap: entered promiscuous mode [ 100.784347][ T3560] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.784366][ T3560] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.977828][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.983564][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.994388][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.120635][ T5952] Zero length message leads to an empty skb [ 101.149204][ T5952] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2'. [ 101.614180][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.971739][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.111358][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.707676][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.707719][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.707752][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.707785][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.707817][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.707850][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.707882][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.707915][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.707947][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.707980][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.430458][ T4660] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.435621][ T1479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.435640][ T1479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.481852][ T4660] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.509933][ T4660] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.544256][ T4660] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.168252][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.168274][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.514866][ T5978] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 104.520173][ T5978] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 104.870496][ T4660] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.870509][ T4660] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.289272][ T4660] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.289286][ T4660] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.259386][ T5988] Bluetooth: MGMT ver 1.23 [ 106.428857][ T1265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.428879][ T1265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.712804][ T5993] process 'syz.3.4' launched './file0' with NULL argv: empty string added [ 106.941329][ T1265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.941351][ T1265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.957038][ T6008] capability: warning: `syz.2.3' uses deprecated v2 capabilities in a way that may be insecure [ 108.318587][ T59] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 108.319845][ T59] Bluetooth: hci0: command 0x0c1a tx timeout [ 108.544955][ T6015] fuse: Unknown parameter '184467440737095516150xffffffffffffffff' [ 108.654879][ T6015] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 109.090069][ C0] vkms_vblank_simulate: vblank timer overrun [ 109.410953][ C0] vkms_vblank_simulate: vblank timer overrun [ 109.729319][ C0] vkms_vblank_simulate: vblank timer overrun [ 110.610787][ C0] vkms_vblank_simulate: vblank timer overrun [ 111.392157][ C0] vkms_vblank_simulate: vblank timer overrun [ 111.716080][ T6029] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 114.483873][ T59] Bluetooth: hci0: command 0x0c1a tx timeout [ 114.484151][ T5843] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 118.914882][ C0] vkms_vblank_simulate: vblank timer overrun [ 119.529951][ C0] vkms_vblank_simulate: vblank timer overrun [ 120.427697][ C0] vkms_vblank_simulate: vblank timer overrun [ 121.081233][ C0] vkms_vblank_simulate: vblank timer overrun [ 121.443456][ T6096] input: syz1 as /devices/virtual/input/input5 [ 122.609558][ C0] vkms_vblank_simulate: vblank timer overrun [ 123.248693][ C0] vkms_vblank_simulate: vblank timer overrun [ 124.264259][ C0] vkms_vblank_simulate: vblank timer overrun [ 127.708971][ T6117] gfs2: not a GFS2 filesystem [ 128.118468][ T6116] netlink: 12 bytes leftover after parsing attributes in process `syz.2.47'. [ 128.131830][ T6109] GUP no longer grows the stack in syz.4.45 (6109): 200000005000-200000008000 (200000004000) [ 128.131866][ T6109] CPU: 1 UID: 0 PID: 6109 Comm: syz.4.45 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 128.131879][ T6109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 128.131887][ T6109] Call Trace: [ 128.131892][ T6109] [ 128.131897][ T6109] dump_stack_lvl+0x189/0x250 [ 128.131926][ T6109] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.131940][ T6109] ? __pfx__printk+0x10/0x10 [ 128.131951][ T6109] ? find_vma+0xe7/0x160 [ 128.131976][ T6109] __get_user_pages+0x237e/0x2b60 [ 128.131992][ T6109] ? __gup_longterm_locked+0xc68/0x1660 [ 128.132014][ T6109] ? __pfx_down_read_killable+0x10/0x10 [ 128.132027][ T6109] ? __lock_acquire+0xab9/0xd20 [ 128.132045][ T6109] __gup_longterm_locked+0xde9/0x1660 [ 128.132069][ T6109] ? gup_fast_fallback+0x18e0/0x1f90 [ 128.132086][ T6109] gup_fast_fallback+0x1deb/0x1f90 [ 128.132117][ T6109] ? __pfx_gup_fast_fallback+0x10/0x10 [ 128.132136][ T6109] ? is_valid_gup_args+0x11f/0x200 [ 128.132152][ T6109] ? get_user_pages_fast+0x4d/0xb0 [ 128.132167][ T6109] get_futex_key+0x938/0x1660 [ 128.132185][ T6109] ? __pfx_get_futex_key+0x10/0x10 [ 128.132202][ T6109] futex_lock_pi+0x1c0/0xa70 [ 128.132220][ T6109] ? __pfx_futex_lock_pi+0x10/0x10 [ 128.132249][ T6109] ? __pfx_futex_wake_mark+0x10/0x10 [ 128.132270][ T6109] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 128.132288][ T6109] do_futex+0x292/0x420 [ 128.132303][ T6109] ? __pfx_do_futex+0x10/0x10 [ 128.132314][ T6109] ? __vm_munmap+0x301/0x3d0 [ 128.132330][ T6109] __se_sys_futex+0x36f/0x400 [ 128.132347][ T6109] ? __pfx___se_sys_futex+0x10/0x10 [ 128.132359][ T6109] ? rcu_is_watching+0x15/0xb0 [ 128.132377][ T6109] ? __x64_sys_futex+0x21/0xf0 [ 128.132390][ T6109] do_syscall_64+0xfa/0x3b0 [ 128.132399][ T6109] ? lockdep_hardirqs_on+0x9c/0x150 [ 128.132413][ T6109] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.132423][ T6109] ? clear_bhb_loop+0x60/0xb0 [ 128.132435][ T6109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.132445][ T6109] RIP: 0033:0x7f4bbfd3eba9 [ 128.132458][ T6109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.132466][ T6109] RSP: 002b:00007f4bbdfa6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 128.132482][ T6109] RAX: ffffffffffffffda RBX: 00007f4bbff85fa0 RCX: 00007f4bbfd3eba9 [ 128.132490][ T6109] RDX: 0000000000000000 RSI: 000000000000000d RDI: 0000200000004000 [ 128.132496][ T6109] RBP: 00007f4bbfdc1e19 R08: 0000000000000000 R09: 0000000000200000 [ 128.132502][ T6109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.132508][ T6109] R13: 00007f4bbff86038 R14: 00007f4bbff85fa0 R15: 00007fff0a9026a8 [ 128.132525][ T6109] [ 132.419063][ C0] vkms_vblank_simulate: vblank timer overrun [ 133.061190][ C0] vkms_vblank_simulate: vblank timer overrun [ 133.071742][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.071950][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.916893][ C0] vkms_vblank_simulate: vblank timer overrun [ 136.847920][ T5944] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 138.386702][ C0] vkms_vblank_simulate: vblank timer overrun [ 138.425516][ T6142] IPVS: sync thread started: state = BACKUP, mcast_ifn = geneve0, syncid = 2, id = 0 [ 139.097848][ C0] vkms_vblank_simulate: vblank timer overrun [ 139.628772][ C0] vkms_vblank_simulate: vblank timer overrun [ 140.206865][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 140.244133][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 140.245826][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 140.249407][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 140.250196][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 140.739153][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 140.741519][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 140.773856][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 140.775960][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 140.793921][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 142.427951][ C0] vkms_vblank_simulate: vblank timer overrun [ 142.478631][ T5843] Bluetooth: hci5: command tx timeout [ 142.928000][ C0] vkms_vblank_simulate: vblank timer overrun [ 142.959228][ C0] vkms_vblank_simulate: vblank timer overrun [ 143.493365][ T6167] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 143.626559][ T5843] Bluetooth: hci0: command tx timeout [ 143.801288][ T6173] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 144.749374][ T5843] Bluetooth: hci5: command tx timeout [ 145.679296][ C0] vkms_vblank_simulate: vblank timer overrun [ 145.683906][ T5843] Bluetooth: hci0: command tx timeout [ 146.062695][ T5971] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.672843][ T5971] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.807843][ T5843] Bluetooth: hci5: command tx timeout [ 147.536486][ T5971] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.790124][ T6201] trusted_key: encrypted_key: insufficient parameters specified [ 147.972585][ T6201] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 147.979247][ T6201] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 148.145954][ C0] vkms_vblank_simulate: vblank timer overrun [ 148.201707][ T5843] Bluetooth: hci0: command tx timeout [ 148.417959][ C0] vkms_vblank_simulate: vblank timer overrun [ 148.664914][ T5971] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.759802][ T44] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 148.877830][ T5843] Bluetooth: hci5: command tx timeout [ 148.918458][ T6210] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 148.921750][ T44] usb 4-1: no configurations [ 148.921764][ T44] usb 4-1: can't read configurations, error -22 [ 149.038051][ C0] vkms_vblank_simulate: vblank timer overrun [ 149.327934][ C0] vkms_vblank_simulate: vblank timer overrun [ 149.508242][ T44] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 149.665199][ T44] usb 4-1: no configurations [ 149.665218][ T44] usb 4-1: can't read configurations, error -22 [ 149.665724][ T44] usb usb4-port1: attempt power cycle [ 150.028147][ T44] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 150.051542][ T44] usb 4-1: no configurations [ 150.051561][ T44] usb 4-1: can't read configurations, error -22 [ 150.207724][ T44] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 150.230084][ T44] usb 4-1: no configurations [ 150.230112][ T44] usb 4-1: can't read configurations, error -22 [ 150.230662][ T44] usb usb4-port1: unable to enumerate USB device [ 150.237711][ T5843] Bluetooth: hci0: command tx timeout [ 150.803705][ T6150] chnl_net:caif_netlink_parms(): no params data found [ 150.828991][ T5971] bridge_slave_1: left allmulticast mode [ 150.829276][ T5971] bridge_slave_1: left promiscuous mode [ 150.831466][ T5971] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.980546][ T5971] bridge_slave_0: left allmulticast mode [ 150.980580][ T5971] bridge_slave_0: left promiscuous mode [ 150.980850][ T5971] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.278523][ T5971] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.396438][ T5971] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.841382][ T5971] bond0 (unregistering): Released all slaves [ 156.210034][ T6260] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 156.437752][ T44] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 156.588663][ T44] usb 3-1: no configurations [ 156.588682][ T44] usb 3-1: can't read configurations, error -22 [ 156.719925][ T44] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 156.868949][ T44] usb 3-1: no configurations [ 156.868970][ T44] usb 3-1: can't read configurations, error -22 [ 156.871081][ T44] usb usb3-port1: attempt power cycle [ 157.213588][ T44] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 157.236711][ T44] usb 3-1: no configurations [ 157.236730][ T44] usb 3-1: can't read configurations, error -22 [ 157.297294][ T6155] chnl_net:caif_netlink_parms(): no params data found [ 157.397647][ T44] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 157.431355][ T44] usb 3-1: no configurations [ 157.431374][ T44] usb 3-1: can't read configurations, error -22 [ 157.432759][ T44] usb usb3-port1: unable to enumerate USB device [ 158.261096][ T6150] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.271131][ T6150] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.272998][ T6150] bridge_slave_0: entered allmulticast mode [ 158.283680][ T6150] bridge_slave_0: entered promiscuous mode [ 158.383869][ T6150] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.383955][ T6150] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.384124][ T6150] bridge_slave_1: entered allmulticast mode [ 158.395162][ T6150] bridge_slave_1: entered promiscuous mode [ 158.573294][ T5971] hsr_slave_0: left promiscuous mode [ 158.620193][ T5971] hsr_slave_1: left promiscuous mode [ 158.629215][ T5971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.629300][ T5971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.671455][ T5971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.671487][ T5971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.814265][ T5971] veth1_macvtap: left promiscuous mode [ 158.814428][ T5971] veth0_macvtap: left promiscuous mode [ 158.814608][ T5971] veth1_vlan: left promiscuous mode [ 158.814801][ T5971] veth0_vlan: left promiscuous mode [ 161.879764][ T6291] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 161.879857][ T6291] IPv6: NLM_F_CREATE should be set when creating new route [ 161.883654][ T6291] IPv6: NLM_F_CREATE should be set when creating new route [ 161.883953][ T6291] IPv6: NLM_F_CREATE should be set when creating new route [ 164.213894][ T6300] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 164.927928][ T6305] trusted_key: encrypted_key: insufficient parameters specified [ 165.008760][ T6305] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 165.010857][ T6305] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 166.137739][ T5944] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 166.249729][ T5971] team0 (unregistering): Port device team_slave_1 removed [ 166.289530][ T5944] usb 4-1: no configurations [ 166.289549][ T5944] usb 4-1: can't read configurations, error -22 [ 166.417745][ T5944] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 166.438636][ T5971] team0 (unregistering): Port device team_slave_0 removed [ 166.611356][ T5944] usb 4-1: no configurations [ 166.611369][ T5944] usb 4-1: can't read configurations, error -22 [ 166.611790][ T5944] usb usb4-port1: attempt power cycle [ 166.947847][ T5944] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 166.973233][ T5944] usb 4-1: no configurations [ 166.973253][ T5944] usb 4-1: can't read configurations, error -22 [ 167.127763][ T5944] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 167.149403][ T5944] usb 4-1: no configurations [ 167.149422][ T5944] usb 4-1: can't read configurations, error -22 [ 167.149800][ T5944] usb usb4-port1: unable to enumerate USB device [ 169.314290][ T6317] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 170.087058][ T6324] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 172.086228][ T6336] block nbd4: Attempted send on invalid socket [ 172.086310][ T6336] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 172.086887][ T6336] block nbd4: Attempted send on invalid socket [ 172.086904][ T6336] I/O error, dev nbd4, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 172.087009][ T6336] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 172.239677][ T6336] block nbd4: Attempted send on invalid socket [ 172.239702][ T6336] I/O error, dev nbd4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 172.239888][ T6336] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 172.254496][ T6336] block nbd4: Attempted send on invalid socket [ 172.254520][ T6336] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 172.254985][ T6336] block nbd4: Attempted send on invalid socket [ 172.255001][ T6336] I/O error, dev nbd4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 172.255103][ T6336] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 172.260070][ T6336] block nbd4: Attempted send on invalid socket [ 172.260103][ T6336] I/O error, dev nbd4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 172.260215][ T6336] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 172.278598][ T6336] block nbd4: Attempted send on invalid socket [ 172.278624][ T6336] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 172.282714][ T6336] block nbd4: Attempted send on invalid socket [ 172.282739][ T6336] I/O error, dev nbd4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 172.282846][ T6336] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 172.283069][ T6336] block nbd4: Attempted send on invalid socket [ 172.283091][ T6336] I/O error, dev nbd4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 172.283184][ T6336] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 172.453343][ T6340] fuse: Unknown parameter 'grou00000000000000000000' [ 173.138472][ T6336] block nbd4: Attempted send on invalid socket [ 173.138499][ T6336] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 173.138961][ T6336] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 173.139219][ T6336] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 173.139239][ T6336] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 173.207526][ T6150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.404029][ T6150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.488984][ T6344] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 173.738167][ T6155] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.738255][ T6155] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.738418][ T6155] bridge_slave_0: entered allmulticast mode [ 173.739930][ T6155] bridge_slave_0: entered promiscuous mode [ 174.579764][ T6155] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.579903][ T6155] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.580107][ T6155] bridge_slave_1: entered allmulticast mode [ 174.582501][ T6155] bridge_slave_1: entered promiscuous mode [ 174.609931][ T6150] team0: Port device team_slave_0 added [ 174.752236][ T6150] team0: Port device team_slave_1 added [ 175.275880][ T6155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.661495][ T6357] fuse: Unknown parameter '184467440737095516150xffffffffffffffff' [ 175.699893][ T6357] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 175.731679][ T6155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.732636][ T6150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.732649][ T6150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.732672][ T6150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.331575][ T6364] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 176.332927][ T6364] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 176.795529][ C0] vkms_vblank_simulate: vblank timer overrun [ 177.773242][ T6150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.773258][ T6150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.773282][ T6150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.272563][ T6155] team0: Port device team_slave_0 added [ 178.276411][ T6155] team0: Port device team_slave_1 added [ 178.347834][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 178.497769][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 178.514118][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.517452][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 178.517481][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.517500][ T10] usb 4-1: Product: syz [ 178.517514][ T10] usb 4-1: Manufacturer: syz [ 178.517528][ T10] usb 4-1: SerialNumber: syz [ 178.666547][ T10] usb 4-1: config 0 descriptor?? [ 179.258243][ T44] usb 4-1: USB disconnect, device number 10 [ 180.167577][ C0] vkms_vblank_simulate: vblank timer overrun [ 180.275524][ C0] vkms_vblank_simulate: vblank timer overrun [ 180.330514][ C0] vkms_vblank_simulate: vblank timer overrun [ 180.390201][ C0] vkms_vblank_simulate: vblank timer overrun [ 180.429942][ C0] vkms_vblank_simulate: vblank timer overrun [ 180.466120][ T6150] hsr_slave_0: entered promiscuous mode [ 180.467407][ T6150] hsr_slave_1: entered promiscuous mode [ 180.483225][ T6150] debugfs: 'hsr0' already exists in 'hsr' [ 180.483250][ T6150] Cannot create hsr debugfs directory [ 180.503337][ T6155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.503353][ T6155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.503375][ T6155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.715122][ T6155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.715138][ T6155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.715162][ T6155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.471946][ T6417] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 184.471961][ T6417] IPv6: NLM_F_CREATE should be set when creating new route [ 184.472018][ T6417] IPv6: NLM_F_CREATE should be set when creating new route [ 184.472052][ T6417] IPv6: NLM_F_CREATE should be set when creating new route [ 187.271125][ T6436] fuse: Unknown parameter '184467440737095516150xffffffffffffffff' [ 187.281367][ T6436] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 187.293464][ T57] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.656589][ T6451] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 188.656774][ T6451] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 190.932971][ T6466] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 191.167242][ T57] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.822971][ T6155] hsr_slave_0: entered promiscuous mode [ 191.824292][ T6155] hsr_slave_1: entered promiscuous mode [ 191.825222][ T6155] debugfs: 'hsr0' already exists in 'hsr' [ 191.825243][ T6155] Cannot create hsr debugfs directory [ 191.946551][ T5905] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 192.170426][ T5905] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.170568][ T5905] usb 4-1: config 0 has no interfaces? [ 192.173707][ T5905] usb 4-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 192.173734][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.173753][ T5905] usb 4-1: Product: syz [ 192.173767][ T5905] usb 4-1: Manufacturer: syz [ 192.173781][ T5905] usb 4-1: SerialNumber: syz [ 192.329587][ T5905] usb 4-1: config 0 descriptor?? [ 193.263802][ T57] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.416093][ T6475] warning: `syz.2.136' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 194.332821][ T5905] usb 4-1: USB disconnect, device number 11 [ 194.492180][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.492257][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.913019][ T6493] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 194.916439][ T6493] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 195.962160][ T57] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.160172][ T5843] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 199.306988][ T6511] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 200.035093][ T57] bridge_slave_1: left allmulticast mode [ 200.035122][ T57] bridge_slave_1: left promiscuous mode [ 200.037692][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.250905][ T57] bridge_slave_0: left allmulticast mode [ 201.250943][ T57] bridge_slave_0: left promiscuous mode [ 201.251190][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.814699][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 201.854059][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 201.871188][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 201.874496][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 201.875515][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 202.170276][ T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 202.185850][ T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 202.204638][ T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 202.209871][ T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 202.224272][ T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 204.068943][ T59] Bluetooth: hci2: command tx timeout [ 204.491997][ T59] Bluetooth: hci6: command tx timeout [ 205.361498][ T6561] netlink: 'syz.4.156': attribute type 13 has an invalid length. [ 205.797718][ T5905] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 205.960816][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 205.960867][ T5905] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 205.960889][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.966467][ T5905] usb 4-1: config 0 descriptor?? [ 206.606612][ T59] Bluetooth: hci2: command tx timeout [ 206.606643][ T59] Bluetooth: hci6: command tx timeout [ 208.637664][ T5843] Bluetooth: hci6: command tx timeout [ 208.639885][ T5843] Bluetooth: hci2: command tx timeout [ 210.717806][ T5841] Bluetooth: hci2: command tx timeout [ 210.723316][ T5841] Bluetooth: hci6: command tx timeout [ 211.837784][ T991] usb 4-1: USB disconnect, device number 12 [ 211.850898][ T5913] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 211.951934][ T5154] Bluetooth: hci4: command 0x0406 tx timeout [ 211.953417][ T5154] Bluetooth: hci1: command 0x0406 tx timeout [ 211.955307][ T5154] Bluetooth: hci3: command 0x0406 tx timeout [ 212.173179][ T5913] usb 3-1: Using ep0 maxpacket: 16 [ 212.411996][ T5913] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 212.412028][ T5913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 212.441537][ T5913] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 212.441566][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.441584][ T5913] usb 3-1: Product: syz [ 212.441598][ T5913] usb 3-1: Manufacturer: syz [ 212.441611][ T5913] usb 3-1: SerialNumber: syz [ 212.510108][ T5913] usb 3-1: config 0 descriptor?? [ 212.531824][ T5913] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 212.531870][ T5913] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 213.243172][ T5913] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 213.244294][ T5913] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 213.648450][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.738961][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.767178][ T57] bond0 (unregistering): Released all slaves [ 213.881031][ T5913] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 214.091478][ T5913] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 214.091929][ T5913] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 214.092480][ T5913] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 214.092913][ T5913] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 214.093414][ T5913] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 214.136210][ T5913] usb 3-1: USB disconnect, device number 6 [ 214.431261][ T6561] gretap0: refused to change device tx_queue_len [ 214.431707][ T6561] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 216.717204][ T5837] Bluetooth: hci4: unexpected event for opcode 0x0003 [ 218.162617][ T57] hsr_slave_0: left promiscuous mode [ 218.209434][ T57] hsr_slave_1: left promiscuous mode [ 218.210374][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.210402][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.288757][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.288788][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.500993][ T57] veth1_macvtap: left promiscuous mode [ 218.501117][ T57] veth0_macvtap: left promiscuous mode [ 218.501421][ T57] veth1_vlan: left promiscuous mode [ 218.501628][ T57] veth0_vlan: left promiscuous mode [ 219.081070][ C0] vkms_vblank_simulate: vblank timer overrun [ 219.230713][ C0] vkms_vblank_simulate: vblank timer overrun [ 219.769919][ C0] vkms_vblank_simulate: vblank timer overrun [ 220.168886][ C0] vkms_vblank_simulate: vblank timer overrun [ 220.784153][ C0] vkms_vblank_simulate: vblank timer overrun [ 222.538974][ C0] vkms_vblank_simulate: vblank timer overrun [ 224.141679][ T57] team0 (unregistering): Port device team_slave_1 removed [ 224.443423][ T57] team0 (unregistering): Port device team_slave_0 removed [ 226.790955][ T6654] overlayfs: missing 'lowerdir' [ 227.401377][ T6659] fuse: Unknown parameter 'group_id00000000000000000000' [ 229.111382][ C0] vkms_vblank_simulate: vblank timer overrun [ 230.263275][ C0] vkms_vblank_simulate: vblank timer overrun [ 232.406062][ C0] vkms_vblank_simulate: vblank timer overrun [ 232.546645][ C0] vkms_vblank_simulate: vblank timer overrun [ 233.084089][ C0] vkms_vblank_simulate: vblank timer overrun [ 233.132257][ C0] vkms_vblank_simulate: vblank timer overrun [ 233.172488][ C0] vkms_vblank_simulate: vblank timer overrun [ 233.319522][ C0] vkms_vblank_simulate: vblank timer overrun [ 233.388820][ C0] vkms_vblank_simulate: vblank timer overrun [ 235.143546][ T6533] chnl_net:caif_netlink_parms(): no params data found [ 235.359271][ T6531] chnl_net:caif_netlink_parms(): no params data found [ 236.833969][ T6533] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.834184][ T6533] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.834431][ T6533] bridge_slave_0: entered allmulticast mode [ 236.888724][ T6533] bridge_slave_0: entered promiscuous mode [ 237.827773][ T6533] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.827914][ T6533] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.829198][ T6533] bridge_slave_1: entered allmulticast mode [ 237.834417][ T6533] bridge_slave_1: entered promiscuous mode [ 238.101037][ T6531] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.101194][ T6531] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.101460][ T6531] bridge_slave_0: entered allmulticast mode [ 238.106255][ T6531] bridge_slave_0: entered promiscuous mode [ 238.454849][ T6531] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.454962][ T6531] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.455203][ T6531] bridge_slave_1: entered allmulticast mode [ 238.457507][ T6531] bridge_slave_1: entered promiscuous mode [ 238.471146][ T6533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.625916][ T6726] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 238.644153][ T6533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.264476][ T6531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.456668][ T6531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.478326][ T6533] team0: Port device team_slave_0 added [ 239.746977][ T6533] team0: Port device team_slave_1 added [ 240.403683][ C0] vkms_vblank_simulate: vblank timer overrun [ 241.247931][ C0] vkms_vblank_simulate: vblank timer overrun [ 241.586085][ C0] vkms_vblank_simulate: vblank timer overrun [ 241.599262][ T6531] team0: Port device team_slave_0 added [ 241.885111][ C0] vkms_vblank_simulate: vblank timer overrun [ 242.759867][ C0] vkms_vblank_simulate: vblank timer overrun [ 242.800145][ T6531] team0: Port device team_slave_1 added [ 243.171560][ T6533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.171577][ T6533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.171601][ T6533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.220401][ T6750] fuse: Unknown parameter '184467440737095516150xffffffffffffffff' [ 243.227243][ T6750] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 243.362966][ T6533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.362984][ T6533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.363009][ T6533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.649786][ T6531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.649802][ T6531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.649833][ T6531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.803813][ C0] vkms_vblank_simulate: vblank timer overrun [ 243.822791][ T6531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.822806][ T6531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.822842][ T6531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.325607][ T6759] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 244.372324][ T6533] hsr_slave_0: entered promiscuous mode [ 244.377498][ T6533] hsr_slave_1: entered promiscuous mode [ 245.239324][ T6531] hsr_slave_0: entered promiscuous mode [ 245.240136][ T6531] hsr_slave_1: entered promiscuous mode [ 245.240626][ T6531] debugfs: 'hsr0' already exists in 'hsr' [ 245.240641][ T6531] Cannot create hsr debugfs directory [ 248.201237][ T6796] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 248.203164][ T6796] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 249.190784][ T57] bridge_slave_1: left allmulticast mode [ 249.190816][ T57] bridge_slave_1: left promiscuous mode [ 249.191079][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.522182][ T57] bridge_slave_0: left allmulticast mode [ 249.522215][ T57] bridge_slave_0: left promiscuous mode [ 249.522564][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.550136][ T57] bridge_slave_1: left allmulticast mode [ 250.550170][ T57] bridge_slave_1: left promiscuous mode [ 250.550502][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.629798][ T6805] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 250.661665][ T57] bridge_slave_0: left allmulticast mode [ 250.661698][ T57] bridge_slave_0: left promiscuous mode [ 250.661959][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.222419][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.225180][ T6832] overlayfs: missing 'lowerdir' [ 255.370158][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.458046][ T57] bond0 (unregistering): Released all slaves [ 255.925895][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.925963][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.568720][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.967101][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.077790][ T31] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 260.288120][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 260.392738][ T31] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 260.392772][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 260.543941][ T31] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 260.544414][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.544920][ T31] usb 5-1: Product: syz [ 260.546524][ T31] usb 5-1: Manufacturer: syz [ 260.547130][ T31] usb 5-1: SerialNumber: syz [ 260.789371][ T31] usb 5-1: config 0 descriptor?? [ 260.792205][ T57] bond0 (unregistering): Released all slaves [ 260.873413][ T31] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 260.873448][ T31] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 260.884906][ T6860] 9pnet_fd: Insufficient options for proto=fd [ 261.421936][ T31] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 261.422852][ T31] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 261.577128][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 261.593421][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 261.600861][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 261.602900][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 261.603768][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 262.571165][ T31] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 262.571769][ T31] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 262.572306][ T31] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 262.572730][ T31] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 262.573140][ T31] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 262.573553][ T31] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 262.640043][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 262.652989][ T31] usb 5-1: USB disconnect, device number 3 [ 262.817432][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 262.822390][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 262.826079][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 262.827252][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 263.230348][ T6877] overlayfs: missing 'lowerdir' [ 263.340617][ T57] hsr_slave_0: left promiscuous mode [ 263.662040][ T57] hsr_slave_1: left promiscuous mode [ 263.662952][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.839540][ T5837] Bluetooth: hci0: command tx timeout [ 264.570921][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.057695][ T5837] Bluetooth: hci5: command tx timeout [ 265.536421][ T57] hsr_slave_0: left promiscuous mode [ 266.300270][ T5837] Bluetooth: hci0: command tx timeout [ 266.360560][ T57] hsr_slave_1: left promiscuous mode [ 266.361567][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.166612][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.184928][ T5837] Bluetooth: hci5: command tx timeout [ 268.317706][ T5837] Bluetooth: hci0: command tx timeout [ 269.389401][ T5837] Bluetooth: hci5: command tx timeout [ 269.978645][ T57] team0 (unregistering): Port device team_slave_1 removed [ 270.078701][ T57] team0 (unregistering): Port device team_slave_0 removed [ 270.397646][ T5837] Bluetooth: hci0: command tx timeout [ 270.673505][ C1] vkms_vblank_simulate: vblank timer overrun [ 270.953645][ C1] vkms_vblank_simulate: vblank timer overrun [ 271.299088][ C1] vkms_vblank_simulate: vblank timer overrun [ 271.437704][ T5837] Bluetooth: hci5: command tx timeout [ 271.726554][ C1] vkms_vblank_simulate: vblank timer overrun [ 271.765936][ T57] team0 (unregistering): Port device team_slave_1 removed [ 271.910418][ T57] team0 (unregistering): Port device team_slave_0 removed [ 273.678302][ C1] vkms_vblank_simulate: vblank timer overrun [ 273.736136][ T6946] netlink: 4 bytes leftover after parsing attributes in process `syz.3.237'. [ 274.139700][ C1] vkms_vblank_simulate: vblank timer overrun [ 274.386603][ C1] vkms_vblank_simulate: vblank timer overrun [ 278.016516][ T6865] chnl_net:caif_netlink_parms(): no params data found [ 278.566799][ T6866] chnl_net:caif_netlink_parms(): no params data found [ 281.079321][ T6865] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.079407][ T6865] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.079580][ T6865] bridge_slave_0: entered allmulticast mode [ 281.091909][ T6865] bridge_slave_0: entered promiscuous mode [ 281.209126][ T6865] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.209264][ T6865] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.209507][ T6865] bridge_slave_1: entered allmulticast mode [ 281.212401][ T6865] bridge_slave_1: entered promiscuous mode [ 282.227441][ T6865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.268722][ T6866] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.269022][ T6866] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.269269][ T6866] bridge_slave_0: entered allmulticast mode [ 282.299462][ T6866] bridge_slave_0: entered promiscuous mode [ 282.332477][ T6865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.332740][ T6866] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.332869][ T6866] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.333065][ T6866] bridge_slave_1: entered allmulticast mode [ 282.373532][ T6866] bridge_slave_1: entered promiscuous mode [ 282.861449][ C0] vkms_vblank_simulate: vblank timer overrun [ 283.565355][ C0] vkms_vblank_simulate: vblank timer overrun [ 283.650542][ C0] vkms_vblank_simulate: vblank timer overrun [ 284.047277][ T6865] team0: Port device team_slave_0 added [ 284.065263][ T6866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.070950][ T6865] team0: Port device team_slave_1 added [ 284.115956][ T6866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.888268][ C0] vkms_vblank_simulate: vblank timer overrun [ 286.974950][ T6865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.974966][ T6865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.974990][ T6865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.024984][ T6866] team0: Port device team_slave_0 added [ 287.051462][ T57] bridge_slave_1: left allmulticast mode [ 287.051494][ T57] bridge_slave_1: left promiscuous mode [ 287.051761][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.240901][ T57] bridge_slave_0: left allmulticast mode [ 287.240924][ T57] bridge_slave_0: left promiscuous mode [ 287.241099][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.674200][ T57] bridge_slave_1: left allmulticast mode [ 287.674234][ T57] bridge_slave_1: left promiscuous mode [ 287.674496][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.847438][ T57] bridge_slave_0: left allmulticast mode [ 287.847461][ T57] bridge_slave_0: left promiscuous mode [ 287.847948][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.207601][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.312577][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.377967][ T57] bond0 (unregistering): Released all slaves [ 291.411105][ T7088] netlink: 4 bytes leftover after parsing attributes in process `syz.4.262'. [ 291.439904][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.600144][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 292.017151][ T57] bond0 (unregistering): Released all slaves [ 292.492215][ T6865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.492231][ T6865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.492255][ T6865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.495009][ T6866] team0: Port device team_slave_1 added [ 293.486306][ T6866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.486322][ T6866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.486341][ T6866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.725650][ T6866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.725666][ T6866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.725694][ T6866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.568885][ T57] hsr_slave_0: left promiscuous mode [ 294.694514][ T57] hsr_slave_1: left promiscuous mode [ 294.695553][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.868557][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.100576][ T57] hsr_slave_0: left promiscuous mode [ 295.217656][ T57] hsr_slave_1: left promiscuous mode [ 295.218567][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.325822][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.736053][ T5837] Bluetooth: hci3: unexpected event for opcode 0x0003 [ 295.788481][ C1] vkms_vblank_simulate: vblank timer overrun [ 297.618531][ T57] team0 (unregistering): Port device team_slave_1 removed [ 297.856528][ T57] team0 (unregistering): Port device team_slave_0 removed [ 298.177661][ C1] vkms_vblank_simulate: vblank timer overrun [ 298.844208][ C1] vkms_vblank_simulate: vblank timer overrun [ 299.155270][ C1] vkms_vblank_simulate: vblank timer overrun [ 299.429166][ C1] vkms_vblank_simulate: vblank timer overrun [ 299.772739][ C1] vkms_vblank_simulate: vblank timer overrun [ 300.067316][ C1] vkms_vblank_simulate: vblank timer overrun [ 301.330538][ T5837] Bluetooth: hci1: unexpected event for opcode 0x0003 [ 302.330388][ T7173] fuse: Unknown parameter '184467440737095516150xffffffffffffffff' [ 302.369068][ T7173] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 307.449269][ T7189] syz.2.286 (7189) used greatest stack depth: 18912 bytes left [ 308.431147][ C1] vkms_vblank_simulate: vblank timer overrun [ 308.434529][ T57] team0 (unregistering): Port device team_slave_1 removed [ 308.699259][ T57] team0 (unregistering): Port device team_slave_0 removed [ 308.712768][ T5837] Bluetooth: hci4: unexpected event for opcode 0x0003 [ 308.782172][ C1] vkms_vblank_simulate: vblank timer overrun [ 309.147871][ C1] vkms_vblank_simulate: vblank timer overrun [ 309.944579][ C1] vkms_vblank_simulate: vblank timer overrun [ 310.114203][ C1] vkms_vblank_simulate: vblank timer overrun [ 310.242259][ T7214] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 310.762216][ C1] vkms_vblank_simulate: vblank timer overrun [ 311.309652][ C1] vkms_vblank_simulate: vblank timer overrun [ 312.727228][ T6865] hsr_slave_0: entered promiscuous mode [ 312.797434][ T6865] hsr_slave_1: entered promiscuous mode [ 313.530969][ T6866] hsr_slave_0: entered promiscuous mode [ 313.575371][ T6866] hsr_slave_1: entered promiscuous mode [ 313.617450][ T6866] debugfs: 'hsr0' already exists in 'hsr' [ 313.620669][ T6866] Cannot create hsr debugfs directory [ 317.653551][ C0] vkms_vblank_simulate: vblank timer overrun [ 317.735331][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.735402][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.951137][ T7264] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 318.802483][ T7272] fuse: Invalid rootmode [ 319.452410][ C0] vkms_vblank_simulate: vblank timer overrun [ 319.788682][ C0] vkms_vblank_simulate: vblank timer overrun [ 320.330118][ C0] vkms_vblank_simulate: vblank timer overrun [ 320.434891][ T7285] netlink: 40 bytes leftover after parsing attributes in process `syz.2.311'. [ 321.110019][ C0] vkms_vblank_simulate: vblank timer overrun [ 323.440825][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 323.462674][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 323.469181][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 323.484664][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 323.485504][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 324.378578][ T7320] fuse: Unknown parameter '184467440737095516150xffffffffffffffff' [ 324.411333][ T7320] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 324.874600][ T5837] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 324.969632][ T5837] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 324.973380][ T5837] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 324.977920][ T5837] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 324.980237][ T5837] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 325.597741][ T5843] Bluetooth: hci2: command tx timeout [ 326.997278][ T7333] fuse: Invalid rootmode [ 327.357886][ T5843] Bluetooth: hci6: command tx timeout [ 327.692487][ T5843] Bluetooth: hci2: command tx timeout [ 327.865195][ T7341] overlayfs: missing 'workdir' [ 328.267731][ T37] audit: type=1326 audit(1757701359.209:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7342 comm="syz.2.324" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6dc2b8eba9 code=0x0 [ 329.716122][ T5843] Bluetooth: hci6: command tx timeout [ 329.757617][ T5843] Bluetooth: hci2: command tx timeout [ 331.428516][ C0] vkms_vblank_simulate: vblank timer overrun [ 331.638151][ T7301] chnl_net:caif_netlink_parms(): no params data found [ 331.767797][ T5837] Bluetooth: hci6: command tx timeout [ 331.837604][ T5837] Bluetooth: hci2: command tx timeout [ 332.307980][ T7316] chnl_net:caif_netlink_parms(): no params data found [ 333.122579][ T5843] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 333.556626][ C0] vkms_vblank_simulate: vblank timer overrun [ 333.837683][ T5843] Bluetooth: hci6: command tx timeout [ 334.184924][ T7301] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.185015][ T7301] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.185185][ T7301] bridge_slave_0: entered allmulticast mode [ 334.199638][ T7301] bridge_slave_0: entered promiscuous mode [ 334.373209][ T7301] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.374065][ T7301] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.374318][ T7301] bridge_slave_1: entered allmulticast mode [ 334.411638][ T7301] bridge_slave_1: entered promiscuous mode [ 335.017842][ T7301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.319013][ T7301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.024549][ T7316] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.024692][ T7316] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.024927][ T7316] bridge_slave_0: entered allmulticast mode [ 337.068267][ T7316] bridge_slave_0: entered promiscuous mode [ 337.568769][ T7422] fuse: Unknown parameter '184467440737095516150xffffffffffffffff' [ 337.601977][ T7422] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 338.437328][ T7316] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.438053][ T7316] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.440920][ T7316] bridge_slave_1: entered allmulticast mode [ 338.465654][ T7316] bridge_slave_1: entered promiscuous mode [ 338.469640][ T7301] team0: Port device team_slave_0 added [ 339.652735][ T7301] team0: Port device team_slave_1 added [ 339.653376][ T13] bridge_slave_1: left allmulticast mode [ 339.653404][ T13] bridge_slave_1: left promiscuous mode [ 339.653662][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.842272][ T13] bridge_slave_0: left allmulticast mode [ 339.842305][ T13] bridge_slave_0: left promiscuous mode [ 339.842603][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.320590][ C1] vkms_vblank_simulate: vblank timer overrun [ 341.068927][ C1] vkms_vblank_simulate: vblank timer overrun [ 341.264734][ C1] vkms_vblank_simulate: vblank timer overrun [ 341.628345][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 341.808109][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.452722][ T13] bond0 (unregistering): Released all slaves [ 345.158349][ T7316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.660866][ T7316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.661528][ T7301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.661536][ T7301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.661550][ T7301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.083055][ T13] hsr_slave_0: left promiscuous mode [ 346.125444][ T13] hsr_slave_1: left promiscuous mode [ 346.126702][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.341726][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.550367][ T13] team0 (unregistering): Port device team_slave_1 removed [ 349.088680][ T7473] netlink: 20 bytes leftover after parsing attributes in process `syz.4.353'. [ 349.818340][ T13] team0 (unregistering): Port device team_slave_0 removed [ 350.371759][ C0] vkms_vblank_simulate: vblank timer overrun [ 351.480727][ C0] vkms_vblank_simulate: vblank timer overrun [ 351.985219][ T7301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.985235][ T7301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.985259][ T7301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.410993][ T7316] team0: Port device team_slave_0 added [ 352.645119][ C0] vkms_vblank_simulate: vblank timer overrun [ 353.166317][ T7316] team0: Port device team_slave_1 added [ 353.258727][ T7301] hsr_slave_0: entered promiscuous mode [ 353.263999][ T7301] hsr_slave_1: entered promiscuous mode [ 353.958647][ T7316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.958663][ T7316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.958687][ T7316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.065801][ T5843] Bluetooth: hci1: unexpected event for opcode 0x0003 [ 354.245953][ T7316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.245964][ T7316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.245977][ T7316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.201074][ T7524] netlink: 20 bytes leftover after parsing attributes in process `syz.4.363'. [ 356.642224][ T7316] hsr_slave_0: entered promiscuous mode [ 356.649143][ T7316] hsr_slave_1: entered promiscuous mode [ 356.674272][ T7316] debugfs: 'hsr0' already exists in 'hsr' [ 356.674411][ T7316] Cannot create hsr debugfs directory [ 356.984273][ T13] bridge_slave_1: left allmulticast mode [ 356.984433][ T13] bridge_slave_1: left promiscuous mode [ 356.984689][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.029463][ T13] bridge_slave_0: left allmulticast mode [ 357.029485][ T13] bridge_slave_0: left promiscuous mode [ 357.029661][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.652079][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 358.839663][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 359.196809][ T13] bond0 (unregistering): Released all slaves [ 360.067811][ T13] hsr_slave_0: left promiscuous mode [ 360.087746][ T13] hsr_slave_1: left promiscuous mode [ 360.088764][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.140099][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.245171][ C1] vkms_vblank_simulate: vblank timer overrun [ 361.396404][ C1] vkms_vblank_simulate: vblank timer overrun [ 362.450989][ C1] vkms_vblank_simulate: vblank timer overrun [ 362.560403][ T13] team0 (unregistering): Port device team_slave_1 removed [ 362.839150][ T13] team0 (unregistering): Port device team_slave_0 removed [ 363.019163][ C1] vkms_vblank_simulate: vblank timer overrun [ 363.314141][ C1] vkms_vblank_simulate: vblank timer overrun [ 363.517698][ C1] vkms_vblank_simulate: vblank timer overrun [ 363.874589][ C1] vkms_vblank_simulate: vblank timer overrun [ 364.087303][ C1] vkms_vblank_simulate: vblank timer overrun [ 364.246458][ C1] vkms_vblank_simulate: vblank timer overrun [ 368.785994][ T7301] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 368.842539][ T7301] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 369.370603][ T7301] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 369.525470][ T7301] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 370.525823][ C1] vkms_vblank_simulate: vblank timer overrun [ 371.453543][ C1] vkms_vblank_simulate: vblank timer overrun [ 372.087432][ C1] vkms_vblank_simulate: vblank timer overrun [ 372.457708][ C1] vkms_vblank_simulate: vblank timer overrun [ 372.586043][ T7638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.388'. [ 372.680906][ T7301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.590687][ T7301] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.636446][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.636619][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.689599][ T1479] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.689768][ T1479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.962759][ T7648] mmap: syz.2.389 (7648) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 374.809601][ T7316] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 374.870673][ T7316] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 375.025274][ T7316] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 375.102077][ T7316] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 378.803834][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.803896][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.472687][ T1479] Bluetooth: hci0: Frame reassembly failed (-84) [ 382.180668][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 382.202536][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 382.203764][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 382.205351][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 382.206146][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 382.581688][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 382.596811][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 382.599938][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 382.604058][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 382.604862][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 383.519529][ T5837] Bluetooth: hci0: command 0x1003 tx timeout [ 383.523512][ T5843] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 384.318710][ T5843] Bluetooth: hci2: command tx timeout [ 384.555836][ C0] vkms_vblank_simulate: vblank timer overrun [ 384.638695][ T5843] Bluetooth: hci5: command tx timeout [ 384.778341][ C0] vkms_vblank_simulate: vblank timer overrun [ 384.907763][ C0] vkms_vblank_simulate: vblank timer overrun [ 384.985198][ C0] vkms_vblank_simulate: vblank timer overrun [ 385.046781][ C0] vkms_vblank_simulate: vblank timer overrun [ 385.079437][ C0] vkms_vblank_simulate: vblank timer overrun [ 386.397671][ T5843] Bluetooth: hci2: command tx timeout [ 386.457630][ C0] vkms_vblank_simulate: vblank timer overrun [ 386.547769][ C0] vkms_vblank_simulate: vblank timer overrun [ 386.783466][ C0] vkms_vblank_simulate: vblank timer overrun [ 386.794198][ T5843] Bluetooth: hci5: command tx timeout [ 386.961689][ C0] vkms_vblank_simulate: vblank timer overrun [ 387.000036][ C0] vkms_vblank_simulate: vblank timer overrun [ 387.198165][ C0] vkms_vblank_simulate: vblank timer overrun [ 387.283740][ C0] vkms_vblank_simulate: vblank timer overrun [ 387.900972][ T5843] Bluetooth: hci3: unexpected event for opcode 0x0003 [ 388.477750][ T5843] Bluetooth: hci2: command tx timeout [ 388.797711][ T5843] Bluetooth: hci5: command tx timeout [ 390.576248][ T5843] Bluetooth: hci2: command tx timeout [ 390.784353][ T13] bridge_slave_1: left allmulticast mode [ 390.784386][ T13] bridge_slave_1: left promiscuous mode [ 390.784665][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.868912][ T13] bridge_slave_0: left allmulticast mode [ 390.868934][ T13] bridge_slave_0: left promiscuous mode [ 390.869120][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.879600][ T5843] Bluetooth: hci5: command tx timeout [ 392.495199][ C0] vkms_vblank_simulate: vblank timer overrun [ 394.499484][ C0] vkms_vblank_simulate: vblank timer overrun [ 394.795948][ C0] vkms_vblank_simulate: vblank timer overrun [ 394.929018][ C0] vkms_vblank_simulate: vblank timer overrun [ 395.808887][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 395.950764][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 395.992612][ T13] bond0 (unregistering): Released all slaves [ 396.039151][ T7692] chnl_net:caif_netlink_parms(): no params data found [ 396.236165][ C0] vkms_vblank_simulate: vblank timer overrun [ 396.338019][ C0] vkms_vblank_simulate: vblank timer overrun [ 396.806989][ T7695] chnl_net:caif_netlink_parms(): no params data found [ 397.377966][ T13] hsr_slave_0: left promiscuous mode [ 397.397930][ T13] hsr_slave_1: left promiscuous mode [ 397.401120][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 397.440827][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.170651][ T5843] Bluetooth: hci1: unexpected event for opcode 0x0003 [ 401.635221][ C0] vkms_vblank_simulate: vblank timer overrun [ 402.534986][ C0] vkms_vblank_simulate: vblank timer overrun [ 404.057841][ C0] vkms_vblank_simulate: vblank timer overrun [ 404.145466][ C0] vkms_vblank_simulate: vblank timer overrun [ 404.258203][ C0] vkms_vblank_simulate: vblank timer overrun [ 404.507141][ C0] vkms_vblank_simulate: vblank timer overrun [ 404.728400][ T13] team0 (unregistering): Port device team_slave_1 removed [ 405.578355][ T13] team0 (unregistering): Port device team_slave_0 removed [ 405.844021][ C0] vkms_vblank_simulate: vblank timer overrun [ 405.942814][ C0] vkms_vblank_simulate: vblank timer overrun [ 405.980631][ C0] vkms_vblank_simulate: vblank timer overrun [ 409.136429][ T7854] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 409.136439][ T7854] IPv6: NLM_F_CREATE should be set when creating new route [ 409.136486][ T7854] IPv6: NLM_F_CREATE should be set when creating new route [ 409.136501][ T7854] IPv6: NLM_F_CREATE should be set when creating new route [ 409.999560][ C1] vkms_vblank_simulate: vblank timer overrun [ 410.355547][ C1] vkms_vblank_simulate: vblank timer overrun [ 410.818764][ C1] vkms_vblank_simulate: vblank timer overrun [ 410.897681][ C1] vkms_vblank_simulate: vblank timer overrun [ 411.109289][ C1] vkms_vblank_simulate: vblank timer overrun [ 411.257309][ C1] vkms_vblank_simulate: vblank timer overrun [ 411.435249][ C1] vkms_vblank_simulate: vblank timer overrun [ 411.716469][ C1] vkms_vblank_simulate: vblank timer overrun [ 411.978700][ C1] vkms_vblank_simulate: vblank timer overrun [ 412.037556][ C1] vkms_vblank_simulate: vblank timer overrun [ 412.745307][ C1] vkms_vblank_simulate: vblank timer overrun [ 413.033974][ C1] vkms_vblank_simulate: vblank timer overrun [ 413.224466][ C1] vkms_vblank_simulate: vblank timer overrun [ 413.326722][ C1] vkms_vblank_simulate: vblank timer overrun [ 417.121419][ T7692] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.121561][ T7692] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.121770][ T7692] bridge_slave_0: entered allmulticast mode [ 417.124814][ T7692] bridge_slave_0: entered promiscuous mode [ 417.321356][ C1] vkms_vblank_simulate: vblank timer overrun [ 417.409271][ T7904] netlink: 60 bytes leftover after parsing attributes in process `syz.4.448'. [ 417.581726][ C1] vkms_vblank_simulate: vblank timer overrun [ 417.770393][ T7912] netlink: 32 bytes leftover after parsing attributes in process `syz.3.449'. [ 417.780785][ T7912] fuse: Unknown parameter '184467440737095516150xffffffffffffffff' [ 417.809204][ T7912] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 417.861111][ C1] vkms_vblank_simulate: vblank timer overrun [ 418.350603][ C1] vkms_vblank_simulate: vblank timer overrun [ 418.503541][ T7692] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.503738][ T7692] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.503944][ T7692] bridge_slave_1: entered allmulticast mode [ 418.506679][ T7692] bridge_slave_1: entered promiscuous mode [ 419.113476][ T7695] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.113624][ T7695] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.113811][ T7695] bridge_slave_0: entered allmulticast mode [ 419.211037][ T7695] bridge_slave_0: entered promiscuous mode [ 419.694292][ T7695] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.694510][ T7695] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.694752][ T7695] bridge_slave_1: entered allmulticast mode [ 419.761034][ T7695] bridge_slave_1: entered promiscuous mode [ 419.781005][ T7692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.023910][ T7692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.395888][ T7695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.418273][ T5916] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 420.544316][ T7695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.571174][ T7692] team0: Port device team_slave_0 added [ 420.603638][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.603672][ T5916] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 420.603684][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.659907][ T5916] usb 4-1: config 0 descriptor?? [ 420.831274][ T7692] team0: Port device team_slave_1 added [ 420.878459][ T5916] usbhid 4-1:0.0: can't add hid device: -71 [ 420.878586][ T5916] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 420.941450][ T5916] usb 4-1: USB disconnect, device number 13 [ 421.427870][ T5916] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 421.435599][ T7695] team0: Port device team_slave_0 added [ 421.577730][ T5916] usb 4-1: Using ep0 maxpacket: 32 [ 421.579379][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.579407][ T5916] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 421.579419][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.585876][ T5916] usb 4-1: config 0 descriptor?? [ 421.678546][ T5916] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 421.710878][ T7695] team0: Port device team_slave_1 added [ 421.737390][ T5916] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 421.737674][ T7692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.737686][ T7692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.737706][ T7692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.922546][ T7692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.922563][ T7692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.922588][ T7692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.266639][ T5905] usb 4-1: USB disconnect, device number 14 [ 422.286451][ T7695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.286467][ T7695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.286491][ T7695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.293061][ T5905] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 422.313639][ T7695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.313655][ T7695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.313678][ T7695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.055114][ T5843] Bluetooth: hci4: connection err: -111 [ 423.675073][ T7692] hsr_slave_0: entered promiscuous mode [ 423.709790][ T7692] hsr_slave_1: entered promiscuous mode [ 423.985920][ T7960] netlink: 24 bytes leftover after parsing attributes in process `syz.3.458'. [ 424.297735][ T5948] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 424.475138][ T5948] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 424.475167][ T5948] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 4 [ 424.492736][ T5948] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 424.492766][ T5948] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.492785][ T5948] usb 4-1: Product: syz [ 424.492799][ T5948] usb 4-1: Manufacturer: syz [ 424.492812][ T5948] usb 4-1: SerialNumber: syz [ 424.539722][ T5948] usb 4-1: config 0 descriptor?? [ 425.664225][ T7960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.669559][ T7960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.110335][ T7695] hsr_slave_0: entered promiscuous mode [ 426.111717][ T7695] hsr_slave_1: entered promiscuous mode [ 426.112812][ T7695] debugfs: 'hsr0' already exists in 'hsr' [ 426.112835][ T7695] Cannot create hsr debugfs directory [ 430.187710][ T5944] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 430.341246][ T5944] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 430.341280][ T5944] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 430.341318][ T5944] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 430.341340][ T5944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.462233][ T7991] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 431.198534][ T5944] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 431.228372][ T5948] usb 4-1: USB disconnect, device number 15 [ 431.233055][ T7990] netlink: 'syz.2.464': attribute type 27 has an invalid length. [ 431.233074][ T7990] netlink: 'syz.2.464': attribute type 1 has an invalid length. [ 431.234776][ T7990] bridge0: port 1(bridge_slave_0) entered learning state [ 431.723800][ C1] vkms_vblank_simulate: vblank timer overrun [ 431.909974][ C1] vkms_vblank_simulate: vblank timer overrun [ 432.491479][ C1] vkms_vblank_simulate: vblank timer overrun [ 433.351627][ T5944] usb 3-1: USB disconnect, device number 7 [ 433.760209][ T13] bridge_slave_1: left allmulticast mode [ 433.760239][ T13] bridge_slave_1: left promiscuous mode [ 433.760623][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.859892][ T13] bridge_slave_0: left allmulticast mode [ 433.863242][ T13] bridge_slave_0: left promiscuous mode [ 433.864327][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.158394][ C1] vkms_vblank_simulate: vblank timer overrun [ 436.078277][ T5843] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 440.245592][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.245668][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 455.109398][ T991] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 466.112529][ T991] usb 4-1: device descriptor read/64, error -110 [ 473.112624][ T991] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 479.112561][ T991] usb 4-1: device descriptor read/64, error -32 [ 507.130067][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.130148][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 561.197519][ T5837] Bluetooth: hci5: command 0x0406 tx timeout [ 563.123511][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.123611][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 592.237536][ T59] Bluetooth: hci2: command tx timeout [ 608.557901][ T38] INFO: task kworker/u8:4:67 blocked for more than 156 seconds. [ 608.557925][ T38] Not tainted syzkaller #0 [ 608.557935][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 608.557944][ T38] task:kworker/u8:4 state:D stack:20584 pid:67 tgid:67 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 608.557990][ T38] Workqueue: events_unbound linkwatch_event [ 608.558024][ T38] Call Trace: [ 608.558030][ T38] [ 608.558043][ T38] __schedule+0x16f3/0x4c20 [ 608.558096][ T38] ? __pfx___schedule+0x10/0x10 [ 608.558139][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 608.558167][ T38] rt_mutex_schedule+0x77/0xf0 [ 608.558186][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 608.558208][ T38] ? task_blocks_on_rt_mutex+0xf04/0x1380 [ 608.558247][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 608.558271][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 608.558293][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 608.558312][ T38] ? linkwatch_event+0xe/0x60 [ 608.558350][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 608.558379][ T38] ? linkwatch_event+0xe/0x60 [ 608.558395][ T38] mutex_lock_nested+0x16a/0x1d0 [ 608.558417][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 608.558446][ T38] linkwatch_event+0xe/0x60 [ 608.558464][ T38] process_scheduled_works+0xade/0x17b0 [ 608.558524][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 608.558564][ T38] worker_thread+0x8a0/0xda0 [ 608.558591][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 608.558625][ T38] ? __kthread_parkme+0x7b/0x200 [ 608.558659][ T38] kthread+0x70e/0x8a0 [ 608.558687][ T38] ? __pfx_worker_thread+0x10/0x10 [ 608.558709][ T38] ? __pfx_kthread+0x10/0x10 [ 608.558739][ T38] ? __pfx_kthread+0x10/0x10 [ 608.558765][ T38] ret_from_fork+0x439/0x7d0 [ 608.558792][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 608.558915][ T38] ? __switch_to_asm+0x39/0x70 [ 608.558933][ T38] ? __switch_to_asm+0x33/0x70 [ 608.558948][ T38] ? __pfx_kthread+0x10/0x10 [ 608.558975][ T38] ret_from_fork_asm+0x1a/0x30 [ 608.559009][ T38] [ 608.559106][ T38] INFO: task dhcpcd:5500 blocked for more than 156 seconds. [ 608.559118][ T38] Not tainted syzkaller #0 [ 608.559127][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 608.559135][ T38] task:dhcpcd state:D stack:21320 pid:5500 tgid:5500 ppid:5499 task_flags:0x400140 flags:0x00004002 [ 608.559175][ T38] Call Trace: [ 608.559181][ T38] [ 608.559193][ T38] __schedule+0x16f3/0x4c20 [ 608.559244][ T38] ? __pfx___schedule+0x10/0x10 [ 608.559287][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 608.559315][ T38] rt_mutex_schedule+0x77/0xf0 [ 608.559332][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 608.559353][ T38] ? task_blocks_on_rt_mutex+0x78c/0x1380 [ 608.559392][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 608.559416][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 608.559445][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 608.559477][ T38] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 608.559509][ T38] ? __kmalloc_node_track_caller_noprof+0x213/0x450 [ 608.559541][ T38] ? rtnl_dumpit+0x92/0x200 [ 608.559562][ T38] mutex_lock_nested+0x16a/0x1d0 [ 608.559582][ T38] ? rtnl_dumpit+0x92/0x200 [ 608.559605][ T38] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 608.559629][ T38] rtnl_dumpit+0x92/0x200 [ 608.559657][ T38] netlink_dump+0x6e1/0xe90 [ 608.559694][ T38] ? __pfx_netlink_dump+0x10/0x10 [ 608.559734][ T38] ? netlink_recvmsg+0x5b2/0xa30 [ 608.559756][ T38] ? kmem_cache_free+0x195/0x510 [ 608.559785][ T38] netlink_recvmsg+0x676/0xa30 [ 608.559933][ T38] ? skb_pull+0xc1/0x1d0 [ 608.559960][ T38] ? __pfx_netlink_recvmsg+0x10/0x10 [ 608.559983][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 608.560008][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 608.560035][ T38] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 608.560054][ T38] ? security_socket_recvmsg+0x7e/0x2e0 [ 608.560074][ T38] ? __pfx_netlink_recvmsg+0x10/0x10 [ 608.560098][ T38] sock_recvmsg+0x229/0x270 [ 608.560127][ T38] ____sys_recvmsg+0x1ce/0x470 [ 608.560156][ T38] ? __pfx_____sys_recvmsg+0x10/0x10 [ 608.560192][ T38] ? import_iovec+0x74/0xa0 [ 608.560218][ T38] ___sys_recvmsg+0x1b5/0x510 [ 608.560243][ T38] ? __pfx____sys_recvmsg+0x10/0x10 [ 608.560303][ T38] __x64_sys_recvmsg+0x19e/0x260 [ 608.560326][ T38] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 608.560357][ T38] ? rcu_is_watching+0x15/0xb0 [ 608.560388][ T38] ? do_syscall_64+0xbe/0x3b0 [ 608.560411][ T38] do_syscall_64+0xfa/0x3b0 [ 608.560433][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 608.560458][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.560477][ T38] ? clear_bhb_loop+0x60/0xb0 [ 608.560499][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.560525][ T38] RIP: 0033:0x7f7d1db1a407 [ 608.560541][ T38] RSP: 002b:00007ffe4152cb20 EFLAGS: 00000202 ORIG_RAX: 000000000000002f [ 608.560559][ T38] RAX: ffffffffffffffda RBX: 00007f7d1da90740 RCX: 00007f7d1db1a407 [ 608.560572][ T38] RDX: 0000000000000000 RSI: 00007ffe4152cbb0 RDI: 000000000000001a [ 608.560584][ T38] RBP: 00007ffe4152cb94 R08: 0000000000000000 R09: 0000000000000000 [ 608.560595][ T38] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffe4154d4a0 [ 608.560607][ T38] R13: 00007ffe4152cba0 R14: 00007ffe4152cc90 R15: 00007ffe4153d270 [ 608.560638][ T38] [ 608.560671][ T38] INFO: task kworker/0:7:6124 blocked for more than 156 seconds. [ 608.560684][ T38] Not tainted syzkaller #0 [ 608.560693][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 608.560701][ T38] task:kworker/0:7 state:D stack:26152 pid:6124 tgid:6124 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 608.560745][ T38] Workqueue: events switchdev_deferred_process_work [ 608.560764][ T38] Call Trace: [ 608.560770][ T38] [ 608.560782][ T38] __schedule+0x16f3/0x4c20 [ 608.561025][ T38] ? __pfx___schedule+0x10/0x10 [ 608.561070][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 608.561098][ T38] rt_mutex_schedule+0x77/0xf0 [ 608.561115][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 608.561136][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 608.561175][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 608.561198][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 608.561221][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 608.561253][ T38] ? switchdev_deferred_process_work+0xe/0x20 [ 608.561279][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 608.561306][ T38] ? switchdev_deferred_process_work+0xe/0x20 [ 608.561322][ T38] mutex_lock_nested+0x16a/0x1d0 [ 608.561341][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 608.561365][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 608.561389][ T38] switchdev_deferred_process_work+0xe/0x20 [ 608.561407][ T38] process_scheduled_works+0xade/0x17b0 [ 608.561466][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 608.561506][ T38] worker_thread+0x8a0/0xda0 [ 608.561532][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 608.561566][ T38] ? __kthread_parkme+0x7b/0x200 [ 608.561600][ T38] kthread+0x70e/0x8a0 [ 608.561628][ T38] ? __pfx_worker_thread+0x10/0x10 [ 608.561650][ T38] ? __pfx_kthread+0x10/0x10 [ 608.561681][ T38] ? __pfx_kthread+0x10/0x10 [ 608.561707][ T38] ret_from_fork+0x439/0x7d0 [ 608.561733][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 608.561762][ T38] ? __switch_to_asm+0x39/0x70 [ 608.561778][ T38] ? __switch_to_asm+0x33/0x70 [ 608.561794][ T38] ? __pfx_kthread+0x10/0x10 [ 609.503215][ T38] ret_from_fork_asm+0x1a/0x30 [ 609.503259][ T38] [ 609.503281][ T38] INFO: task syz-executor:7692 blocked for more than 157 seconds. [ 609.503294][ T38] Not tainted syzkaller #0 [ 609.503302][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 609.503310][ T38] task:syz-executor state:D stack:21976 pid:7692 tgid:7692 ppid:1 task_flags:0x480140 flags:0x00004004 [ 609.503363][ T38] Call Trace: [ 609.503369][ T38] [ 609.503379][ T38] __schedule+0x16f3/0x4c20 [ 609.503422][ T38] ? __pfx___schedule+0x10/0x10 [ 609.503454][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 609.503476][ T38] rt_mutex_schedule+0x77/0xf0 [ 609.503490][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 609.503506][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 609.503538][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 609.503556][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 609.503575][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 609.503612][ T38] ? rtnl_net_dev_lock+0x257/0x2f0 [ 609.503631][ T38] mutex_lock_nested+0x16a/0x1d0 [ 609.503649][ T38] ? rtnl_net_dev_lock+0x36/0x2f0 [ 609.503671][ T38] ? rtnl_net_dev_lock+0x36/0x2f0 [ 609.503691][ T38] rtnl_net_dev_lock+0x257/0x2f0 [ 609.503715][ T38] unregister_netdevice_notifier_dev_net+0x8f/0x420 [ 609.503736][ T38] ? mntput_no_expire+0x2eb/0x9d0 [ 609.503756][ T38] ? __pfx_unregister_netdevice_notifier_dev_net+0x10/0x10 [ 609.503779][ T38] ? __pfx_mntput_no_expire+0x10/0x10 [ 609.503794][ T38] ? rt_spin_unlock+0x65/0x80 [ 609.503819][ T38] ? simple_release_fs+0x9c/0xd0 [ 609.503842][ T38] nsim_destroy+0xd9/0x670 [ 609.503857][ T38] ? __pfx_mntput_no_expire+0x10/0x10 [ 609.503879][ T38] __nsim_dev_port_del+0x14d/0x1b0 [ 609.503903][ T38] nsim_dev_reload_destroy+0x288/0x490 [ 609.503925][ T38] ? nsim_drv_remove+0x50/0x160 [ 609.503947][ T38] nsim_drv_remove+0x58/0x160 [ 609.503962][ T38] ? __pfx_nsim_bus_remove+0x10/0x10 [ 609.503978][ T38] device_release_driver_internal+0x46f/0x800 [ 609.504000][ T38] bus_remove_device+0x355/0x420 [ 609.504022][ T38] device_del+0x515/0x8e0 [ 609.504039][ T38] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 609.504062][ T38] ? __pfx_device_del+0x10/0x10 [ 609.504085][ T38] device_unregister+0x20/0xc0 [ 609.504101][ T38] del_device_store+0x2aa/0x360 [ 609.504121][ T38] ? __pfx_del_device_store+0x10/0x10 [ 609.504136][ T38] ? sysfs_file_kobj+0x1e4/0x230 [ 609.504161][ T38] ? sysfs_kf_write+0x166/0x260 [ 609.504184][ T38] ? __pfx_sysfs_kf_write+0x10/0x10 [ 609.504199][ T38] kernfs_fop_write_iter+0x376/0x4f0 [ 609.504221][ T38] vfs_write+0x5d5/0xb40 [ 609.504243][ T38] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 609.504262][ T38] ? __pfx_vfs_write+0x10/0x10 [ 609.504282][ T38] ? do_sys_openat2+0x154/0x1c0 [ 609.504296][ T38] ? kmem_cache_free+0x195/0x510 [ 609.504329][ T38] ksys_write+0x14b/0x260 [ 609.504358][ T38] ? __pfx_ksys_write+0x10/0x10 [ 609.504374][ T38] ? rcu_is_watching+0x15/0xb0 [ 609.504401][ T38] ? do_syscall_64+0xbe/0x3b0 [ 609.504420][ T38] do_syscall_64+0xfa/0x3b0 [ 609.504436][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.504451][ T38] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 609.504466][ T38] ? clear_bhb_loop+0x60/0xb0 [ 609.504487][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.504502][ T38] RIP: 0033:0x7fdb39f1d65f [ 609.504516][ T38] RSP: 002b:00007ffd68479f90 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 609.504534][ T38] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fdb39f1d65f [ 609.504544][ T38] RDX: 0000000000000001 RSI: 00007ffd68479fe0 RDI: 0000000000000005 [ 609.504554][ T38] RBP: 00007fdb39fa30c1 R08: 0000000000000000 R09: 00007ffd68479de7 [ 609.504564][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 609.504572][ T38] R13: 00007ffd68479fe0 R14: 00007fdb3ac94620 R15: 0000000000000003 [ 609.504597][ T38] [ 609.504605][ T38] INFO: task syz-executor:7695 blocked for more than 157 seconds. [ 609.504617][ T38] Not tainted syzkaller #0 [ 609.504626][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 609.504633][ T38] task:syz-executor state:D stack:21816 pid:7695 tgid:7695 ppid:7678 task_flags:0x400140 flags:0x00004000 [ 609.504668][ T38] Call Trace: [ 609.504672][ T38] [ 609.504680][ T38] __schedule+0x16f3/0x4c20 [ 609.504715][ T38] ? __kernel_text_address+0xd/0x40 [ 609.504733][ T38] ? __pfx___schedule+0x10/0x10 [ 609.504765][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 609.504787][ T38] rt_mutex_schedule+0x77/0xf0 [ 609.504802][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 609.504819][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 609.504852][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 609.504872][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 609.504889][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 609.504903][ T38] ? __lock_acquire+0xab9/0xd20 [ 609.504929][ T38] ? rtnl_newlink+0x8db/0x1c70 [ 609.504947][ T38] ? safesetid_security_capable+0xa9/0x1a0 [ 609.504966][ T38] ? bpf_lsm_capable+0x9/0x20 [ 609.504987][ T38] ? security_capable+0x7e/0x2e0 [ 609.505012][ T38] ? rtnl_newlink+0x8db/0x1c70 [ 609.505028][ T38] mutex_lock_nested+0x16a/0x1d0 [ 609.505049][ T38] rtnl_newlink+0x8db/0x1c70 [ 609.505075][ T38] ? __lock_acquire+0xab9/0xd20 [ 609.505096][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 609.505114][ T38] ? rcu_qs+0xc4/0x170 [ 609.505138][ T38] ? __switch_to+0xdae/0x1670 [ 609.505166][ T38] ? __lock_acquire+0xab9/0xd20 [ 609.505198][ T38] ? __lock_acquire+0xab9/0xd20 [ 609.505234][ T38] ? is_bpf_text_address+0x26/0x2b0 [ 609.505261][ T38] ? is_bpf_text_address+0x292/0x2b0 [ 609.505279][ T38] ? is_bpf_text_address+0x26/0x2b0 [ 609.505306][ T38] ? __lock_acquire+0xab9/0xd20 [ 609.505356][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 609.505378][ T38] rtnetlink_rcv_msg+0x7cc/0xb70 [ 609.505400][ T38] ? __lock_acquire+0xab9/0xd20 [ 609.505424][ T38] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 609.505447][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 609.505492][ T38] netlink_rcv_skb+0x208/0x470 [ 609.505512][ T38] ? __lock_acquire+0xab9/0xd20 [ 609.505531][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 609.505554][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 609.519556][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 609.519602][ T38] netlink_unicast+0x846/0xa10 [ 609.519634][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 609.519658][ T38] ? netlink_sendmsg+0x642/0xb30 [ 609.519677][ T38] ? skb_put+0x11b/0x210 [ 609.519704][ T38] netlink_sendmsg+0x805/0xb30 [ 609.519737][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 609.519767][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 609.519785][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 609.519809][ T38] __sock_sendmsg+0x21c/0x270 [ 609.519835][ T38] __sys_sendto+0x3c7/0x520 [ 609.519863][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 609.519900][ T38] ? blkcg_maybe_throttle_current+0x1a8/0xbc0 [ 609.519936][ T38] ? rcu_is_watching+0x15/0xb0 [ 609.519968][ T38] __x64_sys_sendto+0xde/0x100 [ 609.519998][ T38] do_syscall_64+0xfa/0x3b0 [ 609.520018][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.520035][ T38] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 609.520052][ T38] ? clear_bhb_loop+0x60/0xb0 [ 609.520074][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.520092][ T38] RIP: 0033:0x7f8baf9b0a3c [ 609.520108][ T38] RSP: 002b:00007ffc1890e010 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 609.520127][ T38] RAX: ffffffffffffffda RBX: 00007f8bb0724620 RCX: 00007f8baf9b0a3c [ 609.520140][ T38] RDX: 0000000000000050 RSI: 00007f8bb0724670 RDI: 0000000000000003 [ 609.520151][ T38] RBP: 0000000000000000 R08: 00007ffc1890e064 R09: 000000000000000c [ 609.520163][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 609.520174][ T38] R13: 0000000000000000 R14: 00007f8bb0724670 R15: 0000000000000000 [ 609.520203][ T38] [ 609.520233][ T38] [ 609.520233][ T38] Showing all locks held in the system: [ 609.520240][ T38] 2 locks held by kthreadd/2: [ 609.520250][ T38] #0: ffffffff8dac55a8 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 609.520294][ T38] #1: ffff88813fffc5d8 (&zone->lock){+.+.}-{3:3}, at: free_one_page+0x41/0x270 [ 609.520346][ T38] 6 locks held by kworker/0:0/9: [ 609.520355][ T38] #0: ffff888030877938 ((wq_completion)wg-kex-wg1#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 609.520403][ T38] #1: ffffc900000e7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 609.520458][ T38] #2: ffff8880317b55f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x115/0x970 [ 609.520504][ T38] #3: ffff88803d4183f8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x126/0x970 [ 609.520548][ T38] #4: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 609.520609][ T38] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 609.520652][ T38] 4 locks held by kworker/0:1/10: [ 609.520663][ T38] #0: ffff888030876d38 ((wq_completion)wg-kex-wg1#10){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 609.520710][ T38] #1: ffffc900000f7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 609.520762][ T38] #2: ffff8880317b15f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x150/0x900 [ 609.520806][ T38] #3: ffff88803d419928 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x4de/0x900 [ 609.520849][ T38] 2 locks held by kworker/u8:0/12: [ 609.520859][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 609.520902][ T38] #1: ffffc90000117bc0 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 609.520945][ T38] 6 locks held by kworker/u8:1/13: [ 609.520955][ T38] #0: ffff88801a6f4138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 609.520996][ T38] #1: ffffc90000127bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 609.521037][ T38] #2: ffffffff8ecc6740 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 609.521084][ T38] #3: ffffffff8ecd3638 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x990 [ 609.521130][ T38] #4: ffffffff8dac55a8 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 609.521173][ T38] #5: ffff88813fffc5d8 (&zone->lock){+.+.}-{3:3}, at: free_one_page+0x41/0x270 [ 609.521221][ T38] 2 locks held by ksoftirqd/0/15: [ 609.521231][ T38] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 609.521275][ T38] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 609.521321][ T38] 7 locks held by ktimers/0/16: [ 609.521331][ T38] 2 locks held by rcuc/0/20: [ 609.521347][ T38] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 609.521390][ T38] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 609.521434][ T38] 1 lock held by kworker/1:0/31: [ 609.521445][ T38] 1 lock held by khungtaskd/38: [ 609.521455][ T38] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 609.521497][ T38] 4 locks held by kworker/u8:2/43: [ 609.521507][ T38] #0: ffff88803227d938 ((wq_completion)wg-kex-wg1#9){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 609.521556][ T38] #1: ffffc90000b47bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 609.521601][ T38] #2: ffff8880317b15f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 609.521645][ T38] #3: ffff88803d419928 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 609.521688][ T38] 5 locks held by kworker/1:1/44: [ 609.521698][ T38] #0: ffff888059c14538 ((wq_completion)wg-kex-wg2#10){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 609.521747][ T38] #1: ffffc90000b57bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 609.521803][ T38] #2: ffff88803d450e90 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x38/0xbe0 [ 609.521844][ T38] #3: ffffffff8dac55a8 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 609.521886][ T38] #4: ffff88813fffc5d8 (&zone->lock){+.+.}-{3:3}, at: free_one_page+0x41/0x270 [ 609.521933][ T38] 3 locks held by kworker/u8:3/57: [ 609.521942][ T38] #0: ffff888030276938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 609.521987][ T38] #1: ffffc9000123fbc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 609.522029][ T38] #2: ffffffff8ecd3638 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 609.522073][ T38] 4 locks held by kworker/u9:0/59: [ 609.522083][ T38] #0: ffff88814d858938 ((wq_completion)krxrpcd){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 609.522126][ T38] #1: ffffc9000125fbc0 ((work_completion)(&rxnet->peer_keepalive_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 609.522170][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 609.522211][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 609.522256][ T38] 3 locks held by kworker/u8:4/67: [ 609.522266][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 609.522310][ T38] #1: ffffc9000152fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 609.522359][ T38] #2: ffffffff8ecd3638 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 609.522401][ T38] 5 locks held by kswapd0/91: [ 609.522414][ T38] 3 locks held by kworker/0:1H/131: [ 609.522424][ T38] #0: ffff888019898d38 ((wq_completion)events_highpri){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 609.522466][ T38] #1: ffffc900039e7bc0 ((work_completion)(&(&krcp->page_cache_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 609.522509][ T38] #2: ffff88813fffc5d8 (&zone->lock){+.+.}-{3:3}, at: get_page_from_freelist+0x992/0x21b0 [ 609.522551][ T38] 6 locks held by kworker/u8:5/161: [ 609.522562][ T38] 5 locks held by kworker/u8:6/784: [ 609.522572][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 609.522617][ T38] #1: ffffc900040b7bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 609.522662][ T38] #2: ffff88805d030898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 609.522708][ T38] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 609.522749][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 609.522797][ T38] 6 locks held by kworker/0:2/991: [ 609.522811][ T38] 4 locks held by kworker/u8:7/1265: [ 609.522821][ T38] #0: ffff88803b127938 ((wq_completion)wg-kex-wg0#9){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 609.522870][ T38] #1: ffffc90004fcfbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 609.522915][ T38] #2: ffff88802ff595f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 609.522957][ T38] #3: ffff88805b0f7880 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 609.522999][ T38] 5 locks held by kworker/u8:8/1374: [ 609.523009][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 609.523054][ T38] #1: ffffc900051afbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 609.523098][ T38] #2: ffff88805d4e0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 609.523145][ T38] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 609.523190][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 609.523235][ T38] 4 locks held by kworker/u8:9/1479: [ 609.523245][ T38] #0: ffff888059f62138 ((wq_completion)wg-kex-wg2#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 609.523292][ T38] #1: ffffc9000554fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 609.523336][ T38] #2: ffff888059fd95f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 609.523416][ T38] #3: ffff88805b0f6350 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 609.523473][ T38] 4 locks held by kworker/R-bat_e/3450: [ 609.523484][ T38] #0: ffff88814d890938 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 609.523529][ T38] #1: ffffc9000d457ba0 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 609.523574][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 609.523616][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 609.523660][ T38] 3 locks held by kworker/u8:10/3560: [ 609.523671][ T38] 5 locks held by kworker/u8:11/4660: [ 609.523681][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 609.523727][ T38] #1: ffffc9000f7d7bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 609.523771][ T38] #2: ffff88805d270898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 609.523816][ T38] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 609.523859][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 609.523905][ T38] 2 locks held by klogd/5194: [ 609.523914][ T38] #0: ffffffff8dac55a8 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 609.523957][ T38] #1: ffff88813fffc5d8 (&zone->lock){+.+.}-{3:3}, at: free_one_page+0x41/0x270 [ 609.524005][ T38] 2 locks held by dhcpcd/5500: [ 609.524015][ T38] #0: ffff888035388910 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: netlink_dump+0xbd/0xe90 [ 609.524061][ T38] #1: ffffffff8ecd3638 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 609.524103][ T38] 3 locks held by crond/5578: [ 609.524111][ T38] #0: ffffffff8e0b09f0 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x1e3/0x4b0 [ 609.524145][ T38] #1: ffffffff8dac55a8 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 609.524177][ T38] #2: ffff88813fffc5d8 (&zone->lock){+.+.}-{3:3}, at: free_one_page+0x41/0x270 [ 609.524220][ T38] 2 locks held by getty/5596: [ 609.524230][ T38] #0: ffff88823bf4a8a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 609.524278][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 609.524323][ T38] 2 locks held by syz-executor/5823: [ 609.524333][ T38] #0: ffffffff8dac55a8 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 609.524383][ T38] #1: ffff88813fffc5d8 (&zone->lock){+.+.}-{3:3}, at: free_one_page+0x41/0x270 [ 609.524429][ T38] 4 locks held by kworker/1:3/5824: [ 609.524440][ T38] 4 locks held by kworker/u9:2/5837: [ 609.524450][ T38] #0: ffff88803295d138 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 609.524496][ T38] #1: ffffc90004b0fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 609.524543][ T38] #2: ffff88805c1f0e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 609.524587][ T38] #3: ffff88805c1f00a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 609.524636][ T38] 6 locks held by kworker/u9:4/5843: [ 609.524646][ T38] #0: ffff88805cd05938 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 609.524691][ T38] #1: ffffc90004b6fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 609.524735][ T38] #2: ffff88805c3d8e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 609.524778][ T38] #3: ffff88805c3d80a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 609.524822][ T38] #4: ffffffff8dac55a8 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 609.524863][ T38] #5: ffff88801dace858 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0x19e/0x390 [ 609.524905][ T38] 4 locks held by kworker/R-wg-cr/5869: [ 609.524915][ T38] #0: ffff8880333ec138 ((wq_completion)wg-crypt-wg0#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 609.524963][ T38] #1: ffffc90004c3fba0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 609.525009][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 609.525054][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 609.525098][ T38] 4 locks held by kworker/R-wg-cr/5875: [ 609.525109][ T38] #0: ffff888059d6e538 ((wq_completion)wg-crypt-wg0#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 609.525156][ T38] #1: ffffc90004cafba0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 609.525205][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 609.525236][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 609.525269][ T38] 4 locks held by kworker/R-wg-cr/5878: [ 609.525277][ T38] #0: ffff888030877138 ((wq_completion)wg-crypt-wg1#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 609.525312][ T38] #1: ffffc90004cdfba0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 609.525361][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 609.525395][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 609.525428][ T38] 4 locks held by kworker/R-wg-cr/5879: [ 609.525436][ T38] #0: ffff888030877d38 ((wq_completion)wg-crypt-wg1#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 609.525477][ T38] #1: ffffc90004cefba0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 609.525523][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 609.533832][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 609.533896][ T38] 2 locks held by napi/wg1-0/5895: [ 609.533907][ T38] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 609.533947][ T38] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 609.533988][ T38] 5 locks held by kworker/1:4/5905: [ 609.533998][ T38] #0: ffff8880343d9d38 ((wq_completion)wg-kex-wg0#8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 609.534046][ T38] #1: ffffc90004f3fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 609.534102][ T38] #2: ffff88805b1238f0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x38/0xbe0 [ 609.534147][ T38] #3: ffffffff8dac55a8 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 609.534189][ T38] #4: ffff88813fffc5d8 (&zone->lock){+.+.}-{3:3}, at: free_one_page+0x41/0x270 [ 609.534237][ T38] 2 locks held by napi/wg1-0/5909: [ 609.534247][ T38] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 609.534290][ T38] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 609.534335][ T38] 5 locks held by kworker/0:3/5913: [ 609.534352][ T38] #0: ffff8880343d9d38 ((wq_completion)wg-kex-wg0#8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 609.534402][ T38] #1: ffffc90004fffbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 609.534460][ T38] #2: ffff88805b122e58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x38/0xbe0 [ 609.534504][ T38] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 609.534548][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 609.534594][ T38] 5 locks held by kworker/1:6/5944: [ 609.534605][ T38] 5 locks held by kworker/0:5/5948: [ 609.534615][ T38] #0: ffff888059c14538 ((wq_completion)wg-kex-wg2#10){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 609.534664][ T38] #1: ffffc9000515fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 609.534722][ T38] #2: ffff88803d451928 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x38/0xbe0 [ 609.534766][ T38] #3: ffffffff8dac55a8 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 609.534808][ T38] #4: ffff88813fffc5d8 (&zone->lock){+.+.}-{3:3}, at: free_one_page+0x41/0x270 [ 609.534853][ T38] 4 locks held by kworker/u8:12/5971: [ 609.534864][ T38] #0: ffff88802871c938 ((wq_completion)wg-kex-wg0#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 609.534912][ T38] #1: ffffc9000519fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 609.534957][ T38] #2: ffff888059d915f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 609.535000][ T38] #3: ffff88805b0f4e20 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 609.535042][ T38] 5 locks held by kworker/0:6/6013: [ 609.535052][ T38] #0: ffff888059c08138 ((wq_completion)wg-kex-wg0#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 609.535099][ T38] #1: ffffc9000522fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 609.535156][ T38] #2: ffff88805b0f4e20 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x38/0xbe0 [ 609.535198][ T38] #3: ffffffff8dac55a8 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 609.535240][ T38] #4: ffff88801dace858 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0x19e/0x390 [ 609.535280][ T38] 4 locks held by kworker/1:7/6018: [ 609.535291][ T38] 5 locks held by kworker/u8:13/6085: [ 609.535301][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 609.535353][ T38] #1: ffffc9000538fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 609.535398][ T38] #2: ffff88805d9d0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 609.535443][ T38] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 609.535485][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 609.535530][ T38] 3 locks held by kworker/0:7/6124: [ 609.535540][ T38] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 609.535584][ T38] #1: ffffc900055afbc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 609.535629][ T38] #2: ffffffff8ecd3638 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 609.535672][ T38] 2 locks held by kworker/u8:14/6125: [ 609.535682][ T38] #0: ffffffff8dac55a8 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 609.535724][ T38] #1: ffff88813fffc5d8 (&zone->lock){+.+.}-{3:3}, at: free_one_page+0x41/0x270 [ 609.535771][ T38] 4 locks held by kworker/u8:15/6127: [ 609.535782][ T38] #0: ffff888059f60138 ((wq_completion)wg-kex-wg2#9){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 609.535830][ T38] #1: ffffc9000544fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 609.535875][ T38] #2: ffff888059d955f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 609.535917][ T38] #3: ffff88803d451928 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 609.535963][ T38] 4 locks held by kworker/u8:16/6128: [ 609.535972][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 609.536016][ T38] #1: ffffc9000556fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 609.536061][ T38] #2: ffff88805cd40898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 609.536106][ T38] #3: ffff88813fffc5d8 (&zone->lock){+.+.}-{3:3}, at: get_page_from_freelist+0x992/0x21b0 [ 609.536151][ T38] 5 locks held by kworker/u8:17/7581: [ 609.536161][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 609.536206][ T38] #1: ffffc90004167bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 609.536251][ T38] #2: ffff88805dbe0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 609.536297][ T38] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 609.536347][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 609.536393][ T38] 7 locks held by syz-executor/7692: [ 609.536403][ T38] #0: ffff888034916488 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 609.536452][ T38] #1: ffff888027242c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e1/0x4f0 [ 609.536497][ T38] #2: ffff8880270780f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x204/0x4f0 [ 609.536547][ T38] #3: ffffffff8e542e38 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 609.536592][ T38] #4: ffff888027aa80d8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 609.536637][ T38] #5: ffff88805b114300 (&devlink->lock_key#8){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 609.536684][ T38] #6: ffffffff8ecd3638 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 [ 609.536731][ T38] 2 locks held by syz-executor/7695: [ 609.536742][ T38] #0: ffffffff8f1d82f0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 609.536793][ T38] #1: ffffffff8ecd3638 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 609.536838][ T38] 4 locks held by syz.4.470/8010: [ 609.536849][ T38] 6 locks held by syz.3.471/8017: [ 609.536860][ T38] #0: ffff888027c48da8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 609.536902][ T38] #1: ffffffff8f0420d8 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x281/0x560 [ 609.536945][ T38] #2: ffffffff8dac55a8 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 609.536986][ T38] #3: ffff8880b8942018 (&pcp->lock){+.+.}-{3:3}, at: __free_frozen_pages+0x708/0xce0 [ 609.537032][ T38] #4: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_trylock+0xfa/0x180 [ 609.537074][ T38] #5: ffff88813fffc5d8 (&zone->lock){+.+.}-{3:3}, at: free_pcppages_bulk+0x61/0x4b0 [ 609.537120][ T38] 5 locks held by kworker/0:8/8018: [ 609.537130][ T38] #0: ffff888059c15138 ((wq_completion)wg-kex-wg2#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 609.537180][ T38] #1: ffffc90004e3fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 609.537238][ T38] #2: ffff88805b0f6350 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x38/0xbe0 [ 609.537283][ T38] #3: ffffffff8dac55a8 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 609.537323][ T38] #4: ffff88813fffc5d8 (&zone->lock){+.+.}-{3:3}, at: free_one_page+0x41/0x270 [ 609.537427][ T38] [ 609.537432][ T38] ============================================= [ 609.537432][ T38] [ 609.537454][ T38] NMI backtrace for cpu 0 [ 609.537474][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 609.537494][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 609.537505][ T38] Call Trace: [ 609.537512][ T38] [ 609.537519][ T38] dump_stack_lvl+0x189/0x250 [ 609.537549][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 609.537573][ T38] ? __pfx__printk+0x10/0x10 [ 609.537602][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 609.537627][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 609.537652][ T38] ? __pfx__printk+0x10/0x10 [ 609.537675][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 609.537700][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 609.537725][ T38] watchdog+0xf93/0xfe0 [ 609.537754][ T38] ? watchdog+0x1de/0xfe0 [ 609.537781][ T38] kthread+0x70e/0x8a0 [ 609.537808][ T38] ? __pfx_watchdog+0x10/0x10 [ 609.537828][ T38] ? __pfx_kthread+0x10/0x10 [ 609.537857][ T38] ? __pfx_kthread+0x10/0x10 [ 609.537882][ T38] ret_from_fork+0x439/0x7d0 [ 609.537907][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 609.537932][ T38] ? __switch_to_asm+0x39/0x70 [ 609.537947][ T38] ? __switch_to_asm+0x33/0x70 [ 609.537963][ T38] ? __pfx_kthread+0x10/0x10 [ 609.537988][ T38] ret_from_fork_asm+0x1a/0x30 [ 609.538020][ T38] [ 609.538027][ T38] Sending NMI from CPU 0 to CPUs 1: [ 609.538056][ C1] NMI backtrace for cpu 1 [ 609.538068][ C1] CPU: 1 UID: 0 PID: 44 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 609.538094][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 609.538104][ C1] Workqueue: wg-kex-wg2 wg_packet_handshake_receive_worker [ 609.538127][ C1] RIP: 0010:__kasan_check_read+0xa/0x20 [ 609.538143][ C1] Code: 31 ed eb cf cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 89 f6 48 8b 0c 24 <31> d2 e9 ef e4 ff ff 66 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 [ 609.538157][ C1] RSP: 0018:ffffc90000b57100 EFLAGS: 00000046 [ 609.538170][ C1] RAX: 0000000000000000 RBX: ffff888035aa6380 RCX: ffffffff819cc2dd [ 609.538181][ C1] RDX: 0000000000000004 RSI: 0000000000000004 RDI: ffff888035aa6380 [ 609.538192][ C1] RBP: ffffc90000b571d0 R08: 0000000000000003 R09: 0000000000000004 [ 609.538202][ C1] R10: dffffc0000000000 R11: fffff5200016ae18 R12: dffffc0000000000 [ 609.538213][ C1] R13: 1ffff11006b54b2b R14: ffff888035aa6384 R15: 1ffff9200016ae28 [ 609.538226][ C1] FS: 0000000000000000(0000) GS:ffff8881269bd000(0000) knlGS:0000000000000000 [ 609.538238][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 609.538249][ C1] CR2: 00007fd27a6c6df7 CR3: 000000000d7a6000 CR4: 00000000003526f0 [ 609.538263][ C1] Call Trace: [ 609.538269][ C1] [ 609.538275][ C1] do_raw_spin_unlock+0x4d/0x240 [ 609.538294][ C1] _raw_spin_unlock_irqrestore+0x78/0x110 [ 609.538315][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 609.538336][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 609.538356][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 609.538378][ C1] try_to_wake_up+0x7b7/0x12b0 [ 609.538399][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 609.538417][ C1] rt_mutex_slowunlock+0x5ae/0x8a0 [ 609.538438][ C1] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 609.538457][ C1] ? rt_spin_unlock+0x65/0x80 [ 609.538476][ C1] free_one_page+0x87/0x270 [ 609.538498][ C1] __free_frozen_pages+0x760/0xce0 [ 609.538522][ C1] ? __pfx___free_frozen_pages+0x10/0x10 [ 609.538541][ C1] ? mod_node_state+0xea/0x160 [ 609.538559][ C1] __put_partials+0x159/0x1a0 [ 609.538576][ C1] __slab_free+0x2b3/0x390 [ 609.538592][ C1] ? qlist_free_all+0x8c/0x140 [ 609.538609][ C1] qlist_free_all+0x97/0x140 [ 609.538626][ C1] kasan_quarantine_reduce+0x148/0x160 [ 609.538643][ C1] __kasan_kmalloc+0x22/0xb0 [ 609.538662][ C1] __kmalloc_cache_noprof+0x1a8/0x320 [ 609.538680][ C1] ? wg_noise_handshake_begin_session+0xcc/0xbe0 [ 609.538699][ C1] wg_noise_handshake_begin_session+0xcc/0xbe0 [ 609.538718][ C1] ? wg_packet_send_handshake_response+0x10e/0x2d0 [ 609.538741][ C1] wg_packet_send_handshake_response+0x11d/0x2d0 [ 609.538762][ C1] ? __pfx_wg_packet_send_handshake_response+0x10/0x10 [ 609.538780][ C1] ? wg_socket_set_peer_endpoint_from_skb+0xc8/0x120 [ 609.538813][ C1] wg_packet_handshake_receive_worker+0x6bb/0xfa0 [ 609.538835][ C1] ? wg_packet_handshake_receive_worker+0x14c/0xfa0 [ 609.538858][ C1] ? __pfx_wg_packet_handshake_receive_worker+0x10/0x10 [ 609.538878][ C1] ? register_lock_class+0x51/0x320 [ 609.538899][ C1] ? __lock_acquire+0xab9/0xd20 [ 609.538921][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 609.538942][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 609.538961][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 609.538977][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 609.538995][ C1] process_scheduled_works+0xade/0x17b0 [ 609.539025][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 609.539049][ C1] worker_thread+0x8a0/0xda0 [ 609.539078][ C1] kthread+0x70e/0x8a0 [ 609.539109][ C1] ? __pfx_worker_thread+0x10/0x10 [ 609.539126][ C1] ? __pfx_kthread+0x10/0x10 [ 609.539147][ C1] ? __pfx_kthread+0x10/0x10 [ 609.539167][ C1] ret_from_fork+0x439/0x7d0 [ 609.539186][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 609.539206][ C1] ? __switch_to_asm+0x39/0x70 [ 609.539219][ C1] ? __switch_to_asm+0x33/0x70 [ 609.539232][ C1] ? __pfx_kthread+0x10/0x10 [ 609.539252][ C1] ret_from_fork_asm+0x1a/0x30 [ 609.539273][ C1] [ 609.540058][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 609.540072][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 609.540091][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 609.540100][ T38] Call Trace: [ 609.540107][ T38] [ 609.540115][ T38] dump_stack_lvl+0x99/0x250 [ 609.540139][ T38] ? __asan_memcpy+0x40/0x70 [ 609.540157][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 609.540181][ T38] ? __pfx__printk+0x10/0x10 [ 609.540210][ T38] vpanic+0x281/0x750 [ 609.540237][ T38] ? __pfx_vpanic+0x10/0x10 [ 609.540258][ T38] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 609.540277][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 609.540313][ T38] panic+0xb9/0xc0 [ 609.540342][ T38] ? __pfx_panic+0x10/0x10 [ 609.540369][ T38] ? irq_work_queue+0xc3/0x140 [ 609.540394][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 609.540419][ T38] watchdog+0xfd2/0xfe0 [ 609.540446][ T38] ? watchdog+0x1de/0xfe0 [ 609.540473][ T38] kthread+0x70e/0x8a0 [ 609.540501][ T38] ? __pfx_watchdog+0x10/0x10 [ 609.540521][ T38] ? __pfx_kthread+0x10/0x10 [ 609.540546][ T38] ? __pfx_kthread+0x10/0x10 [ 609.540569][ T38] ret_from_fork+0x439/0x7d0 [ 609.540592][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 609.540618][ T38] ? __switch_to_asm+0x39/0x70 [ 609.540633][ T38] ? __switch_to_asm+0x33/0x70 [ 609.540647][ T38] ? __pfx_kthread+0x10/0x10 [ 609.540671][ T38] ret_from_fork_asm+0x1a/0x30 [ 609.540702][ T38] [ 609.540954][ T38] Kernel Offset: disabled