last executing test programs: 3m33.998194766s ago: executing program 4 (id=5): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000800)=0x7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000500)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000540)={{0x80a0000, 0xeeee0000, 0x8, 0xf, 0xa4, 0x4, 0x4, 0x7, 0x0, 0x9, 0xb1}, {0x1ff8, 0x46000, 0xc, 0x82, 0x7, 0x43, 0x7f, 0x7f, 0x5, 0x6, 0x7f}, {0xdddd0000, 0x80a0000, 0xb, 0x6, 0x80, 0x7, 0x0, 0x9, 0xff, 0xb, 0x8, 0x9}, {0x200000, 0x8080000, 0x10, 0x9, 0xd, 0x3, 0xff, 0x0, 0xa, 0xa0, 0x9, 0xf1}, {0x1000, 0x2000, 0x8, 0x3, 0x5, 0x2, 0xab, 0x7f, 0xf, 0x83, 0xf7, 0x5}, {0x2000, 0x6000, 0x10, 0x7, 0xf7, 0x6, 0x1, 0x7, 0x80, 0x13, 0x5}, {0x6000, 0x0, 0xb, 0x5, 0xfd, 0x0, 0x4, 0x3, 0x3, 0x7b, 0x2, 0x70}, {0x0, 0x100000, 0xc, 0x2, 0xf, 0x7, 0x6a, 0xe6, 0xff, 0x8, 0xb, 0x9}, {0xe000, 0x3}, {0x2000, 0x2}, 0x80000031, 0x0, 0x41000, 0x2424f5, 0x400000006, 0x9000, 0x25000, [0x400000000000a2, 0x800ffa, 0x400000000063, 0x7]}) 3m33.606961299s ago: executing program 4 (id=6): syz_mount_image$btrfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000240), 0x0, 0x559e, &(0x7f0000005b80)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000005940)={0x0, 0x0, &(0x7f0000005980)={&(0x7f00000059c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x20048811}, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000005a80), 0x40a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000005ac0)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000005b00)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000005b40)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) 3m33.10208407s ago: executing program 2 (id=3): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000340)={@mcast2, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x4}, 0x20) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x8aba, 0x4, 0x4, 0x804, 0x7, 0xf, 0x120000, 0x5, 0x0, 0x8, 0x8000000000000001, 0x2, 0xfffffffffffffffe, 0x101, 0x3, 0x1], 0x8000000, 0x141200}) fsopen(&(0x7f0000000500)='ext3\x00', 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000002c0)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m33.063095532s ago: executing program 1 (id=2): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x4000000) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x408d6}, 0x24008011) 3m32.992447164s ago: executing program 3 (id=4): r0 = socket$nl_generic(0x10, 0x3, 0x10) close(r0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000040)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) write$nci(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="400111000000000031"], 0x63) write$nci(r0, &(0x7f0000000800)=@NCI_OP_CORE_RESET_NTF={0x0, 0x0, 0x3, 0x0, 0x5, {0x1, 0x6e, 0x0, 0x7, 0x5, 0x3}}, 0xc) 3m32.843211068s ago: executing program 0 (id=1): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x3, 0x40, &(0x7f0000000180)=ANY=[], 0x0) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000240)={0x40, 0x10, 0x1, "a7"}, 0x0, 0x0}) syz_usb_ep_write(r1, 0x81, 0xffffffffffffffac, &(0x7f0000000340)="9001000000000000") r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000480)=""/183, 0xb7) 3m32.658409634s ago: executing program 1 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, 0x0, 0x24000840) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x170f, &(0x7f0000000500)={0x0, 0x89ba, 0xc000, 0x7, 0x371}) 3m32.28276342s ago: executing program 4 (id=8): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, r0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, 0x0) socket$netlink(0x10, 0x3, 0x14) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 3m32.282391882s ago: executing program 1 (id=9): process_mrelease(0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @empty}}, 0x24) listen(r0, 0x1) sendmsg(r0, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="1800000000000000100100000100000002000000000000001000000000000000100100000e"], 0x28}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r1, &(0x7f0000002280)={&(0x7f00000022c0)=@rxrpc=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000002340)=[{0x18, 0x110, 0x1, "01"}], 0x18}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002380)={0x1, &(0x7f00000023c0)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 3m31.851063981s ago: executing program 4 (id=10): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x79, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmmsg$inet(r0, &(0x7f0000005b40)=[{{&(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000100)="bb4bab", 0x3}], 0x1}}], 0x1, 0x24000084) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='bbr', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000740)=0xdf8, 0x4) writev(r0, &(0x7f0000001d40)=[{&(0x7f0000002d80)="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", 0x778}], 0x1) 3m31.817025651s ago: executing program 1 (id=11): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0xffffffa1, 0x0, 0x1, 0xc1b}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x408d6}, 0x24000010) 3m31.582289237s ago: executing program 2 (id=12): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000200), 0x8801, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000240)={0x2, 0xffff, 0x10000, 0x9, 0x13, "a294e7003e805a9d1b78d681c441000700"}) write$UHID_INPUT(r1, &(0x7f0000000880)={0x8, {"45707fe6c13ec0bd03e5ecc69c764fabe1f326e479445fcb5b205f8c3b622124e794bd8e155f4d904619803fd30c7c202046abd5cd2a26aeb32d246533b18dbb112bba54737fa3db4899cfbf40d3f0c487e58766cf9c7b78842142fb94c1a1c94a4b98b0cf1fed922cdbea0b164200d9f958ecd17c75d4b852a384e41367b0298b005bb13c7050e0342de230db20f9a86fe5fff6fff420f03ec7bb88747480857ed08bd7b1c7d178945f1af284d8ca636101edf9c287491e9a33df027ba595b273a8ed5aa6e64d7d3b218b76dc3566398b63e3a8dd3de57079ca6118e08a919f343ead86112d5dea53d5318814f9ddf14081758874653d15a71d0a4b7b18910a03e474208e31ca08e010c28aaa46ecc7c466cb8a06ee6047ca4ae798dc67f6e612afb9aca11097fec86fd5f12ffc6d43e70d749ed8962f2c9d7e88c49cad8b6af5ffca7d38eecafe276f318fdc229937052dee824a11519c054b9716a45703baef71e935632522ac184812313296a6599384899e8015ca5812cd608882ed02e8bc602bb3fb28b7e2bf2128e9fbe97a1e27e074586c6ebb0449ae67c56a96a0b0fcddadb770e57ef7377fed2191d519f222f8a8ce060cbeaa0428c835884f62fca487cd834ad600a5f68c28840878f9f519238abac8ab71c985bd0cdfb5bb1448cb8bb34a59ae512f2deee1f404e0d0c603c615a09be57ef4b94005ee0ef906239d56fa9f310b1be21098ac02db6302c4950496fdbc249d8ffd7cd19e7e26464e712c3184182b57546ae65b77ce55edeae4ee690a0db16b5c26977d36a3369c58ee48588f0ba502f4b584ccfe2e0f60b861930f24db34307ccfb6bf8139b0f8dea88413afc00bcf5582f211348df402e4ae1556627ac3f07dcc77d44d9454ba8eed51139ffdcea61172920c3494ff0d222e6836f8de22d66b10e3875b9b89a48c4ae134e7d81049039d186ea8995b5a289584437c54eb5d03197a7b81e2339f633dbba878eef49eeb85ee34df7789295c5491584af81f8f53487b713becb9a285f674d4c72b188ba6f767ede8ffae64842ecb82b33e799e90f7e977556884664e978e9dc7686c5d1253d4328ac7d95c67258a4fbc267a29b515f09a27a87015756c825f3ce309a2d8b089f2aed4e560d2b154d40ec1fe9cd01ecbfe3b025ff4222891757b376a9cbf325820912f8027ddd963d1ccf549baa912c0cf4817bf1a639dd5b39e56a63d108d914169c72577bc45730e1a9e20529a9f6a8aee9c83da159467c2f77212c1b9eda16804490198a29c61efec362dfa448ffa56a8e120690222f8e56ee6a820feda4173637e34c1aab938637ff82aad4f4f352f12ff9c164a9a7ebaa7a17797764b2bacae18898c33e8c759298eb94db0b8e676b6cc7971e6bd80445472af014f7470656d2566d7ca656acd4135e61dd4545f2d587ea05e6161db82f298bd71d610e50a092b817789473f5da3d32716613a1b09bbda29d501eff30e9993271f20423e74a2a0a1662f99f73c27e855d32796bc68a769e92e2b5d659f2ebd132dc9bfffbf031cd225f7e83e321160b65e55ff38462e8a36a4c533d30302d8102bcb41bec2abab1984b06733d370c2f3363a8d5e30c08f0e74e9e876f72745f574bc80fbe25943896ebe04fe72cfa9de6ee8506ad70c3be65a86eaf4f1fb913821afc85cf985b841d8ca96321dc1a31724f0b599c2ad147713692ecde7238ac87f2f426169bc060281c460f0e1346a92f464ee1f794002d3187a84fc6757f735cbbf42c41a0bb5d99ca04ef3792276491a1232fbcc00f7caf321ac9951a6517eeabaedc207c6b4d9c8f4e5a458d7def6c08a508b66ed3ccae5b544f0b84c9871129c4f6efa804404852993483d06b9227a689cb37a605b43265ca46ebe674073fbca8f83a56856cd6d5cf6e018dea75ca325b2365527888321bc8686069a7dbdc8b22a32c20e07e79eca4f83902a7d02c641bbdbe66a1bc18ff132c770b67964cce6c3800c05a5f0e0253ebd85b825e1c692887e36e4b938ac97507979aa39459ea04070fb078c63c334eabbc1e6444ce1336f98a41045d2a576a049d07368e027b182f6038ad38c3359dd3de78544dc621f9acd4f0540e117162c22e753462c4be2065724c3429b75b4db74e89d84f2795aba986dfc2b1fdcbe98346260cb9748f454a65f4b35b874ac5910184ad0fece39f01cd50663ca2462729f4cfa4e756c0cb6fc397f77c8fdcd7c9e194705e522ca83c625c7fab6ea43aad89db0b6ba71eed901209fc7330e8bc671aff44e5e48502abddc2409b52ece3779d3b19c1832b30abd3f81a9ff0c68fce42ad9c1941f03ce33ed9d37dce98dbe5e1d23519d22087f307e870c82f028e96fef580c4c8c62a32c2776eed31c3d8bddeb43cc53ab8592478253b6de3095d6828bd960989b9ed9879f863d3128f708eebe99f7701823f232444f2ac9830da973b993679e1bb510b2b6939847751cd0d4642d7bb899e21a7c26938fae9f1b149ff19032b5149b4cde635fa99c2160a8cd6f7ad6a5a242b6b31e253e04ea72f1b6f60677ef87fd8e175373c24822a3794134a3124f2e109a59d9db08e48f845254d4b68c42da5b2b2f3c3c528f4281cae4f5117cd0a4658e9ed1dba09656393623fb13fad1cda4eaa602176aba55ba251817017338193512318390fed2a914739050b1a85ca3833f71aa7c4c8fb45158b530c24bd4316f72c9b432a1bd067cd6fc64d646cc06bfbbf990dacb32de9496a8d730cc07171ce548957d435b2f121ea4bb939f70785ebce86f0ad6d89bb71cdc1d0897284ac5d09b95a76ddbfc787a98193b9cbdb1d3ffd89d5f10b9bbb5d41a2a33f73385df351db85c83786db3da558d890f414b21615160dfcb3b46f0958d492bd6d056550c48e5f0c26dd10c1c6ab3b4c6b7d911db5ac463f8e37a8bbcc2295fe79fa109f491a126fff6a1ffe161c7787f746fc8ddea5f19bd20fabca63aa81ae2d725e0b250f27fd7c8431ef6b2827904f62b5ffefc9bfdfb7d55ef6d9883c6ab43c5214b4af237d0df67afcb3d62e80041720952e837e65a22351cb3bf8a9e271568597f79f12144495d31ef72fc36a86e9eb4359790aee88c00b05473ac1a90b8bbe0c0db99570dd9bda506469c258e145841d9c26c9f32722a678cf25657acd124831cfc6a1809e341989b46b6df9db72b18f8be39cd845669bad697bc6bd9bec531047d5fa9e201e1a525c372367f8495280c5d93a62f9fb6f890c59959dcbac7de68e3a417befcd11c722067aac4726e2fdcabce2321ea64d9fbda04ab25dedbcb441faaef2d7bf024fe765591fd0354b2bcaa243a6d741272d4458e433118568944047eeec85d3b0f5b98cbdad0f77371be15af9c1bf928eceb652c581fa638e2131c22d901e6f047a5649ffab5324054389ebeb47ff283e0f0ffe074382e520c632bc440cbeaa68770877516e101709489bcb643b187cb2715e58479074cd32d53077331453fc537d34f87a7ec5e5da686c2f304116394e2bd1e480f5da74a6b725d526b71dc869df8dda3feb44f5463f4c678b6a8be34994ecb0902b3cf269de1adf0da8b8ad340b63a6d0237df7e812b94572adbc196784dfcf33e3e97a17b71a2dad7015fb2d59d4c5838ca551984c7d8ee7bf05ab3edf89029ffd20e373fcb72523bff1e63df721416a068d7b2daa3e17fbba8e831c53e29a94dc483e289cf7406a7b2da28ecc761cf9d847d39b7daa5e34a2a0e4dd19ca5c4a1ab274c7fb9a3057109ec0644579f1af210f8b8133dd87f1abd7c71ac09cfc38699573b35e6d9c5bdaa21f16442b87860e9a7f62ff7c2458160c6a64dc218a258ee06e222e47b3b8e0cf5a5c2d9985f886f32abd129ee056fae9b2e32d0571532eab27fa8f079f9c3e378125f2020064850cfb19c53aa44ad8da6f83a5d827bcb131da9d4dde6e8bd0005ef240c4a02b17051845c35725bd8668c3b27b46355febbf2bf3e5dc5ec650499669cbfe921815396d87b3ede410d492cc73ec7f3a40409eed9358131f1f75e31f24e34af6fc7b6fe2730fd043fd69269d939772e7fef5f2e08b657038a61bc8a8d5688b16029d15aacefe6631a364769d3b9b261bbac584c5ba29b7fbda146fc2ac0f1044f89141a57292b87c7275c6ec6011e5b4b40d1ebc4fc32e7c7ac96aea170225e60c189ed09f8df0a143232bd93c6a9d0fba9783f303b3375b10dde9cd501e68df3734f6278a0389418578834e1912806f07e2fa715bfed4bc707559ee3d4966f51cb652b06b747ae2d79b56759035f01953e76a2dc14c817eb0f97332e68c1d3995dcd84b2329194299944cb2c050991c409fe447ed764a9a3a1182bc30f773b0b415c1898460150c9fec8987c24ba07f87f299d014bd89049b3e9d0c9bf1c6bf159545e52cdfcf9e799b593cb411a3db12396dc9c09ddeddfcb6165a99074e531b7ceddaf344baf2e65225203da537cf09fc073d61d92c13a1c95f93e70050b99850272d0227a89faadfbfae923501b0321984b59229b7dc3c646bf4e381534fcb31783c568deb1a36f95c873df99ccab25446c77d96de6b2c70d5baa5b27786e8027b2f70be117bfdc1b2c6d72a6ab2f9e9a9ce231443d0621448e78393142f90177e7bb52976c668583c64beca45af5ea23a060ec910c6cd89ba7cb9cbbd7627ee56dd2d4d60d994cd63e81f181642b8864afa797aecc22358eea8d059d681a333caa15a8c56918523d465e94668d6ef5f3dcc089bffb13ad76dbf79c44c14f494fda3a55f61c3ed659e20a274297360576fd3230b3e4b7e79ea5b7d78c1def22741a38d17b39c646579d8d5df4cae4eca98d1c0df9371532fe89efc2c375fe433699ee14fcd4cf84495d380663aa10a374dba851536b8159deee491ed2c0e2b920bf7c5627db54562f1ff9c56795245be220391d6b681360fa221efc91faf57d80f15b5e3d881cfa30e1145dbde325c6cc8254938a9eb906d846ec5f76f63443b8f2c50db90b6563900a8f97947c82caec3ce4ee3a5e19fc3324376e4b041b7ed82d9940f7a63f9f962f6d746cb781dbbe16a90649881a77e8ac40677e74d87beadc50df2bc624aa6a707cb50c8ee749db526903f38d706df0201bf503b759d320fa940838ec74c914d0de569ed9ffc6eb2cee026ce22cd50a884bccfadbf503892930c4c4dd7efcb3caaac1695027ed66f3f29c7a1edade721bac0599ff0c400542d31d5dc235ddca7bada9cabcf427e038e5c6a54687b955131c547155036401c7a9a44b3b0437edaa30635b84e37996bcc8594307a6b6bbd8b06daa994cf238925485cd9ace35b3fdfd72788199b6f0570eed2078a4b2f36f511a68566927389ca5ce1c854cb500c2693d7a7917cc8f1215608b7dd2ab22de43a5cc91309a4db2a4c29fdeceaec4a604d13af72a60ea50070626aa6d4cfa418b95edda37a88db5218a1e096436a3551ee712ae137217cd0e941c31e86839e3a9aef8058f5f3196a5006f5a13f3343c0cbf50f9a27c7481e62614a4c51071df6c9a2e0058e534be00c510052e03148c79cc31256359b330c0de91e6130ce741d0472a838463987b9cb80693701825d0af139207f4ff1dc5cb92187170acb8c217f26b1a0544021a8ddce3e31de19b603a5eeca75a7a6234f75d890322a2dca481bc814ba65893cf8e4492094dfe534936a4378e85f680559f4ebce2cccdbea2c0c1e776c4cf50df6b0bc2effcee0f2c76b5c478f9dd02e0eef9399ddf2ba449e03cfd5d33388b0b683c3ce0d301ca1ba4ab", 0x1000}}, 0x1006) 2m57.504709231s ago: executing program 32 (id=1): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x3, 0x40, &(0x7f0000000180)=ANY=[], 0x0) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000240)={0x40, 0x10, 0x1, "a7"}, 0x0, 0x0}) syz_usb_ep_write(r1, 0x81, 0xffffffffffffffac, &(0x7f0000000340)="9001000000000000") r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000480)=""/183, 0xb7) 0s ago: executing program 33 (id=4): r0 = socket$nl_generic(0x10, 0x3, 0x10) close(r0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000040)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) write$nci(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="400111000000000031"], 0x63) write$nci(r0, &(0x7f0000000800)=@NCI_OP_CORE_RESET_NTF={0x0, 0x0, 0x3, 0x0, 0x5, {0x1, 0x6e, 0x0, 0x7, 0x5, 0x3}}, 0xc) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.208' (ED25519) to the list of known hosts. [ 76.860858][ T5621] cgroup: Unknown subsys name 'net' [ 76.990498][ T5621] cgroup: Unknown subsys name 'cpuset' [ 76.999411][ T5621] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.557216][ T5621] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.947135][ T5640] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.955319][ T5640] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.964602][ T5643] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.974096][ T5646] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.974447][ T5646] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.982920][ T5646] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.983310][ T5646] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.984227][ T5646] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.984867][ T5646] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.985375][ T5646] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.001793][ T5651] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.007933][ T5651] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.008639][ T5651] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.009990][ T5651] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.010664][ T5651] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.010967][ T5651] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.059636][ T5651] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.060884][ T5651] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.061488][ T5651] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.062448][ T5651] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.063061][ T5651] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.091978][ T5643] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.098312][ T5643] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.098929][ T5643] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.107935][ T5651] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.144285][ T5635] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 82.144725][ T5637] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.145790][ T5637] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.154259][ T5637] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.175930][ T5636] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 82.404766][ T5633] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 82.408590][ T5634] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 82.661088][ T5637] infiniband rxe0: set active [ 82.661111][ T5637] infiniband rxe0: added rxe_eth0 [ 82.679318][ T5637] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 82.679353][ T5637] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 82.679388][ T5637] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 82.719084][ T5637] RDS/IB: rxe0: added [ 82.720688][ T5637] smc: adding ib device rxe0 with port count 1 [ 82.720796][ T5637] smc: ib device rxe0 port 1 has no pnetid [ 82.734049][ T10] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.769050][ T5639] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.801545][ T5637] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.073840][ T5637] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.078435][ T5640] Bluetooth: hci1: command tx timeout [ 83.078441][ T5651] Bluetooth: hci4: command tx timeout [ 83.158147][ T5640] Bluetooth: hci3: command tx timeout [ 83.158263][ T5640] Bluetooth: hci0: command tx timeout [ 83.158339][ T5640] Bluetooth: hci2: command tx timeout [ 83.543318][ T5637] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.675171][ T5636] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.675385][ T5636] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.675527][ T5636] bridge_slave_0: entered allmulticast mode [ 83.682744][ T5636] bridge_slave_0: entered promiscuous mode [ 83.778859][ T5636] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.779007][ T5636] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.779484][ T5636] bridge_slave_1: entered allmulticast mode [ 83.781954][ T5636] bridge_slave_1: entered promiscuous mode [ 83.815254][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.815381][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.815490][ T5634] bridge_slave_0: entered allmulticast mode [ 83.817012][ T5634] bridge_slave_0: entered promiscuous mode [ 83.854106][ T5637] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.892753][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.892874][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.893013][ T5634] bridge_slave_1: entered allmulticast mode [ 83.895440][ T5634] bridge_slave_1: entered promiscuous mode [ 83.951261][ T5635] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.952463][ T5635] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.952609][ T5635] bridge_slave_0: entered allmulticast mode [ 83.954881][ T5635] bridge_slave_0: entered promiscuous mode [ 84.020893][ T5636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.021178][ T5635] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.021295][ T5635] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.021445][ T5635] bridge_slave_1: entered allmulticast mode [ 84.024902][ T5635] bridge_slave_1: entered promiscuous mode [ 84.103372][ T5636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.145170][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.146134][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.146287][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.146401][ T5633] bridge_slave_0: entered allmulticast mode [ 84.148979][ T5633] bridge_slave_0: entered promiscuous mode [ 84.151923][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.152083][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.152200][ T5633] bridge_slave_1: entered allmulticast mode [ 84.153988][ T5633] bridge_slave_1: entered promiscuous mode [ 84.216188][ T5635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.223656][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.251180][ T5636] team0: Port device team_slave_0 added [ 84.251323][ T5637] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.254165][ T5636] team0: Port device team_slave_1 added [ 84.258149][ T5635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.341432][ T5634] team0: Port device team_slave_0 added [ 84.345816][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.376940][ T5635] team0: Port device team_slave_0 added [ 84.383774][ T5634] team0: Port device team_slave_1 added [ 84.408246][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.409576][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.409590][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.409615][ T5636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.412950][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.412963][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.412987][ T5636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.416216][ T5635] team0: Port device team_slave_1 added [ 84.520756][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.520774][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.520797][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.557765][ T5633] team0: Port device team_slave_0 added [ 84.562248][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.562263][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.562283][ T5635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.569183][ T5633] team0: Port device team_slave_1 added [ 84.571446][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.571458][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.571479][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.655780][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.655798][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.655820][ T5635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.724922][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.724939][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.724959][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.727308][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.727321][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.727340][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.738048][ T5636] hsr_slave_0: entered promiscuous mode [ 84.739285][ T5636] hsr_slave_1: entered promiscuous mode [ 84.870681][ T5635] hsr_slave_0: entered promiscuous mode [ 84.871333][ T5635] hsr_slave_1: entered promiscuous mode [ 84.871817][ T5635] debugfs: 'hsr0' already exists in 'hsr' [ 84.871833][ T5635] Cannot create hsr debugfs directory [ 84.885836][ T5634] hsr_slave_0: entered promiscuous mode [ 84.886876][ T5634] hsr_slave_1: entered promiscuous mode [ 84.888285][ T5634] debugfs: 'hsr0' already exists in 'hsr' [ 84.888300][ T5634] Cannot create hsr debugfs directory [ 84.951126][ T5633] hsr_slave_0: entered promiscuous mode [ 84.951767][ T5633] hsr_slave_1: entered promiscuous mode [ 84.952217][ T5633] debugfs: 'hsr0' already exists in 'hsr' [ 84.952233][ T5633] Cannot create hsr debugfs directory [ 85.159330][ T5640] Bluetooth: hci1: command tx timeout [ 85.159477][ T5651] Bluetooth: hci4: command tx timeout [ 85.238458][ T5640] Bluetooth: hci0: command tx timeout [ 85.238496][ T5640] Bluetooth: hci3: command tx timeout [ 85.238712][ T5651] Bluetooth: hci2: command tx timeout [ 85.482327][ T5636] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.486808][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.512754][ T5636] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.516873][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.524785][ T5636] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.536971][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.566824][ T5636] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.571941][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.639389][ T5637] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.639516][ T5637] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.639628][ T5637] bridge_slave_0: entered allmulticast mode [ 85.641306][ T5637] bridge_slave_0: entered promiscuous mode [ 85.654732][ T5637] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.663185][ T5637] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.663721][ T5637] bridge_slave_1: entered allmulticast mode [ 85.665459][ T5637] bridge_slave_1: entered promiscuous mode [ 85.696598][ T5634] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.710227][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.710881][ T5634] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.715596][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.716446][ T5634] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.727644][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.759321][ T5637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.766554][ T5634] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.773365][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.777835][ T5637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.809759][ T5637] team0: Port device team_slave_0 added [ 85.829395][ T5637] team0: Port device team_slave_1 added [ 85.858518][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.858544][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.858564][ T5637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.890331][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.890347][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.890368][ T5637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.979817][ T5637] hsr_slave_0: entered promiscuous mode [ 85.980566][ T5637] hsr_slave_1: entered promiscuous mode [ 85.980983][ T5637] debugfs: 'hsr0' already exists in 'hsr' [ 85.980996][ T5637] Cannot create hsr debugfs directory [ 85.985252][ T5633] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.989159][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.990491][ T5633] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.998449][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.043730][ T5633] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.046869][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.070794][ T5633] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.074841][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.124724][ T5636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.213030][ T5635] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.216555][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.255885][ T5635] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.260229][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.261169][ T5635] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.268568][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.280190][ T5636] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.298759][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.298827][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.299420][ T5635] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.302213][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.328909][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.329123][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.479464][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.479736][ T5637] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.482444][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.484380][ T5637] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.487261][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.508041][ T5637] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.513773][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.534101][ T5637] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.546383][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.629315][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.665737][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.665861][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.700715][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.700833][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.719321][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.823101][ T5635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.824888][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.866231][ T271] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.866297][ T271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.904372][ T101] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.904483][ T101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.928321][ T32] cfg80211: failed to load regulatory.db [ 86.963955][ T5635] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.987314][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.987490][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.050390][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.050510][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.092726][ T5637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.210337][ T5637] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.241269][ T55] Bluetooth: hci1: command tx timeout [ 87.241363][ T5651] Bluetooth: hci4: command tx timeout [ 87.298868][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.299004][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.327985][ T55] Bluetooth: hci3: command tx timeout [ 87.328021][ T55] Bluetooth: hci0: command tx timeout [ 87.328148][ T5651] Bluetooth: hci2: command tx timeout [ 87.377989][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.378093][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.593600][ T5636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.488980][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.588619][ T5636] veth0_vlan: entered promiscuous mode [ 88.630938][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.656360][ T5635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.667180][ T5636] veth1_vlan: entered promiscuous mode [ 88.771236][ T5634] veth0_vlan: entered promiscuous mode [ 88.845434][ T5634] veth1_vlan: entered promiscuous mode [ 88.876873][ T5637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.891822][ T5636] veth0_macvtap: entered promiscuous mode [ 88.919861][ T5633] veth0_vlan: entered promiscuous mode [ 88.922564][ T5636] veth1_macvtap: entered promiscuous mode [ 88.937248][ T5633] veth1_vlan: entered promiscuous mode [ 88.941343][ T5635] veth0_vlan: entered promiscuous mode [ 88.971317][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.983628][ T5635] veth1_vlan: entered promiscuous mode [ 89.001893][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.019251][ T5634] veth0_macvtap: entered promiscuous mode [ 89.037836][ T5634] veth1_macvtap: entered promiscuous mode [ 89.056812][ T5633] veth0_macvtap: entered promiscuous mode [ 89.089406][ T5633] veth1_macvtap: entered promiscuous mode [ 89.143929][ T5637] veth0_vlan: entered promiscuous mode [ 89.160897][ T5635] veth0_macvtap: entered promiscuous mode [ 89.173230][ T271] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.173601][ T271] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.173862][ T271] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.176884][ T271] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.199648][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.226396][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.241874][ T5635] veth1_macvtap: entered promiscuous mode [ 89.264273][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.269742][ T5637] veth1_vlan: entered promiscuous mode [ 89.276725][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.276745][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.302188][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.318606][ T5640] Bluetooth: hci1: command tx timeout [ 89.318657][ T5651] Bluetooth: hci4: command tx timeout [ 89.382869][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.382893][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.392469][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.396872][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.404470][ T5651] Bluetooth: hci2: command tx timeout [ 89.404506][ T5651] Bluetooth: hci0: command tx timeout [ 89.404529][ T5651] Bluetooth: hci3: command tx timeout [ 89.440085][ T64] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.441888][ T101] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.441944][ T101] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.441978][ T101] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.489041][ T53] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.489091][ T53] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.489124][ T53] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.489157][ T53] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.489185][ T53] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.489212][ T53] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.489241][ T53] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.489273][ T53] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.507191][ T5637] veth0_macvtap: entered promiscuous mode [ 89.562002][ T5637] veth1_macvtap: entered promiscuous mode [ 89.643235][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.643259][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.755971][ T5636] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 89.766690][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.773031][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.806802][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.806826][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.897129][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.897152][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.898511][ T53] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.899408][ T1145] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.899445][ T1145] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.899476][ T1145] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.964719][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.964741][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.993961][ T5836] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.089331][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.089352][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.224577][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.224600][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.295128][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.295150][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.492558][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.492580][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.880016][ T5843] loop4: detected capacity change from 0 to 32768 [ 90.908844][ T5843] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.6 (5843) [ 91.002647][ T5843] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 91.002685][ T5843] BTRFS info (device loop4): using sha256 checksum algorithm [ 91.154536][ T5843] BTRFS info (device loop4): enabling ssd optimizations [ 91.154577][ T5843] BTRFS info (device loop4): turning on async discard [ 91.154593][ T5843] BTRFS info (device loop4): enabling free space tree [ 91.230057][ T5843] syz.4.6 uses obsolete (PF_INET,SOCK_PACKET) [ 91.278340][ T5877] FAULT_INJECTION: forcing a failure. [ 91.278340][ T5877] name fail_futex, interval 1, probability 0, space 0, times 1 [ 91.278373][ T5877] CPU: 0 UID: 0 PID: 5877 Comm: syz.1.7 Not tainted syzkaller #0 PREEMPT(full) [ 91.278396][ T5877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 91.278408][ T5877] Call Trace: [ 91.278416][ T5877] [ 91.278425][ T5877] dump_stack_lvl+0xe8/0x150 [ 91.278462][ T5877] should_fail_ex+0x3eb/0x540 [ 91.278506][ T5877] get_futex_key+0x1ab/0x1410 [ 91.278551][ T5877] ? __pfx_get_futex_key+0x10/0x10 [ 91.278581][ T5877] ? __cgroup_account_cputime+0xe8/0x120 [ 91.278625][ T5877] futex_wait_setup+0x4a/0x590 [ 91.278656][ T5877] ? __futex_wait+0xdb/0x470 [ 91.278687][ T5877] __futex_wait+0x175/0x470 [ 91.278722][ T5877] ? __pfx___futex_wait+0x10/0x10 [ 91.278752][ T5877] ? __pfx_futex_wake_mark+0x10/0x10 [ 91.278783][ T5877] ? try_to_wake_up+0x8ce/0x14e0 [ 91.278824][ T5877] futex_wait+0x121/0x390 [ 91.278852][ T5877] ? __pfx_futex_wait+0x10/0x10 [ 91.278896][ T5877] do_futex+0x3e7/0x4e0 [ 91.278924][ T5877] ? __pfx_do_futex+0x10/0x10 [ 91.278955][ T5877] __se_sys_futex+0x3a8/0x450 [ 91.278983][ T5877] ? __pfx___se_sys_futex+0x10/0x10 [ 91.279005][ T5877] ? __pfx___se_sys_prctl+0x10/0x10 [ 91.279034][ T5877] ? __x64_sys_futex+0x21/0xf0 [ 91.279058][ T5877] do_syscall_64+0x166/0x520 [ 91.279080][ T5877] ? trace_irq_disable+0x3b/0x140 [ 91.279107][ T5877] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.279128][ T5877] ? clear_bhb_loop+0x70/0xc0 [ 91.279154][ T5877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.279184][ T5877] RIP: 0033:0x7f7e5479fb19 [ 91.279204][ T5877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.279220][ T5877] RSP: 002b:00007f7e555c50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 91.279243][ T5877] RAX: ffffffffffffffda RBX: 00007f7e54a25fa8 RCX: 00007f7e5479fb19 [ 91.279258][ T5877] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7e54a25fa8 [ 91.279272][ T5877] RBP: 00007f7e54a25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 91.279285][ T5877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.279297][ T5877] R13: 00007f7e54a26038 R14: 00007ffd6ae13e30 R15: 00007ffd6ae13f18 [ 91.279331][ T5877] [ 91.458389][ T5768] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 91.538962][ T5636] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 91.625122][ T5768] usb 1-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 91.635105][ T5768] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 91.635133][ T5768] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.635149][ T5768] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 91.635192][ T5768] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.640962][ T5768] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 91.640987][ T5768] usb 1-1: Product: syz [ 91.641000][ T5768] usb 1-1: Manufacturer: syz [ 91.771448][ T5883] FAULT_INJECTION: forcing a failure. [ 91.771448][ T5883] name fail_futex, interval 1, probability 0, space 0, times 0 [ 91.771480][ T5883] CPU: 0 UID: 0 PID: 5883 Comm: syz.4.8 Not tainted syzkaller #0 PREEMPT(full) [ 91.771503][ T5883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 91.771518][ T5883] Call Trace: [ 91.771527][ T5883] [ 91.771535][ T5883] dump_stack_lvl+0xe8/0x150 [ 91.771571][ T5883] should_fail_ex+0x3eb/0x540 [ 91.771604][ T5883] get_futex_key+0x1ab/0x1410 [ 91.771647][ T5883] ? __pfx_get_futex_key+0x10/0x10 [ 91.771687][ T5883] futex_wake+0x119/0x5f0 [ 91.771713][ T5883] ? __pfx_futex_wake+0x10/0x10 [ 91.771739][ T5883] ? __raw_spin_lock_init+0x45/0x100 [ 91.771768][ T5883] do_futex+0x458/0x4e0 [ 91.771783][ T5883] ? __asan_memcpy+0x40/0x70 [ 91.771811][ T5883] ? __pfx_do_futex+0x10/0x10 [ 91.771838][ T5883] __se_sys_futex+0x3a8/0x450 [ 91.771861][ T5883] ? fd_install+0x39e/0x4e0 [ 91.771887][ T5883] ? __pfx___se_sys_futex+0x10/0x10 [ 91.771901][ T5883] ? fd_install+0x95/0x4e0 [ 91.771931][ T5883] ? __x64_sys_futex+0x21/0xf0 [ 91.771954][ T5883] do_syscall_64+0x166/0x520 [ 91.771976][ T5883] ? trace_irq_disable+0x3b/0x140 [ 91.772001][ T5883] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.772019][ T5883] ? clear_bhb_loop+0x70/0xc0 [ 91.772050][ T5883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.772069][ T5883] RIP: 0033:0x7f6c2b19fb19 [ 91.772087][ T5883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.772104][ T5883] RSP: 002b:00007f6c2c06a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 91.772125][ T5883] RAX: ffffffffffffffda RBX: 00007f6c2b425fa8 RCX: 00007f6c2b19fb19 [ 91.772139][ T5883] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f6c2b425fac [ 91.772151][ T5883] RBP: 00007f6c2b425fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 91.772164][ T5883] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 91.772175][ T5883] R13: 00007f6c2b426038 R14: 00007ffc7b658c80 R15: 00007ffc7b658d68 [ 91.772205][ T5883] [ 91.820185][ T5768] cdc_wdm 1-1:1.0: skipping garbage [ 91.820208][ T5768] cdc_wdm 1-1:1.0: skipping garbage [ 91.928519][ T5768] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 91.928552][ T5768] cdc_wdm 1-1:1.0: Unknown control protocol [ 92.117214][ T5768] usb 1-1: USB disconnect, device number 2 [ 93.219375][ T5768] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 93.224817][ T5893] [U]  [ 93.224837][ T5893] [U] K{ [ 93.224933][ T5893] [U] T 1ŠFFˊ`GJǘGO/MC [ 93.225350][ T5893] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 93.236674][ T5893] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 93.266146][ T5893] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 93.322363][ T5893] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 93.322528][ T5893] [U] ܾ4B`˗HT_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 93.322690][ T5893] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 93.323042][ T5893] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`Ʀ\ [ 93.410627][ T5893] [U] MX"{; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 93.442120][ T5893] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 93.442213][ T5893] [U] 22Ʃ۩X?0;3U [ 93.443186][ T5893] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 93.474159][ T5893] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 93.474445][ T5893] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 93.474622][ T5893] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 93.475057][ T5893] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 93.475091][ T5893] [U] EC [ 93.475511][ T5893] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 94.938340][ T5853] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 95.188257][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 95.459399][ T5889] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 97.383931][ T0] NOHZ tick-stop error: local softirq work is pending, handler #88!!! [ 97.964400][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 98.300890][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 100.093082][ T0] NOHZ tick-stop error: local softirq work is pending, handler #ca!!! [ 101.092165][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 101.362614][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 101.624645][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 102.346035][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 102.993311][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 124.427362][ C0] sched: DL replenish lagged too much [ 148.383875][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 148.392578][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.057722][ T5768] usb 1-1: device not accepting address 3, error -71 [ 196.603726][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.612544][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 208.477968][ T5646] Bluetooth: hci0: command 0x0406 tx timeout [ 208.478044][ T5646] Bluetooth: hci1: command 0x0406 tx timeout [ 208.478073][ T5646] Bluetooth: hci2: command 0x0406 tx timeout [ 208.478111][ T5646] Bluetooth: hci3: command 0x0406 tx timeout [ 208.478149][ T5646] Bluetooth: hci4: command 0x0406 tx timeout [ 226.967765][ T5747] rxe_eth0 speed is unknown, defaulting to 1000 [ 258.402213][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 258.411849][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.431648][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.440354][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.153141][ T36] INFO: task kworker/1:1:32 blocked for more than 149 seconds. [ 379.153170][ T36] Not tainted syzkaller #0 [ 379.153181][ T36] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 379.153190][ T36] task:kworker/1:1 state:D stack:25256 pid:32 tgid:32 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 379.153255][ T36] Workqueue: events reg_todo [ 379.153301][ T36] Call Trace: [ 379.153309][ T36] [ 379.153324][ T36] __schedule+0x17dd/0x5830 [ 379.153382][ T36] ? __pfx___schedule+0x10/0x10 [ 379.153416][ T36] ? schedule+0x90/0x2b0 [ 379.153442][ T36] schedule+0x164/0x2b0 [ 379.153468][ T36] schedule_preempt_disabled+0x13/0x30 [ 379.153490][ T36] __mutex_lock+0x7c4/0x15a0 [ 379.153520][ T36] ? __mutex_lock+0x5cd/0x15a0 [ 379.153549][ T36] ? reg_process_self_managed_hints+0xae/0x170 [ 379.153581][ T36] ? __pfx___mutex_lock+0x10/0x10 [ 379.153629][ T36] reg_process_self_managed_hints+0xae/0x170 [ 379.153660][ T36] reg_todo+0xe6e/0xff0 [ 379.153691][ T36] ? lock_acquire+0x115/0x350 [ 379.153720][ T36] ? __pfx_reg_todo+0x10/0x10 [ 379.153751][ T36] ? rcu_is_watching+0x16/0xb0 [ 379.153782][ T36] ? process_scheduled_works+0x97a/0x1630 [ 379.153813][ T36] process_scheduled_works+0xc3d/0x1630 [ 379.153877][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 379.153915][ T36] ? assign_work+0x3cf/0x5d0 [ 379.153951][ T36] worker_thread+0xa47/0xfb0 [ 379.154001][ T36] kthread+0x38b/0x480 [ 379.154026][ T36] ? __pfx_worker_thread+0x10/0x10 [ 379.154043][ T36] ? __pfx_kthread+0x10/0x10 [ 379.154069][ T36] ret_from_fork+0x514/0xb70 [ 379.154096][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 379.154119][ T36] ? __switch_to+0xc78/0x1410 [ 379.154143][ T36] ? __pfx_kthread+0x10/0x10 [ 379.154167][ T36] ret_from_fork_asm+0x1a/0x30 [ 379.154210][ T36] [ 379.154329][ T36] [ 379.154329][ T36] Showing all locks held in the system: [ 379.154339][ T36] locks held by kthreadd/2: 1, last CPU#1: [ 379.154353][ T36] #0: ffffffff902b20d0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 379.154413][ T36] locks held by kworker/0:0/10: 4, on CPU#0: [ 379.154426][ T36] #0: ffff888058a21550 ((wq_completion)wg-kex-wg2#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 379.154487][ T36] #1: ffffc900000f7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 379.154557][ T36] #2: ffff88807fa39480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 379.154618][ T36] #3: ffff88802c442ad0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x59c/0x9b0 [ 379.154677][ T36] locks held by kworker/0:1/11: 2, last CPU#0: [ 379.154691][ T36] #0: ffff888058a18950 ((wq_completion)wg-kex-wg1#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 379.154751][ T36] #1: ffffc90000107c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 379.154819][ T36] locks held by kworker/u8:0/13: 3, last CPU#1: [ 379.154832][ T36] #0: ffff88813fe54150 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 379.154889][ T36] #1: ffffc90000127c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 379.154945][ T36] #2: ffff888056a30800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 379.154997][ T36] locks held by kworker/u8:1/14: 3, last CPU#1: [ 379.155009][ T36] #0: ffff88813fe54150 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 379.155065][ T36] #1: ffffc90000137c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 379.155120][ T36] #2: ffff888055c20800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 379.155173][ T36] locks held by kworker/R-mm_pe/15: 1, on CPU#1: [ 379.155186][ T36] #0: ffffffff8fff65c0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xdbe/0x12a0 [ 379.155235][ T36] locks held by kworker/1:0/27: 3, last CPU#1: [ 379.155248][ T36] #0: ffff888057a50150 ((wq_completion)wg-kex-wg2#10){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 379.155317][ T36] #1: ffffc90000a1fc40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 379.155386][ T36] #2: ffff88803482d270 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 379.155444][ T36] locks held by kworker/1:1/32: 4, on CPU#1: [ 379.155457][ T36] #0: ffff88813fe12d50 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 379.155513][ T36] #1: ffffc90000a87c40 (reg_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 379.155567][ T36] #2: ffffffff918df420 (cfg80211_mutex){+.+.}-{4:4}, at: reg_todo+0x80/0xff0 [ 379.155622][ T36] #3: ffff888055870800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_process_self_managed_hints+0xae/0x170 [ 379.155677][ T36] locks held by kworker/u8:2/34: 3, last CPU#1: [ 379.155690][ T36] #0: ffff88813fe54150 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 379.155745][ T36] #1: ffffc90000aa7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 379.155800][ T36] #2: ffff888055e70800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 379.155852][ T36] locks held by khungtaskd/36: 1, last CPU#1: [ 379.155864][ T36] #0: ffffffff9015a560 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 379.155915][ T36] locks held by kworker/u8:3/53: 3, last CPU#1: [ 379.155928][ T36] #0: ffff88813fe54150 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 379.155983][ T36] #1: ffffc90000bd7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 379.156038][ T36] #2: ffff888056700800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 379.156090][ T36] locks held by kworker/u8:4/64: 3, last CPU#1: [ 379.156103][ T36] #0: ffff88813fe54150 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 379.156158][ T36] #1: ffffc9000205fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 379.156215][ T36] #2: ffff888056bd0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 379.156267][ T36] locks held by kworker/u8:5/101: 3, last CPU#1: [ 379.156281][ T36] #0: ffff88813fe54150 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 379.156343][ T36] #1: ffffc900025a7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 379.156399][ T36] #2: ffff888055f50800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 379.156452][ T36] locks held by kworker/u8:6/271: 3, last CPU#1: [ 379.156466][ T36] #0: ffff88813fe54150 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 379.156521][ T36] #1: ffffc9000335fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 379.156577][ T36] #2: ffff888055d40800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 379.156632][ T36] locks held by kworker/0:2/993: 3, last CPU#0: [ 379.156645][ T36] #0: ffff888058a23150 ((wq_completion)wg-kex-wg1#8){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 379.156705][ T36] #1: ffffc90004db7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 379.156775][ T36] #2: ffff88807fa3d480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 379.156831][ T36] locks held by kworker/u8:7/1145: 3, last CPU#1: [ 379.156844][ T36] #0: ffff88813fe54150 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 379.156900][ T36] #1: ffffc90004aefc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 379.156955][ T36] #2: ffff888056560800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 379.157007][ T36] locks held by kworker/u8:8/1165: 3, last CPU#1: [ 379.157021][ T36] #0: ffff88813fe54150 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 379.157076][ T36] #1: ffffc900041dfc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 379.157131][ T36] #2: ffff888056570800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 379.157182][ T36] locks held by kworker/1:2/1233: 2, last CPU#1: [ 379.157196][ T36] #0: ffff888058a21550 ((wq_completion)wg-kex-wg2#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 379.167495][ T36] #1: ffffc90005667c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 379.167579][ T36] locks held by kworker/R-bat_e/3230: 3, last CPU#0: [ 379.167594][ T36] #0: ffff888034212950 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 379.167649][ T36] #1: ffffc9000dcf7c40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 379.167705][ T36] #2: ffffffff9015a560 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3de/0x18b0 [ 379.167763][ T36] locks held by udevd/5001: 5, last CPU#1: [ 379.167776][ T36] #0: ffffffff9023a8d0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0xf6/0x640 [ 379.167828][ T36] #1: ffff88807e6ce540 (&mm->mmap_lock){++++}-{4:4}, at: copy_mm+0x110/0x640 [ 379.167880][ T36] #2: ffff88813fe3d900 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x1f6/0x1c80 [ 379.167934][ T36] #3: ffffffff902b20d0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 379.167986][ T36] #4: ffffffff9015a560 (rcu_read_lock){....}-{1:3}, at: is_module_text_address+0x1d/0x1e0 [ 379.168041][ T36] locks held by getty/5389: 2, on CPU#0: [ 379.168054][ T36] #0: ffff888037b2c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 379.168109][ T36] #1: ffffc900032362e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 379.168161][ T36] locks held by syz-executor/5621: 2, last CPU#1: [ 379.168175][ T36] #0: ffff888036580f80 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1ed/0x520 [ 379.168226][ T36] #1: ffffffff902b20d0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 379.168278][ T36] locks held by syz-executor/5634: 2, last CPU#1: [ 379.168301][ T36] #0: ffff888034018420 (&xt[i].mutex){+.+.}-{4:4}, at: xt_find_table_lock+0x55/0x400 [ 379.168355][ T36] #1: ffffffff902b20d0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 379.168408][ T36] locks held by syz-executor/5636: 1, on CPU#1: [ 379.168421][ T36] #0: ffff888034018420 (&xt[i].mutex){+.+.}-{4:4}, at: xt_find_table_lock+0x55/0x400 [ 379.168474][ T36] locks held by syz-executor/5637: 2, on CPU#0: [ 379.168487][ T36] #0: ffff8880342e4f28 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x23e/0x5d0 [ 379.168538][ T36] #1: ffffffff90160be8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2cb/0x760 [ 379.168586][ T36] locks held by kworker/0:3/5639: 3, last CPU#0: [ 379.168598][ T36] #0: ffff888058a0dd50 ((wq_completion)wg-kex-wg2#8){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 379.168659][ T36] #1: ffffc90003ecfc40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 379.168728][ T36] #2: ffff8880358ca0e8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 379.168787][ T36] locks held by kworker/1:3/5696: 3, on CPU#1: [ 379.168800][ T36] #0: ffff888058a0dd50 ((wq_completion)wg-kex-wg2#8){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 379.168860][ T36] #1: ffffc90003fdfc40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 379.168929][ T36] #2: ffff8880358ca0e8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 379.168988][ T36] locks held by kworker/R-wg-cr/5718: 1, on CPU#1: [ 379.169002][ T36] #0: ffffffff8fff65c0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 [ 379.169049][ T36] locks held by kworker/R-wg-cr/5721: 1, last CPU#0: [ 379.169062][ T36] #0: ffffffff8fff65c0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 [ 379.169108][ T36] locks held by kworker/R-wg-cr/5728: 1, on CPU#1: [ 379.169122][ T36] #0: ffffffff8fff65c0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xdbe/0x12a0 [ 379.169170][ T36] locks held by kworker/1:4/5737: 2, last CPU#1: [ 379.169183][ T36] #0: ffff88805795c550 ((wq_completion)wg-kex-wg1#10){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 379.169243][ T36] #1: ffffc9000423fc40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 379.169321][ T36] locks held by kworker/1:5/5747: 3, last CPU#1: [ 379.169334][ T36] #0: ffff8880271a8550 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 379.169394][ T36] #1: ffffc900042cfc40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 379.169462][ T36] #2: ffff88807bf09480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 379.169522][ T36] locks held by kworker/0:4/5760: 3, last CPU#0: [ 379.169536][ T36] #0: ffff888057a50150 ((wq_completion)wg-kex-wg2#10){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 379.169595][ T36] #1: ffffc9000439fc40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 379.169663][ T36] #2: ffff88803482dc58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 379.169720][ T36] locks held by kworker/0:5/5761: 3, last CPU#0: [ 379.169733][ T36] #0: ffff88805795c550 ((wq_completion)wg-kex-wg1#10){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 379.169792][ T36] #1: ffffc900043afc40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 379.169861][ T36] #2: ffff88803482f028 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 379.169920][ T36] locks held by kworker/1:6/5768: 8, last CPU#1: [ 379.169933][ T36] #0: ffff8880226e9550 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 379.169988][ T36] #1: ffffc9000441fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 379.170044][ T36] #2: ffff88802b20f1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 379.170098][ T36] #3: ffff88802b2d3568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20a1/0x4d30 [ 379.170152][ T36] #4: ffff88802b17bb60 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20c9/0x4d30 [ 379.170206][ T36] #5: ffffffff90f211a8 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x14d/0x1810 [ 379.170261][ T36] #6: ffffffff902b20d0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 379.170321][ T36] #7: ffffffff9015a560 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 379.170375][ T36] locks held by kworker/0:6/5790: 4, last CPU#0: [ 379.170387][ T36] #0: ffff88805851c150 ((wq_completion)wg-kex-wg1#6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 379.170447][ T36] #1: ffffc9000452fc40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 379.170516][ T36] #2: ffff88801395d480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 379.170574][ T36] #3: ffff88802c441700 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x59c/0x9b0 [ 379.170633][ T36] locks held by syz.1.11/5891: 1, last CPU#1: [ 379.170646][ T36] #0: ffffffff902b20d0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 379.170698][ T36] locks held by kworker/u8:9/5894: 3, last CPU#1: [ 379.170711][ T36] #0: ffff88813fe54150 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 379.170766][ T36] #1: ffffc90004c9fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 379.170827][ T36] #2: ffff888055870800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 379.170879][ T36] locks held by kworker/u8:10/5895: 4, last CPU#1: [ 379.170893][ T36] #0: ffff88807b26a950 ((wq_completion)wg-kex-wg1#5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 379.170952][ T36] #1: ffffc90004c2fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 379.171008][ T36] #2: ffff88801395d480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 379.171064][ T36] #3: ffff8880358cbea0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 379.171122][ T36] locks held by kworker/u8:11/5896: 3, last CPU#1: [ 379.171135][ T36] #0: ffff88813fe54150 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 379.171190][ T36] #1: ffffc90003eafc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 379.171247][ T36] #2: ffff8880362f8258 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 379.171311][ T36] locks held by kworker/u8:12/5897: 4, last CPU#1: [ 379.171324][ T36] #0: ffff888013a63950 ((wq_completion)wg-kex-wg2#5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 379.171384][ T36] #1: ffffc900049ffc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 379.171440][ T36] #2: ffff888036969480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 379.171497][ T36] #3: ffff88802c440330 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 379.171554][ T36] locks held by kworker/u8:13/5898: 4, last CPU#1: [ 379.171567][ T36] #0: ffff888077233950 ((wq_completion)wg-kex-wg2#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 379.171626][ T36] #1: ffffc90004a1fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 379.171683][ T36] #2: ffff88807fa39480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 379.171739][ T36] #3: ffff88802c442ad0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 379.171795][ T36] locks held by kworker/u8:14/5899: 4, last CPU#1: [ 379.171808][ T36] #0: ffff888077958950 ((wq_completion)wg-kex-wg0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 379.171863][ T36] #1: ffffc90004b5fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 379.171919][ T36] #2: ffff888037b19480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 379.171976][ T36] #3: ffff88802c446640 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 379.172033][ T36] locks held by syz-executor/5900: 3, last CPU#1: [ 379.172047][ T36] #0: ffff8880798086c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 379.172094][ T36] #1: ffff888078fc8f80 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_trylock+0x1f/0x70 [ 379.172149][ T36] #2: ffffffff902b20d0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 379.172202][ T36] locks held by dhcpcd-run-hook/5901: 2, last CPU#1: [ 379.172215][ T36] #0: ffff888078fc8340 (&mm->mmap_lock){++++}-{4:4}, at: vm_brk_flags+0x202/0x730 [ 379.172262][ T36] #1: ffffffff902b20d0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 379.172323][ T36] locks held by kworker/u8:15/5902: 4, last CPU#1: [ 379.172336][ T36] #0: ffff888077234950 ((wq_completion)wg-kex-wg1#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 379.172396][ T36] #1: ffffc90004cbfc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 379.172451][ T36] #2: ffff88807fa31480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 379.172508][ T36] #3: ffff8880358cdc58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 379.172565][ T36] locks held by kworker/0:7/5903: 1, on CPU#0: [ 379.172578][ T36] #0: ffffffff8fff65c0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 [ 379.172625][ T36] locks held by kworker/u8:16/5905: 1, on CPU#1: [ 379.172638][ T36] #0: ffffffff8fff65c0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_thread+0x5c/0xfb0 [ 379.172683][ T36] [ 379.172689][ T36] ============================================= [ 379.172689][ T36] [ 379.172698][ T36] NMI backtrace for cpu 1 [ 379.172713][ T36] CPU: 1 UID: 0 PID: 36 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 379.172733][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 379.172744][ T36] Call Trace: [ 379.172752][ T36] [ 379.172761][ T36] dump_stack_lvl+0xe8/0x150 [ 379.172791][ T36] nmi_cpu_backtrace+0x274/0x2d0 [ 379.172812][ T36] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 379.172838][ T36] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 379.172861][ T36] sys_info+0x135/0x170 [ 379.172887][ T36] watchdog+0x1073/0x10f0 [ 379.172921][ T36] ? watchdog+0x209/0x10f0 [ 379.172955][ T36] kthread+0x38b/0x480 [ 379.172978][ T36] ? __pfx_watchdog+0x10/0x10 [ 379.173001][ T36] ? __pfx_kthread+0x10/0x10 [ 379.173026][ T36] ret_from_fork+0x514/0xb70 [ 379.173051][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 379.173074][ T36] ? __switch_to+0xc78/0x1410 [ 379.173096][ T36] ? __pfx_kthread+0x10/0x10 [ 379.173119][ T36] ret_from_fork_asm+0x1a/0x30 [ 379.173157][ T36] [ 379.173165][ T36] Sending NMI from CPU 1 to CPUs 0: [ 379.173193][ C0] NMI backtrace for cpu 0 [ 379.173208][ C0] CPU: 0 UID: 0 PID: 3230 Comm: kworker/R-bat_e Not tainted syzkaller #0 PREEMPT(full) [ 379.173227][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 379.173238][ C0] Workqueue: bat_events batadv_tt_purge [ 379.173257][ C0] RIP: 0010:its_return_thunk+0x0/0x10 [ 379.173284][ C0] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e9 4b b6 27 f5 cc [ 379.173299][ C0] RSP: 0018:ffffc900000077b8 EFLAGS: 00000246 [ 379.173314][ C0] RAX: ffffc90000007900 RBX: ffff888185b86000 RCX: 0000000000000000 [ 379.173326][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90000007920 [ 379.173337][ C0] RBP: ffffc900000079a0 R08: ffffc9000000791f R09: 0000000000000000 [ 379.173349][ C0] R10: ffffc90000007900 R11: fffff52000000f24 R12: 1ffff92000000f1c [ 379.173361][ C0] R13: ffffc90000007900 R14: ffffc90000007a60 R15: dffffc0000000000 [ 379.173373][ C0] FS: 0000000000000000(0000) GS:ffff8881233fb000(0000) knlGS:0000000000000000 [ 379.173387][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 379.173400][ C0] CR2: 000055556c154e38 CR3: 0000000033e10000 CR4: 00000000003526f0 [ 379.173417][ C0] Call Trace: [ 379.173424][ C0] [ 379.173430][ C0] ipt_do_table+0xca/0x15d0 [ 379.173463][ C0] ? ipt_do_table+0x2b9/0x15d0 [ 379.173483][ C0] ? __pfx_ipt_do_table+0x10/0x10 [ 379.173505][ C0] ? iptable_mangle_hook+0x18a/0x4c0 [ 379.173529][ C0] ? __pfx_ipt_do_table+0x10/0x10 [ 379.173549][ C0] nf_hook_slow+0xc5/0x220 [ 379.173569][ C0] NF_HOOK+0x21f/0x3c0 [ 379.173591][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 379.173613][ C0] ? NF_HOOK+0x9e/0x3c0 [ 379.173634][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 379.173656][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 379.173681][ C0] ? ip_local_deliver+0x113/0x190 [ 379.173704][ C0] NF_HOOK+0x336/0x3c0 [ 379.173726][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 379.173747][ C0] ? NF_HOOK+0x9e/0x3c0 [ 379.173767][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 379.173797][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 379.173818][ C0] ? ip_rcv_core+0x88d/0xd50 [ 379.173841][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 379.173863][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 379.173884][ C0] process_backlog+0xa6b/0x18b0 [ 379.173910][ C0] ? process_backlog+0x3de/0x18b0 [ 379.173941][ C0] __napi_poll+0xaa/0x330 [ 379.173965][ C0] net_rx_action+0x61d/0xf50 [ 379.173994][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 379.174032][ C0] handle_softirqs+0x265/0x8d0 [ 379.174060][ C0] ? batadv_tt_purge+0x4ee/0xa40 [ 379.174075][ C0] do_softirq+0x77/0xd0 [ 379.174096][ C0] [ 379.174102][ C0] [ 379.174108][ C0] __local_bh_enable_ip+0x100/0x140 [ 379.174130][ C0] batadv_tt_purge+0x4ee/0xa40 [ 379.174150][ C0] ? process_scheduled_works+0x97a/0x1630 [ 379.174174][ C0] process_scheduled_works+0xc3d/0x1630 [ 379.174213][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 379.174240][ C0] ? assign_work+0x3af/0x5d0 [ 379.174266][ C0] rescuer_thread+0x84a/0x12a0 [ 379.174286][ C0] ? rescuer_thread+0xb8/0x12a0 [ 379.174312][ C0] kthread+0x38b/0x480 [ 379.174331][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 379.174347][ C0] ? __pfx_kthread+0x10/0x10 [ 379.174367][ C0] ret_from_fork+0x514/0xb70 [ 379.174387][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 379.174405][ C0] ? __switch_to+0xc78/0x1410 [ 379.174422][ C0] ? __pfx_kthread+0x10/0x10 [ 379.174441][ C0] ret_from_fork_asm+0x1a/0x30 [ 379.174468][ C0] [ 379.175191][ T36] Kernel panic - not syncing: hung_task: blocked tasks [ 381.946507][ T36] CPU: 1 UID: 0 PID: 36 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 381.955644][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 381.965806][ T36] Call Trace: [ 381.969110][ T36] [ 381.972069][ T36] vpanic+0x26f/0x710 [ 381.976087][ T36] panic+0xc5/0xd0 [ 381.979831][ T36] ? __pfx_panic+0x10/0x10 [ 381.984278][ T36] ? wq_watchdog_touch+0xf9/0x160 [ 381.989345][ T36] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 381.995530][ T36] watchdog+0x10e7/0x10f0 [ 381.999894][ T36] ? watchdog+0x209/0x10f0 [ 382.004430][ T36] kthread+0x38b/0x480 [ 382.008536][ T36] ? __pfx_watchdog+0x10/0x10 [ 382.013336][ T36] ? __pfx_kthread+0x10/0x10 [ 382.017955][ T36] ret_from_fork+0x514/0xb70 [ 382.022590][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 382.027740][ T36] ? __switch_to+0xc78/0x1410 [ 382.032461][ T36] ? __pfx_kthread+0x10/0x10 [ 382.037092][ T36] ret_from_fork_asm+0x1a/0x30 [ 382.041914][ T36] [ 382.046047][ T36] Kernel Offset: disabled [ 382.050389][ T36] Rebooting in 86400 seconds..