last executing test programs: 1m45.408221551s ago: executing program 4 (id=76): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4004810) socket$nl_netfilter(0x10, 0x3, 0xc) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@v2={0x2000000, [{0x8000, 0x8}, {0x40000, 0xfffffffe}]}, 0x14, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x35dc00, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) socket$nl_route(0x10, 0x3, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0xffe, 0x3, 0x1000, 0x3a, 0x0, 0x0, 0x7}, 0x75) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000e868495fb58d00b6ad1f50ad32d6ad25dfd73a015e0ca6a0f68a7d007dc6751dfb265a0e3ccae669e173a64bc1cfd514600650a58f145ff1205fc9ddaa275e687d452d64e7cc957d77578f4c25235138d5521f9453559c35da860e8efbc64e57cbb7aee976f2b54421eed73d5661cfeecf9c66c54c3b3ffe1b4ce25d7c983cd44c05bd0a48dfe3e26e7a23129d6606ed28a69989d552af6d9a9df2c3af36e0360070011bbecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f163d1a1a83109753f54b21cd027edd68149ee99eebc6f7d6dd4aed4af7588c8e1b44ccb19e810879b81a7000000e7ffffff00000000d7900a820b63278f4e9a217b98ef7042ad2a928903000000cbe43a1ed25268816b00000000000009d27d753a30a147b24a48435bd8a568669596e9e0867958e1dd7a0defb6670c06054002238260000000000040587c1ed797aa21a38e1e389f640a0b8b0000000000a835ad0f61ba739cd0c31b05c00fba8a4aee676d7caa2e53b91a68ff2e60da7b01a2e5785a238afa4aba70c08b0d71b6f72d6a8d87fb08533d97ad96d3943c4cc8306dac433a5cdf78b04963d679d5a5d07e618a1ef9057fec00f9e93021f5a8d30e716de8cde9c6000000000c3b64d10f0939b42b33ab2a8717096c58bb3bb1d457d8bb96870f5a7e2ba31fd69bb80235d957eaa9a40b764e5381ffa604aaafb76a980e72b408f686b185736693089213b4e140f8f38e5589663115093889deb646122a5dc5a9e5ba4d37749a36b880110e2bf524b79bc91105f1d3f7d0de694a9417d68694f17ba5e27ea1cec518b93fadcfe0de010ae9be3273ff73c34b5695080a35bfa5c69e3b533e1b939c81b3beda037b7191cb0000000000000000000010e5d683b8938db5c305cf7e6e62a6890ba9e1f4ee64f8202b59de5036569febfaa95f4633db108b2f786333ec7bacc927f4a1785165b5d2444b4c022bb5cff472e6a0c8ee9d6d8df83b704669147b732ac508c9b9f0ca0a1ce45319d43d4643eb285835daf2065b57bebd61ad6671296c27253a5f9688d57c91ccd40ffe2dbc5dd1613a2e6f5b363cc8d205ce6ef3c3c6ded7dd3dfdb39008d8997213f68cdc971c1d6fdacb7729a5560880a77525e9cfb94ef1735dfe74e6b948697f7e3580436b532a82e315d56b17a5dba98436cc24babaae409f0aab0b40af116001bc85492455956e853ead08b5793d4ecf72378a3dfd9cc837b1c66212d9a2be8fd6341c2f837c7fe09924a51ec42912856cce3d3b2d092c80813aad03e1e63a655f4138730f302df339f30a4fbd453c9a0fba"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000010000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000308500000005000000bca900000000000035090100000000009500500000000006b702000000000000739af0ff00000000b5090200a3b00000dbaaf0fff10000002f8900000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000038453660432eb840bf980000000000003608fffff3ffffff8500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setuid(r1) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) 1m43.042695769s ago: executing program 4 (id=79): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}}, 0x0, 0x0, 0x3fc, 0x0, 0x1}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000000c0)=0x9d, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r4 = socket$nl_route(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) 1m41.329311092s ago: executing program 4 (id=82): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1, 0x0, 0x10000000}, 0x18) r3 = dup(r0) write$6lowpan_enable(r3, 0x0, 0x0) r4 = syz_io_uring_setup(0x7aad, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x35e, 0x0, r3}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40055) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x11, 0x4004, @fd_index=0x1, 0xfffffffffffffffd, 0x0, 0x0, 0x4, 0x1}) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) io_uring_enter(r4, 0x2ced, 0xef92, 0x0, 0x0, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x8}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vim2m(&(0x7f0000019380), 0xfffffffb, 0x2) 1m39.13009002s ago: executing program 4 (id=87): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r2 = fcntl$dupfd(r1, 0x0, r1) write$binfmt_script(r2, &(0x7f0000000100), 0xfffffd9d) write$P9_RXATTRWALK(r2, &(0x7f0000000000)={0xf, 0x1f, 0x2, 0x4}, 0xca80) close_range(r0, 0xffffffffffffffff, 0x0) 1m38.902450938s ago: executing program 2 (id=89): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 1m38.405742257s ago: executing program 4 (id=90): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x880) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m31.446824516s ago: executing program 2 (id=98): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x4814) 1m30.865883038s ago: executing program 2 (id=100): syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040f0402030604"], 0x7) 1m30.440065721s ago: executing program 4 (id=102): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000001200)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000001240)='\vH\x81\xa2\xeb\x9e\x14\xd4\xe4\xc5\xce\xe69.\xba\xa2O\"\xda\x1b;\x93\xb4\xc6P\xd6\x01\x10\xa0\x12\xce9\xdb`1K\xa3\xa2N\xf8\x1b\x86>\xe8', 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x24004080) socket(0x21, 0x80000, 0x0) socket$nl_route(0x10, 0x3, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r1 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) socket$inet6_tcp(0xa, 0x1, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x7, 0x3, 0xfffffffffffffffb, 0x432c, 0x3, 0x1, {0xffffffffffffffff, 0x6, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d615, 0x3fa, 0x7fffffff, 0x9, 0x1000, 0x8, 0x0, 0x0, 0x3ff}}, {0x0, 0xa}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080), 0x7f04) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) bind$alg(0xffffffffffffffff, &(0x7f0000000400)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r2}, 0x18) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r1, 0x4048ae9b, 0x0) keyctl$setperm(0x5, 0x0, 0x1100100) 1m29.498788284s ago: executing program 2 (id=107): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, 0xfffffffffffffffe, &(0x7f0000000000)) 1m27.856632999s ago: executing program 2 (id=109): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r3}, 0x10) getrusage(0x0, &(0x7f0000000340)) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x6, 0x7, 0x8, 0x6}, {0x7cbe, 0x5, 0x3e, 0x3}, {0x0, 0x6, 0x5, 0x2}]}) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) setuid(0xee01) syz_init_net_socket$ax25(0x3, 0x7, 0xcc) socket$netlink(0x10, 0x3, 0x13) mount$9p_virtio(0x0, 0x0, &(0x7f00000004c0), 0x8c, 0x0) syslog(0x3, &(0x7f0000000700)=""/231, 0xe7) 1m22.138017155s ago: executing program 2 (id=112): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x880) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m17.175790868s ago: executing program 1 (id=118): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}}, 0x0, 0x0, 0x3fc, 0x0, 0x1}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000000c0)=0x9d, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000040)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = socket$nl_route(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) 1m12.550908966s ago: executing program 32 (id=102): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000001200)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000001240)='\vH\x81\xa2\xeb\x9e\x14\xd4\xe4\xc5\xce\xe69.\xba\xa2O\"\xda\x1b;\x93\xb4\xc6P\xd6\x01\x10\xa0\x12\xce9\xdb`1K\xa3\xa2N\xf8\x1b\x86>\xe8', 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x24004080) socket(0x21, 0x80000, 0x0) socket$nl_route(0x10, 0x3, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r1 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) socket$inet6_tcp(0xa, 0x1, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000500)={0xa0, 0x0, 0x0, {{0x7, 0x3, 0xfffffffffffffffb, 0x432c, 0x3, 0x1, {0xffffffffffffffff, 0x6, 0x20ff, 0x7ff, 0xf7c, 0x800000000000d615, 0x3fa, 0x7fffffff, 0x9, 0x1000, 0x8, 0x0, 0x0, 0x3ff}}, {0x0, 0xa}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080), 0x7f04) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) bind$alg(0xffffffffffffffff, &(0x7f0000000400)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r2}, 0x18) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r1, 0x4048ae9b, 0x0) keyctl$setperm(0x5, 0x0, 0x1100100) 1m12.12197483s ago: executing program 1 (id=122): fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4}, 0x18) connect$can_j1939(r3, &(0x7f0000000300)={0x1d, r4, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r3, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 1m6.6209627s ago: executing program 33 (id=112): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x880) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m6.317799125s ago: executing program 1 (id=127): setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x88f, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) write$evdev(r2, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r3, 0x402, 0x8000001c) r4 = open$dir(&(0x7f0000000080)='.\x00', 0x480, 0x10) fcntl$notify(r4, 0x402, 0x80000023) r5 = open(&(0x7f0000002180)='.\x00', 0x101000, 0x8a) fcntl$notify(r5, 0x402, 0x4) r6 = openat(0xffffffffffffff9c, 0x0, 0x24c01, 0x0) lseek(r6, 0x1, 0x1) 1m3.629869556s ago: executing program 3 (id=129): syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a8090902"], 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001740), 0x80000, 0x0) ioctl$RTC_IRQP_READ(r0, 0x8004700b, &(0x7f0000000000)) 1m0.564091023s ago: executing program 3 (id=131): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x100, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) 1m0.50562564s ago: executing program 1 (id=132): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) msgctl$IPC_STAT(0x0, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x50, r4, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x15}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x50}}, 0x40000) 55.6787991s ago: executing program 3 (id=133): r0 = io_uring_setup(0x70c5, &(0x7f0000000180)={0x0, 0xfffffffc, 0x10, 0x8000001}) r1 = socket(0x2b, 0x1, 0x1) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xe) timer_create(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) r4 = openat$vimc1(0xffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_PARM(r4, 0xc0cc5616, 0x0) write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[], 0xfce1) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x240000c4) close_range(r0, 0xffffffffffffffff, 0x0) 53.696314061s ago: executing program 1 (id=135): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000200)=@raw=[@exit, @ldst, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @exit], &(0x7f0000000280)='GPL\x00', 0x4, 0xdf, &(0x7f00000002c0)=""/223, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0xc, 0x0, 0x2, 0x10, &(0x7f00000004c0), 0x10}, 0x80) syz_io_uring_setup(0x1ab3, &(0x7f0000000040)={0x0, 0xe714, 0x8000, 0x1, 0x21b}, &(0x7f00000000c0), &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x803400, 0x0) setpgid(0x0, r0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100f0, 0x0) 53.696020638s ago: executing program 3 (id=136): syz_open_dev$I2C(&(0x7f0000003000), 0x20200000, 0x1) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, 0x0, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) r1 = syz_io_uring_setup(0x487, &(0x7f0000000100)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r1}) io_uring_enter(r1, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 51.213593378s ago: executing program 3 (id=138): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$netlink(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@empty, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 50.281692837s ago: executing program 1 (id=139): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) 49.186018183s ago: executing program 0 (id=140): setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x88f, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) write$evdev(r2, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r3, 0x402, 0x8000001c) r4 = open$dir(&(0x7f0000000080)='.\x00', 0x480, 0x10) fcntl$notify(r4, 0x402, 0x80000023) r5 = open(&(0x7f0000002180)='.\x00', 0x101000, 0x8a) fcntl$notify(r5, 0x402, 0x4) r6 = openat(0xffffffffffffff9c, 0x0, 0x24c01, 0x0) writev(r6, &(0x7f0000000240)=[{0x0}, {0x0}, {&(0x7f00000003c0)="543dbf774f46eb7c9d4c45610d4ed164ed0bb635311f952cef66d7a4d254107cdc2fbd669f340837d7efcc70d90b", 0x2e}, {&(0x7f0000000500)}, {0x0}, {0x0}], 0x6) 48.337074893s ago: executing program 3 (id=141): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp=0x25}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r2, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 38.243815577s ago: executing program 0 (id=142): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x332e, &(0x7f0000000480)={0x0, 0xaeb7, 0x40, 0x3, 0x2d9}, 0x0, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r2, 0x1e, 0x0, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1e3003, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000300)) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000000640)=[{{&(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10, 0x0}}, {{&(0x7f0000000240)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_retopts={{0xc}}], 0xc}}], 0x2, 0x4000000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000004140)=ANY=[@ANYBLOB="02000000040000", @ANYBLOB="000000000000000018004a28e495d6e91be6fb1d9a20ff730e5f", @ANYRESDEC=r0, @ANYBLOB="000000000200"/27], 0x50) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) io_submit(0x0, 0x0, 0x0) 33.253046236s ago: executing program 34 (id=139): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000380)) 33.223259018s ago: executing program 0 (id=144): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1, 0x0, 0x10000000}, 0x18) r3 = dup(r0) write$6lowpan_enable(r3, 0x0, 0x0) r4 = syz_io_uring_setup(0x7aad, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x35e, 0x0, r3}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40055) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x11, 0x4004, @fd_index=0x1, 0xfffffffffffffffd, 0x0, 0x0, 0x4, 0x1}) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) io_uring_enter(r4, 0x2ced, 0xef92, 0x0, 0x0, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x8}, 0x10) syz_open_dev$vim2m(&(0x7f0000019380), 0xfffffffb, 0x2) socket(0x15, 0x5, 0x0) 32.273422539s ago: executing program 35 (id=141): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp=0x25}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r2, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 25.353754323s ago: executing program 0 (id=146): syz_open_dev$I2C(&(0x7f0000003000), 0x20200000, 0x1) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, 0x0, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) r1 = syz_io_uring_setup(0x487, &(0x7f0000000100)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r1}) io_uring_enter(r1, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 23.347963268s ago: executing program 0 (id=147): r0 = io_uring_setup(0x70c5, &(0x7f0000000180)={0x0, 0xfffffffc, 0x10, 0x8000001}) r1 = socket(0x2b, 0x1, 0x1) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xe) timer_create(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) r4 = openat$vimc1(0xffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_PARM(r4, 0xc0cc5616, 0x0) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x240000c4) close_range(r0, 0xffffffffffffffff, 0x0) 16.338111373s ago: executing program 0 (id=148): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)={0x118, 0x2e, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x105, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x8, 0xa, 0x0, 0x0, @pid}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3604000000000000007c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dfbee89b6da592902a1351a9823c35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x400c445}, 0x40) 0s ago: executing program 36 (id=148): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)={0x118, 0x2e, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x105, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x8, 0xa, 0x0, 0x0, @pid}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3604000000000000007c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dfbee89b6da592902a1351a9823c35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x400c445}, 0x40) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.145' (ED25519) to the list of known hosts. [ 80.957549][ T5788] cgroup: Unknown subsys name 'net' [ 81.238481][ T5788] cgroup: Unknown subsys name 'cpuset' [ 81.313719][ T5788] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.223792][ T5788] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.033910][ T5805] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.045689][ T5813] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.067584][ T5816] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.069982][ T5816] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.071116][ T5816] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.076400][ T5816] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.077827][ T5816] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.079261][ T5816] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.080135][ T5816] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.135925][ T5819] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.144849][ T5816] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.156154][ T5811] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.183176][ T5811] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.192159][ T5813] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.196400][ T5813] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.197176][ T5813] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.199192][ T5813] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.226871][ T5817] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.235288][ T5813] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.235771][ T5817] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.237760][ T5813] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.245908][ T5817] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.248188][ T5817] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.251279][ T5805] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.251565][ T5805] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.870645][ T10] cfg80211: failed to load regulatory.db [ 87.097045][ T5807] chnl_net:caif_netlink_parms(): no params data found [ 87.232043][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 87.437157][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 87.557861][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 87.592827][ T5802] chnl_net:caif_netlink_parms(): no params data found [ 88.034267][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.035370][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.035738][ T5807] bridge_slave_0: entered allmulticast mode [ 88.037439][ T5807] bridge_slave_0: entered promiscuous mode [ 88.216573][ T61] Bluetooth: hci4: command tx timeout [ 88.226212][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.226365][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.226641][ T5807] bridge_slave_1: entered allmulticast mode [ 88.229308][ T5807] bridge_slave_1: entered promiscuous mode [ 88.253703][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.253829][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.254009][ T5803] bridge_slave_0: entered allmulticast mode [ 88.256736][ T5803] bridge_slave_0: entered promiscuous mode [ 88.293249][ T61] Bluetooth: hci3: command tx timeout [ 88.373276][ T61] Bluetooth: hci1: command tx timeout [ 88.373474][ T61] Bluetooth: hci2: command tx timeout [ 88.373551][ T61] Bluetooth: hci0: command tx timeout [ 88.434165][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.434267][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.434405][ T5803] bridge_slave_1: entered allmulticast mode [ 88.436030][ T5803] bridge_slave_1: entered promiscuous mode [ 88.807835][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.808087][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.808250][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.808417][ T5799] bridge_slave_0: entered allmulticast mode [ 88.810242][ T5799] bridge_slave_0: entered promiscuous mode [ 89.077436][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.077682][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.077777][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.077886][ T5799] bridge_slave_1: entered allmulticast mode [ 89.079355][ T5799] bridge_slave_1: entered promiscuous mode [ 89.088018][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.175172][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.175269][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.175396][ T5800] bridge_slave_0: entered allmulticast mode [ 89.177153][ T5800] bridge_slave_0: entered promiscuous mode [ 89.296643][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.296886][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.297023][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.297136][ T5802] bridge_slave_0: entered allmulticast mode [ 89.298666][ T5802] bridge_slave_0: entered promiscuous mode [ 89.300453][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.300575][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.300836][ T5800] bridge_slave_1: entered allmulticast mode [ 89.302750][ T5800] bridge_slave_1: entered promiscuous mode [ 89.724391][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.724506][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.724620][ T5802] bridge_slave_1: entered allmulticast mode [ 89.726263][ T5802] bridge_slave_1: entered promiscuous mode [ 89.805512][ T5807] team0: Port device team_slave_0 added [ 89.809224][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.045824][ T5807] team0: Port device team_slave_1 added [ 90.048309][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.049836][ T5803] team0: Port device team_slave_0 added [ 90.107638][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.293233][ T5809] Bluetooth: hci4: command tx timeout [ 90.297248][ T5803] team0: Port device team_slave_1 added [ 90.300886][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.305821][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.373267][ T5809] Bluetooth: hci3: command tx timeout [ 90.453261][ T5809] Bluetooth: hci0: command tx timeout [ 90.453296][ T5809] Bluetooth: hci2: command tx timeout [ 90.453314][ T5809] Bluetooth: hci1: command tx timeout [ 90.546060][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.635204][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.635216][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.635229][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.865380][ T5799] team0: Port device team_slave_0 added [ 91.055033][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.055049][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.055076][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.058568][ T5799] team0: Port device team_slave_1 added [ 91.059638][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.059651][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.059666][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.150556][ T5800] team0: Port device team_slave_0 added [ 91.234751][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.234766][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.234779][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.237122][ T5802] team0: Port device team_slave_0 added [ 91.239259][ T5800] team0: Port device team_slave_1 added [ 91.322480][ T5802] team0: Port device team_slave_1 added [ 91.415388][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.415400][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.415412][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.614925][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.615034][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.615050][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.694961][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.694977][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.694999][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.955192][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.955209][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.955231][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.956433][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.956447][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.956470][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.962814][ T5807] hsr_slave_0: entered promiscuous mode [ 91.966044][ T5807] hsr_slave_1: entered promiscuous mode [ 92.049015][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.049031][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.049054][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.075166][ T5803] hsr_slave_0: entered promiscuous mode [ 92.076557][ T5803] hsr_slave_1: entered promiscuous mode [ 92.077866][ T5803] debugfs: 'hsr0' already exists in 'hsr' [ 92.077985][ T5803] Cannot create hsr debugfs directory [ 92.373323][ T5809] Bluetooth: hci4: command tx timeout [ 92.453204][ T5809] Bluetooth: hci3: command tx timeout [ 92.479987][ T5799] hsr_slave_0: entered promiscuous mode [ 92.480866][ T5799] hsr_slave_1: entered promiscuous mode [ 92.481484][ T5799] debugfs: 'hsr0' already exists in 'hsr' [ 92.481505][ T5799] Cannot create hsr debugfs directory [ 92.533370][ T5809] Bluetooth: hci1: command tx timeout [ 92.533403][ T5809] Bluetooth: hci2: command tx timeout [ 92.533423][ T5809] Bluetooth: hci0: command tx timeout [ 92.829909][ T5800] hsr_slave_0: entered promiscuous mode [ 92.830734][ T5800] hsr_slave_1: entered promiscuous mode [ 92.831453][ T5800] debugfs: 'hsr0' already exists in 'hsr' [ 92.831470][ T5800] Cannot create hsr debugfs directory [ 92.920559][ T5802] hsr_slave_0: entered promiscuous mode [ 92.921446][ T5802] hsr_slave_1: entered promiscuous mode [ 92.922012][ T5802] debugfs: 'hsr0' already exists in 'hsr' [ 92.922033][ T5802] Cannot create hsr debugfs directory [ 94.300057][ T5807] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.342581][ T5807] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.379024][ T5807] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.430608][ T5807] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.453311][ T61] Bluetooth: hci4: command tx timeout [ 94.522626][ T5800] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.533813][ T61] Bluetooth: hci3: command tx timeout [ 94.568873][ T5800] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.613198][ T61] Bluetooth: hci0: command tx timeout [ 94.613230][ T61] Bluetooth: hci2: command tx timeout [ 94.613250][ T61] Bluetooth: hci1: command tx timeout [ 94.631797][ T5800] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.659431][ T5800] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.767759][ T5799] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.810622][ T5799] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.834898][ T5799] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.892061][ T5799] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.022638][ T5803] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.063836][ T5803] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.092835][ T5803] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.139676][ T5803] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.289446][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.305539][ T5802] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.350603][ T5802] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.390290][ T5802] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.435605][ T5802] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.516142][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.561552][ T1067] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.562142][ T1067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.594429][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.605944][ T1503] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.606087][ T1503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.686354][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.695691][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.738080][ T4318] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.738228][ T4318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.772517][ T4318] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.772656][ T4318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.812016][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.852548][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.860930][ T1503] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.861156][ T1503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.897062][ T1503] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.897272][ T1503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.980556][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.030728][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.041103][ T1067] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.041228][ T1067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.101521][ T1067] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.101665][ T1067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.183700][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.228682][ T4318] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.228903][ T4318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.271741][ T4318] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.286812][ T4318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.340252][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.622156][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.661501][ T5807] veth0_vlan: entered promiscuous mode [ 96.715624][ T5807] veth1_vlan: entered promiscuous mode [ 96.868882][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.912646][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.928049][ T5800] veth0_vlan: entered promiscuous mode [ 96.949943][ T5807] veth0_macvtap: entered promiscuous mode [ 96.965381][ T5800] veth1_vlan: entered promiscuous mode [ 96.968276][ T5807] veth1_macvtap: entered promiscuous mode [ 97.042112][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.050688][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.110843][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.126721][ T5799] veth0_vlan: entered promiscuous mode [ 97.161475][ T1487] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.176479][ T1487] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.179467][ T5800] veth0_macvtap: entered promiscuous mode [ 97.198234][ T1487] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.212020][ T1487] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.212445][ T5803] veth0_vlan: entered promiscuous mode [ 97.220009][ T5799] veth1_vlan: entered promiscuous mode [ 97.226443][ T5800] veth1_macvtap: entered promiscuous mode [ 97.375979][ T5803] veth1_vlan: entered promiscuous mode [ 97.441672][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.483405][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.539741][ T4318] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.547198][ T4318] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.551483][ T1431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.551510][ T1431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.581079][ T5799] veth0_macvtap: entered promiscuous mode [ 97.587804][ T4318] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.603758][ T4318] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.638280][ T5799] veth1_macvtap: entered promiscuous mode [ 97.700376][ T1503] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.700396][ T1503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.701696][ T5803] veth0_macvtap: entered promiscuous mode [ 97.785599][ T5803] veth1_macvtap: entered promiscuous mode [ 97.845692][ T5802] veth0_vlan: entered promiscuous mode [ 97.876622][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.936887][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.940253][ T1067] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.940273][ T1067] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.953275][ T5802] veth1_vlan: entered promiscuous mode [ 98.020349][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.078323][ T4318] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.097281][ T4318] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.128633][ T4318] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.132179][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.164677][ T4318] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.201667][ T1431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.201687][ T1431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.264328][ T1067] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.289431][ T1067] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.298567][ T1067] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.329622][ T1067] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.347403][ T5926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7'. [ 98.425584][ T5927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.527477][ T5802] veth0_macvtap: entered promiscuous mode [ 98.600042][ T5929] 9pnet_virtio: no channels available for device syz [ 98.656138][ T5802] veth1_macvtap: entered promiscuous mode [ 98.730444][ T4318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.730465][ T4318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.808108][ T1535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.808128][ T1535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.005648][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.136063][ T1067] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.136084][ T1067] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.294950][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.375148][ T1535] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.505045][ T1535] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.508063][ T1535] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.508955][ T1535] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.666157][ T1067] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.666178][ T1067] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.023008][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 100.024203][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 100.093027][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 100.093855][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 100.095056][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 100.096224][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 100.153151][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 100.374041][ T61] Bluetooth: hci4: command 0x0406 tx timeout [ 100.523048][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 100.613096][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 100.613172][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 100.617607][ T5947] 9pnet_virtio: no channels available for device syz [ 100.684879][ T5947] Zero length message leads to an empty skb [ 100.734553][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.734567][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.989910][ T5952] 9pnet_virtio: no channels available for device syz [ 101.215961][ T1067] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.215980][ T1067] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.671599][ T5966] 9pnet_virtio: no channels available for device syz [ 108.942042][ T6014] 9pnet_virtio: no channels available for device syz [ 109.129061][ C1] vkms_vblank_simulate: vblank timer overrun [ 109.665868][ C1] vkms_vblank_simulate: vblank timer overrun [ 109.887233][ C1] vkms_vblank_simulate: vblank timer overrun [ 109.894385][ T37] audit: type=1326 audit(1763993039.455:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6010 comm="syz.1.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08a44f749 code=0x7ffc0000 [ 109.894432][ T37] audit: type=1326 audit(1763993039.455:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6010 comm="syz.1.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08a44f749 code=0x7ffc0000 [ 109.894470][ T37] audit: type=1326 audit(1763993039.465:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6010 comm="syz.1.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd08a44f749 code=0x7ffc0000 [ 109.894508][ T37] audit: type=1326 audit(1763993039.465:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6010 comm="syz.1.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08a44f749 code=0x7ffc0000 [ 109.894555][ T37] audit: type=1326 audit(1763993039.465:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6010 comm="syz.1.28" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08a44f749 code=0x7ffc0000 [ 110.220391][ T6023] 9pnet_virtio: no channels available for device syz [ 113.101268][ C1] vkms_vblank_simulate: vblank timer overrun [ 113.264782][ C1] vkms_vblank_simulate: vblank timer overrun [ 113.932737][ C1] vkms_vblank_simulate: vblank timer overrun [ 113.996930][ C1] vkms_vblank_simulate: vblank timer overrun [ 116.658574][ T37] audit: type=1326 audit(1763993046.485:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6052 comm="syz.3.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ee9a6f749 code=0x7ffc0000 [ 116.658966][ T37] audit: type=1326 audit(1763993046.485:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6052 comm="syz.3.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ee9a6f749 code=0x7ffc0000 [ 116.659217][ T37] audit: type=1326 audit(1763993046.485:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6052 comm="syz.3.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8ee9a6f749 code=0x7ffc0000 [ 116.659619][ T37] audit: type=1326 audit(1763993046.495:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6052 comm="syz.3.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ee9a6f749 code=0x7ffc0000 [ 116.660452][ T37] audit: type=1326 audit(1763993046.495:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6052 comm="syz.3.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ee9a6f749 code=0x7ffc0000 [ 117.425520][ T6057] 9pnet_virtio: no channels available for device syz [ 118.251466][ T6077] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 119.766851][ C0] vkms_vblank_simulate: vblank timer overrun [ 122.316418][ T6107] 9pnet_virtio: no channels available for device syz [ 122.777000][ T6113] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 122.819233][ T6113] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 123.264733][ T6120] 9pnet_virtio: no channels available for device syz [ 125.312634][ T6131] 9pnet_virtio: no channels available for device syz [ 129.405282][ T6166] ubi31: attaching mtd0 [ 129.474792][ T6166] ubi31: scanning is finished [ 129.474809][ T6166] ubi31: empty MTD device detected [ 130.891870][ T6172] 9pnet_virtio: no channels available for device syz [ 131.241842][ T6175] fuse: Bad value for 'fd' [ 132.966079][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.966174][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.002274][ T6166] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 133.002302][ T6166] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 133.002319][ T6166] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 133.002335][ T6166] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 133.002352][ T6166] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 133.002368][ T6166] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 133.002384][ T6166] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2143931080 [ 133.002404][ T6166] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 133.003466][ T6190] ubi31: background thread "ubi_bgt31d" started, PID 6190 [ 133.185703][ T6191] 9pnet_virtio: no channels available for device syz [ 133.763890][ T6197] netlink: 16 bytes leftover after parsing attributes in process `syz.3.92'. [ 134.275436][ T37] audit: type=1326 audit(1763993064.055:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6200 comm="syz.1.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08a44f749 code=0x7ffc0000 [ 134.275776][ T37] audit: type=1326 audit(1763993064.055:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6200 comm="syz.1.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08a44f749 code=0x7ffc0000 [ 134.276053][ T37] audit: type=1326 audit(1763993064.055:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6200 comm="syz.1.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd08a44f749 code=0x7ffc0000 [ 134.290241][ T37] audit: type=1326 audit(1763993064.065:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6200 comm="syz.1.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08a44f749 code=0x7ffc0000 [ 134.290676][ T37] audit: type=1326 audit(1763993064.065:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6200 comm="syz.1.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08a44f749 code=0x7ffc0000 [ 134.291002][ T37] audit: type=1326 audit(1763993064.065:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6200 comm="syz.1.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd08a44f749 code=0x7ffc0000 [ 134.291471][ T37] audit: type=1326 audit(1763993064.075:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6200 comm="syz.1.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08a44f749 code=0x7ffc0000 [ 134.291731][ T37] audit: type=1326 audit(1763993064.075:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6200 comm="syz.1.93" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08a44f749 code=0x7ffc0000 [ 135.114963][ T6203] 9pnet_virtio: no channels available for device syz [ 141.189471][ T6220] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 142.394244][ T6237] 9pnet_virtio: no channels available for device syz [ 143.280122][ T37] audit: type=1326 audit(1763993073.115:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6239 comm="syz.1.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08a44f749 code=0x7ffc0000 [ 143.280543][ T37] audit: type=1326 audit(1763993073.115:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6239 comm="syz.1.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08a44f749 code=0x7ffc0000 [ 143.281008][ T37] audit: type=1326 audit(1763993073.115:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6239 comm="syz.1.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd08a44f749 code=0x7ffc0000 [ 143.281319][ T37] audit: type=1326 audit(1763993073.125:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6239 comm="syz.1.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08a44f749 code=0x7ffc0000 [ 143.281702][ T37] audit: type=1326 audit(1763993073.125:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6239 comm="syz.1.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08a44f749 code=0x7ffc0000 [ 143.282230][ T37] audit: type=1326 audit(1763993073.125:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6239 comm="syz.1.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd08a44f749 code=0x7ffc0000 [ 143.282606][ T37] audit: type=1326 audit(1763993073.135:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6239 comm="syz.1.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08a44f749 code=0x7ffc0000 [ 143.282867][ T37] audit: type=1326 audit(1763993073.135:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6239 comm="syz.1.105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08a44f749 code=0x7ffc0000 [ 145.781550][ T6253] 9pnet_virtio: no channels available for device syz [ 151.656205][ T6271] 9pnet_virtio: no channels available for device syz [ 151.657583][ T6271] overlayfs: failed to resolve './bus': -2 [ 155.025651][ T5809] Bluetooth: hci0: ISO packet for unknown connection handle 3072 [ 156.743125][ T37] audit: type=1326 audit(1763993086.095:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6282 comm="syz.1.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08a44f749 code=0x7ffc0000 [ 156.743172][ T37] audit: type=1326 audit(1763993086.105:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6282 comm="syz.1.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08a44f749 code=0x7ffc0000 [ 156.743202][ T37] audit: type=1326 audit(1763993086.105:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6282 comm="syz.1.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd08a44f749 code=0x7ffc0000 [ 156.743241][ T37] audit: type=1326 audit(1763993086.115:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6282 comm="syz.1.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08a44f749 code=0x7ffc0000 [ 156.743275][ T37] audit: type=1326 audit(1763993086.115:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6282 comm="syz.1.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08a44f749 code=0x7ffc0000 [ 156.743302][ T37] audit: type=1326 audit(1763993086.115:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6282 comm="syz.1.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd08a44f749 code=0x7ffc0000 [ 156.743328][ T37] audit: type=1326 audit(1763993086.115:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6282 comm="syz.1.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08a44f749 code=0x7ffc0000 [ 156.743360][ T37] audit: type=1326 audit(1763993086.125:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6282 comm="syz.1.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd08a44f749 code=0x7ffc0000 [ 165.983528][ T6304] 9pnet_virtio: no channels available for device syz [ 177.434940][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 177.441961][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 177.442732][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 177.468210][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 177.468708][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 178.443792][ T5809] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 178.448207][ T5805] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 178.543289][ T5805] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 178.567738][ T5805] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 178.569074][ T5805] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 179.615004][ T5805] Bluetooth: hci5: command tx timeout [ 180.765099][ T6339] ======================================================= [ 180.765099][ T6339] WARNING: The mand mount option has been deprecated and [ 180.765099][ T6339] and is ignored by this kernel. Remove the mand [ 180.765099][ T6339] option from the mount to silence this warning. [ 180.765099][ T6339] ======================================================= [ 181.665851][ T61] Bluetooth: hci5: command tx timeout [ 182.774273][ T61] Bluetooth: hci6: command tx timeout [ 184.033114][ T61] Bluetooth: hci5: command tx timeout [ 185.446909][ T61] Bluetooth: hci6: command tx timeout [ 186.133126][ T5809] Bluetooth: hci5: command tx timeout [ 187.614499][ T5809] Bluetooth: hci6: command tx timeout [ 189.689253][ T5809] Bluetooth: hci6: command tx timeout [ 194.386675][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.386750][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 211.813112][ T5809] Bluetooth: hci1: command 0x0406 tx timeout [ 213.840856][ T5805] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 214.312010][ T5805] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 214.331049][ T5805] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 214.334535][ T5805] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 214.335408][ T5805] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 215.396184][ T5809] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 215.398295][ T5809] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 215.399305][ T5809] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 215.401358][ T5809] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 215.402664][ T5809] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 215.963228][ T6396] netlink: 240 bytes leftover after parsing attributes in process `syz.0.148'. [ 216.543031][ T61] Bluetooth: hci0: command tx timeout [ 217.653052][ T61] Bluetooth: hci2: command tx timeout [ 218.790186][ T61] Bluetooth: hci0: command tx timeout [ 219.733065][ T61] Bluetooth: hci2: command tx timeout [ 222.273014][ T61] Bluetooth: hci0: command tx timeout [ 222.273048][ T61] Bluetooth: hci2: command tx timeout [ 224.293442][ T5809] Bluetooth: hci2: command tx timeout [ 224.293478][ T5809] Bluetooth: hci0: command tx timeout [ 233.431856][ T5809] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 234.519611][ T5809] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 234.701030][ T5805] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 234.702241][ T5805] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 234.720053][ T5805] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 236.773345][ T61] Bluetooth: hci3: command tx timeout [ 238.903022][ T61] Bluetooth: hci3: command tx timeout [ 239.372815][ T5805] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 239.392182][ T5805] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 239.393385][ T5805] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 239.394485][ T5805] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 239.395516][ T5805] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 240.953178][ T5805] Bluetooth: hci3: command tx timeout [ 240.994063][ T61] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 240.997079][ T61] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 240.998088][ T61] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 240.999516][ T61] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 241.002824][ T61] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 241.493241][ T5805] Bluetooth: hci4: command tx timeout [ 243.013418][ T5805] Bluetooth: hci3: command tx timeout [ 243.093086][ T61] Bluetooth: hci6: command tx timeout [ 243.574595][ T61] Bluetooth: hci4: command tx timeout [ 245.173092][ T61] Bluetooth: hci6: command tx timeout [ 245.787568][ T61] Bluetooth: hci4: command tx timeout [ 247.282994][ T61] Bluetooth: hci6: command tx timeout [ 247.813093][ T61] Bluetooth: hci4: command tx timeout [ 249.407432][ T61] Bluetooth: hci6: command tx timeout [ 255.819959][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.820030][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 269.656879][ T5805] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 269.813722][ T5805] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 269.818829][ T5805] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 269.820049][ T5805] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 269.820831][ T5805] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 271.023982][ T5809] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 271.053199][ T5809] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 271.057361][ T5809] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 271.058722][ T5809] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 271.059551][ T5809] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 273.095148][ T5809] Bluetooth: hci7: command tx timeout [ 273.095300][ T5809] Bluetooth: hci5: command tx timeout [ 275.173036][ T5809] Bluetooth: hci5: command tx timeout [ 275.173067][ T5809] Bluetooth: hci7: command tx timeout [ 277.253893][ T5805] Bluetooth: hci7: command tx timeout [ 277.253936][ T5805] Bluetooth: hci5: command tx timeout [ 279.333550][ T5809] Bluetooth: hci5: command tx timeout [ 279.333582][ T5809] Bluetooth: hci7: command tx timeout [ 294.744147][ T5809] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 294.976182][ T5809] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 294.990653][ T5809] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 295.013261][ T5809] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 295.033791][ T5809] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 298.782736][ T5805] Bluetooth: hci8: command tx timeout [ 299.561714][ T5809] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 299.988348][ T5809] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 299.992173][ T5809] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 300.028310][ T5809] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 300.043506][ T5809] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 300.951886][ T5805] Bluetooth: hci8: command tx timeout [ 301.631751][ T5809] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 301.691146][ T5809] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 302.813529][ T61] Bluetooth: hci3: command tx timeout [ 302.819401][ T5809] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 303.013408][ T5809] Bluetooth: hci8: command tx timeout [ 303.235631][ T5809] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 303.241196][ T5809] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 305.066969][ T5809] Bluetooth: hci3: command tx timeout [ 305.094410][ T5809] Bluetooth: hci8: command tx timeout [ 305.333129][ T5809] Bluetooth: hci4: command tx timeout [ 307.100689][ T5809] Bluetooth: hci3: command tx timeout [ 307.413020][ T5809] Bluetooth: hci4: command tx timeout [ 309.173155][ T5809] Bluetooth: hci3: command tx timeout [ 309.493218][ T5809] Bluetooth: hci4: command tx timeout [ 311.572984][ T5809] Bluetooth: hci4: command tx timeout [ 317.269308][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.269382][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 331.286799][ T5805] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 331.311528][ T5805] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 331.328048][ T5805] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 331.339898][ T5805] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 331.343728][ T5805] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 331.884099][ T5805] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 331.920403][ T5805] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 331.922426][ T5805] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 333.423449][ T5805] Bluetooth: hci6: command tx timeout [ 333.430952][ T5805] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 333.695516][ T61] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 336.015602][ T5809] Bluetooth: hci6: command tx timeout [ 336.015654][ T5809] Bluetooth: hci7: command tx timeout [ 338.053993][ T5805] Bluetooth: hci6: command tx timeout [ 338.054085][ T5817] Bluetooth: hci7: command tx timeout [ 340.595866][ T5817] Bluetooth: hci0: command 0x0406 tx timeout [ 340.595906][ T5817] Bluetooth: hci2: command 0x0406 tx timeout [ 340.595929][ T5817] Bluetooth: hci7: command tx timeout [ 340.595949][ T5817] Bluetooth: hci6: command tx timeout [ 342.613012][ T61] Bluetooth: hci7: command tx timeout [ 343.823944][ T1125] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.592192][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 351.607842][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 351.609960][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 351.611434][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 351.612223][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 354.053078][ T5809] Bluetooth: hci5: command tx timeout [ 354.632492][ T61] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 354.651241][ T61] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 354.652336][ T61] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 354.668589][ T61] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 354.671506][ T61] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 355.020776][ T5809] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 355.046523][ T5809] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 355.047865][ T5809] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 355.049127][ T5809] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 355.049958][ T5809] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 356.132973][ T61] Bluetooth: hci5: command tx timeout [ 356.773096][ T61] Bluetooth: hci9: command tx timeout [ 357.173258][ T61] Bluetooth: hci10: command tx timeout [ 358.253211][ T5809] Bluetooth: hci5: command tx timeout [ 358.852965][ T5809] Bluetooth: hci9: command tx timeout [ 359.253041][ T5809] Bluetooth: hci10: command tx timeout [ 360.373029][ T5809] Bluetooth: hci5: command tx timeout [ 360.962932][ T5809] Bluetooth: hci9: command tx timeout [ 361.333047][ T5809] Bluetooth: hci10: command tx timeout [ 363.088866][ T5809] Bluetooth: hci9: command tx timeout [ 363.422999][ T5809] Bluetooth: hci10: command tx timeout [ 369.733527][ T38] INFO: task syz-executor:5803 blocked for more than 143 seconds. [ 369.733555][ T38] Not tainted syzkaller #0 [ 369.733565][ T38] Blocked by coredump. [ 369.733571][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 369.733579][ T38] task:syz-executor state:D stack:21768 pid:5803 tgid:5803 ppid:1 task_flags:0x40054c flags:0x00080003 [ 369.733645][ T38] Call Trace: [ 369.733655][ T38] [ 369.733669][ T38] __schedule+0x16f3/0x4c20 [ 369.733734][ T38] ? __pfx___schedule+0x10/0x10 [ 369.733777][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 369.733805][ T38] rt_mutex_schedule+0x77/0xf0 [ 369.733825][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 369.733846][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 369.733885][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 369.733908][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 369.733930][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 369.733955][ T38] ? __lock_acquire+0xab9/0xd20 [ 369.733990][ T38] ? rcu_barrier+0x4c/0x570 [ 369.734024][ T38] ? rcu_barrier+0x4c/0x570 [ 369.734040][ T38] mutex_lock_nested+0x16a/0x1d0 [ 369.734059][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 369.734082][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 369.734105][ T38] rcu_barrier+0x4c/0x570 [ 369.734128][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 369.734150][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 369.734172][ T38] netdev_run_todo+0x327/0xea0 [ 369.734197][ T38] ? __pfx_netif_state_change+0x10/0x10 [ 369.734224][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 369.734245][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 369.734279][ T38] ? netdev_state_change+0x1ca/0x220 [ 369.734299][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 369.734321][ T38] tun_chr_close+0x13f/0x1c0 [ 369.734344][ T38] __fput+0x45b/0xa80 [ 369.734375][ T38] task_work_run+0x1d4/0x260 [ 369.734397][ T38] ? __pfx_task_work_run+0x10/0x10 [ 369.734415][ T38] ? do_exit+0x6b0/0x2300 [ 369.734440][ T38] ? do_exit+0x6b0/0x2300 [ 369.734469][ T38] do_exit+0x6b5/0x2300 [ 369.734493][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 369.734529][ T38] ? __pfx_do_exit+0x10/0x10 [ 369.734550][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 369.734570][ T38] ? rt_spin_lock+0x1c1/0x3e0 [ 369.734606][ T38] do_group_exit+0x21c/0x2d0 [ 369.734623][ T38] ? rt_spin_unlock+0x161/0x200 [ 369.734646][ T38] get_signal+0x125d/0x1310 [ 369.734690][ T38] arch_do_signal_or_restart+0xa0/0x790 [ 369.734715][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 369.734735][ T38] ? __pfx_do_sys_openat2+0x10/0x10 [ 369.734761][ T38] ? __x64_sys_umount+0x122/0x160 [ 369.734786][ T38] ? exit_to_user_mode_loop+0x40/0x130 [ 369.734813][ T38] exit_to_user_mode_loop+0x72/0x130 [ 369.734836][ T38] do_syscall_64+0x2bd/0xfa0 [ 369.734860][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 369.734883][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.734902][ T38] ? clear_bhb_loop+0x60/0xb0 [ 369.734923][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.734941][ T38] RIP: 0033:0x7fd08a44f041 [ 369.734968][ T38] RSP: 002b:00007fff9bfc7bb0 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 369.734986][ T38] RAX: fffffffffffffffc RBX: 00007fd08a4d3d7d RCX: 00007fd08a44f041 [ 369.734999][ T38] RDX: 0000000000090800 RSI: 00007fff9bfc8dc0 RDI: 00000000ffffff9c [ 369.735011][ T38] RBP: 00007fff9bfc8dc0 R08: 0000000000000000 R09: 0000000000000000 [ 369.735023][ T38] R10: 0000000000000000 R11: 0000000000000287 R12: 00007fff9bfc8dc0 [ 369.735034][ T38] R13: 00007fd08a4d3d7d R14: 000000000002c1fa R15: 00007fff9bfcaf80 [ 369.735067][ T38] [ 369.735109][ T38] INFO: task syz.3.141:6359 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 369.735121][ T38] Not tainted syzkaller #0 [ 369.735130][ T38] Blocked by coredump. [ 369.735135][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 369.735143][ T38] task:syz.3.141 state:D stack:24392 pid:6359 tgid:6353 ppid:5800 task_flags:0x40044c flags:0x00080001 [ 369.735190][ T38] Call Trace: [ 369.735195][ T38] [ 369.735207][ T38] __schedule+0x16f3/0x4c20 [ 369.735258][ T38] ? __pfx___schedule+0x10/0x10 [ 369.735300][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 369.735327][ T38] rt_mutex_schedule+0x77/0xf0 [ 369.735344][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 369.735365][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 369.735404][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 369.735427][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 369.735449][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 369.735467][ T38] ? __lock_acquire+0xab9/0xd20 [ 369.735501][ T38] ? rcu_barrier+0x4c/0x570 [ 369.735533][ T38] ? rcu_barrier+0x4c/0x570 [ 369.735548][ T38] mutex_lock_nested+0x16a/0x1d0 [ 369.735567][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 369.735589][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 369.735611][ T38] rcu_barrier+0x4c/0x570 [ 369.735634][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 369.735654][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 369.735672][ T38] netdev_run_todo+0x327/0xea0 [ 369.735698][ T38] ? __pfx_netif_state_change+0x10/0x10 [ 369.735724][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 369.735745][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 369.735778][ T38] ? netdev_state_change+0x1ca/0x220 [ 369.735798][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 369.735820][ T38] tun_chr_close+0x13f/0x1c0 [ 369.735843][ T38] __fput+0x45b/0xa80 [ 369.735873][ T38] task_work_run+0x1d4/0x260 [ 369.735894][ T38] ? __pfx_task_work_run+0x10/0x10 [ 369.735912][ T38] ? do_exit+0x6b0/0x2300 [ 369.735936][ T38] ? do_exit+0x6b0/0x2300 [ 369.735974][ T38] do_exit+0x6b5/0x2300 [ 369.735997][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 369.736034][ T38] ? __pfx_do_exit+0x10/0x10 [ 369.736055][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 369.736075][ T38] ? rt_spin_lock+0x1c1/0x3e0 [ 369.736110][ T38] do_group_exit+0x21c/0x2d0 [ 369.736126][ T38] ? rt_spin_unlock+0x161/0x200 [ 369.736150][ T38] get_signal+0x125d/0x1310 [ 369.736193][ T38] arch_do_signal_or_restart+0xa0/0x790 [ 369.736216][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 369.736254][ T38] ? exit_to_user_mode_loop+0x40/0x130 [ 369.736281][ T38] exit_to_user_mode_loop+0x72/0x130 [ 369.736304][ T38] do_syscall_64+0x2bd/0xfa0 [ 369.736326][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 369.736350][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.736367][ T38] ? clear_bhb_loop+0x60/0xb0 [ 369.736389][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.736406][ T38] RIP: 0033:0x7f8ee9a6f749 [ 369.736421][ T38] RSP: 002b:00007f8ee7cb5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 369.736439][ T38] RAX: 0000000000010106 RBX: 00007f8ee9cc6090 RCX: 00007f8ee9a6f749 [ 369.736452][ T38] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 369.736464][ T38] RBP: 00007f8ee9af3f91 R08: 0000000000000000 R09: 0000000000000000 [ 369.736475][ T38] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 369.736486][ T38] R13: 00007f8ee9cc6128 R14: 00007f8ee9cc6090 R15: 00007ffd74401248 [ 369.736519][ T38] [ 369.736547][ T38] [ 369.736547][ T38] Showing all locks held in the system: [ 369.736561][ T38] 7 locks held by rcuc/0/20: [ 369.736572][ T38] 4 locks held by rcuc/1/28: [ 369.736583][ T38] 11 locks held by kworker/1:0/31: [ 369.736593][ T38] #0: ffff88805c92f538 ((wq_completion)wg-crypt-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 369.736646][ T38] #1: ffffc90000a5fba0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 369.736691][ T38] #2: ffffffff8d44aca0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x540 [ 369.736734][ T38] #3: ffffffff8d5aa880 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0xa1/0x540 [ 369.736777][ T38] #4: ffff88803941b740 (&peer->endpoint_lock){++..}-{3:3}, at: wg_socket_send_skb_to_peer+0x6e/0x200 [ 369.736822][ T38] #5: ffffffff8d5aa880 (rcu_read_lock){....}-{1:3}, at: rt_read_lock+0x203/0x490 [ 369.736864][ T38] #6: ffffffff8d44aca0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x540 [ 369.736906][ T38] #7: ffffffff8d5aa8e0 (rcu_read_lock_bh){....}-{1:3}, at: send6+0x220/0x8d0 [ 369.736954][ T38] #8: ffffffff8d5aa880 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 369.736995][ T38] #9: ffffffff8d44aca0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x540 [ 369.737037][ T38] #10: ffffffff8e975bc8 (&tbl->lock){+...}-{3:3}, at: ___neigh_create+0xf1c/0x2360 [ 369.737085][ T38] 1 lock held by khungtaskd/38: [ 369.737095][ T38] #0: ffffffff8d5aa880 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 369.737149][ T38] 3 locks held by kworker/u8:5/1067: [ 369.737159][ T38] #0: ffff88802fc40938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 369.737202][ T38] #1: ffffc90004767ba0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 369.737247][ T38] #2: ffffffff8e8639b8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 369.737290][ T38] 6 locks held by kworker/u8:6/1125: [ 369.737300][ T38] #0: ffff888019ad4938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 369.737344][ T38] #1: ffffc90004997ba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 369.737388][ T38] #2: ffffffff8e856ac0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 369.737428][ T38] #3: ffff888027a990d8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x10a/0x3d0 [ 369.737470][ T38] #4: ffff888027a9a300 (&devlink->lock_key){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x11c/0x3d0 [ 369.737510][ T38] #5: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 369.737554][ T38] 3 locks held by kworker/0:2/1660: [ 369.737564][ T38] #0: ffff88813ff55138 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 369.737608][ T38] #1: ffffc90005a77ba0 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 369.737652][ T38] #2: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 369.737705][ T38] 2 locks held by getty/5560: [ 369.737715][ T38] #0: ffff88823bf360a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 369.737759][ T38] #1: ffffc90003e7e2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1400 [ 369.737808][ T38] 8 locks held by kworker/0:3/5793: [ 369.737818][ T38] 1 lock held by syz-executor/5803: [ 369.737828][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 369.737875][ T38] 1 lock held by syz.4.102/6230: [ 369.737885][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 369.737925][ T38] 1 lock held by syz-executor/6331: [ 369.737935][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 369.737983][ T38] 1 lock held by syz-executor/6333: [ 369.737993][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 369.738034][ T38] 1 lock held by syz.3.141/6359: [ 369.738044][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 369.738085][ T38] 3 locks held by kworker/u8:17/6380: [ 369.738095][ T38] 2 locks held by syz-executor/6388: [ 369.738105][ T38] #0: ffffffff8e856ac0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 369.738144][ T38] #1: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 369.738185][ T38] 2 locks held by syz-executor/6392: [ 369.738195][ T38] #0: ffffffff8e856ac0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 369.738234][ T38] #1: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 369.738276][ T38] 3 locks held by syz.0.148/6396: [ 369.738285][ T38] #0: ffffffff8e8ca160 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 369.738330][ T38] #1: ffffffff8e8c9f58 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 369.738374][ T38] #2: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 369.738416][ T38] 1 lock held by syz-executor/6409: [ 369.738426][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 369.738467][ T38] 1 lock held by syz-executor/6416: [ 369.738476][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 369.738517][ T38] 1 lock held by syz-executor/6420: [ 369.738527][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 369.738568][ T38] 1 lock held by syz-executor/6446: [ 369.738578][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 369.738619][ T38] 1 lock held by syz-executor/6447: [ 369.738629][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 369.738672][ T38] 2 locks held by syz-executor/6483: [ 369.738681][ T38] #0: ffffffff8e856ac0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 369.738721][ T38] #1: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 369.738762][ T38] 2 locks held by syz-executor/6493: [ 369.738772][ T38] #0: ffffffff8e856ac0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 369.738811][ T38] #1: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 369.738848][ T38] 2 locks held by syz-executor/6496: [ 369.738858][ T38] #0: ffffffff8e856ac0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 369.738898][ T38] #1: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 369.738939][ T38] 2 locks held by syz-executor/6517: [ 369.738955][ T38] #0: ffffffff8e856ac0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 369.738994][ T38] #1: ffffffff8e8639b8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x60 [ 369.739038][ T38] 2 locks held by syz-executor/6522: [ 369.739048][ T38] #0: ffffffff8e856ac0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 369.739086][ T38] #1: ffffffff8e8639b8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x60 [ 369.739130][ T38] 2 locks held by syz-executor/6536: [ 369.739140][ T38] #0: ffffffff8e856ac0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 369.739180][ T38] #1: ffffffff8e8639b8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x60 [ 369.739222][ T38] 2 locks held by syz-executor/6540: [ 369.739233][ T38] 3 locks held by syz-executor/6543: [ 369.739243][ T38] [ 369.739247][ T38] ============================================= [ 369.739247][ T38] [ 369.739262][ T38] NMI backtrace for cpu 1 [ 369.739289][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 369.739336][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 369.739360][ T38] Call Trace: [ 369.739375][ T38] [ 369.739391][ T38] dump_stack_lvl+0x189/0x250 [ 369.739421][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 369.739445][ T38] ? __pfx__printk+0x10/0x10 [ 369.739478][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 369.739501][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 369.739523][ T38] ? __pfx__printk+0x10/0x10 [ 369.739548][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 369.739569][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 369.739593][ T38] watchdog+0xf60/0xfa0 [ 369.739622][ T38] ? watchdog+0x1e2/0xfa0 [ 369.739650][ T38] kthread+0x711/0x8a0 [ 369.739677][ T38] ? __pfx_watchdog+0x10/0x10 [ 369.739699][ T38] ? __pfx_kthread+0x10/0x10 [ 369.739720][ T38] ? rt_spin_unlock+0x150/0x200 [ 369.739744][ T38] ? rt_spin_unlock+0x161/0x200 [ 369.739761][ T38] ? __pfx_kthread+0x10/0x10 [ 369.739786][ T38] ret_from_fork+0x4bc/0x870 [ 369.739809][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 369.739836][ T38] ? __switch_to_asm+0x39/0x70 [ 369.739852][ T38] ? __switch_to_asm+0x33/0x70 [ 369.739868][ T38] ? __pfx_kthread+0x10/0x10 [ 369.739892][ T38] ret_from_fork_asm+0x1a/0x30 [ 369.739926][ T38] [ 369.739933][ T38] Sending NMI from CPU 1 to CPUs 0: [ 369.739963][ C0] NMI backtrace for cpu 0 [ 369.739977][ C0] CPU: 0 UID: 0 PID: 20 Comm: rcuc/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 369.739994][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 369.740002][ C0] RIP: 0010:arch_stack_walk+0x123/0x150 [ 369.740024][ C0] Code: 5b 09 00 48 85 c0 74 24 48 89 df 48 89 c6 4d 89 f3 2e e8 54 25 96 1e 84 c0 74 11 4c 89 ff e8 54 5c 09 00 83 bd 78 ff ff ff 00 <75> cf 65 48 8b 05 f3 90 38 10 48 3b 45 d8 75 12 48 83 c4 68 5b 41 [ 369.740036][ C0] RSP: 0018:ffffc90000196888 EFLAGS: 00000202 [ 369.740050][ C0] RAX: 000000008f5e0e01 RBX: ffffc90000196940 RCX: 07df0e699ad6c200 [ 369.740062][ C0] RDX: 0000000000000003 RSI: ffffffff8cf65aa3 RDI: ffff88801b685a00 [ 369.740072][ C0] RBP: ffffc90000196910 R08: ffffc90000197910 R09: 0000000000000000 [ 369.740083][ C0] R10: ffffc900001968d8 R11: fffff52000032d1d R12: ffff88801b685a00 [ 369.740094][ C0] R13: ffffffff8909a276 R14: ffffffff81aacc60 R15: ffffc90000196888 [ 369.740106][ C0] FS: 0000000000000000(0000) GS:ffff888126df6000(0000) knlGS:0000000000000000 [ 369.740118][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 369.740129][ C0] CR2: 00007f05d0d7525c CR3: 000000006a35a000 CR4: 00000000003526f0 [ 369.740143][ C0] Call Trace: [ 369.740149][ C0] [ 369.740158][ C0] ? __local_bh_enable_ip+0x1a0/0x2e0 [ 369.740178][ C0] stack_trace_save+0x9c/0xe0 [ 369.740199][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 369.740214][ C0] ? kmem_cache_free+0x19a/0x910 [ 369.740236][ C0] ? __lock_acquire+0xab9/0xd20 [ 369.740255][ C0] kasan_save_track+0x3e/0x80 [ 369.740272][ C0] ? kasan_save_track+0x3e/0x80 [ 369.740288][ C0] ? __kasan_save_free_info+0x46/0x50 [ 369.740303][ C0] ? __kasan_slab_free+0x5c/0x80 [ 369.740319][ C0] ? kmem_cache_free+0x19a/0x910 [ 369.740337][ C0] ? nft_synproxy_eval_v4+0x376/0x560 [ 369.740356][ C0] ? nft_synproxy_do_eval+0x345/0x570 [ 369.740375][ C0] ? nft_do_chain+0x40c/0x1920 [ 369.740393][ C0] ? nft_do_chain_inet+0x25d/0x340 [ 369.740411][ C0] ? nf_hook_slow+0xc5/0x220 [ 369.740427][ C0] ? NF_HOOK+0x206/0x3a0 [ 369.740440][ C0] ? NF_HOOK+0x30c/0x3a0 [ 369.740453][ C0] ? __netif_receive_skb+0x143/0x380 [ 369.740472][ C0] ? process_backlog+0x31e/0x900 [ 369.740485][ C0] ? __napi_poll+0xb6/0x540 [ 369.740503][ C0] ? net_rx_action+0x5f7/0xda0 [ 369.740516][ C0] ? handle_softirqs+0x22f/0x710 [ 369.740552][ C0] __kasan_save_free_info+0x46/0x50 [ 369.740567][ C0] __kasan_slab_free+0x5c/0x80 [ 369.740585][ C0] kmem_cache_free+0x19a/0x910 [ 369.740603][ C0] ? nft_synproxy_eval_v4+0x376/0x560 [ 369.740624][ C0] nft_synproxy_eval_v4+0x376/0x560 [ 369.740647][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 369.740667][ C0] ? nf_ip_checksum+0x13c/0x510 [ 369.740688][ C0] nft_synproxy_do_eval+0x345/0x570 [ 369.740711][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 369.740738][ C0] nft_do_chain+0x40c/0x1920 [ 369.740755][ C0] ? __lock_acquire+0xab9/0xd20 [ 369.740780][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 369.740816][ C0] nft_do_chain_inet+0x25d/0x340 [ 369.740835][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 369.740853][ C0] ? __lock_acquire+0xab9/0xd20 [ 369.740876][ C0] ? NF_HOOK+0x9a/0x3a0 [ 369.740890][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 369.740910][ C0] nf_hook_slow+0xc5/0x220 [ 369.740928][ C0] NF_HOOK+0x206/0x3a0 [ 369.740943][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 369.740958][ C0] ? NF_HOOK+0x9a/0x3a0 [ 369.740972][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 369.740984][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 369.741001][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 369.741017][ C0] ? skb_dst+0x4f/0xd0 [ 369.741031][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 369.741047][ C0] NF_HOOK+0x30c/0x3a0 [ 369.741062][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 369.741077][ C0] ? NF_HOOK+0x9a/0x3a0 [ 369.741090][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 369.741105][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 369.741125][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 369.741138][ C0] __netif_receive_skb+0x143/0x380 [ 369.741161][ C0] ? process_backlog+0x27b/0x900 [ 369.741174][ C0] process_backlog+0x31e/0x900 [ 369.741198][ C0] __napi_poll+0xb6/0x540 [ 369.741220][ C0] net_rx_action+0x5f7/0xda0 [ 369.741241][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 369.741257][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 369.741280][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 369.741293][ C0] ? preempt_schedule_notrace+0xd1/0x110 [ 369.741320][ C0] handle_softirqs+0x22f/0x710 [ 369.741342][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 369.741363][ C0] __local_bh_enable_ip+0x1a0/0x2e0 [ 369.741381][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 369.741400][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 369.741417][ C0] ? __pfx_invoke_rcu_core+0x10/0x10 [ 369.741436][ C0] ? rcu_cpu_kthread+0x23e/0x1b50 [ 369.741455][ C0] rcu_cpu_kthread+0x12b4/0x1b50 [ 369.741487][ C0] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 369.741508][ C0] ? __pfx___schedule+0x10/0x10 [ 369.741534][ C0] ? schedule+0x91/0x360 [ 369.741555][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 369.741572][ C0] smpboot_thread_fn+0x542/0xa60 [ 369.741590][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 369.741611][ C0] kthread+0x711/0x8a0 [ 369.741632][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 369.741649][ C0] ? __pfx_kthread+0x10/0x10 [ 369.741667][ C0] ? rt_spin_unlock+0x150/0x200 [ 369.741685][ C0] ? rt_spin_unlock+0x161/0x200 [ 369.741705][ C0] ? __pfx_kthread+0x10/0x10 [ 369.741725][ C0] ret_from_fork+0x4bc/0x870 [ 369.741742][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 369.741762][ C0] ? __switch_to_asm+0x39/0x70 [ 369.741776][ C0] ? __switch_to_asm+0x33/0x70 [ 369.741790][ C0] ? __pfx_kthread+0x10/0x10 [ 369.741809][ C0] ret_from_fork_asm+0x1a/0x30 [ 369.741832][ C0] [ 378.713234][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.713307][ T1319] ieee802154 phy1 wpan1: encryption failed: -22