last executing test programs: 3m19.460035091s ago: executing program 0 (id=7): socket$inet_tcp(0x2, 0x1, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x379}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) 3m16.946894041s ago: executing program 0 (id=20): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) readv(r0, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/150, 0x96}], 0x1) 3m16.450254215s ago: executing program 0 (id=23): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/17, 0x11}, 0x4}], 0x1, 0x45833af92e4b38ff, 0x0) 3m14.644141884s ago: executing program 0 (id=28): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0) umount2(0x0, 0x1) 3m13.774472883s ago: executing program 0 (id=31): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}}, {{@in=@dev, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x4}}, 0xe8) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x28, r3, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}]}, 0x28}}, 0x0) 3m12.605867024s ago: executing program 0 (id=40): prctl$PR_SET_SECUREBITS(0x1c, 0x15) setuid(0xee00) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x22008d0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r1, &(0x7f0000002780)={0x2020}, 0x5ecfb203) 3m12.462110174s ago: executing program 32 (id=40): prctl$PR_SET_SECUREBITS(0x1c, 0x15) setuid(0xee00) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x22008d0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r1, &(0x7f0000002780)={0x2020}, 0x5ecfb203) 2m25.705649477s ago: executing program 3 (id=335): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[], &(0x7f0000000100)=""/141, 0x6e, 0x8d, 0x1, 0x7}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000380)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 2m22.498102268s ago: executing program 3 (id=346): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080), 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) readv(r3, &(0x7f0000000700)=[{&(0x7f0000000bc0)=""/4096, 0x1000}], 0x1) 2m22.360479569s ago: executing program 3 (id=347): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2m21.949302474s ago: executing program 3 (id=350): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000ac0), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x25) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000240)=""/266, 0xffffffffffffffa6, 0x62, 0x0, 0x0) 2m21.688710056s ago: executing program 3 (id=353): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='gadgetfs\x00', 0xc94, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 2m21.497700667s ago: executing program 3 (id=356): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f00000002c0)='./file1\x00', 0x10, 0x0) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) 2m11.8082926s ago: executing program 5 (id=384): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m10.120995575s ago: executing program 5 (id=389): ioprio_set$pid(0x2, 0x0, 0x4007) socket$nl_route(0x10, 0x3, 0x0) io_setup(0x7d, 0x0) clock_gettime(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 2m9.405978383s ago: executing program 5 (id=391): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m7.37067518s ago: executing program 5 (id=393): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') close_range(r0, 0xffffffffffffffff, 0x0) 2m5.447426104s ago: executing program 33 (id=356): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f00000002c0)='./file1\x00', 0x10, 0x0) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) 2m1.539802359s ago: executing program 4 (id=401): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f'], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r4}, 0x38) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x7ffffffe, 0x3, {0x0, 0x0, 0x600, r5, 0x60, 0x880}, [@IFLA_MASTER={0x8, 0x3, r1}]}, 0x28}, 0x1, 0xd, 0x0, 0x480c5}, 0x80c4) 2m1.539390192s ago: executing program 5 (id=402): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000840)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x200000, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x2, 0x1}, 0x10) sendmsg$tipc(r1, &(0x7f0000000140)={0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x8000090}, 0x95) r2 = dup3(r0, r1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 1m59.97726496s ago: executing program 5 (id=404): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x2010}, 0x4001) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000ac0)=0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="8bb7", 0x2}], 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x0, 0x180, 0x2, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0x1, 0xbdb], 0xdddd0000, 0x1c4213}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m59.670712064s ago: executing program 4 (id=407): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) 1m57.737383277s ago: executing program 4 (id=410): socket$unix(0x1, 0x5, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x4, 0xc000, 0x2, 0x20002f7}) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0x8, 0x20204}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x4, 0x1, 0xbf22, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x200002, 0x1}, 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m56.920230746s ago: executing program 2 (id=412): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x20}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x6}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x4a}}, &(0x7f0000000240)={0x31, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 1m55.508328476s ago: executing program 4 (id=413): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000380)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000380)={0x1, 0x0, 0x103ff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000140)={0x1, 0x0, 0x78, 0x10}) dup3(r3, r0, 0x0) 1m54.709999784s ago: executing program 2 (id=414): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) r0 = syz_io_uring_setup(0x64d, &(0x7f0000000100)={0x0, 0x11f8, 0x8, 0x2, 0x801e7}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r0}) io_uring_enter(r0, 0x749d, 0x4, 0x0, 0x0, 0x0) 1m52.231872341s ago: executing program 2 (id=415): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x1c9841, 0x0) socket(0x1e, 0x4, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m51.670012397s ago: executing program 4 (id=416): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x4) fchdir(r1) mkdirat(r1, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0xf) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m50.802542875s ago: executing program 2 (id=417): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7c, 0xe) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x61, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto(r0, &(0x7f0000000740)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3bf52a6b2cdb77ef9af2a603a3e78adff59fbb22bae1b2443011fd801251bcef8f165533aac58c7556dd51edc5a6865d4e29f0bbd0ed602050000000000002944de604d849a1e3b32905b0d26e9ff34b83f38a2ae8b1c6748ef8b87ef2a359249c3e294931489ba57f83f96048684434854ab3b6ad59f45e832972639508fe4dcb371c013bc129572e996a7db94fae8d71a076ec54a28a926e37c7a678a5e16c121f27527bf75fb49d31d41a5", 0xc5, 0x0, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000380)="c7", 0x1) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x52, 0x0, 0x0) 1m49.993669112s ago: executing program 4 (id=418): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$dri(0x0, 0x0, 0x28900) syz_usb_connect(0x4, 0x5f, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m49.308996564s ago: executing program 2 (id=419): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x735}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffb000) 1m46.245447434s ago: executing program 2 (id=423): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r2}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 1m43.735780625s ago: executing program 34 (id=404): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x2010}, 0x4001) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000ac0)=0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="8bb7", 0x2}], 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x0, 0x180, 0x2, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0x1, 0xbdb], 0xdddd0000, 0x1c4213}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m34.252081425s ago: executing program 35 (id=418): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$dri(0x0, 0x0, 0x28900) syz_usb_connect(0x4, 0x5f, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m29.919781022s ago: executing program 36 (id=423): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r2}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 31.56796045s ago: executing program 1 (id=451): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0xa0000001}) epoll_wait(r3, &(0x7f0000000380)=[{}], 0x2, 0x1000) close_range(r0, 0xffffffffffffffff, 0x0) 28.808907979s ago: executing program 1 (id=452): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x25, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c75, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x8000009, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2002, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0xb54, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 26.115097384s ago: executing program 1 (id=453): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) syz_clone3(0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='attr/current\x00') r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000040)={0x4, r0, 0x2}) r2 = mq_open(&(0x7f0000000000)='bat\x13\x1b\r\xcbs\xecave_5\x00', 0x8c2, 0x30, 0x0) unshare(0x40480) mq_getsetattr(r2, 0x0, 0x0) epoll_create1(0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fbfffff}, 0x0, 0x0) 24.666595415s ago: executing program 1 (id=454): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp6\x00') pread64(r3, &(0x7f0000000080)=""/220, 0xdc, 0x4009) 22.979336603s ago: executing program 1 (id=455): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000000)=@x86={0xde, 0x1, 0x5, 0x0, 0x2, 0x4, 0x1, 0xc, 0x6, 0x3, 0x6, 0x3, 0x0, 0x7, 0x1, 0xbd, 0x0, 0x47, 0x5, '\x00', 0x4, 0x2}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15.465291213s ago: executing program 1 (id=456): socket$kcm(0x29, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x840000000002, 0x3, 0xfa) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0006001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 0s ago: executing program 37 (id=456): socket$kcm(0x29, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x840000000002, 0x3, 0xfa) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0006001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.132' (ED25519) to the list of known hosts. [ 70.213042][ T5786] cgroup: Unknown subsys name 'net' [ 70.452393][ T5786] cgroup: Unknown subsys name 'cpuset' [ 70.508774][ T5786] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.314800][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.314889][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.125485][ T5786] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.702146][ T5804] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.719931][ T5807] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.735117][ T5811] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.735819][ T5811] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.758996][ T5813] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.760124][ T5813] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.760697][ T5813] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.763254][ T5118] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.765145][ T5118] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.765281][ T5118] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.767045][ T5813] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.786234][ T5118] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.787338][ T5813] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.789622][ T5813] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.791650][ T5813] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.794425][ T5118] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.795460][ T5118] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.795972][ T5813] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.801274][ T5813] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.802728][ T5807] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.818863][ T5813] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.824102][ T5813] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.839051][ T5807] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.881345][ T5813] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.918421][ T5804] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.740146][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 76.744460][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 76.762390][ T5805] chnl_net:caif_netlink_parms(): no params data found [ 76.812568][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 77.149066][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 77.797948][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.799387][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.799922][ T5797] bridge_slave_0: entered allmulticast mode [ 77.802404][ T5797] bridge_slave_0: entered promiscuous mode [ 77.807500][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.807612][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.807751][ T5799] bridge_slave_0: entered allmulticast mode [ 77.812381][ T5799] bridge_slave_0: entered promiscuous mode [ 77.814790][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.814920][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.815055][ T5805] bridge_slave_0: entered allmulticast mode [ 77.817302][ T5805] bridge_slave_0: entered promiscuous mode [ 77.869487][ T61] Bluetooth: hci4: command tx timeout [ 77.895786][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.895875][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.896134][ T5797] bridge_slave_1: entered allmulticast mode [ 77.897493][ T5797] bridge_slave_1: entered promiscuous mode [ 77.900206][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.900317][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.900736][ T5799] bridge_slave_1: entered allmulticast mode [ 77.903323][ T5799] bridge_slave_1: entered promiscuous mode [ 77.905034][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.905144][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.905286][ T5805] bridge_slave_1: entered allmulticast mode [ 77.907953][ T5805] bridge_slave_1: entered promiscuous mode [ 77.911045][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.911206][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.911343][ T5809] bridge_slave_0: entered allmulticast mode [ 77.913907][ T5809] bridge_slave_0: entered promiscuous mode [ 77.948286][ T5813] Bluetooth: hci1: command tx timeout [ 77.948293][ T5804] Bluetooth: hci0: command tx timeout [ 77.948585][ T5798] Bluetooth: hci3: command tx timeout [ 77.948712][ T61] Bluetooth: hci2: command tx timeout [ 78.178928][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.179038][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.179148][ T5809] bridge_slave_1: entered allmulticast mode [ 78.180565][ T5809] bridge_slave_1: entered promiscuous mode [ 78.652886][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.655743][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.659494][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.738926][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.739105][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.739281][ T5796] bridge_slave_0: entered allmulticast mode [ 78.740888][ T5796] bridge_slave_0: entered promiscuous mode [ 78.746125][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.778565][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.781576][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.786581][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.786786][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.786896][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.787040][ T5796] bridge_slave_1: entered allmulticast mode [ 78.791667][ T5796] bridge_slave_1: entered promiscuous mode [ 78.980834][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.710448][ T5797] team0: Port device team_slave_0 added [ 79.712715][ T5805] team0: Port device team_slave_0 added [ 79.714546][ T5799] team0: Port device team_slave_0 added [ 79.800642][ T5797] team0: Port device team_slave_1 added [ 79.803166][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.805066][ T5805] team0: Port device team_slave_1 added [ 79.806663][ T5799] team0: Port device team_slave_1 added [ 79.809131][ T5809] team0: Port device team_slave_0 added [ 79.880810][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.948247][ T61] Bluetooth: hci4: command tx timeout [ 80.028364][ T5804] Bluetooth: hci3: command tx timeout [ 80.028389][ T5804] Bluetooth: hci0: command tx timeout [ 80.029376][ T61] Bluetooth: hci1: command tx timeout [ 80.029469][ T5798] Bluetooth: hci2: command tx timeout [ 80.031724][ T5809] team0: Port device team_slave_1 added [ 80.580613][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.580625][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.580638][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.669777][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.669792][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.669815][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.670949][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.670961][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.670983][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.820514][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.820529][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.820552][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.822383][ T5796] team0: Port device team_slave_0 added [ 80.823188][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.823199][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.823222][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.824097][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.824106][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.824119][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.825617][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.825624][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.825637][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.848969][ T5796] team0: Port device team_slave_1 added [ 80.871322][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.871338][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.871361][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.349530][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.349543][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.349556][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.561831][ T10] cfg80211: failed to load regulatory.db [ 81.588959][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.588975][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.588998][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.717691][ T5797] hsr_slave_0: entered promiscuous mode [ 81.725332][ T5797] hsr_slave_1: entered promiscuous mode [ 81.757695][ T5805] hsr_slave_0: entered promiscuous mode [ 81.764878][ T5805] hsr_slave_1: entered promiscuous mode [ 81.765883][ T5805] debugfs: 'hsr0' already exists in 'hsr' [ 81.766003][ T5805] Cannot create hsr debugfs directory [ 81.776395][ T5799] hsr_slave_0: entered promiscuous mode [ 81.777731][ T5799] hsr_slave_1: entered promiscuous mode [ 81.782251][ T5799] debugfs: 'hsr0' already exists in 'hsr' [ 81.782273][ T5799] Cannot create hsr debugfs directory [ 81.890128][ T5809] hsr_slave_0: entered promiscuous mode [ 81.891542][ T5809] hsr_slave_1: entered promiscuous mode [ 81.892421][ T5809] debugfs: 'hsr0' already exists in 'hsr' [ 81.892442][ T5809] Cannot create hsr debugfs directory [ 82.028356][ T5798] Bluetooth: hci4: command tx timeout [ 82.108325][ T5804] Bluetooth: hci2: command tx timeout [ 82.108345][ T5813] Bluetooth: hci3: command tx timeout [ 82.108408][ T5798] Bluetooth: hci1: command tx timeout [ 82.108410][ T61] Bluetooth: hci0: command tx timeout [ 82.354090][ T5796] hsr_slave_0: entered promiscuous mode [ 82.354866][ T5796] hsr_slave_1: entered promiscuous mode [ 82.355534][ T5796] debugfs: 'hsr0' already exists in 'hsr' [ 82.355551][ T5796] Cannot create hsr debugfs directory [ 83.520050][ T5799] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.556642][ T5799] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.592893][ T5799] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.643156][ T5799] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.744637][ T5797] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.774330][ T5797] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.815285][ T5797] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.846532][ T5797] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.952762][ T5805] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.994892][ T5805] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.016677][ T5805] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.067043][ T5805] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.108290][ T5798] Bluetooth: hci4: command tx timeout [ 84.188317][ T5804] Bluetooth: hci2: command tx timeout [ 84.188360][ T5813] Bluetooth: hci3: command tx timeout [ 84.188392][ T5798] Bluetooth: hci0: command tx timeout [ 84.188423][ T61] Bluetooth: hci1: command tx timeout [ 84.188584][ T5796] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.250745][ T5796] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.296563][ T5796] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.327982][ T5796] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.393793][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.456122][ T5809] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.492512][ T5809] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.525504][ T5809] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.563800][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.567122][ T5809] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.627095][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.629271][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.662700][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.663020][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.674695][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.756870][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.795188][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.795304][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.814280][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.832100][ T807] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.832286][ T807] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.907543][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.938604][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.946381][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.946580][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.996741][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.996900][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.044085][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.074472][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.097555][ T1198] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.097771][ T1198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.135376][ T1198] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.135577][ T1198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.193379][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.235659][ T1008] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.235955][ T1008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.271188][ T1008] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.272251][ T1008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.353399][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.649246][ T5799] veth0_vlan: entered promiscuous mode [ 85.688885][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.717179][ T5799] veth1_vlan: entered promiscuous mode [ 85.783726][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.904560][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.906983][ T5799] veth0_macvtap: entered promiscuous mode [ 85.947390][ T5799] veth1_macvtap: entered promiscuous mode [ 85.956944][ T5797] veth0_vlan: entered promiscuous mode [ 85.977388][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.020594][ T5797] veth1_vlan: entered promiscuous mode [ 86.055024][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.076003][ T5805] veth0_vlan: entered promiscuous mode [ 86.095761][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.135305][ T3487] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.140676][ T5805] veth1_vlan: entered promiscuous mode [ 86.143782][ T3487] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.147386][ T3487] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.157853][ T3487] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.186917][ T5796] veth0_vlan: entered promiscuous mode [ 86.313914][ T5797] veth0_macvtap: entered promiscuous mode [ 86.325812][ T5796] veth1_vlan: entered promiscuous mode [ 86.379687][ T5797] veth1_macvtap: entered promiscuous mode [ 86.467885][ T5805] veth0_macvtap: entered promiscuous mode [ 86.482618][ T1008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.482641][ T1008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.514806][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.519074][ T5805] veth1_macvtap: entered promiscuous mode [ 86.561132][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.581782][ T5796] veth0_macvtap: entered promiscuous mode [ 86.583668][ T1008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.583678][ T1008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.630406][ T807] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.634165][ T5796] veth1_macvtap: entered promiscuous mode [ 86.636382][ T5809] veth0_vlan: entered promiscuous mode [ 86.636738][ T807] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.639284][ T807] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.681422][ T807] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.685207][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.741295][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.747294][ T5809] veth1_vlan: entered promiscuous mode [ 86.827098][ T1008] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.857177][ T1008] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.859825][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.923725][ T1008] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.932942][ T1008] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.957487][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.066596][ T1198] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.087735][ T1198] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.100999][ T1198] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.118031][ T1198] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.163310][ T807] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.163329][ T807] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.224750][ T5809] veth0_macvtap: entered promiscuous mode [ 87.336598][ T5809] veth1_macvtap: entered promiscuous mode [ 87.352109][ T984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.352128][ T984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.466702][ T1008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.466721][ T1008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.509792][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.543427][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.543446][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.561362][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.594083][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.595867][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.608734][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.611402][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.617261][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.617276][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.811733][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.811752][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.195576][ T984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.195596][ T984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.436054][ T5934] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 88.587115][ T1008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.587130][ T1008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.930401][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 89.942541][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 89.943428][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 89.976166][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 89.981803][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 90.563375][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 90.718220][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 90.762603][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.762633][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.762673][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 90.762693][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.824665][ T10] usb 3-1: config 0 descriptor?? [ 90.919052][ T10] hub 3-1:0.0: USB hub found [ 90.922524][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 91.055544][ T10] hub 3-1:0.0: 1 port detected [ 91.129675][ T31] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 91.129705][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.220922][ T31] usb 4-1: config 0 descriptor?? [ 91.251191][ T31] cp210x 4-1:0.0: cp210x converter detected [ 91.669554][ T31] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 91.707262][ T10] hub 3-1:0.0: activate --> -90 [ 91.778226][ T31] usb 4-1: cp210x converter now attached to ttyUSB0 [ 91.909766][ T5888] usb 4-1: USB disconnect, device number 2 [ 92.039185][ T5888] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 92.131618][ T10] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 92.131643][ T10] usb 3-1-port1: connect-debounce failed [ 92.151099][ T803] usb 3-1: USB disconnect, device number 2 [ 92.152793][ T10] usb 3-1-port1: cannot disable (err = -71) [ 92.250772][ T5888] cp210x 4-1:0.0: device disconnected [ 93.027051][ T5999] ======================================================= [ 93.027051][ T5999] WARNING: The mand mount option has been deprecated and [ 93.027051][ T5999] and is ignored by this kernel. Remove the mand [ 93.027051][ T5999] option from the mount to silence this warning. [ 93.027051][ T5999] ======================================================= [ 94.877195][ T6020] Zero length message leads to an empty skb [ 95.046079][ T5798] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.059385][ T6031] process 'syz.4.43' launched '/dev/fd/3' with NULL argv: empty string added [ 95.061951][ T5798] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.067906][ T5798] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.091117][ T5798] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.092306][ T5798] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.235814][ T3487] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.672807][ T3487] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.483029][ T3487] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.561857][ T6073] veth1_macvtap: left promiscuous mode [ 96.561897][ T6073] macsec0: entered promiscuous mode [ 96.875474][ T6081] overlayfs: failed to get inode (-116) [ 96.875703][ T6081] overlayfs: failed to get inode (-116) [ 96.957473][ T3487] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.133860][ T6088] geneve2: entered promiscuous mode [ 97.133885][ T6088] geneve2: entered allmulticast mode [ 97.160589][ T61] Bluetooth: hci2: command tx timeout [ 97.411834][ T6103] netlink: 'syz.2.72': attribute type 4 has an invalid length. [ 97.628979][ T5888] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 97.805153][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.805185][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.805206][ T5888] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 97.805246][ T5888] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 97.805267][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.888827][ T3487] bridge_slave_1: left allmulticast mode [ 97.888929][ T3487] bridge_slave_1: left promiscuous mode [ 97.895233][ T5888] usb 4-1: config 0 descriptor?? [ 97.915231][ T3487] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.020706][ T3487] bridge_slave_0: left allmulticast mode [ 98.020739][ T3487] bridge_slave_0: left promiscuous mode [ 98.020960][ T3487] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.286567][ T6117] netlink: 1371 bytes leftover after parsing attributes in process `syz.1.75'. [ 98.500014][ T5888] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 99.228221][ T61] Bluetooth: hci2: command tx timeout [ 99.684224][ T6102] usb 4-1: string descriptor 0 read error: -2 [ 100.537815][ T5888] usb 4-1: USB disconnect, device number 3 [ 100.581067][ T3487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.700261][ T3487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.722870][ T3487] bond0 (unregistering): Released all slaves [ 100.791973][ T6029] chnl_net:caif_netlink_parms(): no params data found [ 101.142799][ T6153] Driver unsupported XDP return value 0 on prog (id 18) dev N/A, expect packet loss! [ 101.308177][ T61] Bluetooth: hci2: command tx timeout [ 101.688201][ T5803] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 101.722019][ T6156] netlink: 28 bytes leftover after parsing attributes in process `syz.3.91'. [ 101.722099][ T6156] netlink: 32 bytes leftover after parsing attributes in process `syz.3.91'. [ 101.722115][ T6156] netlink: 28 bytes leftover after parsing attributes in process `syz.3.91'. [ 101.724031][ T6156] netlink: 32 bytes leftover after parsing attributes in process `syz.3.91'. [ 101.848589][ T5803] usb 2-1: Using ep0 maxpacket: 8 [ 101.850700][ T5803] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 101.850753][ T5803] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 101.850775][ T5803] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 101.850799][ T5803] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 10982, setting to 1024 [ 101.850824][ T5803] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 101.850847][ T5803] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 101.850887][ T5803] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 101.850909][ T5803] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.186839][ T5803] usb 2-1: usb_control_msg returned -32 [ 102.186887][ T5803] usbtmc 2-1:16.0: can't read capabilities [ 103.042403][ T6186] usbtmc 2-1:16.0: usb_control_msg returned -71 [ 103.243276][ T5909] usb 2-1: USB disconnect, device number 2 [ 103.388189][ T5798] Bluetooth: hci2: command tx timeout [ 103.956323][ T6029] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.958326][ T6029] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.958486][ T6029] bridge_slave_0: entered allmulticast mode [ 103.960754][ T6029] bridge_slave_0: entered promiscuous mode [ 103.982566][ T6029] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.982762][ T6029] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.982932][ T6029] bridge_slave_1: entered allmulticast mode [ 103.988444][ T6029] bridge_slave_1: entered promiscuous mode [ 104.198293][ T3487] hsr_slave_0: left promiscuous mode [ 104.281845][ T3487] hsr_slave_1: left promiscuous mode [ 104.286196][ T3487] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.286287][ T3487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.342484][ T3487] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.342511][ T3487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.473922][ T3487] veth1_macvtap: left promiscuous mode [ 104.474172][ T3487] veth0_macvtap: left promiscuous mode [ 104.475249][ T3487] veth1_vlan: left promiscuous mode [ 104.475975][ T3487] veth0_vlan: left promiscuous mode [ 104.828252][ T5798] Bluetooth: hci5: command 0x1003 tx timeout [ 104.828266][ T61] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 104.877053][ T804] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 105.066705][ T804] usb 3-1: config 0 has no interfaces? [ 105.066740][ T804] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 105.066763][ T804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.080871][ T804] usb 3-1: config 0 descriptor?? [ 105.308960][ T804] usb 3-1: USB disconnect, device number 3 [ 106.858885][ T3487] team0 (unregistering): Port device team_slave_1 removed [ 107.118587][ T3487] team0 (unregistering): Port device team_slave_0 removed [ 108.792748][ T6275] mmap: syz.1.128 (6275) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 109.646916][ T6217] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.655862][ T6217] bridge_slave_1: left allmulticast mode [ 109.655887][ T6217] bridge_slave_1: left promiscuous mode [ 109.656125][ T6217] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.718508][ T6217] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 109.753087][ T6029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.869625][ T6286] kvm: pic: level sensitive irq not supported [ 109.869661][ T6286] kvm: pic: level sensitive irq not supported [ 109.869785][ T6286] kvm: pic: single mode not supported [ 109.869817][ T6286] kvm: pic: single mode not supported [ 109.869944][ T6286] kvm: pic: single mode not supported [ 109.869970][ T6286] kvm: pic: single mode not supported [ 109.870093][ T6286] kvm: pic: single mode not supported [ 109.870098][ T6286] kvm: pic: level sensitive irq not supported [ 109.870123][ T6286] kvm: pic: single mode not supported [ 109.870128][ T6286] kvm: pic: level sensitive irq not supported [ 109.870323][ T6286] kvm: pic: single mode not supported [ 109.870350][ T6286] kvm: pic: single mode not supported [ 109.870747][ T6286] kvm: pic: single mode not supported [ 109.870752][ T6286] kvm: pic: level sensitive irq not supported [ 109.870777][ T6286] kvm: pic: single mode not supported [ 109.870782][ T6286] kvm: pic: level sensitive irq not supported [ 109.871641][ T6286] kvm: pic: level sensitive irq not supported [ 109.871668][ T6286] kvm: pic: level sensitive irq not supported [ 109.871724][ T6286] kvm: pic: level sensitive irq not supported [ 109.871751][ T6286] kvm: pic: level sensitive irq not supported [ 110.042556][ T6029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.380849][ T6029] team0: Port device team_slave_0 added [ 110.393536][ T6029] team0: Port device team_slave_1 added [ 111.028639][ T804] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 111.132356][ T6029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.132367][ T6029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.132380][ T6029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.188210][ T804] usb 4-1: Using ep0 maxpacket: 16 [ 111.192474][ T6029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.192487][ T6029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.192510][ T6029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.208316][ T804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.208345][ T804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.208367][ T804] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 111.208407][ T804] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 111.208429][ T804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.316234][ T804] usb 4-1: config 0 descriptor?? [ 111.743493][ T804] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 111.743546][ T804] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 111.794149][ T804] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 111.794183][ T804] microsoft 0003:045E:07DA.0002: no inputs found [ 111.794197][ T804] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 112.000695][ T5852] usb 4-1: USB disconnect, device number 4 [ 112.305395][ T6029] hsr_slave_0: entered promiscuous mode [ 112.318652][ T6029] hsr_slave_1: entered promiscuous mode [ 112.319682][ T6029] debugfs: 'hsr0' already exists in 'hsr' [ 112.319706][ T6029] Cannot create hsr debugfs directory [ 112.912430][ T61] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 114.107543][ T6029] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 114.346257][ T6029] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 114.384830][ T6029] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 114.460683][ T6029] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 115.588496][ T6431] netlink: 4 bytes leftover after parsing attributes in process `syz.4.169'. [ 115.952016][ T6435] Invalid argument reading file caps for ./file0 [ 116.172674][ T6441] syz_tun: entered allmulticast mode [ 116.260320][ T6437] syz_tun: left allmulticast mode [ 116.317066][ T6029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.584180][ T6029] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.599162][ T4715] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.602398][ T4715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.652394][ T1236] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.652559][ T1236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.591488][ T6475] capability: warning: `syz.3.180' uses 32-bit capabilities (legacy support in use) [ 117.714801][ T6029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.119499][ T6142] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 118.304636][ T6142] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.304661][ T6142] usb 3-1: config 0 has no interfaces? [ 118.304689][ T6142] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 118.304710][ T6142] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.346361][ T6142] usb 3-1: config 0 descriptor?? [ 118.972203][ T6029] veth0_vlan: entered promiscuous mode [ 119.012624][ T6029] veth1_vlan: entered promiscuous mode [ 120.596582][ T6029] veth0_macvtap: entered promiscuous mode [ 120.649754][ T6029] veth1_macvtap: entered promiscuous mode [ 120.703442][ T6029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.753760][ T6029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.774192][ T6524] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.789525][ T6524] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.789568][ T6524] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.789601][ T6524] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.843230][ T5862] usb 3-1: USB disconnect, device number 4 [ 121.583767][ T1296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.583786][ T1296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.682308][ T6524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.682328][ T6524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.927487][ T6546] syz.2.197 uses obsolete (PF_INET,SOCK_PACKET) [ 122.578709][ T6569] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 122.695955][ T6572] gretap0: entered promiscuous mode [ 122.756766][ T6574] netlink: 20 bytes leftover after parsing attributes in process `syz.2.207'. [ 125.067098][ T6627] netlink: 24 bytes leftover after parsing attributes in process `syz.1.226'. [ 126.377848][ T6665] fuse: Bad value for 'fd' [ 127.622758][ T6700] binder: 6699:6700 ioctl c0306201 0 returned -14 [ 127.886159][ T6705] netlink: 4 bytes leftover after parsing attributes in process `syz.5.255'. [ 129.836211][ T6739] syz.3.268 (6739) used greatest stack depth: 16720 bytes left [ 130.268308][ T61] Bluetooth: hci2: command tx timeout [ 130.403065][ T6757] bridge0: port 3(erspan0) entered blocking state [ 130.448258][ T6757] bridge0: port 3(erspan0) entered disabled state [ 130.449067][ T6757] erspan0: entered allmulticast mode [ 130.497926][ T6757] erspan0: entered promiscuous mode [ 130.500289][ T6757] bridge0: port 3(erspan0) entered blocking state [ 130.500436][ T6757] bridge0: port 3(erspan0) entered forwarding state [ 130.594469][ T6762] erspan0: left allmulticast mode [ 130.594496][ T6762] erspan0: left promiscuous mode [ 130.645331][ T6762] bridge0: port 3(erspan0) entered disabled state [ 131.981400][ T6805] process '/newroot/59/file0' started with executable stack [ 132.760367][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.760437][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.691395][ T6142] libceph: connect (1)[c::]:6789 error -101 [ 135.692026][ T6142] libceph: mon0 (1)[c::]:6789 connect error [ 135.724089][ T6142] libceph: connect (1)[c::]:6789 error -101 [ 135.724278][ T6142] libceph: mon0 (1)[c::]:6789 connect error [ 135.741486][ T6872] ceph: No mds server is up or the cluster is laggy [ 136.082276][ T6142] libceph: connect (1)[c::]:6789 error -101 [ 136.087635][ T6142] libceph: mon0 (1)[c::]:6789 connect error [ 137.919633][ T5803] IPVS: starting estimator thread 0... [ 138.129247][ T6907] IPVS: using max 9 ests per chain, 21600 per kthread [ 140.823387][ T6949] overlayfs: failed to clone upperpath [ 141.474467][ T6956] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.333'. [ 141.500506][ T6956] autofs: Unknown parameter '' [ 142.095610][ T5803] Process accounting resumed [ 143.134506][ T6981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.308197][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 146.459523][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 146.464232][ T10] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.464271][ T10] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.464294][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 146.464329][ T10] usb 6-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 146.464351][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.522601][ T10] usb 6-1: config 0 descriptor?? [ 146.663897][ T7031] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 146.941882][ T10] zeroplus 0003:0C12:0030.0003: unbalanced collection at end of report description [ 146.942644][ T10] zeroplus 0003:0C12:0030.0003: parse failed [ 146.942715][ T10] zeroplus 0003:0C12:0030.0003: probe with driver zeroplus failed with error -22 [ 147.198104][ T5977] usb 6-1: USB disconnect, device number 2 [ 149.598594][ T7052] input: syz1 as /devices/virtual/input/input7 [ 152.368409][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 152.628201][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 152.630885][ T10] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 152.630909][ T10] usb 6-1: config 0 has no interface number 0 [ 152.631080][ T10] usb 6-1: config 0 interface 12 has no altsetting 0 [ 152.634718][ T10] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 152.634743][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.634762][ T10] usb 6-1: Product: syz [ 152.634776][ T10] usb 6-1: Manufacturer: syz [ 152.634789][ T10] usb 6-1: SerialNumber: syz [ 152.705822][ T10] usb 6-1: config 0 descriptor?? [ 152.865998][ T7073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.372'. [ 154.697720][ T10] f81534 6-1:0.12: f81534_set_register: reg: 1003 data: 70 failed: -71 [ 154.697776][ T10] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 154.697801][ T10] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 154.697893][ T10] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 154.805995][ T10] usb 6-1: USB disconnect, device number 3 [ 155.917879][ T6142] IPVS: starting estimator thread 0... [ 155.998301][ T7108] IPVS: using max 7 ests per chain, 16800 per kthread [ 157.699783][ T7119] netlink: 'syz.1.390': attribute type 1 has an invalid length. [ 158.645709][ T7119] 8021q: adding VLAN 0 to HW filter on device bond1 [ 158.785129][ T7121] vlan2: entered allmulticast mode [ 158.785152][ T7121] bond1: entered allmulticast mode [ 160.223158][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 160.862410][ T0] NOHZ tick-stop error: local softirq work is pending, handler #88!!! [ 160.873111][ T7138] veth2: entered promiscuous mode [ 160.879476][ T7138] veth2: entered allmulticast mode [ 161.059348][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 164.461884][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 164.829041][ T5798] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 164.858385][ T5798] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 164.888375][ T5798] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 164.922205][ T5798] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 164.923012][ T5798] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 166.736953][ T7158] all: renamed from bridge_slave_0 (while UP) [ 166.998288][ T5798] Bluetooth: hci5: command tx timeout [ 168.471729][ T7173] overlayfs: failed to clone upperpath [ 169.068155][ T5798] Bluetooth: hci5: command tx timeout [ 171.148220][ T5798] Bluetooth: hci5: command tx timeout [ 173.228139][ T5798] Bluetooth: hci5: command tx timeout [ 176.933626][ T7199] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 176.933655][ T7199] overlayfs: failed to set xattr on upper [ 176.933662][ T7199] overlayfs: ...falling back to redirect_dir=nofollow. [ 176.933670][ T7199] overlayfs: ...falling back to index=off. [ 176.933677][ T7199] overlayfs: ...falling back to uuid=null. [ 176.933849][ T7199] overlayfs: conflicting lowerdir path [ 177.606931][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 177.692061][ T7204] netlink: 16 bytes leftover after parsing attributes in process `syz.4.418'. [ 177.988498][ T7205] netlink: 16 bytes leftover after parsing attributes in process `syz.4.418'. [ 178.837567][ T7204] bond0: entered promiscuous mode [ 178.837589][ T7204] bond_slave_0: entered promiscuous mode [ 178.837731][ T7204] bond_slave_1: entered promiscuous mode [ 178.837840][ T7204] bridge_slave_1: entered promiscuous mode [ 179.457084][ T7204] bond0: left promiscuous mode [ 179.457102][ T7204] bond_slave_0: left promiscuous mode [ 179.457256][ T7204] bond_slave_1: left promiscuous mode [ 179.458665][ T7204] bridge_slave_1: left promiscuous mode [ 180.192872][ T7221] netlink: 16 bytes leftover after parsing attributes in process `syz.1.422'. [ 180.393720][ T7205] bond0: entered promiscuous mode [ 180.393735][ T7205] bond_slave_0: entered promiscuous mode [ 180.393904][ T7205] bond_slave_1: entered promiscuous mode [ 180.394018][ T7205] bridge_slave_1: entered promiscuous mode [ 181.008223][ T7205] bond0: left promiscuous mode [ 181.008244][ T7205] bond_slave_0: left promiscuous mode [ 181.008455][ T7205] bond_slave_1: left promiscuous mode [ 181.008582][ T7205] bridge_slave_1: left promiscuous mode [ 183.527368][ T7148] chnl_net:caif_netlink_parms(): no params data found [ 187.175799][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 187.197610][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 187.202618][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 187.242018][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 187.242865][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 189.333415][ T5798] Bluetooth: hci1: command tx timeout [ 191.458197][ T5798] Bluetooth: hci1: command tx timeout [ 193.468347][ T5798] Bluetooth: hci1: command tx timeout [ 194.196284][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.196353][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.548215][ T5798] Bluetooth: hci1: command tx timeout [ 196.093068][ T61] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 196.125920][ T61] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 196.127407][ T61] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 196.143937][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 196.144754][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 198.100393][ T7148] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.188240][ T61] Bluetooth: hci2: command tx timeout [ 198.532276][ T7148] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.532825][ T7148] bridge_slave_0: entered allmulticast mode [ 198.592266][ T7148] bridge_slave_0: entered promiscuous mode [ 200.268195][ T5804] Bluetooth: hci2: command tx timeout [ 201.188903][ T7148] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.189019][ T7148] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.189243][ T7148] bridge_slave_1: entered allmulticast mode [ 201.228314][ T7148] bridge_slave_1: entered promiscuous mode [ 201.388175][ T5804] Bluetooth: hci0: command 0x0406 tx timeout [ 201.388407][ T5804] Bluetooth: hci3: command 0x0406 tx timeout [ 201.390697][ T5804] Bluetooth: hci4: command 0x0406 tx timeout [ 202.348261][ T5807] Bluetooth: hci2: command tx timeout [ 202.589042][ T5804] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 202.607241][ T5804] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 202.616660][ T5804] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 203.120548][ T5804] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 203.525633][ T5804] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 204.437705][ T5813] Bluetooth: hci2: command tx timeout [ 205.948317][ T5798] Bluetooth: hci6: command tx timeout [ 206.059985][ T7148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.121976][ T7148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.038018][ T5798] Bluetooth: hci6: command tx timeout [ 210.138926][ T5798] Bluetooth: hci6: command tx timeout [ 212.188215][ T5798] Bluetooth: hci6: command tx timeout [ 212.566766][ T7148] team0: Port device team_slave_0 added [ 212.720742][ T7148] team0: Port device team_slave_1 added [ 220.767601][ T7148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.767619][ T7148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 220.767642][ T7148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.932436][ T7148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.932453][ T7148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 220.932477][ T7148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.852293][ T5813] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 226.861255][ T5813] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 226.888375][ T5813] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 226.901018][ T5813] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 226.901789][ T5813] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 226.943850][ T7240] chnl_net:caif_netlink_parms(): no params data found [ 228.998732][ T5813] Bluetooth: hci7: command tx timeout [ 231.069006][ T5813] Bluetooth: hci7: command tx timeout [ 233.148334][ T5813] Bluetooth: hci7: command tx timeout [ 235.233175][ T5813] Bluetooth: hci7: command tx timeout [ 239.299401][ T7290] chnl_net:caif_netlink_parms(): no params data found [ 239.318665][ T7283] chnl_net:caif_netlink_parms(): no params data found [ 245.095268][ T7240] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.095471][ T7240] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.095717][ T7240] bridge_slave_0: entered allmulticast mode [ 245.505460][ T7240] bridge_slave_0: entered promiscuous mode [ 246.176721][ T7365] overlayfs: failed to clone upperpath [ 248.141032][ T5798] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 248.147121][ T5798] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 248.388475][ T5798] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 248.426361][ T5798] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 248.429584][ T5798] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 250.720629][ T5798] Bluetooth: hci4: command tx timeout [ 252.749702][ T5798] Bluetooth: hci4: command tx timeout [ 253.066645][ T3600] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.866143][ T5798] Bluetooth: hci4: command tx timeout [ 255.661654][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.661724][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.908504][ T5798] Bluetooth: hci4: command tx timeout [ 257.789467][ T5813] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 257.813881][ T5813] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 257.815450][ T5813] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 257.817108][ T5813] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 257.841309][ T5813] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 260.058313][ T5813] Bluetooth: hci1: command tx timeout [ 260.297668][ T5798] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 260.621659][ T5798] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 260.630072][ T5798] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 260.631673][ T5798] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 260.632449][ T5798] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 262.108162][ T5813] Bluetooth: hci1: command tx timeout [ 262.748224][ T5813] Bluetooth: hci5: command tx timeout [ 264.218438][ T5798] Bluetooth: hci1: command tx timeout [ 264.828247][ T5813] Bluetooth: hci5: command tx timeout [ 266.208099][ T7290] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 266.268418][ T5813] Bluetooth: hci1: command tx timeout [ 267.378313][ T5813] Bluetooth: hci5: command tx timeout [ 269.408215][ T5813] Bluetooth: hci5: command tx timeout [ 274.288392][ T7417] bridge0: entered promiscuous mode [ 274.288824][ T7417] vlan3: entered promiscuous mode [ 289.289599][ T5798] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 289.318417][ T5798] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 289.319779][ T5798] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 289.320838][ T5798] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 289.362577][ T5798] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 290.045259][ T5813] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 290.065919][ T5813] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 290.091205][ T5813] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 290.095946][ T5813] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 290.096606][ T5813] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 291.478234][ T5813] Bluetooth: hci2: command tx timeout [ 292.428401][ T5813] Bluetooth: hci6: command tx timeout [ 293.903024][ T5813] Bluetooth: hci2: command tx timeout [ 294.508195][ T5813] Bluetooth: hci6: command tx timeout [ 295.948295][ T5813] Bluetooth: hci2: command tx timeout [ 296.588687][ T5798] Bluetooth: hci6: command tx timeout [ 298.047673][ T5798] Bluetooth: hci2: command tx timeout [ 298.668268][ T5798] Bluetooth: hci6: command tx timeout [ 306.466985][ T7400] chnl_net:caif_netlink_parms(): no params data found [ 308.926650][ T5813] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 308.938973][ T5813] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 308.940605][ T5813] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 309.027521][ T5813] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 309.030701][ T5813] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 311.148372][ T5813] Bluetooth: hci7: command tx timeout [ 313.228316][ T5813] Bluetooth: hci7: command tx timeout [ 315.488114][ T5813] Bluetooth: hci7: command tx timeout [ 317.074825][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.074893][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.485930][ T5798] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 317.604379][ T5804] Bluetooth: hci7: command tx timeout [ 317.930543][ T5798] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 317.934906][ T5798] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 317.936135][ T5798] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 317.936938][ T5798] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 320.028197][ T5798] Bluetooth: hci4: command tx timeout [ 321.241521][ T7400] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 322.378150][ T5798] Bluetooth: hci4: command tx timeout [ 324.312627][ T5813] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 324.393884][ T5813] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 324.418917][ T5813] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 324.421226][ T5813] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 324.422144][ T5813] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 324.428351][ T5813] Bluetooth: hci4: command tx timeout [ 326.509242][ T5798] Bluetooth: hci4: command tx timeout [ 326.509319][ T5813] Bluetooth: hci8: command tx timeout [ 328.588214][ T5813] Bluetooth: hci8: command tx timeout [ 330.668193][ T5813] Bluetooth: hci8: command tx timeout [ 333.068259][ T5813] Bluetooth: hci8: command tx timeout [ 354.593152][ T5804] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 354.597600][ T5804] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 354.644182][ T5804] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 354.648523][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 354.656601][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 354.668837][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 355.171372][ T5804] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 355.192565][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 355.206958][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 355.404619][ T5804] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 357.319980][ T5798] Bluetooth: hci1: command tx timeout [ 357.468975][ T5798] Bluetooth: hci5: command tx timeout [ 359.388160][ T5798] Bluetooth: hci1: command tx timeout [ 359.548209][ T5798] Bluetooth: hci5: command tx timeout [ 361.470956][ T5798] Bluetooth: hci1: command tx timeout [ 361.693621][ T5798] Bluetooth: hci5: command tx timeout [ 363.548287][ T5798] Bluetooth: hci1: command tx timeout [ 363.708471][ T5798] Bluetooth: hci5: command tx timeout [ 368.273494][ T5804] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 368.285683][ T5804] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 368.298757][ T5804] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 368.299796][ T5804] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 368.300476][ T5804] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 370.348601][ T5798] Bluetooth: hci2: command tx timeout [ 372.862740][ T5798] Bluetooth: hci2: command tx timeout [ 374.958096][ T5798] Bluetooth: hci2: command tx timeout [ 375.032038][ T7447] chnl_net:caif_netlink_parms(): no params data found [ 376.988765][ T5798] Bluetooth: hci2: command tx timeout [ 378.589434][ T5804] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 378.594003][ T5804] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 378.607948][ T5804] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 378.613343][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.613407][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.661783][ T5804] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 378.662608][ T5804] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 380.748377][ T5804] Bluetooth: hci6: command tx timeout [ 382.828220][ T5804] Bluetooth: hci6: command tx timeout [ 384.948479][ T5804] Bluetooth: hci6: command tx timeout [ 386.988191][ T5804] Bluetooth: hci6: command tx timeout [ 389.249360][ T7456] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 390.089681][ T5798] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 390.100366][ T5798] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 390.101570][ T5798] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 390.103169][ T5798] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 390.108300][ T5798] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 392.588401][ T5798] Bluetooth: hci7: command tx timeout [ 394.668234][ T5798] Bluetooth: hci7: command tx timeout [ 396.748364][ T5798] Bluetooth: hci7: command tx timeout [ 397.785129][ T38] INFO: task kworker/u8:16:3600 blocked for[ 397.785129][ T38] INFO: task kworker/u8:16:3600 blocked for more than 143 seconds. [ 397.785159][ T38] Tainted: G L syzkaller #0 [ 397.785169][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 397.785178][ T38] task:kworker/u8:16 state:D stack:20184 pid:3600 tgid:3600 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 397.785227][ T38] Workqueue: netns cleanup_net [ 397.785273][ T38] Call Trace: [ 397.785283][ T38] [ 397.785296][ T38] __schedule+0x145f/0x5070 [ 397.785353][ T38] ? __pfx___schedule+0x10/0x10 [ 397.785395][ T38] rt_mutex_schedule+0x77/0xf0 [ 397.785421][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 397.785444][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 397.785483][ T38] rt_mutex_slowlock+0x2a8/0x6b0 [ 397.785508][ T38] ? rt_mutex_slowlock+0x1c9/0x6b0 [ 397.785532][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 397.785565][ T38] ? rcu_barrier+0x4c/0x570 [ 397.785588][ T38] ? rcu_barrier+0x4c/0x570 [ 397.785613][ T38] ? rcu_barrier+0x4c/0x570 [ 397.785629][ T38] mutex_lock_nested+0x16a/0x1d0 [ 397.785650][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 397.785677][ T38] rcu_barrier+0x4c/0x570 [ 397.785706][ T38] netdev_run_todo+0x327/0xea0 [ 397.785737][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 397.785760][ T38] ? kasan_quarantine_put+0xbb/0x1f0 [ 397.785787][ T38] ? nsim_destroy+0x38d/0x680 [ 397.785806][ T38] ? kfree+0x1bd/0x900 [ 397.785825][ T38] ? nsim_destroy+0x38d/0x680 [ 397.785848][ T38] nsim_destroy+0x3ae/0x680 [ 397.785875][ T38] __nsim_dev_port_del+0x14d/0x1b0 [ 397.785901][ T38] nsim_dev_reload_destroy+0x288/0x490 [ 397.785929][ T38] nsim_dev_reload_down+0x8a/0xc0 [ 397.785953][ T38] devlink_reload+0x1b6/0x8d0 [ 397.785982][ T38] ? xa_get_mark+0x67/0x7b0 [ 397.786005][ T38] ? __pfx_devlink_reload+0x10/0x10 [ 397.786027][ T38] ? xa_get_mark+0x70f/0x7b0 [ 397.786059][ T38] devlink_pernet_pre_exit+0x1d9/0x3d0 [ 397.786086][ T38] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 397.786117][ T38] ? class_remove_file_ns+0x124/0x160 [ 397.786145][ T38] ops_undo_list+0x187/0x990 [ 397.786172][ T38] ? __pfx_ops_undo_list+0x10/0x10 [ 397.786190][ T38] ? rt_spin_unlock+0x150/0x200 [ 397.786235][ T38] ? rt_spin_unlock+0x161/0x200 [ 397.786266][ T38] cleanup_net+0x4de/0x7b0 [ 397.786289][ T38] ? __pfx_cleanup_net+0x10/0x10 [ 397.786313][ T38] ? process_scheduled_works+0x9ef/0x1770 [ 397.786333][ T38] ? process_scheduled_works+0x9ef/0x1770 [ 397.786354][ T38] process_scheduled_works+0xad1/0x1770 [ 397.786401][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 397.786419][ T38] ? do_raw_spin_lock+0x121/0x290 [ 397.786455][ T38] worker_thread+0x8a0/0xda0 [ 397.786486][ T38] ? __kthread_parkme+0x7b/0x200 [ 397.786515][ T38] kthread+0x711/0x8a0 [ 397.786541][ T38] ? __pfx_worker_thread+0x10/0x10 [ 397.786560][ T38] ? __pfx_kthread+0x10/0x10 [ 397.786579][ T38] ? rt_spin_unlock+0x150/0x200 [ 397.786606][ T38] ? rt_spin_unlock+0x161/0x200 [ 397.786626][ T38] ? __pfx_kthread+0x10/0x10 [ 397.786650][ T38] ret_from_fork+0x510/0xa50 [ 397.786672][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 397.786689][ T38] ? __switch_to+0xc9e/0x1480 [ 397.786718][ T38] ? __pfx_kthread+0x10/0x10 [ 397.786742][ T38] ret_from_fork_asm+0x1a/0x30 [ 397.786783][ T38] [ 397.786840][ T38] INFO: task syz-executor:7148 blocked for more than 143 seconds. [ 397.786855][ T38] Tainted: G L syzkaller #0 [ 397.786865][ T38] Blocked by coredump. [ 397.786870][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 397.786878][ T38] task:syz-executor state:D stack:18488 pid:7148 tgid:7148 ppid:1 task_flags:0x40054c flags:0x00080003 [ 397.786918][ T38] Call Trace: [ 397.786924][ T38] [ 397.786936][ T38] __schedule+0x145f/0x5070 [ 397.786972][ T38] ? sched_clock+0x3f/0x60 [ 397.787010][ T38] ? __pfx___schedule+0x10/0x10 [ 397.787052][ T38] rt_mutex_schedule+0x77/0xf0 [ 397.787077][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 397.787100][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 397.787139][ T38] rt_mutex_slowlock+0x2a8/0x6b0 [ 397.787164][ T38] ? rt_mutex_slowlock+0x1c9/0x6b0 [ 397.787187][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 397.787221][ T38] ? rcu_barrier+0x4c/0x570 [ 397.787244][ T38] ? rcu_barrier+0x4c/0x570 [ 397.787275][ T38] ? rcu_barrier+0x4c/0x570 [ 397.787291][ T38] mutex_lock_nested+0x16a/0x1d0 [ 397.787312][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 397.787336][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 397.787358][ T38] rcu_barrier+0x4c/0x570 [ 397.787381][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 397.787402][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 397.787424][ T38] netdev_run_todo+0x327/0xea0 [ 397.787450][ T38] ? __pfx_netif_state_change+0x10/0x10 [ 397.787471][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 397.787494][ T38] ? kasan_quarantine_put+0xbb/0x1f0 [ 397.787524][ T38] ? netdev_state_change+0x1ca/0x220 [ 397.787547][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 397.787568][ T38] tun_chr_close+0x13f/0x1c0 [ 397.787591][ T38] __fput+0x45b/0xa80 [ 397.787622][ T38] task_work_run+0x1d4/0x260 [ 397.787649][ T38] ? __pfx_task_work_run+0x10/0x10 [ 397.787673][ T38] ? do_exit+0x68f/0x22f0 [ 397.787696][ T38] ? do_exit+0x68f/0x22f0 [ 397.787724][ T38] do_exit+0x694/0x22f0 [ 397.787750][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 397.787769][ T38] ? lockdep_hardirqs_on+0x7b/0x110 [ 397.787788][ T38] ? __pfx_do_exit+0x10/0x10 [ 397.787809][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 397.787831][ T38] ? reacquire_held_locks+0x104/0x190 [ 397.787854][ T38] ? rt_spin_lock+0x1c1/0x3e0 [ 397.787888][ T38] do_group_exit+0x21c/0x2d0 [ 397.787912][ T38] ? rt_spin_unlock+0x161/0x200 [ 397.787937][ T38] get_signal+0x125d/0x1310 [ 397.787978][ T38] arch_do_signal_or_restart+0x9a/0x7a0 [ 397.788007][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 397.788926][ T38] ? fput_close_sync+0x113/0x220 [ 397.788957][ T38] ? __pfx_fput_close_sync+0x10/0x10 [ 397.788985][ T38] exit_to_user_mode_loop+0x87/0x4e0 [ 397.789008][ T38] ? rcu_is_watching+0x15/0xb0 [ 397.789028][ T38] do_syscall_64+0x2c1/0xf80 [ 397.789046][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.789062][ T38] ? trace_irq_disable+0x37/0x100 [ 397.789142][ T38] ? clear_bhb_loop+0x60/0xb0 [ 397.789165][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.789183][ T38] RIP: 0033:0x7feabdcb15dc [ 397.789211][ T38] RSP: 002b:00007ffd37ee7990 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 397.789229][ T38] RAX: 0000000000000020 RBX: 00007feabea34620 RCX: 00007feabdcb15dc [ 397.789241][ T38] RDX: 0000000000000020 RSI: 00007feabea34670 RDI: 0000000000000003 [ 397.789261][ T38] RBP: 0000000000000000 R08: 00007ffd37ee79e4 R09: 000000000000000c [ 397.789272][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 397.789282][ T38] R13: 0000000000000000 R14: 00007feabea34670 R15: 0000000000000000 [ 397.789311][ T38] [ 397.789320][ T38] INFO: task syz.5.404:7162 blocked for more than 143 seconds. [ 397.789335][ T38] Tainted: G L syzkaller #0 [ 397.789344][ T38] Blocked by coredump. [ 397.789350][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 397.789358][ T38] task:syz.5.404 state:D stack:21720 pid:7162 tgid:7162 ppid:6029 task_flags:0x40044c flags:0x00080003 [ 397.789399][ T38] Call Trace: [ 397.789404][ T38] [ 397.789477][ T38] __schedule+0x145f/0x5070 [ 397.789576][ T38] ? __lock_acquire+0x6b6/0x2cf0 [ 397.789612][ T38] ? __pfx___schedule+0x10/0x10 [ 397.789645][ T38] ? schedule+0x91/0x360 [ 397.789674][ T38] schedule+0x165/0x360 [ 397.789699][ T38] schedule_timeout+0x9a/0x270 [ 397.789723][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 397.789749][ T38] ? do_raw_spin_lock+0x121/0x290 [ 397.789777][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 397.789794][ T38] ? wait_for_completion+0x267/0x5d0 [ 397.789813][ T38] wait_for_completion+0x2bf/0x5d0 [ 397.789843][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 397.789868][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 397.789891][ T38] rcu_barrier+0x463/0x570 [ 397.789917][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 397.789938][ T38] netdev_run_todo+0x327/0xea0 [ 397.789963][ T38] ? __pfx_netif_state_change+0x10/0x10 [ 397.789981][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 397.790002][ T38] ? kasan_quarantine_put+0xbb/0x1f0 [ 397.790034][ T38] ? netdev_state_change+0x1ca/0x220 [ 397.790054][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 397.790075][ T38] tun_chr_close+0x13f/0x1c0 [ 397.790096][ T38] __fput+0x45b/0xa80 [ 397.790127][ T38] task_work_run+0x1d4/0x260 [ 397.790153][ T38] ? __pfx_task_work_run+0x10/0x10 [ 397.790177][ T38] ? do_exit+0x68f/0x22f0 [ 397.790200][ T38] ? do_exit+0x68f/0x22f0 [ 397.790227][ T38] do_exit+0x694/0x22f0 [ 397.790261][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 397.790280][ T38] ? lockdep_hardirqs_on+0x7b/0x110 [ 397.790299][ T38] ? __pfx_do_exit+0x10/0x10 [ 397.790319][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 397.790341][ T38] ? reacquire_held_locks+0x104/0x190 [ 397.790364][ T38] ? rt_spin_lock+0x1c1/0x3e0 [ 397.790398][ T38] do_group_exit+0x21c/0x2d0 [ 397.790420][ T38] ? rt_spin_unlock+0x161/0x200 [ 397.790441][ T38] get_signal+0x125d/0x1310 [ 397.790480][ T38] arch_do_signal_or_restart+0x9a/0x7a0 [ 397.790507][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 397.790550][ T38] exit_to_user_mode_loop+0x87/0x4e0 [ 397.790571][ T38] ? rcu_is_watching+0x15/0xb0 [ 397.790588][ T38] do_syscall_64+0x2c1/0xf80 [ 397.790605][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.790622][ T38] ? trace_irq_disable+0x37/0x100 [ 397.790639][ T38] ? clear_bhb_loop+0x60/0xb0 [ 397.790661][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.790678][ T38] RIP: 0033:0x7fbee967f749 [ 397.790694][ T38] RSP: 002b:00007fff711b6fc8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 397.790712][ T38] RAX: 0000000000000000 RBX: 00007fbee98d7da0 RCX: 00007fbee967f749 [ 397.790725][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 397.790735][ T38] RBP: 00007fbee98d7da0 R08: 000000000000133c R09: 0000000a711b72bf [ 397.790747][ T38] R10: 00000000005fc04c R11: 0000000000000246 R12: 000000000002903c [ 397.790758][ T38] R13: 00007fbee98d6090 R14: ffffffffffffffff R15: 00007fff711b70e0 [ 397.790784][ T38] [ 397.790795][ T38] INFO: task syz.2.423:7224 blocked for more than 143 seconds. [ 397.790809][ T38] Tainted: G L syzkaller #0 [ 397.790818][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 397.790825][ T38] task:syz.2.423 state:D stack:25688 pid:7224 tgid:7223 ppid:5805 task_flags:0x400140 flags:0x00080003 [ 397.790865][ T38] Call Trace: [ 397.790870][ T38] [ 397.790881][ T38] __schedule+0x145f/0x5070 [ 397.790934][ T38] ? __pfx___schedule+0x10/0x10 [ 397.790973][ T38] rt_mutex_schedule+0x77/0xf0 [ 397.790997][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 397.791019][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 397.791057][ T38] rt_mutex_slowlock+0x2a8/0x6b0 [ 397.791082][ T38] ? rt_mutex_slowlock+0x1c9/0x6b0 [ 397.791104][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 397.791125][ T38] ? __flush_work+0xbbe/0xd20 [ 397.791154][ T38] ? rcu_barrier+0x4c/0x570 [ 397.791176][ T38] ? rcu_barrier+0x4c/0x570 [ 397.791199][ T38] ? rcu_barrier+0x4c/0x570 [ 397.791215][ T38] mutex_lock_nested+0x16a/0x1d0 [ 397.791242][ T38] rcu_barrier+0x4c/0x570 [ 397.791277][ T38] flush_rcu_work+0x84/0xb0 [ 397.791299][ T38] __kvfree_rcu_barrier+0x133/0x150 [ 397.791325][ T38] ? p9_client_destroy+0x4a7/0x4f0 [ 397.791346][ T38] kmem_cache_destroy+0x3d/0x180 [ 397.791370][ T38] p9_client_destroy+0x4a7/0x4f0 [ 397.791394][ T38] ? __pfx_p9_client_destroy+0x10/0x10 [ 397.791425][ T38] v9fs_session_close+0x4f/0x200 [ 397.791450][ T38] v9fs_kill_super+0x5c/0x90 [ 397.791475][ T38] deactivate_locked_super+0xbc/0x130 [ 397.791498][ T38] v9fs_get_tree+0x800/0xa60 [ 397.791525][ T38] ? __pfx_v9fs_get_tree+0x10/0x10 [ 397.791548][ T38] ? cap_capable+0x123/0x440 [ 397.791568][ T38] ? v9fs_init_fs_context+0x137/0x500 [ 397.791591][ T38] ? safesetid_security_capable+0xa9/0x1a0 [ 397.791619][ T38] vfs_get_tree+0x92/0x2a0 [ 397.791645][ T38] do_new_mount+0x302/0xa10 [ 397.791663][ T38] ? safesetid_security_capable+0xa9/0x1a0 [ 397.791690][ T38] ? __pfx_do_new_mount+0x10/0x10 [ 397.791707][ T38] ? ns_capable+0x8a/0xf0 [ 397.791728][ T38] ? path_mount+0x628/0xff0 [ 397.791755][ T38] __se_sys_mount+0x313/0x410 [ 397.791780][ T38] ? __pfx___se_sys_mount+0x10/0x10 [ 397.791804][ T38] ? __x64_sys_mount+0x20/0xc0 [ 397.791823][ T38] do_syscall_64+0xec/0xf80 [ 397.791840][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.791856][ T38] ? trace_irq_disable+0x37/0x100 [ 397.791873][ T38] ? clear_bhb_loop+0x60/0xb0 [ 397.791894][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.791910][ T38] RIP: 0033:0x7fb0dc14f749 [ 397.791924][ T38] RSP: 002b:00007fb0da3b6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 397.791941][ T38] RAX: ffffffffffffffda RBX: 00007fb0dc3a5fa0 RCX: 00007fb0dc14f749 [ 397.791954][ T38] RDX: 0000200000000100 RSI: 0000200000000500 RDI: 0000000000000000 [ 397.791973][ T38] RBP: 00007fb0dc1d3f91 R08: 0000200000000a40 R09: 0000000000000000 [ 397.791984][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 397.791995][ T38] R13: 00007fb0dc3a6038 R14: 00007fb0dc3a5fa0 R15: 00007ffd464abef8 [ 397.792024][ T38] [ 397.792072][ T38] [ 397.792072][ T38] Showing all locks held in the system: [ 397.792081][ T38] 6 locks held by ksoftirqd/0/15: [ 397.792092][ T38] 4 locks held by pr/legacy/17: [ 397.792103][ T38] 4 locks held by rcuc/0/20: [ 397.792114][ T38] 1 lock held by khungtaskd/38: [ 397.792123][ T38] #0: ffffffff8d5ae940 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 397.792177][ T38] 2 locks held by kworker/u8:2/44: [ 397.792187][ T38] #0: ffff888144eb4938 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 397.792229][ T38] #1: ffffc90000b67bc0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 397.792277][ T38] 2 locks held by kworker/u8:3/58: [ 397.792287][ T38] #0: ffff888144eb4938 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 397.792328][ T38] #1: ffffc9000124fbc0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 397.792393][ T38] 6 locks held by kworker/u8:16/3600: [ 397.792403][ T38] #0: ffff888019ad4938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 397.792444][ T38] #1: ffffc9000d45fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 397.792485][ T38] #2: ffffffff8e898840 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x7b0 [ 397.792526][ T38] #3: ffff88805b5ef0d8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x10a/0x3d0 [ 397.792571][ T38] #4: ffff888033a8a300 (&devlink->lock_key#2){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x11c/0x3d0 [ 397.792620][ T38] #5: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 397.792664][ T38] 2 locks held by getty/5556: [ 397.792674][ T38] #0: ffff88814e6c30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 397.792718][ T38] #1: ffffc90003e762e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x44f/0x1460 [ 397.792767][ T38] 1 lock held by syz-executor/7148: [ 397.792776][ T38] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 397.792816][ T38] 1 lock held by syz.5.404/7162: [ 397.792826][ T38] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 397.792867][ T38] 3 locks held by kworker/u8:20/7185: [ 397.792876][ T38] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 397.792921][ T38] #1: ffffc9000cbbfbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 397.792962][ T38] #2: ffffffff8e8a5978 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 397.793009][ T38] 1 lock held by syz.4.418/7205: [ 397.793018][ T38] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 397.793059][ T38] 1 lock held by syz.2.423/7224: [ 397.793069][ T38] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 397.793110][ T38] 1 lock held by syz-executor/7240: [ 397.793124][ T38] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 397.793164][ T38] 9 locks held by kworker/u8:22/7251: [ 397.793175][ T38] 3 locks held by kworker/u8:25/7264: [ 397.793184][ T38] #0: ffff88814d516138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 397.793225][ T38] #1: ffffc9000ce7fbc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 397.793273][ T38] #2: ffffffff8e8a5978 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 397.793321][ T38] 1 lock held by syz-executor/7283: [ 397.793330][ T38] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 397.793370][ T38] 1 lock held by syz-executor/7290: [ 397.793380][ T38] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 397.793421][ T38] 1 lock held by syz-executor/7317: [ 397.793431][ T38] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 397.793472][ T38] 1 lock held by syz-executor/7369: [ 397.793482][ T38] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 397.793522][ T38] 1 lock held by syz-executor/7390: [ 397.793531][ T38] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 397.793571][ T38] 3 locks held by kworker/0:10/7392: [ 397.793581][ T38] #0: ffff88813ff55138 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 397.793623][ T38] #1: ffffc90006407bc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 397.793663][ T38] #2: ffffffff8e8a5978 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 397.793706][ T38] 1 lock held by syz-executor/7400: [ 397.793715][ T38] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 397.793755][ T38] 2 locks held by syz.1.456/7417: [ 397.793765][ T38] #0: ffffffff8edd0928 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 397.793812][ T38] #1: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 397.793858][ T38] 1 lock held by syz-executor/7422: [ 397.793868][ T38] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 397.793909][ T38] 1 lock held by syz-executor/7427: [ 397.793918][ T38] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 397.793958][ T38] 1 lock held by syz-executor/7440: [ 397.793968][ T38] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 397.794008][ T38] 1 lock held by syz-executor/7447: [ 397.794022][ T38] #0: ffffffff8e8a5978 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 397.794065][ T38] 4 locks held by syz-executor/7456: [ 397.794076][ T38] 2 locks held by syz-executor/7469: [ 397.794086][ T38] #0: ffffffff8e898840 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 397.794126][ T38] #1: ffffffff8e8a5978 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x60 [ 397.794171][ T38] 2 locks held by syz-executor/7471: [ 397.794181][ T38] #0: ffffffff8e898840 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 397.794221][ T38] #1: ffffffff8e8a5978 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x60 [ 397.794270][ T38] 2 locks held by syz-executor/7483: [ 397.794280][ T38] #0: ffffffff8e898840 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 397.794319][ T38] #1: ffffffff8e8a5978 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x85/0x250 [ 397.794359][ T38] 1 lock held by syz-executor/7494: [ 397.794369][ T38] #0: ffffffff8e8a5978 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8ec/0x1c90 [ 397.794411][ T38] 1 lock held by syz-executor/7501: [ 397.794420][ T38] #0: ffffffff8e8a5978 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 397.794462][ T38] [ 397.794467][ T38] ============================================= [ 397.794467][ T38] [ 397.794479][ T38] NMI backtrace for cpu 1 [ 397.794507][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 397.794531][ T38] Tainted: [L]=SOFTLOCKUP [ 397.794537][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 397.794546][ T38] Call Trace: [ 397.794554][ T38] [ 397.794561][ T38] dump_stack_lvl+0xe8/0x150 [ 397.794585][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 397.794608][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 397.794627][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 397.794652][ T38] sys_info+0x135/0x170 [ 397.794670][ T38] watchdog+0xf95/0xfe0 [ 397.794693][ T38] ? watchdog+0x20a/0xfe0 [ 397.794718][ T38] kthread+0x711/0x8a0 [ 397.794742][ T38] ? __pfx_watchdog+0x10/0x10 [ 397.794758][ T38] ? __pfx_kthread+0x10/0x10 [ 397.794777][ T38] ? rt_spin_unlock+0x150/0x200 [ 397.794803][ T38] ? rt_spin_unlock+0x161/0x200 [ 397.794822][ T38] ? __pfx_kthread+0x10/0x10 [ 397.794844][ T38] ret_from_fork+0x510/0xa50 [ 397.794862][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 397.794879][ T38] ? __switch_to+0xc9e/0x1480 [ 397.794904][ T38] ? __pfx_kthread+0x10/0x10 [ 397.794931][ T38] ret_from_fork_asm+0x1a/0x30 [ 397.794969][ T38] [ 397.794976][ T38] Sending NMI from CPU 1 to CPUs 0: [ 397.795005][ C0] NMI backtrace for cpu 0 [ 397.795022][ C0] CPU: 0 UID: 0 PID: 17 Comm: pr/legacy Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 397.795063][ C0] Tainted: [L]=SOFTLOCKUP [ 397.795068][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 397.795077][ C0] RIP: 0010:delay_tsc+0x5b/0xc0 [ 397.795102][ C0] Code: 90 49 89 d7 49 c1 e7 20 49 09 c7 4d 29 f7 49 39 df 73 53 bf 01 00 00 00 e8 72 00 c0 f6 65 8b 05 bb bc e2 06 85 c0 74 1c f3 90 01 00 00 00 e8 bb fe bf f6 e8 26 78 01 00 39 c5 75 0e 0f 01 f9 [ 397.795115][ C0] RSP: 0018:ffffc90000167950 EFLAGS: 00000286 [ 397.795128][ C0] RAX: 0000000080000000 RBX: 0000000000000899 RCX: 0000000000000000 [ 397.795139][ C0] RDX: 00000000000000ce RSI: ffffffff8b3f5a40 RDI: 00000000ffffffff [ 397.795149][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 397.795158][ C0] R10: dffffc0000000000 R11: ffffffff8ad06320 R12: 1ffffffff31f3802 [ 397.795170][ C0] R13: 00000000ffffffff R14: 000000ce38db8688 R15: 000000000000011e [ 397.795180][ C0] FS: 0000000000000000(0000) GS:ffff888126cee000(0000) knlGS:0000000000000000 [ 397.795193][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 397.795203][ C0] CR2: 00007fb196e357e9 CR3: 0000000023540000 CR4: 00000000003526f0 [ 397.795217][ C0] Call Trace: [ 397.795223][ C0] [ 397.795231][ C0] wait_for_lsr+0x166/0x2f0 [ 397.795249][ C0] serial8250_console_write+0x11bd/0x1b40 [ 397.795277][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 397.795295][ C0] ? console_flush_one_record+0xf4/0xb80 [ 397.795316][ C0] ? console_flush_one_record+0x489/0xb80 [ 397.795336][ C0] console_flush_one_record+0x685/0xb80 [ 397.795357][ C0] ? console_flush_one_record+0xf4/0xb80 [ 397.795377][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 397.795395][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 397.795413][ C0] legacy_kthread_func+0x16f/0x210 [ 397.795431][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 397.795448][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 397.795466][ C0] ? __kthread_parkme+0x7b/0x200 [ 397.795482][ C0] ? __kthread_parkme+0x1a1/0x200 [ 397.795507][ C0] kthread+0x711/0x8a0 [ 397.795526][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 397.795543][ C0] ? __pfx_kthread+0x10/0x10 [ 397.795559][ C0] ? rt_spin_unlock+0x150/0x200 [ 397.795579][ C0] ? rt_spin_unlock+0x161/0x200 [ 397.795596][ C0] ? __pfx_kthread+0x10/0x10 [ 397.795614][ C0] ret_from_fork+0x510/0xa50 [ 397.795630][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 397.795644][ C0] ? __switch_to+0xc9e/0x1480 [ 397.795665][ C0] ? __pfx_kthread+0x10/0x10 [ 397.795683][ C0] ret_from_fork_asm+0x1a/0x30 [ 397.795710][ C0] [ 397.796005][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 397.796023][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 397.796047][ T38] Tainted: [L]=SOFTLOCKUP [ 397.796053][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 397.796062][ T38] Call Trace: [ 397.796069][ T38] [ 397.796076][ T38] vpanic+0x1e0/0x670 [ 397.796102][ T38] panic+0xb9/0xc0 [ 397.796123][ T38] ? __pfx_panic+0x10/0x10 [ 397.796153][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 397.796177][ T38] watchdog+0xfdf/0xfe0 [ 397.796200][ T38] ? watchdog+0x20a/0xfe0 [ 397.796224][ T38] kthread+0x711/0x8a0 [ 397.796253][ T38] ? __pfx_watchdog+0x10/0x10 [ 397.796270][ T38] ? __pfx_kthread+0x10/0x10 [ 397.796290][ T38] ? rt_spin_unlock+0x150/0x200 [ 397.796315][ T38] ? rt_spin_unlock+0x161/0x200 [ 397.796335][ T38] ? __pfx_kthread+0x10/0x10 [ 397.796357][ T38] ret_from_fork+0x510/0xa50 [ 397.796377][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 397.796393][ T38] ? __switch_to+0xc9e/0x1480 [ 397.796420][ T38] ? __pfx_kthread+0x10/0x10 [ 397.796442][ T38] ret_from_fork_asm+0x1a/0x30 [ 397.796479][ T38] [ 397.796842][ T38] Kernel Offset: disabled