last executing test programs: 1m34.474786649s ago: executing program 1 (id=18): pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) write$P9_RVERSION(r0, 0x0, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000380)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='coredump_filter\x00') write$cgroup_int(r4, &(0x7f0000000180)=0x4b6e, 0xfffffdcb) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r5 = gettid() tkill(r5, 0x12) io_pgetevents(0x0, 0x7, 0x0, 0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={[0x3]}, 0x8}) 1m34.384214331s ago: executing program 2 (id=20): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="5b5e26bd7000ffdbdf2501000000050004000100000008000600ac"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x90) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0403000000dc770000ab39"], 0xf) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000100)=0x30) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f00000003c0), &(0x7f0000000400)=0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000480)=0x8, 0x4) syz_open_procfs(0x0, &(0x7f0000000440)='net/ip6_tables_matches\x00') 1m32.056752138s ago: executing program 2 (id=22): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$keyring(&(0x7f0000000880), 0x0, 0x0, 0x0, 0xfffffffffffffffc) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x0, 0x111, 0x4b4, 0x128, 0xd4feffff, 0x220, 0x20a, 0x278, 0x220, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x180, 0xa42, 0xb}}]}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 1m30.810565849s ago: executing program 2 (id=23): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x28011, r1, 0x0) 1m29.150271643s ago: executing program 2 (id=27): write$tun(0xffffffffffffffff, &(0x7f0000000980)={@val={0x0, 0x886c}, @void, @mpls={[{0x800}, {0xffe01, 0x0, 0x1}, {0x6}, {0x5}], @ipv6=@gre_packet={0x6, 0x6, "54ec12", 0x143, 0x2f, 0xff, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[@dstopts={0xfebde444ec508e5f, 0x0, '\x00', [@ra={0x5, 0x2, 0x7fff}, @generic={0x5}]}, @routing={0x3c, 0xc, 0x0, 0xd, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}, @dev={0xfe, 0x80, '\x00', 0x13}, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, @private2={0xfc, 0x2, '\x00', 0x1}]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x87, 0x0, [], "9be15c613ef81420dd2339f8452c31fba48c554e50a51cae1d4af80b2dbe193eb10dd3307ba9608c130485d5d8d014ddf0588ee6fd1b8792c2d916ea1de1507283586bdfa163920b13f321c5370592eb75c1f17d0ee2bd179d0c9ed477d2b5dd0df871360c460ea5071bfd1e0b350b845aa574af41a87db6f73353ae0d3ab4026a705dc260bfcb"}, {}, {0x0, 0x0, 0x1}, {0x8, 0x88be, 0x3, {{0x9, 0x1, 0x7, 0x0, 0x1, 0x1, 0x1, 0x7}, 0x1, {0x100}}}, {0x8, 0x22eb, 0x2, {{0x9, 0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x4c}, 0x2, {0x5, 0x7, 0x2, 0x1a, 0x0, 0x0, 0x1, 0x1, 0x1}}}}}}}}, 0x17f) 1m29.149437021s ago: executing program 1 (id=28): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a31000000000900010073797a300000000070000000060a010400000000000000000100000008000b40000000000900010073797a30000000004800"], 0xe4}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 1m28.859785874s ago: executing program 2 (id=30): socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="380000006800010003001000fdffff7f00000000000000000c00020001000000150000000c000c8006000100d43f00000600030001000000838ed1b905f28217"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000084) 1m28.38791144s ago: executing program 2 (id=33): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$keyring(&(0x7f0000000880), 0x0, 0x0, 0x0, 0xfffffffffffffffc) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x0, 0x111, 0x4b4, 0x128, 0xd4feffff, 0x220, 0x20a, 0x278, 0x220, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x180, 0xa42, 0xb}}]}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 1m28.345024973s ago: executing program 1 (id=34): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) syz_emit_ethernet(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_init(0x200, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20942, 0x56) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) 1m24.925832053s ago: executing program 1 (id=38): mkdir(&(0x7f0000000040)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='/dev/loop0,1', 0xc) 1m16.101825136s ago: executing program 1 (id=54): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5ce000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) 1m12.971537807s ago: executing program 1 (id=58): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x10000839, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r4, &(0x7f0000000c40)=[{0x0}], 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_OPEN(r5, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000004e40), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000001000/0x4000)=nil, 0x3) 1m12.855532919s ago: executing program 32 (id=33): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$keyring(&(0x7f0000000880), 0x0, 0x0, 0x0, 0xfffffffffffffffc) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x0, 0x111, 0x4b4, 0x128, 0xd4feffff, 0x220, 0x20a, 0x278, 0x220, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x180, 0xa42, 0xb}}]}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 57.428874634s ago: executing program 33 (id=58): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x10000839, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r4, &(0x7f0000000c40)=[{0x0}], 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_OPEN(r5, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000004e40), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000001000/0x4000)=nil, 0x3) 14.953650488s ago: executing program 0 (id=139): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffff, 0x109, &(0x7f0000006680)) timer_create(0x8, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000180)) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="5c00000014006b03000000d86e6c1d00028400000000564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20008010) write$nci(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x1c) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d81201"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000070000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 11.482799904s ago: executing program 0 (id=142): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfd, {0x1d, 0x1, 0x2}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8, 0x9, r1}]}, 0x24}}, 0x0) 10.593858263s ago: executing program 3 (id=145): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = signalfd4(r0, &(0x7f0000000040)={[0xc]}, 0x8, 0x80000) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000080)={0x0, 0x8ef, 0xf, 0x7, 0x19, "438c89dda3144158938a818621d256cfae2489"}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000006c0)={'gretap0\x00', &(0x7f0000000680)={'gretap0\x00', 0x0, 0x10, 0x1, 0xecd2, 0x3, {{0x7, 0x4, 0x0, 0x3, 0x1c, 0x68, 0x0, 0x11, 0x2f, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x7, 0xd8, [@multicast1]}]}}}}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYRES64=r3], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x80) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWCHAIN={0x14}], {0x14}}, 0xa4}}, 0x0) write(r2, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r2, &(0x7f00000021c0), 0x5b, 0x40, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x2000009, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x2, 0x7}}}, 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000240)={0x4, 0x1, 0x13, 0x1, 0x100, &(0x7f0000000280)="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"}) 10.183449359s ago: executing program 0 (id=146): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource0\x00', 0x2, 0x0) write$USERIO_CMD_REGISTER(r0, 0x0, 0x0) 8.892605755s ago: executing program 0 (id=147): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) 7.487454892s ago: executing program 0 (id=151): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x40000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884) 6.302995697s ago: executing program 4 (id=154): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfd, {0x1d, 0x1, 0x2}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8, 0x9, r1}]}, 0x24}}, 0x0) 4.819731526s ago: executing program 3 (id=155): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x218}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) 4.410810484s ago: executing program 3 (id=156): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setpriority(0x1, 0xffffffffffffffff, 0x3) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, 0x0, &(0x7f00000000c0), &(0x7f0000000180)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010023bd70a664dbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$kcm(0xa, 0x7, 0x106) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r4, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, 0x0, 0x7}, 0x80, 0x0}, 0x4000011) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, 0x0, 0x40050) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfa", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) 4.342885497s ago: executing program 4 (id=157): setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000240)=[@in={0x2, 0x4e23, @remote}], 0x10) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 4.177428408s ago: executing program 4 (id=158): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x2002) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x82, 0x185) ioctl$IOMMU_HWPT_INVALIDATE$TEST(0xffffffffffffffff, 0x3b8d, &(0x7f0000000280)={0x20, 0x0, 0x0}) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(r0, 0x0, 0x40, 0x1) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) sync() socket(0x2b, 0x1, 0x1) 3.038102213s ago: executing program 3 (id=159): write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=0x4b6e, 0xfffffdcb) 2.988703804s ago: executing program 4 (id=160): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r0, &(0x7f0000003440)={0x2020}, 0x2020) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat(0xffffffffffffff9c, 0x0, 0x320800d, 0x31) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) read$FUSE(r2, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000440)={0xa, 0x4e23, 0x7, @remote, 0x63}, 0x1c) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0x140, 0x1f, 0x9, 0x2, 0x10000007, 0x2, 0x7fff, 0x30000002, 0x7, 0xc72d, 0x0, 0x7, 0x1ff, 0x400008, 0x29, 0x72f0, 0x101, 0x6, 0x6, 0x401, 0x2, 0x484, 0xa2dc, 0x9, 0x1000, 0x80000001, 0x7fffffff, 0x0, 0x383, 0x8001, 0x4]}) writev(r4, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000180)="29e3e5864ceda68155960e4b20eb0403a71898733f0dcb64c38849be0185191621d8d87c521201593212da719d600d9262d4ac59dfb5ec2b503053b465b55ae5c7ca58b82c73ad9aa7872d1e4060a6112879a7afe128f10bf2", 0x59}, {&(0x7f0000000300)="ac3d900278bc4f673648008b3fd9dafb", 0x10}, {&(0x7f0000000340)="79baf7c80af72c6d074d7aa55d18c2b3f92fb55d09041ffa4b66a0ed18f71e54cc0a5bc1461a6d07e6d4f31058721987ab90040f06c98df9afdd7c6614915beee9a0bea8187c6315a4be760ebc06c000bbe9a766f3752ff9ed8b304d3378bfd1a88dfc510d611a8c13259173a7c957bdd73f4bc320391f6d862cfdd58f6c09abefc7302f22bf6795474455a958f56a17d1551e", 0x93}, {0x0}, {&(0x7f00000004c0)="a407d58cecfb1369d434cee2363e2e667262a9fda651de7eb280ec8ff5087e0036af2fef7939cac0a06e6169aa6caa951a4a9b35e608532fafaa74692296b26bf7525aefeadde445128254deda33cb8622aad1f5aa0ab3ba8a81949805c4de7209102f463431fb613efae16477340300ad74baf9e9dcf19667797369fdeb42", 0x7f}, {&(0x7f00000005c0)}], 0x7) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x2a00000, 0x0) 2.634307674s ago: executing program 3 (id=161): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="120000000b0000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000040)=0x2, &(0x7f00000005c0)=r0}, 0x20) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 1.542784475s ago: executing program 4 (id=162): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x10000839, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r4, &(0x7f0000000c40)=[{0x0}], 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_OPEN(r5, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000001000/0x4000)=nil, 0x3) 1.486794825s ago: executing program 3 (id=163): epoll_create1(0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x4b, 0x3}, 0x0, &(0x7f0000000240)={0x1c, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x5}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9}) close(r1) 131.488255ms ago: executing program 0 (id=164): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x218}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) 0s ago: executing program 4 (id=165): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfd, {0x1d, 0x1, 0x2}, [@CGW_DST_IF={0x8, 0xa, r0}, @CGW_SRC_IF={0x8, 0x9, r1}]}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.103' (ED25519) to the list of known hosts. [ 86.714875][ T5585] cgroup: Unknown subsys name 'net' [ 86.957596][ T5585] cgroup: Unknown subsys name 'cpuset' [ 87.030410][ T5585] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 88.821182][ T5585] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.863684][ T1009] cfg80211: failed to load regulatory.db [ 92.936461][ T5617] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.938183][ T5617] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.943375][ T5613] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.953133][ T5616] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.962819][ T5613] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.977343][ T5620] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.009638][ T5620] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.013952][ T5622] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.017053][ T5617] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.036569][ T5620] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.037179][ T5621] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.038586][ T5620] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.052568][ T5620] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.055538][ T5621] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.057938][ T5621] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.063298][ T5620] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.066177][ T5621] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.069034][ T5621] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.079444][ T5621] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.080520][ T5621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.082425][ T5620] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.089984][ T4912] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.115552][ T5620] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.144262][ T5605] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.216140][ T4912] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.210805][ T5612] Bluetooth: hci2: command tx timeout [ 95.290199][ T5612] Bluetooth: hci3: command tx timeout [ 95.370666][ T5612] Bluetooth: hci0: command tx timeout [ 95.370806][ T5612] Bluetooth: hci4: command tx timeout [ 95.370896][ T5612] Bluetooth: hci1: command tx timeout [ 95.847876][ T5600] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.848655][ T5600] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.848786][ T5600] bridge_slave_0: entered allmulticast mode [ 95.858465][ T5600] bridge_slave_0: entered promiscuous mode [ 95.931969][ T5600] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.932075][ T5600] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.932239][ T5600] bridge_slave_1: entered allmulticast mode [ 95.934121][ T5600] bridge_slave_1: entered promiscuous mode [ 95.968008][ T5602] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.968117][ T5602] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.968500][ T5602] bridge_slave_0: entered allmulticast mode [ 95.970723][ T5602] bridge_slave_0: entered promiscuous mode [ 95.998455][ T5604] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.998581][ T5604] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.998747][ T5604] bridge_slave_0: entered allmulticast mode [ 96.006812][ T5604] bridge_slave_0: entered promiscuous mode [ 96.069033][ T5602] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.069177][ T5602] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.069334][ T5602] bridge_slave_1: entered allmulticast mode [ 96.078568][ T5602] bridge_slave_1: entered promiscuous mode [ 96.084546][ T5604] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.084858][ T5604] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.085316][ T5604] bridge_slave_1: entered allmulticast mode [ 96.096971][ T5604] bridge_slave_1: entered promiscuous mode [ 96.113106][ T5601] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.113539][ T5601] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.114077][ T5601] bridge_slave_0: entered allmulticast mode [ 96.125169][ T5601] bridge_slave_0: entered promiscuous mode [ 96.189832][ T5603] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.189989][ T5603] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.190152][ T5603] bridge_slave_0: entered allmulticast mode [ 96.191968][ T5603] bridge_slave_0: entered promiscuous mode [ 96.194818][ T5601] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.194952][ T5601] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.195145][ T5601] bridge_slave_1: entered allmulticast mode [ 96.197349][ T5601] bridge_slave_1: entered promiscuous mode [ 96.259475][ T5600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.339154][ T5603] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.339269][ T5603] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.339440][ T5603] bridge_slave_1: entered allmulticast mode [ 96.348216][ T5603] bridge_slave_1: entered promiscuous mode [ 96.387204][ T5600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.396237][ T5602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.412105][ T5604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.468104][ T5602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.473219][ T5604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.502704][ T5601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.560797][ T5603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.568004][ T5601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.575902][ T5600] team0: Port device team_slave_0 added [ 96.624757][ T5603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.646632][ T5600] team0: Port device team_slave_1 added [ 96.649025][ T5602] team0: Port device team_slave_0 added [ 96.664999][ T5604] team0: Port device team_slave_0 added [ 96.723019][ T5602] team0: Port device team_slave_1 added [ 96.724899][ T5604] team0: Port device team_slave_1 added [ 96.748756][ T5601] team0: Port device team_slave_0 added [ 96.794371][ T5603] team0: Port device team_slave_0 added [ 96.796675][ T5601] team0: Port device team_slave_1 added [ 96.797853][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.797863][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.797881][ T5600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.881872][ T5603] team0: Port device team_slave_1 added [ 96.900530][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.900542][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.900561][ T5600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.902329][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.902341][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.902359][ T5602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.903525][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.903538][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.903567][ T5604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.053043][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.053059][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.053087][ T5602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.055354][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.055365][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.055384][ T5604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.131390][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.131439][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.131511][ T5601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.203930][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.203947][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.203975][ T5603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.205208][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.205222][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.205250][ T5601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.286816][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.286860][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.286983][ T5603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.301440][ T5605] Bluetooth: hci2: command tx timeout [ 97.369956][ T5605] Bluetooth: hci3: command tx timeout [ 97.449966][ T5605] Bluetooth: hci1: command tx timeout [ 97.450001][ T5605] Bluetooth: hci4: command tx timeout [ 97.450022][ T5605] Bluetooth: hci0: command tx timeout [ 97.763060][ T5600] hsr_slave_0: entered promiscuous mode [ 97.764113][ T5600] hsr_slave_1: entered promiscuous mode [ 97.829290][ T5602] hsr_slave_0: entered promiscuous mode [ 97.832105][ T5602] hsr_slave_1: entered promiscuous mode [ 97.834338][ T5602] debugfs: 'hsr0' already exists in 'hsr' [ 97.834635][ T5602] Cannot create hsr debugfs directory [ 97.874038][ T5604] hsr_slave_0: entered promiscuous mode [ 97.875067][ T5604] hsr_slave_1: entered promiscuous mode [ 97.875631][ T5604] debugfs: 'hsr0' already exists in 'hsr' [ 97.875646][ T5604] Cannot create hsr debugfs directory [ 97.942979][ T5601] hsr_slave_0: entered promiscuous mode [ 97.943859][ T5601] hsr_slave_1: entered promiscuous mode [ 97.944646][ T5601] debugfs: 'hsr0' already exists in 'hsr' [ 97.944663][ T5601] Cannot create hsr debugfs directory [ 97.964910][ T5603] hsr_slave_0: entered promiscuous mode [ 97.968118][ T5603] hsr_slave_1: entered promiscuous mode [ 97.972982][ T5603] debugfs: 'hsr0' already exists in 'hsr' [ 97.973036][ T5603] Cannot create hsr debugfs directory [ 98.948028][ T5600] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 99.012211][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 99.019702][ T5600] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 99.054238][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 99.057546][ T5600] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 99.086926][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 99.112064][ T5600] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 99.145462][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 99.296260][ T5604] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 99.334774][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 99.347067][ T5604] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 99.369946][ T4912] Bluetooth: hci2: command tx timeout [ 99.374010][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 99.377291][ T5604] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 99.425344][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 99.451283][ T4912] Bluetooth: hci3: command tx timeout [ 99.457463][ T5604] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 99.483908][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 99.530817][ T4912] Bluetooth: hci0: command tx timeout [ 99.530848][ T4912] Bluetooth: hci1: command tx timeout [ 99.530865][ T5612] Bluetooth: hci4: command tx timeout [ 99.626287][ T5601] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 99.656188][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 99.669633][ T5601] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 99.697571][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 99.709913][ T5601] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 99.745169][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 99.778499][ T5601] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 99.804283][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 99.968168][ T5603] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 99.993622][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.022412][ T5603] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 100.063797][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.082086][ T5603] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 100.139222][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.179183][ T5603] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 100.213835][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.274717][ T5600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.390601][ T5602] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.433522][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.454925][ T5600] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.456075][ T5602] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.507258][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.532519][ T5602] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.565102][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.579481][ T5602] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.614567][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.659941][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.660163][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.751435][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.751524][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.804769][ T5604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.921619][ T5604] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.963012][ T5601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.001422][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.002432][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.072370][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.072492][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.137699][ T5601] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.182607][ T5603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.210270][ T1005] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.211875][ T1005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.280712][ T1005] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.280856][ T1005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.394930][ T5603] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.449904][ T5605] Bluetooth: hci2: command tx timeout [ 101.485412][ T1005] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.485574][ T1005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.523816][ T5602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.531425][ T5605] Bluetooth: hci3: command tx timeout [ 101.557477][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.557643][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.610150][ T5605] Bluetooth: hci4: command tx timeout [ 101.610184][ T5605] Bluetooth: hci1: command tx timeout [ 101.610206][ T5605] Bluetooth: hci0: command tx timeout [ 101.694841][ T5602] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.772425][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.797766][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.906461][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.906633][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.396465][ T5600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.795583][ T5600] veth0_vlan: entered promiscuous mode [ 102.856457][ T5604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.886941][ T5600] veth1_vlan: entered promiscuous mode [ 103.123949][ T5600] veth0_macvtap: entered promiscuous mode [ 103.167590][ T5600] veth1_macvtap: entered promiscuous mode [ 103.326741][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.363194][ T5601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.398505][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.467709][ T5603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.475458][ T55] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.499560][ T55] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.511666][ T55] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.514272][ T55] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.707168][ T5602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.993048][ T5601] veth0_vlan: entered promiscuous mode [ 104.073037][ T5603] veth0_vlan: entered promiscuous mode [ 104.094095][ T5601] veth1_vlan: entered promiscuous mode [ 104.099190][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.099212][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.166458][ T5604] veth0_vlan: entered promiscuous mode [ 104.212452][ T5603] veth1_vlan: entered promiscuous mode [ 104.266768][ T5602] veth0_vlan: entered promiscuous mode [ 104.288288][ T5604] veth1_vlan: entered promiscuous mode [ 104.313603][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.313621][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.347695][ T5602] veth1_vlan: entered promiscuous mode [ 104.414404][ T5601] veth0_macvtap: entered promiscuous mode [ 104.443103][ T5601] veth1_macvtap: entered promiscuous mode [ 104.504071][ T5603] veth0_macvtap: entered promiscuous mode [ 104.549261][ T5603] veth1_macvtap: entered promiscuous mode [ 104.556798][ T5604] veth0_macvtap: entered promiscuous mode [ 104.588189][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.637798][ T5602] veth0_macvtap: entered promiscuous mode [ 104.649083][ T5604] veth1_macvtap: entered promiscuous mode [ 104.664350][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.690020][ T5602] veth1_macvtap: entered promiscuous mode [ 104.722145][ T67] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.728985][ T67] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.753654][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.755907][ T67] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.781682][ T67] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.798402][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.821206][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.907762][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.912707][ T1005] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.951638][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.952921][ T1005] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.989282][ T1005] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.191932][ T1005] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.196898][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.201665][ T1005] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.269017][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.436160][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.479900][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.487084][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.575235][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.762584][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.809731][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.276656][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.276677][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.568537][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.568556][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.809786][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.829810][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.839798][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.849782][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.909788][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.919788][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.929795][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.939783][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.949798][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.969811][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.963305][ T1005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.963328][ T1005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.141330][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.141349][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.331631][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.331651][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.419100][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.419121][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.929906][ T1005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.929925][ T1005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.952460][ T4912] Bluetooth: hci3: unexpected event 0x03 length: 12 > 11 [ 112.463722][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.463770][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.108886][ T5870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20'. [ 120.183486][ T4912] Bluetooth: hci0: unexpected event 0x03 length: 12 > 11 [ 125.121176][ T5915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.32'. [ 125.594877][ T4912] Bluetooth: hci3: unexpected event 0x03 length: 12 > 11 [ 129.156675][ T4912] Bluetooth: hci3: unexpected event 0x03 length: 12 > 11 [ 130.085163][ T5946] binder: 5944:5946 ioctl 80049363 200000000100 returned -22 [ 130.504661][ T5946] 9pnet_virtio: no channels available for device syz [ 132.940825][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.960436][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.098932][ T5967] ftl_cs: FTL header not found. [ 136.694199][ T5967] block2mtd: mtd1: [/dev/loop0] erase_size = 0KiB [1] [ 137.410639][ T5992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.53'. [ 137.466974][ T4912] Bluetooth: hci4: unexpected event 0x03 length: 12 > 11 [ 140.043878][ T6003] binder: 6002:6003 ioctl 80049363 200000000100 returned -22 [ 140.097131][ T6003] 9pnet_virtio: no channels available for device syz [ 141.544227][ T5605] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 141.574272][ T5605] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 141.575891][ T5605] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 141.586519][ T5605] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 141.587817][ T5605] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 143.946856][ T5605] Bluetooth: hci5: command tx timeout [ 146.041257][ T6042] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 146.041763][ T6042] overlayfs: missing 'lowerdir' [ 147.048303][ T4912] Bluetooth: hci5: command tx timeout [ 148.732818][ T5723] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 149.067621][ T4912] Bluetooth: hci5: command tx timeout [ 150.420200][ T5723] usb 4-1: Using ep0 maxpacket: 32 [ 151.208972][ T5723] usb 4-1: device descriptor read/all, error -71 [ 151.451750][ T4912] Bluetooth: hci5: command tx timeout [ 154.739192][ T1415] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.500147][ T1009] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 157.974686][ T1009] usb 4-1: Using ep0 maxpacket: 32 [ 158.036737][ T1009] usb 4-1: no configurations [ 158.036787][ T1009] usb 4-1: can't read configurations, error -22 [ 158.960274][ T1009] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 159.140072][ T1009] usb 4-1: Using ep0 maxpacket: 32 [ 160.312684][ T1009] usb 4-1: device descriptor read/all, error -71 [ 160.329202][ T1009] usb usb4-port1: attempt power cycle [ 160.400935][ T5605] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 160.433386][ T5605] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 160.466451][ T5605] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 160.481421][ T5605] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 160.488575][ T5605] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 160.716793][ T1415] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.323483][ T4912] Bluetooth: hci0: command tx timeout [ 165.117125][ T1415] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.388337][ T4912] Bluetooth: hci0: command tx timeout [ 165.874602][ T1009] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 166.300034][ T1009] usb 5-1: Using ep0 maxpacket: 32 [ 166.317630][ T1009] usb 5-1: no configurations [ 166.317682][ T1009] usb 5-1: can't read configurations, error -22 [ 166.716742][ T6136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.92'. [ 166.720390][ T4912] Bluetooth: hci3: unexpected event 0x03 length: 12 > 11 [ 166.860534][ T1009] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 167.270079][ T1009] usb 5-1: Using ep0 maxpacket: 32 [ 167.276178][ T1009] usb 5-1: no configurations [ 167.276197][ T1009] usb 5-1: can't read configurations, error -22 [ 167.375590][ T1009] usb usb5-port1: attempt power cycle [ 167.451559][ T4912] Bluetooth: hci0: command tx timeout [ 167.910581][ T1009] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 168.053895][ T1009] usb 5-1: Using ep0 maxpacket: 32 [ 168.055596][ T1009] usb 5-1: no configurations [ 168.055663][ T1009] usb 5-1: can't read configurations, error -22 [ 168.255785][ T1009] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 168.351199][ T1009] usb 5-1: device descriptor read/8, error -71 [ 168.460300][ T1009] usb usb5-port1: unable to enumerate USB device [ 169.534638][ T4912] Bluetooth: hci0: command tx timeout [ 172.530981][ T1415] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.523061][ T6015] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.523637][ T6015] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.524311][ T6015] bridge_slave_0: entered allmulticast mode [ 173.587565][ T6015] bridge_slave_0: entered promiscuous mode [ 174.032933][ T5857] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 174.271068][ T5857] usb 4-1: Using ep0 maxpacket: 32 [ 174.274866][ T5857] usb 4-1: no configurations [ 174.274926][ T5857] usb 4-1: can't read configurations, error -22 [ 174.344102][ T6015] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.344680][ T6015] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.356031][ T6015] bridge_slave_1: entered allmulticast mode [ 174.495351][ T5857] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 174.652917][ T6015] bridge_slave_1: entered promiscuous mode [ 174.909924][ T5857] usb 4-1: Using ep0 maxpacket: 32 [ 174.912821][ T5857] usb 4-1: no configurations [ 174.912835][ T5857] usb 4-1: can't read configurations, error -22 [ 174.913850][ T5857] usb usb4-port1: attempt power cycle [ 175.594912][ T5857] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 176.057478][ T5857] usb 4-1: Using ep0 maxpacket: 32 [ 176.068360][ T5857] usb 4-1: no configurations [ 176.068415][ T5857] usb 4-1: can't read configurations, error -22 [ 176.310314][ T5857] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 176.331938][ T5857] usb 4-1: Using ep0 maxpacket: 32 [ 176.333863][ T5857] usb 4-1: no configurations [ 176.333936][ T5857] usb 4-1: can't read configurations, error -22 [ 176.336156][ T5857] usb usb4-port1: unable to enumerate USB device [ 178.177169][ T6188] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 178.197678][ T6015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.338870][ T6015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.725926][ T6015] team0: Port device team_slave_0 added [ 178.746809][ T6015] team0: Port device team_slave_1 added [ 178.975236][ T6015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.975251][ T6015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.975275][ T6015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.029068][ T6200] process 'syz.3.110' launched './file0' with NULL argv: empty string added [ 179.162354][ T6015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.162371][ T6015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.162396][ T6015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.268274][ T1415] bridge_slave_1: left allmulticast mode [ 180.312261][ T1415] bridge_slave_1: left promiscuous mode [ 180.452332][ T1415] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.679682][ T1415] bridge_slave_0: left allmulticast mode [ 180.680904][ T1415] bridge_slave_0: left promiscuous mode [ 180.681913][ T1415] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.919962][ T5857] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 182.070202][ T5857] usb 5-1: Using ep0 maxpacket: 32 [ 182.072213][ T5857] usb 5-1: no configurations [ 182.072229][ T5857] usb 5-1: can't read configurations, error -22 [ 182.210063][ T5857] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 182.411696][ T5857] usb 5-1: Using ep0 maxpacket: 32 [ 182.434520][ T5857] usb 5-1: no configurations [ 182.434540][ T5857] usb 5-1: can't read configurations, error -22 [ 182.469837][ T5857] usb usb5-port1: attempt power cycle [ 183.101402][ T5857] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 183.131828][ T5857] usb 5-1: Using ep0 maxpacket: 32 [ 183.140845][ T5857] usb 5-1: no configurations [ 183.140864][ T5857] usb 5-1: can't read configurations, error -22 [ 183.355970][ T5857] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 183.503092][ T5857] usb 5-1: Using ep0 maxpacket: 32 [ 183.560585][ T5857] usb 5-1: no configurations [ 183.560604][ T5857] usb 5-1: can't read configurations, error -22 [ 183.602421][ T5857] usb usb5-port1: unable to enumerate USB device [ 186.327224][ T1415] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.420811][ T1415] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.487669][ T1415] bond0 (unregistering): Released all slaves [ 187.536526][ T6015] hsr_slave_0: entered promiscuous mode [ 187.557340][ T6015] hsr_slave_1: entered promiscuous mode [ 187.558389][ T6015] debugfs: 'hsr0' already exists in 'hsr' [ 187.558425][ T6015] Cannot create hsr debugfs directory [ 187.822171][ T6249] ======================================================= [ 187.822171][ T6249] WARNING: The mand mount option has been deprecated and [ 187.822171][ T6249] and is ignored by this kernel. Remove the mand [ 187.822171][ T6249] option from the mount to silence this warning. [ 187.822171][ T6249] ======================================================= [ 188.565700][ T6258] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 188.727853][ T6258] cramfs: wrong magic [ 189.601036][ T36] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 189.760371][ T36] usb 1-1: Using ep0 maxpacket: 32 [ 189.763569][ T36] usb 1-1: no configurations [ 189.763617][ T36] usb 1-1: can't read configurations, error -22 [ 190.015832][ T36] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 190.273742][ T36] usb 1-1: Using ep0 maxpacket: 32 [ 190.279418][ T36] usb 1-1: no configurations [ 190.279466][ T36] usb 1-1: can't read configurations, error -22 [ 190.451980][ T36] usb usb1-port1: attempt power cycle [ 191.152453][ T36] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 191.177421][ T36] usb 1-1: Using ep0 maxpacket: 32 [ 191.191455][ T36] usb 1-1: no configurations [ 191.191516][ T36] usb 1-1: can't read configurations, error -22 [ 191.404334][ T36] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 191.426569][ T36] usb 1-1: Using ep0 maxpacket: 32 [ 191.446970][ T36] usb 1-1: no configurations [ 191.447032][ T36] usb 1-1: can't read configurations, error -22 [ 191.502267][ T36] usb usb1-port1: unable to enumerate USB device [ 191.638155][ T6271] mmap: syz.4.128 (6271) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 194.266675][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.266751][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.990617][ T5258] 8021q: adding VLAN 0 to HW filter on device eth1 [ 195.475978][ T6311] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 195.504473][ T6311] cramfs: wrong magic [ 197.597209][ T4912] Bluetooth: hci3: unexpected event 0x03 length: 12 > 11 [ 198.580330][ T36] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 198.783226][ T36] usb 1-1: Using ep0 maxpacket: 32 [ 198.800417][ T36] usb 1-1: no configurations [ 198.800472][ T36] usb 1-1: can't read configurations, error -22 [ 199.120234][ T36] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 199.360126][ T36] usb 1-1: Using ep0 maxpacket: 32 [ 199.365643][ T36] usb 1-1: no configurations [ 199.365661][ T36] usb 1-1: can't read configurations, error -22 [ 199.369679][ T36] usb usb1-port1: attempt power cycle [ 200.190072][ T36] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 200.232130][ T36] usb 1-1: Using ep0 maxpacket: 32 [ 200.247066][ T36] usb 1-1: no configurations [ 200.247130][ T36] usb 1-1: can't read configurations, error -22 [ 200.530109][ T36] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 200.554833][ T36] usb 1-1: Using ep0 maxpacket: 32 [ 200.565376][ T36] usb 1-1: no configurations [ 200.565395][ T36] usb 1-1: can't read configurations, error -22 [ 200.578870][ T36] usb usb1-port1: unable to enumerate USB device [ 201.445000][ T6329] Zero length message leads to an empty skb [ 202.481041][ T6090] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.484665][ T6090] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.487894][ T6090] bridge_slave_0: entered allmulticast mode [ 202.727381][ T6090] bridge_slave_0: entered promiscuous mode [ 203.579075][ T6090] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.579220][ T6090] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.579460][ T6090] bridge_slave_1: entered allmulticast mode [ 203.635813][ T5605] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 203.647320][ T6090] bridge_slave_1: entered promiscuous mode [ 203.697929][ T5605] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 203.704636][ T5605] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 203.732639][ T5605] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 203.733573][ T5605] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 204.252029][ T1415] hsr_slave_0: left promiscuous mode [ 204.291687][ T1415] hsr_slave_1: left promiscuous mode [ 204.324329][ T1415] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.324442][ T1415] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.385071][ T1415] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.385098][ T1415] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.975340][ T1415] veth1_macvtap: left promiscuous mode [ 204.975617][ T1415] veth0_macvtap: left promiscuous mode [ 205.034743][ T1415] veth1_vlan: left promiscuous mode [ 205.084963][ T1415] veth0_vlan: left promiscuous mode [ 205.930003][ T4912] Bluetooth: hci1: command tx timeout [ 207.190618][ T1415] team0 (unregistering): Port device team_slave_1 removed [ 207.251633][ T1415] team0 (unregistering): Port device team_slave_0 removed [ 208.009875][ T4912] Bluetooth: hci1: command tx timeout [ 208.506667][ T6090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.538401][ T6090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.853162][ T6090] team0: Port device team_slave_0 added [ 209.719009][ T6090] team0: Port device team_slave_1 added [ 210.094439][ T4912] Bluetooth: hci1: command tx timeout [ 210.328316][ T6090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.328334][ T6090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.328909][ T6090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.370969][ T6407] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 210.433625][ T6407] cramfs: wrong magic [ 211.090237][ T6090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.090293][ T6090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.090376][ T6090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.175518][ T4912] Bluetooth: hci1: command tx timeout [ 212.925002][ T6416] [ 212.925016][ T6416] ============================================ [ 212.925025][ T6416] WARNING: possible recursive locking detected [ 212.925056][ T6416] syzkaller #0 Not tainted [ 212.925069][ T6416] -------------------------------------------- [ 212.925077][ T6416] syz.3.163/6416 is trying to acquire lock:[ 212.925077][ T6416] syz.3.163/6416 is trying to acquire lock: [ 212.925089][ T6416] ffffffff8eba6e28 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0xe9/0xeb0 [ 212.925172][ T6416] [ 212.925172][ T6416] but task is already holding lock: [ 212.925180][ T6416] ffffffff8eba6e28 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0xe9/0xeb0 [ 212.925232][ T6416] [ 212.925232][ T6416] other info that might help us debug this: [ 212.925240][ T6416] Possible unsafe locking scenario: [ 212.925240][ T6416] [ 212.925247][ T6416] CPU0 [ 212.925253][ T6416] ---- [ 212.925258][ T6416] lock(qp_broker_list.mutex); [ 212.925273][ T6416] lock(qp_broker_list.mutex); [ 212.925287][ T6416] [ 212.925287][ T6416] *** DEADLOCK *** [ 212.925287][ T6416] [ 212.925293][ T6416] May be due to missing lock nesting notation [ 212.925293][ T6416] [ 212.925301][ T6416] 1 lock held by syz.3.163/6416: [ 212.925314][ T6416] #0: ffffffff8eba6e28 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0xe9/0xeb0 [ 212.925381][ T6416] [ 212.925381][ T6416] stack backtrace: [ 212.925403][ T6416] CPU: 0 UID: 0 PID: 6416 Comm: syz.3.163 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 212.925433][ T6416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 212.925456][ T6416] Call Trace: [ 212.925464][ T6416] [ 212.925473][ T6416] dump_stack_lvl+0xe8/0x150 [ 212.925509][ T6416] print_deadlock_bug+0x279/0x290 [ 212.925539][ T6416] __lock_acquire+0x24df/0x2ce0 [ 212.925565][ T6416] ? stack_depot_save_flags+0x3ec/0x800 [ 212.925619][ T6416] ? kasan_save_track+0x4f/0x80 [ 212.925641][ T6416] ? kasan_save_track+0x3e/0x80 [ 212.925660][ T6416] ? kasan_save_free_info+0x40/0x50 [ 212.925690][ T6416] ? __kasan_slab_free+0x5c/0x80 [ 212.925712][ T6416] ? kfree+0x1c5/0x6c0 [ 212.925729][ T6416] ? vmci_ctx_put+0x5ba/0xc00 [ 212.925756][ T6416] ? vmci_ctx_enqueue_datagram+0x3c3/0x440 [ 212.925786][ T6416] ? vmci_datagram_dispatch+0x450/0xc80 [ 212.925819][ T6416] ? vmci_qp_broker_detach+0xe9/0xeb0 [ 212.925843][ T6416] lock_acquire+0x106/0x350 [ 212.925863][ T6416] ? vmci_qp_broker_detach+0xe9/0xeb0 [ 212.925890][ T6416] ? vmci_qp_broker_detach+0xe9/0xeb0 [ 212.925916][ T6416] ? vmci_qp_broker_detach+0xe9/0xeb0 [ 212.925938][ T6416] mutex_lock_nested+0x5a/0x1d0 [ 212.925969][ T6416] ? vmci_qp_broker_detach+0xe9/0xeb0 [ 212.925995][ T6416] vmci_qp_broker_detach+0xe9/0xeb0 [ 212.926023][ T6416] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 212.926045][ T6416] ? kasan_quarantine_put+0xbb/0x1f0 [ 212.926066][ T6416] ? lockdep_hardirqs_on+0x7a/0x110 [ 212.926094][ T6416] ? kfree+0x1c5/0x6c0 [ 212.926111][ T6416] ? vmci_ctx_put+0x5ba/0xc00 [ 212.926137][ T6416] ? vmci_ctx_put+0x13e/0xc00 [ 212.926168][ T6416] vmci_ctx_put+0x619/0xc00 [ 212.926196][ T6416] ? vmci_ctx_put+0x13e/0xc00 [ 212.926225][ T6416] ? __pfx_vmci_ctx_put+0x10/0x10 [ 212.926262][ T6416] vmci_ctx_enqueue_datagram+0x3c3/0x440 [ 212.926297][ T6416] vmci_datagram_dispatch+0x450/0xc80 [ 212.926339][ T6416] ? __pfx_vmci_datagram_dispatch+0x10/0x10 [ 212.926377][ T6416] vmci_qp_broker_detach+0x87e/0xeb0 [ 212.926406][ T6416] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 212.926429][ T6416] ? kasan_quarantine_put+0xbb/0x1f0 [ 212.926452][ T6416] ? kfree+0x1c5/0x6c0 [ 212.926470][ T6416] ? vmci_ctx_put+0x5ba/0xc00 [ 212.926496][ T6416] ? vmci_ctx_put+0x13e/0xc00 [ 212.926525][ T6416] vmci_ctx_put+0x619/0xc00 [ 212.926553][ T6416] ? vmci_ctx_put+0x13e/0xc00 [ 212.926581][ T6416] ? __pfx_vmci_ctx_put+0x10/0x10 [ 212.926617][ T6416] vmci_host_close+0x91/0x140 [ 212.926640][ T6416] ? __pfx_vmci_host_close+0x10/0x10 [ 212.926662][ T6416] __fput+0x42a/0xa80 [ 212.926687][ T6416] fput_close_sync+0x11f/0x240 [ 212.926708][ T6416] ? __pfx_fput_close_sync+0x10/0x10 [ 212.926732][ T6416] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.926755][ T6416] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.926776][ T6416] __x64_sys_close+0x7e/0x110 [ 212.926815][ T6416] do_syscall_64+0x174/0x580 [ 212.926841][ T6416] ? trace_irq_disable+0x3b/0x140 [ 212.926862][ T6416] ? clear_bhb_loop+0x40/0x90 [ 212.926888][ T6416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.926910][ T6416] RIP: 0033:0x7f8d1fcade99 [ 212.926939][ T6416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.926958][ T6416] RSP: 002b:00007f8d1dee5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 212.926981][ T6416] RAX: ffffffffffffffda RBX: 00007f8d1ff36090 RCX: 00007f8d1fcade99 [ 212.926998][ T6416] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 212.927012][ T6416] RBP: 00007f8d1fd43eaf R08: 0000000000000000 R09: 0000000000000000 [ 212.927026][ T6416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.927039][ T6416] R13: 00007f8d1ff36128 R14: 00007f8d1ff36090 R15: 00007ffd757ebc88 [ 212.927064][ T6416] [ 212.962914][ T6416] ------------[ cut here ]------------ [ 212.962930][ T6416] rtmutex deadlock detected [ 212.962945][ T6416] WARNING: kernel/locking/rtmutex.c:1698 at rt_mutex_handle_deadlock+0x21/0xb0, CPU#1: syz.3.163/6416 [ 212.963000][ T6416] Modules linked in: [ 212.963020][ T6416] CPU: 1 UID: 0 PID: 6416 Comm: syz.3.163 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 212.963044][ T6416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 212.963058][ T6416] RIP: 0010:rt_mutex_handle_deadlock+0x21/0xb0 [ 212.963094][ T6416] Code: 90 90 90 90 90 90 90 90 90 41 57 41 56 41 55 41 54 53 83 ff dd 0f 85 81 00 00 00 48 89 f7 e8 16 40 01 00 48 8d 3d 2f ff 6c 04 <67> 48 0f b9 3a 4c 8d 3d 00 00 00 00 65 48 8b 1d c3 eb 57 07 4c 8d [ 212.963113][ T6416] RSP: 0018:ffffc90005297530 EFLAGS: 00010286 [ 212.963132][ T6416] RAX: 0000000080000000 RBX: 00000000ffffffdd RCX: 0000000000000000 [ 212.963146][ T6416] RDX: 0000000000000000 RSI: ffffffff8bca7760 RDI: ffffffff8fb30360 [ 212.963162][ T6416] RBP: ffffc900052976e0 R08: ffffffff8faf9737 R09: 1ffffffff1f5f2e6 [ 212.963178][ T6416] R10: dffffc0000000000 R11: fffffbfff1f5f2e7 R12: 1ffff92000a52eb4 [ 212.963194][ T6416] R13: ffffffff8b45fe72 R14: ffffffff8eba6dd0 R15: dffffc0000000000 [ 212.963211][ T6416] FS: 00007f8d1dee56c0(0000) GS:ffff888125d41000(0000) knlGS:0000000000000000 [ 212.963229][ T6416] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 212.963243][ T6416] CR2: 00007f84b86d0100 CR3: 0000000026594000 CR4: 00000000003526f0 [ 212.963262][ T6416] Call Trace: [ 212.963269][ T6416] [ 212.963278][ T6416] ? rt_mutex_slowlock+0x1f2/0x780 [ 212.963311][ T6416] rt_mutex_slowlock+0x73c/0x780 [ 212.963344][ T6416] ? rt_mutex_slowlock+0x1f2/0x780 [ 212.963377][ T6416] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 212.963418][ T6416] ? lock_acquire+0x221/0x350 [ 212.963442][ T6416] ? vmci_qp_broker_detach+0xe9/0xeb0 [ 212.963465][ T6416] mutex_lock_nested+0x168/0x1d0 [ 212.963500][ T6416] vmci_qp_broker_detach+0xe9/0xeb0 [ 212.963528][ T6416] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 212.963552][ T6416] ? kasan_quarantine_put+0xbb/0x1f0 [ 212.963572][ T6416] ? lockdep_hardirqs_on+0x7a/0x110 [ 212.963598][ T6416] ? kfree+0x1c5/0x6c0 [ 212.963615][ T6416] ? vmci_ctx_put+0x5ba/0xc00 [ 212.963643][ T6416] ? vmci_ctx_put+0x13e/0xc00 [ 212.963673][ T6416] vmci_ctx_put+0x619/0xc00 [ 212.963701][ T6416] ? vmci_ctx_put+0x13e/0xc00 [ 212.963735][ T6416] ? __pfx_vmci_ctx_put+0x10/0x10 [ 212.963774][ T6416] vmci_ctx_enqueue_datagram+0x3c3/0x440 [ 212.963846][ T6416] vmci_datagram_dispatch+0x450/0xc80 [ 212.963883][ T6416] ? __pfx_vmci_datagram_dispatch+0x10/0x10 [ 212.963921][ T6416] vmci_qp_broker_detach+0x87e/0xeb0 [ 212.963950][ T6416] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 212.963973][ T6416] ? kasan_quarantine_put+0xbb/0x1f0 [ 212.963997][ T6416] ? kfree+0x1c5/0x6c0 [ 212.964015][ T6416] ? vmci_ctx_put+0x5ba/0xc00 [ 212.964042][ T6416] ? vmci_ctx_put+0x13e/0xc00 [ 212.964073][ T6416] vmci_ctx_put+0x619/0xc00 [ 212.964101][ T6416] ? vmci_ctx_put+0x13e/0xc00 [ 212.964131][ T6416] ? __pfx_vmci_ctx_put+0x10/0x10 [ 212.964170][ T6416] vmci_host_close+0x91/0x140 [ 212.964192][ T6416] ? __pfx_vmci_host_close+0x10/0x10 [ 212.964214][ T6416] __fput+0x42a/0xa80 [ 212.964240][ T6416] fput_close_sync+0x11f/0x240 [ 212.964262][ T6416] ? __pfx_fput_close_sync+0x10/0x10 [ 212.964286][ T6416] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.964334][ T6416] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.964358][ T6416] __x64_sys_close+0x7e/0x110 [ 212.964382][ T6416] do_syscall_64+0x174/0x580 [ 212.964409][ T6416] ? trace_irq_disable+0x3b/0x140 [ 212.964431][ T6416] ? clear_bhb_loop+0x40/0x90 [ 212.964456][ T6416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.964477][ T6416] RIP: 0033:0x7f8d1fcade99 [ 212.964497][ T6416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.964514][ T6416] RSP: 002b:00007f8d1dee5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 212.964537][ T6416] RAX: ffffffffffffffda RBX: 00007f8d1ff36090 RCX: 00007f8d1fcade99 [ 212.964553][ T6416] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 212.964566][ T6416] RBP: 00007f8d1fd43eaf R08: 0000000000000000 R09: 0000000000000000 [ 212.964580][ T6416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.964593][ T6416] R13: 00007f8d1ff36128 R14: 00007f8d1ff36090 R15: 00007ffd757ebc88 [ 212.964618][ T6416] [ 212.964630][ T6416] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 212.964646][ T6416] CPU: 1 UID: 0 PID: 6416 Comm: syz.3.163 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 212.964669][ T6416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 212.964682][ T6416] Call Trace: [ 212.964691][ T6416] [ 212.964699][ T6416] vpanic+0x56c/0xa60 [ 212.964720][ T6416] ? __pfx__printk+0x10/0x10 [ 212.964745][ T6416] ? __pfx_vpanic+0x10/0x10 [ 212.964764][ T6416] ? is_bpf_text_address+0x292/0x2b0 [ 212.964789][ T6416] ? is_bpf_text_address+0x26/0x2b0 [ 212.964818][ T6416] panic+0xc5/0xd0 [ 212.964843][ T6416] ? __pfx_panic+0x10/0x10 [ 212.964871][ T6416] __warn+0x315/0x4c0 [ 212.964890][ T6416] ? rt_mutex_handle_deadlock+0x21/0xb0 [ 212.964924][ T6416] ? rt_mutex_handle_deadlock+0x21/0xb0 [ 212.964957][ T6416] __report_bug+0x276/0x570 [ 212.964985][ T6416] ? rt_mutex_handle_deadlock+0x21/0xb0 [ 212.965030][ T6416] ? __pfx___report_bug+0x10/0x10 [ 212.965059][ T6416] ? __schedule+0x16f2/0x5500 [ 212.965080][ T6416] ? __show_trace_log_lvl+0x478/0x550 [ 212.965114][ T6416] report_bug_entry+0x19a/0x290 [ 212.965139][ T6416] ? rt_mutex_handle_deadlock+0x21/0xb0 [ 212.965170][ T6416] ? rt_mutex_handle_deadlock+0x26/0xb0 [ 212.965202][ T6416] handle_bug+0xce/0x200 [ 212.965229][ T6416] exc_invalid_op+0x1a/0x50 [ 212.965255][ T6416] asm_exc_invalid_op+0x1a/0x20 [ 212.965275][ T6416] RIP: 0010:rt_mutex_handle_deadlock+0x21/0xb0 [ 212.965308][ T6416] Code: 90 90 90 90 90 90 90 90 90 41 57 41 56 41 55 41 54 53 83 ff dd 0f 85 81 00 00 00 48 89 f7 e8 16 40 01 00 48 8d 3d 2f ff 6c 04 <67> 48 0f b9 3a 4c 8d 3d 00 00 00 00 65 48 8b 1d c3 eb 57 07 4c 8d [ 212.965325][ T6416] RSP: 0018:ffffc90005297530 EFLAGS: 00010286 [ 212.965344][ T6416] RAX: 0000000080000000 RBX: 00000000ffffffdd RCX: 0000000000000000 [ 212.965358][ T6416] RDX: 0000000000000000 RSI: ffffffff8bca7760 RDI: ffffffff8fb30360 [ 212.965372][ T6416] RBP: ffffc900052976e0 R08: ffffffff8faf9737 R09: 1ffffffff1f5f2e6 [ 212.965388][ T6416] R10: dffffc0000000000 R11: fffffbfff1f5f2e7 R12: 1ffff92000a52eb4 [ 212.965404][ T6416] R13: ffffffff8b45fe72 R14: ffffffff8eba6dd0 R15: dffffc0000000000 [ 212.965421][ T6416] ? rt_mutex_slowlock+0x1f2/0x780 [ 212.965460][ T6416] ? rt_mutex_slowlock+0x1f2/0x780 [ 212.965491][ T6416] rt_mutex_slowlock+0x73c/0x780 [ 212.965523][ T6416] ? rt_mutex_slowlock+0x1f2/0x780 [ 212.965555][ T6416] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 212.965595][ T6416] ? lock_acquire+0x221/0x350 [ 212.965619][ T6416] ? vmci_qp_broker_detach+0xe9/0xeb0 [ 212.965642][ T6416] mutex_lock_nested+0x168/0x1d0 [ 212.965675][ T6416] vmci_qp_broker_detach+0xe9/0xeb0 [ 212.965702][ T6416] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 212.965725][ T6416] ? kasan_quarantine_put+0xbb/0x1f0 [ 212.965745][ T6416] ? lockdep_hardirqs_on+0x7a/0x110 [ 212.965771][ T6416] ? kfree+0x1c5/0x6c0 [ 212.965789][ T6416] ? vmci_ctx_put+0x5ba/0xc00 [ 212.965816][ T6416] ? vmci_ctx_put+0x13e/0xc00 [ 212.965854][ T6416] vmci_ctx_put+0x619/0xc00 [ 212.965882][ T6416] ? vmci_ctx_put+0x13e/0xc00 [ 212.965913][ T6416] ? __pfx_vmci_ctx_put+0x10/0x10 [ 212.965951][ T6416] vmci_ctx_enqueue_datagram+0x3c3/0x440 [ 212.965985][ T6416] vmci_datagram_dispatch+0x450/0xc80 [ 212.966019][ T6416] ? __pfx_vmci_datagram_dispatch+0x10/0x10 [ 212.966056][ T6416] vmci_qp_broker_detach+0x87e/0xeb0 [ 212.966085][ T6416] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 212.966108][ T6416] ? kasan_quarantine_put+0xbb/0x1f0 [ 212.966131][ T6416] ? kfree+0x1c5/0x6c0 [ 212.966148][ T6416] ? vmci_ctx_put+0x5ba/0xc00 [ 212.966175][ T6416] ? vmci_ctx_put+0x13e/0xc00 [ 212.966204][ T6416] vmci_ctx_put+0x619/0xc00 [ 212.966233][ T6416] ? vmci_ctx_put+0x13e/0xc00 [ 212.966264][ T6416] ? __pfx_vmci_ctx_put+0x10/0x10 [ 212.966303][ T6416] vmci_host_close+0x91/0x140 [ 212.966325][ T6416] ? __pfx_vmci_host_close+0x10/0x10 [ 212.966348][ T6416] __fput+0x42a/0xa80 [ 212.966373][ T6416] fput_close_sync+0x11f/0x240 [ 212.966395][ T6416] ? __pfx_fput_close_sync+0x10/0x10 [ 212.966419][ T6416] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.966442][ T6416] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.966464][ T6416] __x64_sys_close+0x7e/0x110 [ 212.966487][ T6416] do_syscall_64+0x174/0x580 [ 212.966511][ T6416] ? trace_irq_disable+0x3b/0x140 [ 212.966532][ T6416] ? clear_bhb_loop+0x40/0x90 [ 212.966556][ T6416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.966578][ T6416] RIP: 0033:0x7f8d1fcade99 [ 212.966595][ T6416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.966612][ T6416] RSP: 002b:00007f8d1dee5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 212.966633][ T6416] RAX: ffffffffffffffda RBX: 00007f8d1ff36090 RCX: 00007f8d1fcade99 [ 212.966648][ T6416] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 212.966660][ T6416] RBP: 00007f8d1fd43eaf R08: 0000000000000000 R09: 0000000000000000 [ 212.966673][ T6416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.966686][ T6416] R13: 00007f8d1ff36128 R14: 00007f8d1ff36090 R15: 00007ffd757ebc88 [ 212.966710][ T6416] [ 212.967309][ T6416] Kernel Offset: disabled