last executing test programs: 1m42.002095452s ago: executing program 3 (id=20): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000480)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f00000004c0)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000, 0xfffffffffffffffe}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@rand_addr=0x64010101, 0x0, 0x32}, 0x0, @in=@private=0xa0100fe, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000000600), 0x800001d, 0x1c) 1m40.933338966s ago: executing program 2 (id=21): pipe2$9p(&(0x7f0000000040), 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x21081e, &(0x7f0000000140)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f0000000200)="$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") open(&(0x7f0000000700)='./bus\x00', 0x14927e, 0x9) r0 = open(&(0x7f0000000b80)='./file2\x00', 0x181042, 0x124) write$P9_RREADDIR(r0, &(0x7f0000000bc0)={0x2a, 0x29, 0x3, {0x5, [{{0x10, 0x9, 0x5}, 0x7, 0x7, 0xf45b3bccc711007a, './file0'}]}}, 0xfffffceb) 1m40.866476657s ago: executing program 3 (id=22): prlimit64(0x0, 0xe, &(0x7f0000001700)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001940)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000001980)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001a00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001a40)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001ac0), 0x651, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r1, &(0x7f0000001b00), 0x10106, 0x2, 0x0) capget(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001b40)=0x6) munlock(&(0x7f0000629000/0x3000)=nil, 0x3000) mmap$IORING_OFF_SQ_RING(0x0, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$sock_int(r3, 0x1, 0x12, 0x0, 0x0) 1m39.794115563s ago: executing program 3 (id=23): r0 = syz_usb_connect(0x2, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002c10db2"], 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000400)={0x0, 0x10, 0x1, "c4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000440), 0x1, 0x402) socket$nl_generic(0x10, 0x3, 0x10) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000480)={0x1, 0x87, 0x5, &(0x7f00000004c0)={0x10, "8105d6c721100f00000000400000a8267d87000200"}}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000500)={0x1c, 0x0, 0x0, 0x0}) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) writev(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000000800)="94", 0x1}], 0x1) pipe2$watch_queue(0x0, 0x80) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/class/net/lo/statistics/tx_window_errors\x00', 0x0, 0x0) read(r2, &(0x7f0000000900)=""/100, 0x64) mount(0x0, 0x0, &(0x7f0000000980)='devtmpfs\x00', 0x0, 0x0) 1m39.446039977s ago: executing program 2 (id=24): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) getrlimit(0x9c842ddb96021f8, 0x0) 1m38.652474059s ago: executing program 2 (id=29): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x40305839, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x8) fallocate(r0, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000c, 0x13, r0, 0x2000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='net_prio.prioidx\x00', 0x275a, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x101, 0x1, r1, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, &(0x7f0000000640)={0x28, 0x5, 0x0, 0x0, 0x6, 0x79f, 0x2}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)) socket$inet6_tcp(0xa, 0x1, 0x0) 1m36.205994278s ago: executing program 4 (id=35): pipe2$9p(&(0x7f0000000040), 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x21081e, &(0x7f0000000140)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f0000000200)="$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") open(&(0x7f0000000700)='./bus\x00', 0x14927e, 0x9) r0 = open(&(0x7f0000000b80)='./file2\x00', 0x181042, 0x124) write$P9_RREADDIR(r0, &(0x7f0000000bc0)={0x2a, 0x29, 0x3, {0x5, [{{0x10, 0x9, 0x5}, 0x7, 0x7, 0xf45b3bccc711007a, './file0'}]}}, 0xfffffceb) 1m36.15706472s ago: executing program 3 (id=36): pipe2$9p(&(0x7f0000000040), 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x21081e, &(0x7f0000000140)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f0000000200)="$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") open(&(0x7f0000000700)='./bus\x00', 0x14927e, 0x9) r0 = open(&(0x7f0000000b80)='./file2\x00', 0x181042, 0x124) write$P9_RREADDIR(r0, &(0x7f0000000bc0)={0x2a, 0x29, 0x3, {0x5, [{{0x10, 0x9, 0x5}, 0x7, 0x7, 0xf45b3bccc711007a, './file0'}]}}, 0xfffffceb) mount(&(0x7f0000000c00)=@loop={'/dev/loop', 0x0}, &(0x7f0000000c40)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000c80)='./bus\x00', 0x0, 0xa27b734c1a0bc97) capset(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1451c2, 0x0) ftruncate(r2, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f80)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f00000014c0)=""/4096, 0x20001b80}, {&(0x7f00000024c0)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r3, r2, 0x0, 0x578410eb) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000002540)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002580)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000025c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000002600), 0x0, 0x0) read$msr(r5, &(0x7f0000002640)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f000001b640)='./file0\x00', 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x17, 0x0, "ef35af413bb901527fe4f1ce5d29c3ee5e5c3676345a41499db7aac63a01010000000000004faa2ae2c08485d90000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100173400ffffff00f7ffffff000000f3e7f20000000200000000000600", "b732673e181c208227fffdf2e500000f0000000e000200", [0x40000000004]}) openat(0xffffffffffffff9c, &(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101341, 0xaf) r6 = open(&(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) getdents(r6, &(0x7f0000000f00)=""/76, 0x4c) syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f00000001c0)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000002081afb0a000200", 0x20}, {&(0x7f0000000740)="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", 0x40e}], 0x2, 0x0, 0x0, 0x5865}, 0x0) 1m35.435593907s ago: executing program 0 (id=37): signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x800000000003ff]}, 0x8, 0x800) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x37) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x80}, 0x50) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r2, &(0x7f0000002380)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setresgid(0x0, 0xee01, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) connect$inet(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f000001b440)=0x7e6, 0x4) setgroups(0x0, 0x0) getgroups(0x0, &(0x7f00000000c0)) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 1m34.436169227s ago: executing program 0 (id=38): prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000005c0)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000600)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1a000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x2}, 0x6) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) dup(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000680), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102368, 0x18fe0) getpid() sched_setscheduler(0x0, 0x3, &(0x7f000001e580)=0x5) keyctl$clear(0x7, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x80045505, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) 1m34.372803775s ago: executing program 4 (id=39): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000000), 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) write$cgroup_pid(r1, &(0x7f0000000240), 0x12) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f00000000c0)=0x7f, 0x4) 1m33.005982268s ago: executing program 2 (id=40): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x2, 0x4, 0x8, 0x100, 0x0, 0x1, 0x3adc, '\x00', 0x0, 0x0}, 0x50) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x204001, &(0x7f00000002c0), 0x1, 0xb9f, &(0x7f0000000980)="$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") mkdirat(r1, &(0x7f0000001540)='./file0\x00', 0x101) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000001580), 0x1, 0x0) write$binfmt_register(r2, &(0x7f00000015c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) mount(0x0, &(0x7f0000001640)='.\x00', 0x0, 0x2b90020, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000016c0)='./file1\x00', 0x2100, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000001700)='./file1\x00', 0x200) pivot_root(&(0x7f0000001740)='.\x00', 0x0) connect$inet(r0, &(0x7f0000001840)={0x2, 0x4e21, @empty}, 0x10) 1m32.487360678s ago: executing program 0 (id=41): openat$nullb(0xffffffffffffff9c, 0x0, 0x169802, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000280)={0xc, 0x0, 0x0}) sendmsg$unix(0xffffffffffffffff, 0x0, 0x40000) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000002480)={0x28, 0x4, r2, 0x0, &(0x7f0000ff7000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f00000024c0)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0, 0x1}) 1m32.158093668s ago: executing program 4 (id=43): syz_mount_image$udf(&(0x7f00000051c0), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[], 0x1, 0xc5f, &(0x7f0000000280)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8040000, 0x2000009, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000001980)='fd/3\x00') 1m31.750052981s ago: executing program 3 (id=44): r0 = landlock_create_ruleset(&(0x7f0000000240)={0x2001}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x7ffffffe, 0x0, 0x0) 1m31.122493567s ago: executing program 0 (id=45): r0 = socket$inet6(0xa, 0x2, 0xfffffff9) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x345441, 0x0) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000140)=0x653d) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x109, @empty}, {0xa, 0x4e22, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x0, {[0x7, 0x0, 0x2, 0xfffefff9, 0x6, 0x1, 0x400, 0x80000000]}}, 0x5c) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracefs\x00', &(0x7f0000000180)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./tracefs/dynamic_events\x00', 0x2, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)='#', 0x1}, {&(0x7f00000004c0)='!', 0x1}], 0x2) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/sys/net/ipv4/conf/all/route_localnet\x00', 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KDSIGACCEPT(r3, 0x5607, 0x2d) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TIOCL_SETVESABLANK(r5, 0x560e, &(0x7f00000003c0)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r6, 0x5606, 0x9) ioctl$TIOCL_BLANKSCREEN(r6, 0x541c, &(0x7f0000000400)) 1m31.058052299s ago: executing program 1 (id=46): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) add_key$fscrypt_v1(&(0x7f00000006c0), &(0x7f0000000700)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x32, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000740)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000007c0), 0x80580, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000001280)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001380)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) listen(r0, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f00000013c0)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001400), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000014c0)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1m31.01215441s ago: executing program 2 (id=47): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000500)=0x4) r1 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r1, &(0x7f0000000800)=""/102392, 0x18ff8) socket$unix(0x1, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c000000060a010400000000000000000a0000040900010073797a3100000000300004802c0001800b0001006e756d67656e00001c0002800800034000000000080001400000000608000240000000060900020073797a32"], 0x84}, 0x1, 0x0, 0x0, 0x240480dc}, 0x24000000) 1m30.866549765s ago: executing program 4 (id=48): sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000004) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004004) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) socket$vsock_stream(0x28, 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) timer_create(0x1, 0x0, &(0x7f0000002500)) fsopen(&(0x7f0000000080)='udf\x00', 0x0) r1 = socket$rds(0x15, 0x5, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f00000002c0)="43210098") bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xce21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8c0}, 0x0) 1m30.434261901s ago: executing program 2 (id=49): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x2, 0x143102) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_MSG_GETSET(r1, 0x0, 0x20000000) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) pread64(r3, 0x0, 0x0, 0x1000000000) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) semtimedop(0x0, &(0x7f0000019600)=[{0x3, 0x1000, 0x1800}], 0x1, 0x0) r4 = syz_open_dev$ndb(&(0x7f0000019640), 0x0, 0x22180) ioctl$NBD_DISCONNECT(r4, 0xab08) 1m30.415952456s ago: executing program 3 (id=50): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000280)={0xc, 0x0, 0x0}) sendmsg$unix(0xffffffffffffffff, 0x0, 0x40000) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f00000024c0)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0, 0x1}) 1m29.557060081s ago: executing program 32 (id=49): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x2, 0x143102) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000480)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_MSG_GETSET(r1, 0x0, 0x20000000) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) pread64(r3, 0x0, 0x0, 0x1000000000) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) semtimedop(0x0, &(0x7f0000019600)=[{0x3, 0x1000, 0x1800}], 0x1, 0x0) r4 = syz_open_dev$ndb(&(0x7f0000019640), 0x0, 0x22180) ioctl$NBD_DISCONNECT(r4, 0xab08) 1m29.529253143s ago: executing program 0 (id=52): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f00000003c0)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./my_sys\x00', &(0x7f0000000440)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x65) write$binfmt_script(r1, &(0x7f0000000880)={'#! ', './my_sys', [], 0xa, "e24c8abc1a40834d4a85eda01a905a15d6f7d8dfc7e0a6dafb95f176d8e483d32910596d532724fc624eb444fffd55e614943b3752b4a38a3257581d3eeb90003f470f2f31f50eee997c202eb9b370824c2cbf8c9024eeab0d2310855f2d4e44cef51872dc18ec2558f50653da8402"}, 0x7b) 1m29.526199004s ago: executing program 1 (id=53): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4800) 1m29.526009892s ago: executing program 33 (id=50): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000280)={0xc, 0x0, 0x0}) sendmsg$unix(0xffffffffffffffff, 0x0, 0x40000) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f00000024c0)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0, 0x1}) 1m28.582418541s ago: executing program 1 (id=55): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="290e29bd7000fbdbdf0527960000050031000e0000001400300053e0e85290ceb080fb816d3cdadf198b08000200", @ANYRES32=r2, @ANYBLOB='$\x002'], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 1m28.390225354s ago: executing program 0 (id=56): mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./trace\x00', 0x48) mount(0x0, &(0x7f0000000800)='./trace\x00', &(0x7f0000000840)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./trace/set_event\x00', 0x20002, 0x0) write(r0, &(0x7f0000000900)=':\x00', 0x2) 1m28.185371194s ago: executing program 1 (id=57): signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x800000000003ff]}, 0x8, 0x800) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x37) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) read$msr(0xffffffffffffffff, &(0x7f0000002380)=""/102392, 0x18ff8) setresgid(0x0, 0xee01, 0x0) setgroups(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./trace\x00', &(0x7f0000000600)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./trace/trace_clock\x00', 0x2, 0x0) write(r1, &(0x7f0000000680)='x86-tsc', 0x7) openat(0xffffffffffffff9c, &(0x7f00000006c0)='./trace/trace\x00', 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f000001b3c0)=0xce, 0x4) setgroups(0x0, 0x0) 1m28.071119935s ago: executing program 4 (id=58): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@generic={0x61, 0x8, 0x1, 0x1c}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m27.858240486s ago: executing program 4 (id=59): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000b80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x61ae, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x10, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xfc, 0x4, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0022180000000501150025ff0904a1014de29c198c0508950129309102c0"], 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000004c0), 0x4, 0x2) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000500)={0xfb, 0x11, 0x0, 0x98, "4d512c91002a4950676142687108dcd3f82acf5a895bd90fca2bb40bb4fbf29c"}) 1m27.789855928s ago: executing program 1 (id=60): r0 = socket(0x21, 0x2, 0x2) shutdown(r0, 0x2) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4000080) 1m27.527365123s ago: executing program 1 (id=61): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6474, 0x200, 0x2, 0x15e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x8002, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r9, &(0x7f0000000040)=ANY=[], 0xffffff6a) splice(r8, 0x0, r0, 0x0, 0x40010003, 0x0) socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1b) 58.754280766s ago: executing program 34 (id=56): mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./trace\x00', 0x48) mount(0x0, &(0x7f0000000800)='./trace\x00', &(0x7f0000000840)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./trace/set_event\x00', 0x20002, 0x0) write(r0, &(0x7f0000000900)=':\x00', 0x2) 31.218379907s ago: executing program 35 (id=61): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6474, 0x200, 0x2, 0x15e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x8002, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r9, &(0x7f0000000040)=ANY=[], 0xffffff6a) splice(r8, 0x0, r0, 0x0, 0x40010003, 0x0) socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1b) 0s ago: executing program 36 (id=59): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000b80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x61ae, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x10, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xfc, 0x4, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0022180000000501150025ff0904a1014de29c198c0508950129309102c0"], 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000004c0), 0x4, 0x2) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000500)={0xfb, 0x11, 0x0, 0x98, "4d512c91002a4950676142687108dcd3f82acf5a895bd90fca2bb40bb4fbf29c"}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.139' (ED25519) to the list of known hosts. [ 65.154869][ T5623] cgroup: Unknown subsys name 'net' [ 65.285633][ T5623] cgroup: Unknown subsys name 'cpuset' [ 65.293758][ T5623] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.697598][ T5623] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.266637][ T5635] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.267223][ T5635] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.268825][ T5635] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.269236][ T5635] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.273023][ T5635] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.273135][ T5635] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.306260][ T5639] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.308636][ T5639] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.309311][ T5639] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.310208][ T5639] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.310883][ T5639] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.314990][ T56] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.317548][ T56] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.317771][ T56] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.383820][ T5641] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.454816][ T5644] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.458355][ T5644] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.461538][ T5644] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.464037][ T5644] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.464626][ T5635] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.465175][ T5635] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.467725][ T5635] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.468604][ T5635] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.486033][ T5641] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.493132][ T5641] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.279049][ T5642] rxe_eth0 speed is unknown, defaulting to 1000 [ 70.282005][ T5634] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 70.284747][ T5642] rxe_eth0 speed is unknown, defaulting to 1000 [ 70.290967][ T5642] rxe_eth0 speed is unknown, defaulting to 1000 [ 70.317411][ T5633] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 70.320800][ T5650] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 70.421971][ T5649] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 70.670874][ T5642] infiniband rxe0: set active [ 70.670902][ T5642] infiniband rxe0: added rxe_eth0 [ 70.720800][ T5642] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 70.720836][ T5642] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 70.720870][ T5642] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 70.769499][ T54] rxe_eth0 speed is unknown, defaulting to 1000 [ 70.822351][ T5642] RDS/IB: rxe0: added [ 70.830545][ T5642] smc: adding ib device rxe0 with port count 1 [ 70.830667][ T5642] smc: ib device rxe0 port 1 has no pnetid [ 70.869754][ T54] rxe_eth0 speed is unknown, defaulting to 1000 [ 70.901343][ T5642] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.140613][ T47] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.206361][ T27] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.342872][ T5641] Bluetooth: hci0: command tx timeout [ 71.342877][ T4956] Bluetooth: hci2: command tx timeout [ 71.365737][ T5642] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.426600][ T5641] Bluetooth: hci1: command tx timeout [ 71.427771][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.427832][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.502544][ T5641] Bluetooth: hci4: command tx timeout [ 71.502782][ T5641] Bluetooth: hci3: command tx timeout [ 71.714447][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.715162][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.715292][ T5634] bridge_slave_0: entered allmulticast mode [ 71.716840][ T5634] bridge_slave_0: entered promiscuous mode [ 71.719757][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.719852][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.719962][ T5634] bridge_slave_1: entered allmulticast mode [ 71.721746][ T5634] bridge_slave_1: entered promiscuous mode [ 71.758940][ T5642] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.798368][ T5650] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.798552][ T5650] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.798669][ T5650] bridge_slave_0: entered allmulticast mode [ 71.800399][ T5650] bridge_slave_0: entered promiscuous mode [ 71.829600][ T5650] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.829713][ T5650] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.830079][ T5650] bridge_slave_1: entered allmulticast mode [ 71.831805][ T5650] bridge_slave_1: entered promiscuous mode [ 71.837381][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.898436][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.977486][ T5634] team0: Port device team_slave_0 added [ 71.997120][ T5642] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.014244][ T5650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.017679][ T5650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.019958][ T5634] team0: Port device team_slave_1 added [ 72.088073][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.088242][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.088366][ T5633] bridge_slave_0: entered allmulticast mode [ 72.089789][ T5633] bridge_slave_0: entered promiscuous mode [ 72.141169][ T5649] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.141273][ T5649] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.141383][ T5649] bridge_slave_0: entered allmulticast mode [ 72.145517][ T5649] bridge_slave_0: entered promiscuous mode [ 72.149681][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.149778][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.149888][ T5633] bridge_slave_1: entered allmulticast mode [ 72.154603][ T5633] bridge_slave_1: entered promiscuous mode [ 72.186209][ T5650] team0: Port device team_slave_0 added [ 72.192068][ T5650] team0: Port device team_slave_1 added [ 72.206626][ T5649] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.206728][ T5649] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.206852][ T5649] bridge_slave_1: entered allmulticast mode [ 72.208550][ T5649] bridge_slave_1: entered promiscuous mode [ 72.224768][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.224782][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.224803][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.227914][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.227925][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.227946][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.274390][ T5634] hsr_slave_0: entered promiscuous mode [ 72.276982][ T5634] hsr_slave_1: entered promiscuous mode [ 72.372634][ T5649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.375448][ T5649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.392584][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.424233][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.424847][ T5650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.424855][ T5650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.424868][ T5650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.445891][ T5649] team0: Port device team_slave_0 added [ 72.496517][ T5650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.496533][ T5650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.496562][ T5650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.498330][ T5633] team0: Port device team_slave_0 added [ 72.520075][ T5642] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.525673][ T5649] team0: Port device team_slave_1 added [ 72.569975][ T5633] team0: Port device team_slave_1 added [ 72.645067][ T5649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.645083][ T5649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.645105][ T5649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.698329][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.698344][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.698366][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.714647][ T5649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.714662][ T5649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.714683][ T5649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.731571][ T5650] hsr_slave_0: entered promiscuous mode [ 72.734378][ T5650] hsr_slave_1: entered promiscuous mode [ 72.736311][ T5650] debugfs: 'hsr0' already exists in 'hsr' [ 72.736340][ T5650] Cannot create hsr debugfs directory [ 72.738684][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.738696][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.738717][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.937598][ T5649] hsr_slave_0: entered promiscuous mode [ 72.938183][ T5649] hsr_slave_1: entered promiscuous mode [ 72.938606][ T5649] debugfs: 'hsr0' already exists in 'hsr' [ 72.938619][ T5649] Cannot create hsr debugfs directory [ 72.944745][ T5633] hsr_slave_0: entered promiscuous mode [ 72.946077][ T5633] hsr_slave_1: entered promiscuous mode [ 72.946751][ T5633] debugfs: 'hsr0' already exists in 'hsr' [ 72.946764][ T5633] Cannot create hsr debugfs directory [ 73.298878][ T5634] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.302356][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.323810][ T5634] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.326955][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.335277][ T5634] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.343621][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.344521][ T5634] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.350301][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.422645][ T5641] Bluetooth: hci2: command tx timeout [ 73.423025][ T4956] Bluetooth: hci0: command tx timeout [ 73.456077][ T5650] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.471024][ T5650] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.471886][ T5650] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.490348][ T5650] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.504140][ T4956] Bluetooth: hci1: command tx timeout [ 73.510830][ T5650] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.514997][ T5650] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.515709][ T5650] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.521092][ T5650] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.592668][ T5641] Bluetooth: hci4: command tx timeout [ 73.592773][ T4956] Bluetooth: hci3: command tx timeout [ 73.650854][ T5642] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.651008][ T5642] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.651325][ T5642] bridge_slave_0: entered allmulticast mode [ 73.667797][ T5642] bridge_slave_0: entered promiscuous mode [ 73.686163][ T5642] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.686263][ T5642] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.686392][ T5642] bridge_slave_1: entered allmulticast mode [ 73.687654][ T5642] bridge_slave_1: entered promiscuous mode [ 73.731602][ T5649] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.737311][ T5649] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.756369][ T5642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.756448][ T5649] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.759929][ T5649] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.760674][ T5649] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.764682][ T5649] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.790373][ T5642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.814525][ T5649] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.817376][ T5649] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.844633][ T5642] team0: Port device team_slave_0 added [ 73.861454][ T5642] team0: Port device team_slave_1 added [ 73.920376][ T5642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.920390][ T5642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.920408][ T5642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.932909][ T5633] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.960895][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.965056][ T5642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.965070][ T5642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.965091][ T5642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.981553][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.984442][ T5633] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.991941][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.005552][ T5633] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.018027][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.056067][ T5633] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.063617][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.089608][ T5642] hsr_slave_0: entered promiscuous mode [ 74.090252][ T5642] hsr_slave_1: entered promiscuous mode [ 74.090667][ T5642] debugfs: 'hsr0' already exists in 'hsr' [ 74.090681][ T5642] Cannot create hsr debugfs directory [ 74.141293][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.188254][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.188354][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.229372][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.229454][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.256986][ T5650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.354888][ T5650] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.373852][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.373958][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.421458][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.421572][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.460751][ T5642] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.467836][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.468615][ T5642] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.476072][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.498535][ T5642] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.508741][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.509563][ T5642] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.524957][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.542203][ T5649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.577913][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.628237][ T5649] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.660184][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.660379][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.682063][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.707533][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.707592][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.709006][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.709087][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.753245][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.753343][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.997109][ T5642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.085050][ T5642] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.130089][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.130195][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.177156][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.177260][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.467646][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.502593][ T5641] Bluetooth: hci2: command tx timeout [ 75.502676][ T4956] Bluetooth: hci0: command tx timeout [ 75.583324][ T4956] Bluetooth: hci1: command tx timeout [ 75.663617][ T5641] Bluetooth: hci4: command tx timeout [ 75.663700][ T4956] Bluetooth: hci3: command tx timeout [ 76.016542][ T5650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.080017][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.131314][ T5649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.211140][ T5634] veth0_vlan: entered promiscuous mode [ 76.251107][ T5634] veth1_vlan: entered promiscuous mode [ 76.260174][ T5650] veth0_vlan: entered promiscuous mode [ 76.331024][ T5633] veth0_vlan: entered promiscuous mode [ 76.335327][ T5650] veth1_vlan: entered promiscuous mode [ 76.363605][ T5649] veth0_vlan: entered promiscuous mode [ 76.406639][ T5633] veth1_vlan: entered promiscuous mode [ 76.409880][ T5649] veth1_vlan: entered promiscuous mode [ 76.415848][ T5634] veth0_macvtap: entered promiscuous mode [ 76.434196][ T5634] veth1_macvtap: entered promiscuous mode [ 76.491659][ T5642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.525046][ T5633] veth0_macvtap: entered promiscuous mode [ 76.529185][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.530553][ T5650] veth0_macvtap: entered promiscuous mode [ 76.554895][ T5633] veth1_macvtap: entered promiscuous mode [ 76.567473][ T5650] veth1_macvtap: entered promiscuous mode [ 76.579468][ T5649] veth0_macvtap: entered promiscuous mode [ 76.591007][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.612379][ T5649] veth1_macvtap: entered promiscuous mode [ 76.639760][ T5650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.657646][ T5649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.659003][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.683912][ T14] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.687971][ T5649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.689378][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.693353][ T5650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.712757][ T1082] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.712798][ T1082] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.712830][ T1082] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.712861][ T1082] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.831105][ T3326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.831129][ T3326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.855201][ T5642] veth0_vlan: entered promiscuous mode [ 76.929622][ T3288] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.929640][ T3288] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.976783][ T5642] veth1_vlan: entered promiscuous mode [ 77.028978][ T162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.028998][ T162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.094673][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.094692][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.133654][ T3326] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.174835][ T5634] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.181416][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.181434][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.262101][ T5642] veth0_macvtap: entered promiscuous mode [ 77.281994][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.282013][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.320665][ T5642] veth1_macvtap: entered promiscuous mode [ 77.370217][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.370237][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.442147][ T3326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.442174][ T3326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.472992][ T5642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.475089][ T143] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.475146][ T143] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.475180][ T143] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.475212][ T143] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.475243][ T143] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.475275][ T143] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.475307][ T143] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.475339][ T143] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.475371][ T143] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.475403][ T143] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.518076][ T5642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.588945][ T4956] Bluetooth: hci0: command tx timeout [ 77.588975][ T4956] Bluetooth: hci2: command tx timeout [ 77.639985][ T5851] faux_driver vgem: [drm] Unknown color mode 135168; guessing buffer size. [ 77.662507][ T5641] Bluetooth: hci1: command tx timeout [ 77.713721][ T1082] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.742587][ T5641] Bluetooth: hci3: command tx timeout [ 77.742616][ T5641] Bluetooth: hci4: command tx timeout [ 77.779171][ T1082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.779190][ T1082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.815387][ T162] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.816247][ T162] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.827060][ T3326] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.925261][ T1082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.925274][ T1082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.193976][ T5864] loop1: detected capacity change from 0 to 512 [ 78.334209][ T5864] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.334345][ T5864] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.598642][ T32] audit: type=1804 audit(1794088803.286:2): pid=5873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2" name="/newroot/0/bus/bus" dev="loop1" ino=18 res=1 errno=0 [ 78.676538][ T5873] EXT4-fs error (device loop1): ext4_lookup:1787: inode #12: comm syz.1.2: iget: bad i_size value: 2533274857506816 [ 79.273693][ T5883] EXT4-fs error (device loop1): ext4_lookup:1787: inode #12: comm syz.1.2: iget: bad i_size value: 2533274857506816 [ 79.345976][ T5746] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 79.457606][ T32] audit: type=1804 audit(1794088804.146:3): pid=5882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2" name="/newroot/0/bus/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=19 res=1 errno=0 [ 79.537448][ T5746] usb 1-1: New USB device found: idVendor=7dcc, idProduct=676e, bcdDevice=77.db [ 79.540382][ T5746] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.540410][ T5746] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 79.550290][ T5746] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.550333][ T5746] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 79.554369][ T5746] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.554428][ T5746] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 79.554467][ T5746] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.563735][ T5882] netlink: 1030 bytes leftover after parsing attributes in process `syz.1.2'. [ 79.593816][ T5746] usb 1-1: config 0 descriptor?? [ 79.845783][ T47] usb 1-1: USB disconnect, device number 2 [ 80.069954][ T5649] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.932879][ T2268] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 81.959483][ T5922] loop2: detected capacity change from 0 to 256 [ 82.006627][ T5922] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 82.006645][ T5922] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 82.060272][ T5922] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 82.080998][ T5922] exFAT-fs (loop2): failed to load alloc-bitmap [ 82.081013][ T5922] exFAT-fs (loop2): failed to recognize exfat type [ 82.106784][ T5924] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 82.117285][ T2268] usb 2-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 82.126295][ T2268] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.126322][ T2268] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.126341][ T2268] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 82.126377][ T2268] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.135250][ T2268] usb 2-1: config 0 descriptor?? [ 83.008981][ T54] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.168639][ T5931] loop2: detected capacity change from 0 to 512 [ 83.275739][ T2268] plantronics 0003:047F:FFFF.0001: reserved main item tag 0xd [ 84.104524][ T5931] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.104655][ T5931] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.200038][ T2268] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 84.272590][ T2268] usb 2-1: USB disconnect, device number 2 [ 84.517512][ T5943] fido_id[5943]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 84.543376][ T5650] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.574362][ T5371] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 84.715038][ T5950] loop0: detected capacity change from 0 to 256 [ 84.723321][ T5371] usb 4-1: New USB device found: idVendor=1044, idProduct=7001, bcdDevice=5.20 [ 84.725035][ T5371] usb 4-1: config 4 has an invalid interface number: 44 but max is 0 [ 84.725056][ T5371] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 84.725073][ T5371] usb 4-1: config 4 has no interface number 0 [ 84.725107][ T5371] usb 4-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 84.735563][ T5371] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.735583][ T5371] usb 4-1: Product: syz [ 84.735596][ T5371] usb 4-1: Manufacturer: syz [ 84.735609][ T5371] usb 4-1: SerialNumber: syz [ 84.861126][ T5950] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fcb6, chksum : 0xbbf39601, utbl_chksum : 0xe619d30d) [ 85.145731][ T5371] dvb-usb: found a 'Gigabyte U7000' in cold state, will try to load a firmware [ 85.540729][ T32] audit: type=1800 audit(1794088810.226:4): pid=5950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.26" name="file2" dev="loop0" ino=3 res=0 errno=-22 [ 85.731715][ T5968] netlink: 4 bytes leftover after parsing attributes in process `syz.4.28'. [ 85.740048][ T5371] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 85.740099][ T5371] dib0700: firmware download failed at 7 with -22 [ 85.951277][ T4956] Bluetooth: hci3: unexpected cc 0x203d length: 85 > 1 [ 86.040412][ T5976] loop1: detected capacity change from 0 to 2048 [ 86.075956][ T5978] loop4: detected capacity change from 0 to 256 [ 86.119215][ T5978] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 86.119234][ T5978] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 86.153376][ T5978] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 86.155590][ T5978] exFAT-fs (loop4): failed to load alloc-bitmap [ 86.155604][ T5978] exFAT-fs (loop4): failed to recognize exfat type [ 86.181998][ T5976] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 87.002848][ T1233] cfg80211: failed to load regulatory.db [ 87.738697][ T5371] usb 4-1: USB disconnect, device number 2 [ 87.873674][ T5995] loop4: detected capacity change from 0 to 512 [ 87.979234][ T5995] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.979344][ T5995] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.086240][ T5999] loop3: detected capacity change from 0 to 512 [ 88.204275][ T5999] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.204368][ T5999] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.542982][ T6003] EXT4-fs error (device loop3): ext4_lookup:1787: inode #12: comm syz.3.36: iget: bad i_size value: 2533274857506816 [ 88.722798][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 90.279845][ T6011] EXT4-fs error (device loop3): ext4_lookup:1787: inode #12: comm syz.3.36: iget: bad i_size value: 2533274857506816 [ 90.420926][ T5634] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.585607][ T6011] netlink: 1030 bytes leftover after parsing attributes in process `syz.3.36'. [ 90.727733][ T6012] loop3: detected capacity change from 512 to 0 [ 90.729258][ C1] I/O error, dev loop3, sector 188 op 0x1:(WRITE) flags 0x803800 phys_seg 1 prio class 2 [ 90.729413][ C1] Buffer I/O error on dev loop3, logical block 47, lost sync page write [ 90.729441][ C1] I/O error, dev loop3, sector 12 op 0x1:(WRITE) flags 0x803800 phys_seg 1 prio class 2 [ 90.729510][ C1] Buffer I/O error on dev loop3, logical block 3, lost sync page write [ 90.729560][ T6015] EXT4-fs error (device loop3): ext4_handle_dirty_dirblock:409: inode #2: block 3: comm syz.3.36: IO error syncing itable block [ 90.729576][ T5999] EXT4-fs error (device loop3): ext4_ext_insert_extent:2210: inode #16: block 47: comm syz.3.36: IO error syncing itable block [ 90.729815][ T6015] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 90.729832][ T6015] EXT4-fs (loop3): I/O error while writing superblock [ 90.729846][ T6015] EXT4-fs error (device loop3) in add_dirent_to_buf:2157: IO failure [ 90.729920][ T6015] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 90.729936][ T6015] EXT4-fs (loop3): I/O error while writing superblock [ 90.730297][ T6015] EXT4-fs error (device loop3): ext4_check_bdev_write_error:239: comm syz.3.36: Error while async write back metadata [ 90.730613][ T5999] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 90.731035][ T5999] EXT4-fs (loop3): I/O error while writing superblock [ 90.731377][ T5999] EXT4-fs error (device loop3): ext4_check_bdev_write_error:239: comm syz.3.36: Error while async write back metadata [ 90.731954][ T5999] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 90.731973][ T5999] EXT4-fs (loop3): I/O error while writing superblock [ 90.732062][ T5999] EXT4-fs error (device loop3): ext4_check_bdev_write_error:239: comm syz.3.36: Error while async write back metadata [ 90.732136][ T5999] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 90.732151][ T5999] EXT4-fs (loop3): I/O error while writing superblock [ 90.732224][ T5999] EXT4-fs error (device loop3): ext4_check_bdev_write_error:239: comm syz.3.36: Error while async write back metadata [ 90.732294][ T5999] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 90.732309][ T5999] EXT4-fs (loop3): I/O error while writing superblock [ 90.732323][ T5999] EXT4-fs error (device loop3): ext4_check_bdev_write_error:239: comm syz.3.36: Error while async write back metadata [ 90.732391][ T5999] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 90.732405][ T5999] EXT4-fs (loop3): I/O error while writing superblock [ 90.734392][ T5999] Buffer I/O error on dev loop3, logical block 0, lost sync page write [ 90.734411][ T5999] EXT4-fs (loop3): I/O error while writing superblock [ 90.734554][ T5999] EXT4-fs (loop3): I/O error while writing superblock [ 90.735224][ T5999] EXT4-fs warning (device loop3): ext4_end_bio:367: I/O error 10 writing to inode 16 starting block 38) [ 90.735365][ T5999] Buffer I/O error on device loop3, logical block 38 [ 90.735378][ T5999] Buffer I/O error on device loop3, logical block 39 [ 90.735434][ T5999] Buffer I/O error on device loop3, logical block 40 [ 90.735445][ T5999] Buffer I/O error on device loop3, logical block 41 [ 90.736014][ T5999] EXT4-fs warning (device loop3): ext4_end_bio:367: I/O error 10 writing to inode 16 starting block 42) [ 90.736133][ T5999] EXT4-fs warning (device loop3): ext4_end_bio:367: I/O error 10 writing to inode 16 starting block 46) [ 90.736158][ T5999] Buffer I/O error on device loop3, logical block 46 [ 90.736242][ T5999] Buffer I/O error on device loop3, logical block 42 [ 90.736453][ T5999] EXT4-fs warning (device loop3): ext4_end_bio:367: I/O error 10 writing to inode 16 starting block 49) [ 90.736531][ T5999] EXT4-fs warning (device loop3): ext4_end_bio:367: I/O error 10 writing to inode 16 starting block 51) [ 90.736554][ T5999] Buffer I/O error on device loop3, logical block 51 [ 90.736623][ T5999] Buffer I/O error on device loop3, logical block 49 [ 90.737278][ T5999] EXT4-fs warning (device loop3): ext4_end_bio:367: I/O error 10 writing to inode 16 starting block 60) [ 90.737363][ T5999] EXT4-fs warning (device loop3): ext4_end_bio:367: I/O error 10 writing to inode 16 starting block 62) [ 90.737386][ T5999] Buffer I/O error on device loop3, logical block 62 [ 90.737457][ T5999] Buffer I/O error on device loop3, logical block 60 [ 90.737670][ T5999] EXT4-fs warning (device loop3): ext4_end_bio:367: I/O error 10 writing to inode 16 starting block 65) [ 90.737744][ T5999] EXT4-fs warning (device loop3): ext4_end_bio:367: I/O error 10 writing to inode 16 starting block 67) [ 90.738028][ T5999] EXT4-fs warning (device loop3): ext4_end_bio:367: I/O error 10 writing to inode 16 starting block 70) [ 91.609017][ T6018] loop2: detected capacity change from 0 to 4096 [ 91.649148][ T6018] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 91.911562][ T6023] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 92.258398][ T6018] Quota error (device loop2): find_block_dqentry: Quota for id 0 referenced but not present [ 92.259105][ T6018] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 92.259158][ T6018] EXT4-fs error (device loop2): ext4_acquire_dquot:7120: comm syz.2.40: Failed to acquire dquot type 1 [ 92.384958][ T6018] EXT4-fs warning (device loop2): ext4_enable_quotas:7355: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 92.847458][ T6030] loop4: detected capacity change from 0 to 2048 [ 92.887513][ T6030] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 92.943703][ T5650] EXT4-fs error (device loop2): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 92.951102][ T5650] EXT4-fs error (device loop2): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 93.424858][ T5642] EXT4-fs: 18 callbacks suppressed [ 93.424877][ T5642] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.474111][ T5642] EXT4-fs (loop3): I/O error while writing superblock [ 93.704831][ T162] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.914950][ T162] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.085107][ T162] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.259196][ T162] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.564582][ T5641] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.565148][ T5641] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.567161][ T5641] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.571155][ T5641] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.571844][ T5641] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.681414][ T162] bridge_slave_1: left allmulticast mode [ 95.681453][ T162] bridge_slave_1: left promiscuous mode [ 95.682274][ T162] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.769128][ T162] bridge_slave_0: left allmulticast mode [ 95.769152][ T162] bridge_slave_0: left promiscuous mode [ 95.769323][ T162] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.927721][ T4956] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.928874][ T4956] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.929399][ T4956] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.930273][ T4956] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.930815][ T4956] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 96.302625][ T47] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 96.453843][ T47] usb 5-1: New USB device found: idVendor=17ef, idProduct=61ae, bcdDevice=0.00 [ 96.456743][ T47] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 96.456773][ T47] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 96.456876][ T47] usb 5-1: config 0 interface 0 has no altsetting 0 [ 96.456908][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.521064][ T47] usb 5-1: config 0 descriptor?? [ 96.692253][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 97.445162][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 97.673465][ T5641] Bluetooth: hci2: command tx timeout [ 97.991838][ T5641] Bluetooth: hci4: command tx timeout [ 99.690732][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 99.756803][ T5641] Bluetooth: hci2: command tx timeout [ 100.072353][ T5641] Bluetooth: hci4: command tx timeout [ 100.510819][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.762337][ T47] lenovo 0003:17EF:61AE.0002: ignoring exceeding usage max [ 101.840813][ T5641] Bluetooth: hci2: command tx timeout [ 102.156731][ T5641] Bluetooth: hci4: command tx timeout [ 103.489244][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 103.583149][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 103.906738][ T5641] Bluetooth: hci2: command tx timeout [ 104.235573][ T5641] Bluetooth: hci4: command tx timeout [ 104.301556][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 105.733353][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 105.836480][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 106.040436][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 109.562389][ T47] input: HID 17ef:61ae as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:17EF:61AE.0002/input/input6 [ 115.516745][ T47] lenovo 0003:17EF:61AE.0002: input,hidraw0: USB HID v0.10 Joystick [HID 17ef:61ae] on usb-dummy_hcd.4-1/input0 [ 118.722016][ T47] usb 5-1: USB disconnect, device number 2 [ 119.935510][ T162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.807407][ T162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.403423][ T162] bond0 (unregistering): Released all slaves [ 133.150506][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.151435][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 179.874667][ T5005] udevd[5005]: worker [6038] /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:17EF:61AE.0002/hidraw/hidraw0 is taking a long time [ 194.454501][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.463920][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.393415][ T5644] Bluetooth: hci1: command 0x0406 tx timeout [ 196.587359][ T5644] Bluetooth: hci3: command 0x0406 tx timeout [ 196.625893][ T5644] Bluetooth: hci0: command 0x0406 tx timeout [ 198.775189][ T6102] fido_id[6102]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 221.987840][ T5641] Bluetooth: hci2: command 0x0406 tx timeout [ 221.988542][ T5641] Bluetooth: hci4: command 0x0406 tx timeout [ 249.368816][ T34] INFO: task kworker/1:2:1233 blocked for more than 143 seconds. [ 249.368986][ T34] Not tainted syzkaller #0 [ 249.369088][ T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 249.369116][ T34] task:kworker/1:2 state:D stack:26080 pid:1233 tgid:1233 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 249.369236][ T34] Workqueue: events_power_efficient crda_timeout_work [ 249.369456][ T34] Call Trace: [ 249.369508][ T34] [ 249.525094][ T34] __schedule+0x17dd/0x5830 [ 249.526011][ T34] ? __pfx___schedule+0x10/0x10 [ 249.526102][ T34] ? pv_queued_spin_unlock_traced+0x5a/0x1b0 [ 249.526222][ T34] ? schedule+0x90/0x2b0 [ 249.526458][ T34] ? schedule+0x90/0x2b0 [ 249.526754][ T34] schedule+0x164/0x2b0 [ 249.527426][ T34] schedule_preempt_disabled+0x13/0x30 [ 249.527510][ T34] __mutex_lock+0x7c4/0x15a0 [ 249.527663][ T34] ? __mutex_lock+0x5cd/0x15a0 [ 249.527973][ T34] ? crda_timeout_work+0x1f/0x90 [ 249.528120][ T34] ? __pfx___mutex_lock+0x10/0x10 [ 249.528655][ T34] ? rcu_is_watching+0x16/0xb0 [ 249.528760][ T34] ? process_scheduled_works+0x97a/0x1630 [ 249.558557][ T34] crda_timeout_work+0x1f/0x90 [ 249.558748][ T34] process_scheduled_works+0xc3d/0x1630 [ 249.639371][ T34] ? __pfx_process_scheduled_works+0x10/0x10 [ 249.640129][ T34] ? assign_work+0x3cf/0x5d0 [ 249.640547][ T34] worker_thread+0xa47/0xfb0 [ 249.641525][ T34] ? __kthread_parkme+0x71/0x1f0 [ 249.642340][ T34] kthread+0x38b/0x480 [ 250.099383][ T34] ? __pfx_worker_thread+0x10/0x10 [ 250.099569][ T34] ? __pfx_kthread+0x10/0x10 [ 250.099739][ T34] ret_from_fork+0x514/0xb70 [ 250.100119][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 250.100456][ T34] ? __switch_to+0xc78/0x1410 [ 250.100779][ T34] ? __pfx_kthread+0x10/0x10 [ 250.288110][ T34] ret_from_fork_asm+0x1a/0x30 [ 250.289287][ T34] [ 250.295919][ T34] [ 250.295919][ T34] Showing all locks held in the system: [ 250.296025][ T34] locks held by kworker/u8:1/14: 4, on CPU#0: [ 250.296122][ T34] #0: ffff88813fe54150 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 250.296888][ T34] #1: ffffc90000137c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 250.297195][ T34] #2: ffffffff8ffe61f0 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_enable+0x12/0x20 [ 250.297726][ T34] #3: ffffffff9023dce0 (jump_label_mutex){+.+.}-{4:4}, at: static_key_enable_cpuslocked+0xcb/0x240 [ 250.298501][ T34] locks held by pr/ttyS0/33: 2, last CPU#0: [ 250.399567][ T34] #0: ffffffff90034058 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 250.400021][ T34] #1: ffffffff9c21ef58 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 [ 250.400694][ T34] locks held by khungtaskd/34: 1, last CPU#1: [ 250.400816][ T34] #0: ffffffff9015a560 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 250.401291][ T34] locks held by kworker/u8:4/65: 4, last CPU#1: [ 250.401365][ T34] #0: ffff88813fe54150 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 250.401929][ T34] #1: ffffc90001567c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 250.613532][ T34] #2: ffff888065710800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 250.613719][ T34] #3: ffffffff9015a560 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 250.614034][ T34] locks held by kworker/u8:5/143: 4, last CPU#1: [ 250.614095][ T34] #0: ffff88813fe54150 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 250.789034][ T34] #1: ffffc90002ecfc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 250.789390][ T34] #2: ffff888053ad0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 250.789969][ T34] #3: ffff8880b823c5e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb2/0x160 [ 250.790718][ T34] locks held by kworker/u8:6/162: 8, last CPU#1: [ 250.790746][ T34] #0: ffff88801d68e150 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 250.979387][ T34] #1: ffffc90002f0fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 250.979794][ T34] #2: ffffffff91689ce8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 250.980403][ T34] #3: ffffffff916989e0 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2d0 [ 250.980976][ T34] #4: ffff888053070800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x132/0x6a0 [ 250.981288][ T34] #5: ffff88801d68caa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 251.195968][ T34] #6: ffff88801d68c980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140 [ 251.196266][ T34] #7: ffff88801d68ca10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: __kernfs_remove+0x174/0x910 [ 251.196706][ T34] locks held by kworker/u8:7/1082: 4, last CPU#1: [ 251.196796][ T34] #0: ffff88813fe54150 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 251.254333][ T34] #1: ffffc90004e27c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 251.254674][ T34] #2: ffff8880539a0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 251.255247][ T34] #3: ffffffff9015a560 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 251.328997][ T34] locks held by kworker/u8:8/1162: 3, last CPU#1: [ 251.329022][ T34] #0: ffff88813fe54150 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 251.329224][ T34] #1: ffffc90005267c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 251.329539][ T34] #2: ffff88807ba91258 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 251.329990][ T34] locks held by kworker/1:2/1233: 3, on CPU#1: [ 251.330007][ T34] #0: ffff88813fe11d50 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 251.330178][ T34] #1: ffffc90005637c40 ((crda_timeout).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 251.330472][ T34] #2: ffffffff918e1380 (cfg80211_mutex){+.+.}-{4:4}, at: crda_timeout_work+0x1f/0x90 [ 251.536436][ T34] locks held by kworker/u8:10/3326: 3, last CPU#1: [ 251.536484][ T34] #0: ffff88813fe54150 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 251.546753][ T34] #1: ffffc9000e1f7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 251.547278][ T34] #2: ffff888053560800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 251.548019][ T34] locks held by kworker/u8:11/4256: 4, last CPU#1: [ 251.548130][ T34] #0: ffff88813fe54150 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 251.548376][ T34] #1: ffffc9000f2f7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 251.767278][ T34] #2: ffff8880654d0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 251.767761][ T34] #3: ffffffff9015a560 (rcu_read_lock){....}-{1:3}, at: ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 251.768444][ T34] locks held by syslogd/4987: 2, last CPU#1: [ 251.768568][ T34] #0: ffff88807f4285f8 (&u->iolock){+.+.}-{4:4}, at: __unix_dgram_recvmsg+0x1f2/0xe60 [ 251.768877][ T34] #1: ffffffff9015a560 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 251.769299][ T34] locks held by udevd/5005: 2, last CPU#1: [ 251.969247][ T34] #0: ffffffff9015a560 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 251.969653][ T34] #1: ffff8880b823c5e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb2/0x160 [ 251.970251][ T34] locks held by kworker/1:3/5371: 3, last CPU#1: [ 251.970365][ T34] #0: ffff88813fe11d50 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 251.970898][ T34] #1: ffffc9000373fc40 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 251.971231][ T34] #2: ffffffff9015a560 (rcu_read_lock){....}-{1:3}, at: psi_task_switch+0x57/0x7d0 [ 252.081461][ T34] locks held by getty/5393: 2, on CPU#0: [ 252.081573][ T34] #0: ffff888036b5c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 252.081934][ T34] #1: ffffc900032532e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 252.082321][ T34] locks held by syz-executor/5634: 1, last CPU#1: [ 252.082402][ T34] #0: ffffffff9015a560 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 252.126065][ T34] locks held by kworker/1:4/5746: 3, last CPU#1: [ 252.126160][ T34] #0: ffff88813fe11d50 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 252.126881][ T34] #1: ffffc90004c7fc40 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 252.127182][ T34] #2: ffff8880b823c5e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb2/0x160 [ 252.220942][ T34] locks held by kworker/1:5/5769: 3, last CPU#1: [ 252.220968][ T34] #0: ffff88813fe11d50 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 252.221198][ T34] #1: ffffc90004e57c40 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 252.221545][ T34] #2: ffffffff9015a560 (rcu_read_lock){....}-{1:3}, at: gc_worker+0x274/0x1890 [ 252.221916][ T34] locks held by kworker/1:7/5780: 4, on CPU#1: [ 252.221934][ T34] #0: ffff88813fe12d50 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 252.222115][ T34] #1: ffffc90004f97c40 (reg_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 252.399875][ T34] #2: ffffffff918e1380 (cfg80211_mutex){+.+.}-{4:4}, at: reg_todo+0x80/0xff0 [ 252.400485][ T34] #3: ffff888053560800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_process_self_managed_hints+0xae/0x170 [ 252.400796][ T34] locks held by kworker/1:8/5884: 2, last CPU#1: [ 252.400875][ T34] #0: ffff88813fe11d50 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 252.401500][ T34] #1: ffffc90005297c40 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 252.456570][ T34] locks held by kworker/u8:12/5984: 3, last CPU#1: [ 252.456654][ T34] #0: ffff88813fe54150 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 252.457304][ T34] #1: ffffc9000548fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 252.457781][ T34] #2: ffff8880655c0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 252.648583][ T34] locks held by kworker/u8:13/5985: 4, last CPU#0: [ 252.648662][ T34] #0: ffff88813fe54150 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 252.649304][ T34] #1: ffffc900054cfc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 252.649784][ T34] #2: ffff888053bf0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 252.650130][ T34] #3: ffffffff9015a560 (rcu_read_lock){....}-{1:3}, at: ieee80211_bss_info_update+0x30f/0xa30 [ 252.650687][ T34] locks held by syz.0.38/6014: 1, last CPU#0: [ 252.650794][ T34] #0: ffffffff9015a560 (rcu_read_lock){....}-{1:3}, at: __update_page_owner_free_handle+0x37/0x410 [ 252.651497][ T34] locks held by syz-executor/6053: 1, on CPU#1: [ 252.651528][ T34] #0: ffffffff916989e0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc1d/0x1c30 [ 252.697999][ T34] locks held by syz.0.56/6061: 7, last CPU#0: [ 252.698092][ T34] #0: ffff888021fb8ef0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 252.698759][ T34] #1: ffff88801cf02478 (sb_writers#14){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 252.699138][ T34] #2: ffffffff901cdd80 (event_mutex){+.+.}-{4:4}, at: ftrace_set_clr_event+0x476/0x680 [ 252.699579][ T34] #3: ffffffff901bc7c0 (tracepoints_mutex){+.+.}-{4:4}, at: tracepoint_probe_register+0x3f/0x90 [ 252.700234][ T34] #4: ffffffff8ffe61f0 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_enable+0x12/0x20 [ 252.701261][ T34] #5: ffffffff9023dce0 (jump_label_mutex){+.+.}-{4:4}, at: static_key_enable_cpuslocked+0xcb/0x240 [ 252.701848][ T34] #6: ffffffff8fffd220 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_queue+0x5f/0x110 [ 252.705218][ T34] locks held by syz-executor/6063: 1, on CPU#0: [ 252.705333][ T34] #0: ffffffff916989e0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc1d/0x1c30 [ 252.832619][ T34] locks held by kworker/u8:15/6089: 3, last CPU#1: [ 252.832664][ T34] #0: ffff88813fe54150 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 252.833071][ T34] #1: ffffc9000395fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 252.833683][ T34] #2: ffff888065740800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 252.834365][ T34] locks held by kworker/u8:17/6092: 3, on CPU#0: [ 252.834397][ T34] #0: ffff88801e7cb950 ((wq_completion)cfg80211){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 252.834710][ T34] #1: ffffc900038cfc40 ((work_completion)(&(&rdev->dfs_update_channels_wk)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 252.966330][ T34] #2: ffffffff918e1380 (cfg80211_mutex){+.+.}-{4:4}, at: cfg80211_dfs_channels_update_work+0xd0/0xda0 [ 252.966613][ T34] locks held by kworker/u8:18/6093: 3, on CPU#0: [ 252.966678][ T34] #0: ffff88801e7ca950 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 252.967212][ T34] #1: ffffc900038bfc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 252.967974][ T34] #2: ffffffff916989e0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 253.269597][ T34] locks held by kworker/u8:19/6094: 2, last CPU#1: [ 253.269648][ T34] #0: ffff8880335c4150 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 253.270073][ T34] #1: ffffc9000385fc40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 253.270701][ T34] locks held by kworker/u8:20/6095: 3, last CPU#0: [ 253.270818][ T34] #0: ffff88813fe54150 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 253.271306][ T34] #1: ffffc9000381fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 253.271652][ T34] #2: ffff88801d301258 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 253.272309][ T34] locks held by kworker/u8:21/6096: 3, on CPU#0: [ 253.477419][ T34] #0: ffff88813fe54150 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 253.666750][ T34] #1: ffffc900056c7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 253.667360][ T34] #2: ffffffff916989e0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 253.667666][ T34] locks held by kworker/u8:22/6098: 3, last CPU#1: [ 253.667735][ T34] #0: ffff88813fe54150 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 253.668287][ T34] #1: ffffc900037efc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 253.669045][ T34] #2: ffff88803387d258 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 253.669338][ T34] locks held by syz-executor/6111: 2, last CPU#0: [ 253.669402][ T34] #0: ffff8880761ee540 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1ed/0x520 [ 253.669930][ T34] #1: ffffffff9015a560 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 253.771759][ T34] locks held by rm/6114: 1, last CPU#1: [ 253.771806][ T34] #0: ffff88807c05c080 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d5/0xa40 [ 253.772065][ T34] locks held by kworker/u8:25/6116: 4, on CPU#0: [ 253.772128][ T34] #0: ffff88813fe54150 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 253.870781][ T34] #1: ffffc9000371fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 253.871255][ T34] #2: ffff8880537d0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 253.871919][ T34] #3: ffffffff90160be8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2cb/0x760 [ 253.931359][ T34] [ 253.931458][ T34] ============================================= [ 253.931458][ T34] [ 253.931566][ T34] NMI backtrace for cpu 1 [ 253.931648][ T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 253.931870][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 253.931956][ T34] Call Trace: [ 253.932088][ T34] [ 253.932116][ T34] dump_stack_lvl+0xe8/0x150 [ 253.932289][ T34] nmi_cpu_backtrace+0x274/0x2d0 [ 253.932474][ T34] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 253.932851][ T34] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 253.933182][ T34] sys_info+0x135/0x170 [ 253.933274][ T34] watchdog+0x1073/0x10f0 [ 253.933971][ T34] ? watchdog+0x209/0x10f0 [ 253.934442][ T34] kthread+0x38b/0x480 [ 253.934714][ T34] ? __pfx_watchdog+0x10/0x10 [ 253.934837][ T34] ? __pfx_kthread+0x10/0x10 [ 253.935168][ T34] ret_from_fork+0x514/0xb70 [ 253.935423][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 253.935656][ T34] ? __switch_to+0xc78/0x1410 [ 253.936147][ T34] ? __pfx_kthread+0x10/0x10 [ 253.936312][ T34] ret_from_fork_asm+0x1a/0x30 [ 253.937341][ T34] [ 253.939486][ T34] Sending NMI from CPU 1 to CPUs 0: [ 253.939611][ C0] NMI backtrace for cpu 0 [ 253.939629][ C0] CPU: 0 UID: 0 PID: 11 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 253.939656][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 253.939673][ C0] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 253.939716][ C0] RIP: 0010:__sanitizer_cov_trace_switch+0x8f/0x120 [ 253.939755][ C0] Code: 00 00 4e 8b 54 ce 10 65 4c 8b 1d ec c4 19 13 41 f7 c3 00 01 00 ff 74 2c 44 89 db 81 e3 00 01 00 0f 81 fb 00 01 00 00 0f 95 c3 <41> 81 fb 00 00 00 10 41 0f 93 c3 41 08 db 75 bc 41 83 b8 44 17 00 [ 253.939775][ C0] RSP: 0018:ffffc90000006798 EFLAGS: 00000246 [ 253.939800][ C0] RAX: 0000000000000020 RBX: 0000000000000100 RCX: 0000000000000005 [ 253.939817][ C0] RDX: ffffffff81cd813a RSI: ffffffff901bdb50 RDI: 000000000000000a [ 253.939835][ C0] RBP: 00000000000004a4 R08: ffff88801f2b1f40 R09: 0000000000000016 [ 253.939852][ C0] R10: 0000000000000016 R11: 0000000000000305 R12: 0000003b208a756c [ 253.939869][ C0] R13: 000000000000000a R14: 000000000000002c R15: ffff888033f224b4 [ 253.939886][ C0] FS: 0000000000000000(0000) GS:ffff8881233f0000(0000) knlGS:0000000000000000 [ 253.939912][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 253.939929][ C0] CR2: 00007fbb2b408e9c CR3: 000000007a416000 CR4: 00000000003526f0 [ 253.939950][ C0] Call Trace: [ 253.939965][ C0] [ 253.940005][ C0] rb_read_data_buffer+0x14a/0x5b0 [ 253.940134][ C0] check_buffer+0x288/0x860 [ 253.940193][ C0] ? __pfx_trace_clock_local+0x10/0x10 [ 253.940306][ C0] __rb_reserve_next+0x549/0xdd0 [ 253.940528][ C0] ring_buffer_lock_reserve+0xc0d/0x10c0 [ 253.940590][ C0] ? ring_buffer_unlock_commit+0x51d/0x6c0 [ 253.940700][ C0] ? trace_buffer_unlock_commit_regs+0x156/0x520 [ 253.940827][ C0] trace_event_buffer_lock_reserve+0x1d4/0x700 [ 253.940928][ C0] trace_event_buffer_reserve+0x1ef/0x2d0 [ 253.941015][ C0] trace_event_raw_event_lock+0x127/0x280 [ 253.941096][ C0] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 253.941133][ C0] ? lock_acquire+0x115/0x350 [ 253.941235][ C0] ? lock_acquire+0x115/0x350 [ 253.941315][ C0] ? unwind_next_frame+0x8f/0x2550 [ 253.941358][ C0] ? unwind_next_frame+0x8f/0x2550 [ 253.941401][ C0] lock_release+0x396/0x3c0 [ 253.941458][ C0] ? deref_stack_reg+0x18e/0x220 [ 253.941522][ C0] ? unwind_next_frame+0x8f/0x2550 [ 253.941579][ C0] unwind_next_frame+0x1baa/0x2550 [ 253.941672][ C0] ? worker_thread+0xa47/0xfb0 [ 253.941707][ C0] ? unwind_next_frame+0x8f/0x2550 [ 253.941784][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 253.941833][ C0] arch_stack_walk+0x11b/0x150 [ 253.941938][ C0] ? kthread+0x38b/0x480 [ 253.942025][ C0] stack_trace_save+0xa9/0x100 [ 253.942075][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 253.942157][ C0] ? trace_buffer_unlock_commit_regs+0x156/0x520 [ 253.942195][ C0] ? ring_buffer_event_data+0x94/0x100 [ 253.942273][ C0] kasan_save_stack+0x3e/0x60 [ 253.942315][ C0] ? kasan_save_stack+0x3e/0x60 [ 253.942353][ C0] ? __kasan_record_aux_stack+0xc5/0xe0 [ 253.942387][ C0] ? __kfree_rcu_sheaf+0x136/0x690 [ 253.942430][ C0] ? kvfree_call_rcu+0x9c/0x440 [ 253.942463][ C0] ? cfg80211_update_known_bss+0x83a/0x1350 [ 253.942502][ C0] ? __cfg80211_bss_update+0x147/0x2060 [ 253.942538][ C0] ? cfg80211_inform_single_bss_data+0xc4a/0x1be0 ** replaying previous printk message ** [ 253.942538][ C0] ? cfg80211_inform_single_bss_data+0xc4a/0x1be0 [ 253.942577][ C0] ? cfg80211_inform_bss_data+0x25b/0x3be0 [ 253.942613][ C0] ? cfg80211_inform_bss_frame_data+0x51a/0xae0 [ 253.942651][ C0] ? ieee80211_bss_info_update+0x772/0xa30 [ 253.942689][ C0] ? ieee80211_scan_rx+0x552/0xa40 [ 253.942725][ C0] ? ieee80211_rx_list+0x38ba/0x4450 [ 253.942764][ C0] ? ieee80211_rx_napi+0x1ad/0x3d0 [ 253.942803][ C0] ? ieee80211_handle_queued_frames+0xe4/0x1d0 [ 253.942838][ C0] ? tasklet_action_common+0x2d7/0x490 [ 253.942880][ C0] ? handle_softirqs+0x265/0x8d0 [ 253.942925][ C0] ? do_softirq+0x77/0xd0 [ 253.942964][ C0] ? __local_bh_enable_ip+0x100/0x140 [ 253.943003][ C0] ? wg_packet_tx_worker+0x596/0x7d0 [ 253.943039][ C0] ? process_scheduled_works+0xc3d/0x1630 [ 253.943082][ C0] ? worker_thread+0xa47/0xfb0 [ 253.943454][ C0] __kasan_record_aux_stack+0xc5/0xe0 [ 253.943493][ C0] ? __kfree_rcu_sheaf+0x21/0x690 [ 253.943543][ C0] __kfree_rcu_sheaf+0x136/0x690 [ 253.943582][ C0] ? trace_event_buffer_commit+0x258/0x7a0 [ 253.943659][ C0] kvfree_call_rcu+0x9c/0x440 [ 253.943753][ C0] cfg80211_update_known_bss+0x83a/0x1350 [ 253.943949][ C0] __cfg80211_bss_update+0x147/0x2060 [ 253.944025][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 253.944096][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 253.944139][ C0] ? __kmalloc_noprof+0x1a6/0x710 [ 253.944181][ C0] ? cfg80211_inform_single_bss_data+0x990/0x1be0 [ 253.944243][ C0] ? cfg80211_inform_single_bss_data+0xc31/0x1be0 [ 253.944319][ C0] cfg80211_inform_single_bss_data+0xc4a/0x1be0 [ 253.944452][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 253.944679][ C0] ? trace_event_raw_event_preemptirq_template+0x144/0x210 [ 253.944759][ C0] ? rb_event_length+0x148/0x400 [ 253.944809][ C0] ? cfg80211_inform_bss_data+0x248/0x3be0 [ 253.944911][ C0] cfg80211_inform_bss_data+0x25b/0x3be0 [ 253.945036][ C0] ? check_buffer+0x257/0x860 [ 253.945091][ C0] ? __pfx_trace_clock_local+0x10/0x10 [ 253.945203][ C0] ? __rb_reserve_next+0x79f/0xdd0 [ 253.945293][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 253.945409][ C0] ? rb_commit+0x787/0x7e0 [ 253.945559][ C0] ? ring_buffer_unlock_commit+0x51d/0x6c0 [ 253.945663][ C0] ? trace_buffer_unlock_commit_regs+0x156/0x520 [ 253.945701][ C0] ? ring_buffer_event_data+0x94/0x100 [ 253.945779][ C0] ? trace_event_buffer_commit+0x258/0x7a0 [ 253.945966][ C0] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 253.946119][ C0] cfg80211_inform_bss_frame_data+0x51a/0xae0 [ 253.946284][ C0] ieee80211_bss_info_update+0x772/0xa30 [ 253.946397][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 253.946452][ C0] ? __pfx_trace_event_raw_event_preemptirq_template+0x10/0x10 [ 253.946573][ C0] ? kcov_remote_start+0x9c/0x7e0 [ 253.946648][ C0] ? ieee80211_get_channel_khz+0x15b/0x8a0 [ 253.946721][ C0] ieee80211_scan_rx+0x552/0xa40 [ 253.946845][ C0] ieee80211_rx_list+0x38ba/0x4450 [ 253.947019][ C0] ? __lock_acquire+0x747/0x2de0 [ 253.947128][ C0] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 253.947319][ C0] ? lock_acquire+0x115/0x350 [ 253.947447][ C0] ? pv_queued_spin_unlock_traced+0x5a/0x1b0 [ 253.947526][ C0] ? ieee80211_rx_napi+0xd1/0x3d0 [ 253.947568][ C0] ieee80211_rx_napi+0x1ad/0x3d0 [ 253.947647][ C0] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 253.947711][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 253.947758][ C0] ? skb_dequeue+0x124/0x160 [ 253.947842][ C0] ieee80211_handle_queued_frames+0xe4/0x1d0 [ 253.947946][ C0] tasklet_action_common+0x2d7/0x490 [ 253.948057][ C0] handle_softirqs+0x265/0x8d0 [ 253.948198][ C0] ? wg_packet_tx_worker+0x25a/0x7d0 [ 253.948244][ C0] do_softirq+0x77/0xd0 [ 253.948289][ C0] [ 253.948300][ C0] [ 253.948317][ C0] __local_bh_enable_ip+0x100/0x140 [ 253.948364][ C0] ? wg_packet_tx_worker+0x25a/0x7d0 [ 253.948397][ C0] wg_packet_tx_worker+0x596/0x7d0 [ 253.948440][ C0] ? wg_packet_tx_worker+0x25a/0x7d0 [ 253.948487][ C0] ? rcu_is_watching+0x16/0xb0 [ 253.948560][ C0] ? process_scheduled_works+0x97a/0x1630 [ 253.948618][ C0] process_scheduled_works+0xc3d/0x1630 [ 253.948952][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 253.949065][ C0] ? assign_work+0x3cf/0x5d0 [ 253.949175][ C0] worker_thread+0xa47/0xfb0 [ 253.949342][ C0] ? __kthread_parkme+0x71/0x1f0 [ 253.949479][ C0] kthread+0x38b/0x480 [ 253.949534][ C0] ? __pfx_worker_thread+0x10/0x10 [ 253.949561][ C0] ? __pfx_kthread+0x10/0x10 [ 253.949627][ C0] ret_from_fork+0x514/0xb70 [ 253.949702][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 253.949753][ C0] ? __switch_to+0xc78/0x1410 [ 253.949828][ C0] ? __pfx_kthread+0x10/0x10 [ 253.949897][ C0] ret_from_fork_asm+0x1a/0x30 [ 253.950088][ C0] [ 255.093476][ T34] Kernel panic - not syncing: hung_task: blocked tasks [ 255.563100][ T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 255.572262][ T34] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 255.582366][ T34] Call Trace: [ 255.585771][ T34] [ 255.588837][ T34] vpanic+0x26f/0x710 [ 255.593161][ T34] panic+0xc5/0xd0 [ 255.596993][ T34] ? __pfx_panic+0x10/0x10 [ 255.601460][ T34] ? preempt_schedule_common+0x7f/0xd0 [ 255.607142][ T34] ? preempt_schedule_thunk+0x16/0x40 [ 255.612887][ T34] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 255.619241][ T34] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 255.625718][ T34] watchdog+0x10e7/0x10f0 [ 255.630683][ T34] ? watchdog+0x209/0x10f0 [ 255.635695][ T34] kthread+0x38b/0x480 [ 255.640054][ T34] ? __pfx_watchdog+0x10/0x10 [ 255.644763][ T34] ? __pfx_kthread+0x10/0x10 [ 255.649571][ T34] ret_from_fork+0x514/0xb70 [ 255.654551][ T34] ? __pfx_ret_from_fork+0x10/0x10 [ 255.659980][ T34] ? __switch_to+0xc78/0x1410 [ 255.664855][ T34] ? __pfx_kthread+0x10/0x10 [ 255.669723][ T34] ret_from_fork_asm+0x1a/0x30 [ 255.675579][ T34] [ 255.679228][ T34] Kernel Offset: disabled [ 255.683663][ T34] Rebooting in 86400 seconds..