last executing test programs: 3.201475412s ago: executing program 2 (id=2): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2007, &(0x7f0000000980)=0x0) r2 = eventfd2(0x39, 0x80000) io_pgetevents(r1, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000300)={0x1802, 0x0, 0x0, 0x5, 0x88, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) io_destroy(r1) 3.172040277s ago: executing program 3 (id=3): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/mass_storage.0/lun.1\x00', 0x1ff) rmdir(&(0x7f0000000200)='./config/usb_gadget/g1/functions/mass_storage.0/lun.1\x00') fsetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000080)=':\x00', 0x2, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) gettid() mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 2.892959322s ago: executing program 2 (id=5): mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, 0x0) symlinkat(&(0x7f0000001b00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001c00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) symlinkat(&(0x7f0000001e00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001f00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) 2.850198293s ago: executing program 2 (id=8): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102384, 0x18ff0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000004400010029bd70000400000002000000043f3ffe00010000427d5fd7db25b5f59166afa517a46f282035f99263f5005f5af5faf8ca73a8e878ea117144c673ecb951"], 0x18}, 0x1, 0x0, 0x0, 0x200048d5}, 0x4008094) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x21) r5 = dup(r4) ioctl$KVM_CHECK_EXTENSION_VM(r5, 0xae03, 0x81) r6 = add_key(&(0x7f0000001340)='keyring\x00', &(0x7f0000000440)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000000c0)='source', 0x0, r2) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_int(r7, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) sendmmsg$inet(r7, &(0x7f0000004840)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000100)='f', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f00000025c0)='y', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002800)="c9547a", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000002c00)="18ab", 0x2}], 0x1}}], 0x4, 0x40480c0) close_range(r7, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 2.340631284s ago: executing program 1 (id=10): socket$packet(0x11, 0x3, 0x300) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x5, 0xe, 0x0, &(0x7f0000000380)="2eb33d2ab87cded491710d000000", 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3c) 2.337254139s ago: executing program 0 (id=11): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x4, 0x4, 0x4}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfa, {0x0, 0x0, 0x0, r5, {0xe, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r2, 0x0, 0x8804) 2.18337212s ago: executing program 1 (id=12): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 2.001629208s ago: executing program 1 (id=13): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00', 0x32a}) write$sndseq(r3, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) 864.041934ms ago: executing program 0 (id=14): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$RTC_AIE_OFF(r0, 0x7002) 853.862405ms ago: executing program 2 (id=22): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x4, 0x4, 0x4}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfa, {0x0, 0x0, 0x0, r5, {0xe, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="ac", 0x1}], 0x1}, 0x8804) 581.083507ms ago: executing program 3 (id=15): mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, 0x0) symlinkat(&(0x7f0000001b00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001c00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) symlinkat(&(0x7f0000001e00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001f00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) 579.385117ms ago: executing program 0 (id=24): socket$packet(0x11, 0x3, 0x300) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x5, 0xe, 0x0, &(0x7f0000000380)="2eb33d2ab87cded491710d000000", 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3c) 515.703929ms ago: executing program 0 (id=16): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0x7}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK={0x8}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @rand_addr=0x64010101}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) 491.450537ms ago: executing program 1 (id=26): socket$packet(0x11, 0x3, 0x300) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x5, 0xe, 0x0, &(0x7f0000000380)="2eb33d2ab87cded491710d000000", 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3c) 274.634914ms ago: executing program 3 (id=17): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x103, 0xb, 0x6, 0xff}, 0x3a, [0x9, 0xc95a, 0xf, 0x8, 0x80, 0x8, 0x3, 0x10007e, 0x20000006, 0x53, 0x6, 0x10000, 0x80005, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x6, 0x7, 0xfffffff4, 0x4, 0x7, 0x6, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x10001, 0x5, 0x6, 0x6, 0x5, 0x1, 0x5], [0x10000007, 0x9, 0x80000130, 0x8, 0x5, 0xfffffff3, 0x2, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x3, 0x0, 0x5, 0x42f, 0x0, 0x312, 0x78, 0x1, 0x0, 0x1, 0x7, 0x3, 0x6, 0x804400, 0x401, 0x6, 0x1, 0xfc, 0x5, 0x1000005, 0x5f31, 0xd, 0x40000101, 0x1, 0x4, 0xffff80f1, 0x8, 0x6, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x400, 0x3, 0x3, 0xbc45, 0x48c93694, 0xa74, 0x9], [0x7, 0xa, 0x0, 0x5, 0x1, 0x100, 0x9, 0xb42a, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x5, 0x8, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x200000, 0x2, 0x6d03, 0x6, 0xd, 0x800003, 0x200, 0x400080, 0x3, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x6d, 0x7, 0x0, 0x2, 0x21c, 0x120000, 0x6, 0x0, 0x80aaed, 0x4, 0x24], [0x9, 0x40bb33, 0x7ffffffd, 0xb, 0x5, 0x93a, 0x9, 0x1000006, 0x100, 0xb9, 0xce4, 0x1ff, 0x2, 0x54, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x1000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0xfffffffd, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x100, 0x21000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc7, 0x200, 0xffff2441, 0xfff]}, 0x45c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000080)=""/1, 0x1) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r4 = fsmount(r3, 0x1, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) write$sysctl(r4, &(0x7f0000000040)='2\x00', 0x2) openat$sndseq(0xffffff9c, &(0x7f0000000140), 0x400) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) munlockall() r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 272.853877ms ago: executing program 0 (id=28): socket$packet(0x11, 0x3, 0x300) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x5, 0xe, 0x0, &(0x7f0000000380)="2eb33d2ab87cded491710d000000", 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3c) 267.162154ms ago: executing program 1 (id=18): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1df) mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='myproc\x00', 0x0, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000500), 0xfa0) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x58) openat(0xffffffffffffff9c, &(0x7f00000001c0)='myproc\x00', 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000180)='Mid', 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='2\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='2', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='dummy_udc.0\n', 0xc) 222.211685ms ago: executing program 3 (id=19): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) write$binfmt_aout(r0, 0x0, 0xff2e) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) msgsnd(0x0, &(0x7f0000000280)=ANY=[], 0x24, 0x800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778625d52}, 0x4) 136.636717ms ago: executing program 0 (id=20): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xffff) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x8000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) write(r1, &(0x7f00000001c0)="6f66660a0003", 0x6) write(r1, &(0x7f0000000180)='on', 0x2) 135.21992ms ago: executing program 1 (id=21): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x7fffffff, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4040840) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x3}, @TCA_TBF_PARMS={0x28, 0x1, {{0x16, 0x0, 0x2, 0x3ff, 0x8, 0x2}, {0x7, 0x2, 0x5ec, 0x1, 0xad, 0x200}, 0x8, 0x8000, 0xb9f}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000300)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200", 0x4}], 0x1}, 0x0) 131.87176ms ago: executing program 3 (id=32): socket$packet(0x11, 0x3, 0x300) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x5, 0xe, 0x0, &(0x7f0000000380)="2eb33d2ab87cded491710d000000", 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3c) 6.281837ms ago: executing program 2 (id=23): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socket(0x10, 0x3, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x0, 0x1}, {}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0x3f8, 0x0, 0x0, 0x2004cb, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0x9, 0x2000000000003ff, 0x2], 0x2000, 0x200206}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 3 (id=35): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, 0x0, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:26467' (ED25519) to the list of known hosts. [ 42.234144][ T5713] cgroup: Unknown subsys name 'net' [ 42.376426][ T5713] cgroup: Unknown subsys name 'cpuset' [ 42.380194][ T5713] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 43.356897][ T5713] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.061132][ T5749] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.063158][ T5745] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.064832][ T5741] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.065005][ T5749] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.065442][ T5749] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.067120][ T5751] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.068029][ T5749] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.068413][ T5749] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.068556][ T5745] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.070467][ T5741] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.071823][ T5741] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.073414][ T5751] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.074056][ T5745] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.074621][ T5745] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.074953][ T5745] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.076639][ T5741] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.078348][ T5751] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.080246][ T5741] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.083430][ T5744] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.108439][ T5744] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.654255][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.657255][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.659809][ T5737] bridge_slave_0: entered allmulticast mode [ 47.662462][ T5737] bridge_slave_0: entered promiscuous mode [ 47.718028][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.720255][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.722468][ T5737] bridge_slave_1: entered allmulticast mode [ 47.725234][ T5737] bridge_slave_1: entered promiscuous mode [ 47.785881][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.796064][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.811331][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.814045][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.816439][ T5733] bridge_slave_0: entered allmulticast mode [ 47.819353][ T5733] bridge_slave_0: entered promiscuous mode [ 47.822715][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.825337][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.828044][ T5733] bridge_slave_1: entered allmulticast mode [ 47.831595][ T5733] bridge_slave_1: entered promiscuous mode [ 47.839708][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.842431][ T5734] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.845102][ T5734] bridge_slave_0: entered allmulticast mode [ 47.848248][ T5734] bridge_slave_0: entered promiscuous mode [ 47.852453][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.855234][ T5735] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.857900][ T5735] bridge_slave_0: entered allmulticast mode [ 47.860737][ T5735] bridge_slave_0: entered promiscuous mode [ 47.870163][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.873016][ T5735] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.876116][ T5735] bridge_slave_1: entered allmulticast mode [ 47.879049][ T5735] bridge_slave_1: entered promiscuous mode [ 47.889238][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.892114][ T5734] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.894414][ T5734] bridge_slave_1: entered allmulticast mode [ 47.896989][ T5734] bridge_slave_1: entered promiscuous mode [ 47.918696][ T5737] team0: Port device team_slave_0 added [ 47.921719][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.933279][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.942596][ T5737] team0: Port device team_slave_1 added [ 47.950942][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.961488][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.965467][ T5735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.984942][ T5735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.988258][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.990457][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.998265][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.003495][ T5733] team0: Port device team_slave_0 added [ 48.018528][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.020773][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.028799][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.033976][ T5733] team0: Port device team_slave_1 added [ 48.036812][ T5734] team0: Port device team_slave_0 added [ 48.044958][ T5734] team0: Port device team_slave_1 added [ 48.066491][ T5735] team0: Port device team_slave_0 added [ 48.070893][ T5735] team0: Port device team_slave_1 added [ 48.078542][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.080684][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.089423][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.107184][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.109370][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.118021][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.122342][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.124522][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.132338][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.150570][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.152845][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.161231][ T5735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.165336][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.168424][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.176836][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.188366][ T5737] hsr_slave_0: entered promiscuous mode [ 48.190955][ T5737] hsr_slave_1: entered promiscuous mode [ 48.194489][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.196700][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.204762][ T5735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.249761][ T5734] hsr_slave_0: entered promiscuous mode [ 48.251981][ T5734] hsr_slave_1: entered promiscuous mode [ 48.254361][ T5734] debugfs: 'hsr0' already exists in 'hsr' [ 48.256281][ T5734] Cannot create hsr debugfs directory [ 48.261369][ T5733] hsr_slave_0: entered promiscuous mode [ 48.264310][ T5733] hsr_slave_1: entered promiscuous mode [ 48.266411][ T5733] debugfs: 'hsr0' already exists in 'hsr' [ 48.268198][ T5733] Cannot create hsr debugfs directory [ 48.313709][ T5735] hsr_slave_0: entered promiscuous mode [ 48.316806][ T5735] hsr_slave_1: entered promiscuous mode [ 48.319611][ T5735] debugfs: 'hsr0' already exists in 'hsr' [ 48.322011][ T5735] Cannot create hsr debugfs directory [ 48.584256][ T5737] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.591011][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.594731][ T5737] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.598982][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.602758][ T5737] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.609191][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.628880][ T5737] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.635135][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.708482][ T5733] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.712955][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.716264][ T5733] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.719988][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.722625][ T5733] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.735260][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.739487][ T5733] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.744756][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.797345][ T5735] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.802175][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.812594][ T5735] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.817736][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.829825][ T5735] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.833845][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.836645][ T5735] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.840762][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.886022][ T5734] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.890145][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.892746][ T5734] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.897158][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.900532][ T5734] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.905581][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.908404][ T5734] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.912002][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.936463][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.951214][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.965584][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.981892][ T5737] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.987371][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.990408][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.998804][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.001793][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.018063][ T233] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.020384][ T233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.031380][ T233] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.033941][ T233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.066858][ T5735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.099173][ T5735] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.108125][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.116345][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.118878][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.124486][ T5748] Bluetooth: hci2: command tx timeout [ 49.124558][ T5744] Bluetooth: hci1: command tx timeout [ 49.127222][ T5748] Bluetooth: hci3: command tx timeout [ 49.129504][ T5744] Bluetooth: hci0: command tx timeout [ 49.130502][ T5734] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.135634][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.138025][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.150696][ T233] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.153066][ T233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.167070][ T233] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.170018][ T233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.392102][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.412176][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.442864][ T5733] veth0_vlan: entered promiscuous mode [ 49.449720][ T5733] veth1_vlan: entered promiscuous mode [ 49.479207][ T5737] veth0_vlan: entered promiscuous mode [ 49.492866][ T5737] veth1_vlan: entered promiscuous mode [ 49.497070][ T5735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.503099][ T5733] veth0_macvtap: entered promiscuous mode [ 49.510488][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.517973][ T5733] veth1_macvtap: entered promiscuous mode [ 49.543882][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.551592][ T5737] veth0_macvtap: entered promiscuous mode [ 49.556712][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.570911][ T5737] veth1_macvtap: entered promiscuous mode [ 49.596180][ T5735] veth0_vlan: entered promiscuous mode [ 49.606869][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.617464][ T5734] veth0_vlan: entered promiscuous mode [ 49.625077][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.633921][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.649621][ T5734] veth1_vlan: entered promiscuous mode [ 49.654054][ T5735] veth1_vlan: entered promiscuous mode [ 49.720972][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.724233][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.728436][ T5735] veth0_macvtap: entered promiscuous mode [ 49.737973][ T5734] veth0_macvtap: entered promiscuous mode [ 49.746313][ T5735] veth1_macvtap: entered promiscuous mode [ 49.751548][ T5734] veth1_macvtap: entered promiscuous mode [ 49.759063][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.761617][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.783028][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.784711][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.785754][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.786125][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.786141][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.801782][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.806192][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.817204][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.846952][ T5733] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.854268][ T5814] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.868162][ T5737] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.876555][ T5737] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.892668][ T5737] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.909038][ T5733] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.947744][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.950766][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.979780][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.986574][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.011780][ T233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.014375][ T233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.025555][ T233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.028516][ T233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.043940][ T5814] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.048058][ T5814] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.063827][ T5787] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.072067][ T5787] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.097396][ T5814] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.107510][ T5814] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.133834][ T5787] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.139075][ T5787] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.145541][ T5787] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.151665][ T5787] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.156954][ T5787] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.161825][ T5787] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.168242][ T5787] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.195137][ T5814] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.921310][ T5907] Mass Storage Function, version: 2009/09/11 [ 50.925636][ T5918] syzkaller0: entered promiscuous mode [ 50.933287][ T5907] LUN: removable file: (no medium) [ 50.936554][ T5918] syzkaller0: entered allmulticast mode [ 50.976065][ T5907] LUN: removable file: (no medium) [ 51.203770][ T5744] Bluetooth: hci0: command tx timeout [ 51.203803][ T5095] Bluetooth: hci1: command tx timeout [ 51.205519][ T5744] Bluetooth: hci2: command tx timeout [ 51.209497][ T5748] Bluetooth: hci3: command tx timeout [ 52.318806][ T5928] syzkaller0: entered promiscuous mode [ 52.320579][ T5928] syzkaller0: entered allmulticast mode [ 52.921243][ T5940] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 52.934720][ T5940] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 52.938072][ T5940] udc dummy_udc.0: failed to start g1: -22 [ 52.943658][ T5940] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 52.952602][ T5940] UDC core: g1: couldn't find an available UDC or it's busy [ 53.038811][ T5951] syzkaller0: entered promiscuous mode [ 53.040726][ T5951] syzkaller0: entered allmulticast mode [ 53.044154][ T5951] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 53.088589][ T5952] smpboot: CPU 1 is now offline [ 53.200962][ T5952] smpboot: CPU 3 is now offline [ 53.215752][ T5748] Bluetooth: hci0: command tx timeout [ 53.218157][ T5748] Bluetooth: hci2: command tx timeout [ 53.220409][ T5095] Bluetooth: hci1: command tx timeout [ 53.222538][ T5095] Bluetooth: hci3: command tx timeout [ 53.294183][ T5953] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 53.330700][ T5892] ------------[ cut here ]------------ [ 53.331067][ T5892] [ 53.331072][ T5892] ====================================================== [ 53.331087][ T5892] WARNING: possible circular locking dependency detected [ 53.331094][ T5892] syzkaller #0 Tainted: G L [ 53.331099][ T5892] ------------------------------------------------------ [ 53.331102][ T5892] syz.3.3/5892 is trying to acquire lock: [ 53.331108][ T5892] ffffffff8eaf3f60 (console_owner){....}-{0:0}, at: console_lock_spinning_enable+0x61/0x80 [ 53.331146][ T5892] [ 53.331146][ T5892] but task is already holding lock: [ 53.331149][ T5892] ffff88802b23b660 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 53.331173][ T5892] [ 53.331173][ T5892] which lock already depends on the new lock. [ 53.331173][ T5892] [ 53.331176][ T5892] [ 53.331176][ T5892] the existing dependency chain (in reverse order) is: [ 53.331180][ T5892] [ 53.331180][ T5892] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 53.331194][ T5892] lock_acquire+0x1b9/0x370 [ 53.331211][ T5892] _raw_spin_lock_nested+0x31/0x40 [ 53.331223][ T5892] raw_spin_rq_lock_nested+0x2c/0x140 [ 53.331234][ T5892] _task_rq_lock+0xcf/0x500 [ 53.331244][ T5892] cgroup_move_task+0x81/0x320 [ 53.331258][ T5892] css_set_move_task+0x285/0x600 [ 53.331268][ T5892] cgroup_post_fork+0x1f9/0x9a0 [ 53.331283][ T5892] copy_process+0x6b7a/0x8030 [ 53.331296][ T5892] kernel_clone+0x176/0x9d0 [ 53.331308][ T5892] user_mode_thread+0xcc/0x110 [ 53.331320][ T5892] rest_init+0x21/0x260 [ 53.331328][ T5892] start_kernel+0x48e/0x490 [ 53.331344][ T5892] x86_64_start_reservations+0x24/0x30 [ 53.331361][ T5892] x86_64_start_kernel+0x12b/0x130 [ 53.331377][ T5892] common_startup_64+0x13e/0x158 [ 53.331397][ T5892] [ 53.331397][ T5892] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 53.331410][ T5892] lock_acquire+0x1b9/0x370 [ 53.331430][ T5892] _raw_spin_lock_irqsave+0x3a/0x60 [ 53.331442][ T5892] try_to_wake_up+0xbd/0x1c90 [ 53.331452][ T5892] __wake_up_common+0x135/0x1f0 [ 53.331468][ T5892] __wake_up+0x31/0x60 [ 53.331482][ T5892] tty_port_default_wakeup+0x47/0x60 [ 53.331498][ T5892] serial8250_tx_chars+0x68f/0x860 [ 53.331513][ T5892] serial8250_handle_irq_locked+0x770/0x9a0 [ 53.331528][ T5892] serial8250_handle_irq.part.0+0xb4/0x530 [ 53.331544][ T5892] serial8250_default_handle_irq+0xc2/0x280 [ 53.331560][ T5892] serial8250_interrupt+0xf8/0x1b0 [ 53.331569][ T5892] __handle_irq_event_percpu+0x232/0x880 [ 53.331582][ T5892] handle_irq_event+0xab/0x1e0 [ 53.331594][ T5892] handle_edge_irq+0x34c/0x950 [ 53.331605][ T5892] __common_interrupt+0xd8/0x2f0 [ 53.331616][ T5892] common_interrupt+0xb9/0xe0 [ 53.331625][ T5892] asm_common_interrupt+0x26/0x40 [ 53.331636][ T5892] pv_native_safe_halt+0xf/0x20 [ 53.331650][ T5892] default_idle+0x9/0x10 [ 53.331665][ T5892] default_idle_call+0x6c/0xb0 [ 53.331680][ T5892] do_idle+0x3a7/0x5b0 [ 53.331692][ T5892] cpu_startup_entry+0x4f/0x60 [ 53.331703][ T5892] start_secondary+0x21d/0x2d0 [ 53.331714][ T5892] common_startup_64+0x13e/0x158 [ 53.331729][ T5892] [ 53.331729][ T5892] -> #2 (&tty->write_wait){-...}-{3:3}: [ 53.331742][ T5892] lock_acquire+0x1b9/0x370 [ 53.331758][ T5892] _raw_spin_lock_irqsave+0x3a/0x60 [ 53.331770][ T5892] __wake_up+0x1c/0x60 [ 53.331783][ T5892] tty_port_default_wakeup+0x47/0x60 [ 53.331797][ T5892] serial8250_tx_chars+0x68f/0x860 [ 53.331812][ T5892] __start_tx+0x3e4/0x490 [ 53.331825][ T5892] serial8250_start_tx+0x368/0x540 [ 53.331840][ T5892] __uart_start+0x295/0x510 [ 53.331851][ T5892] uart_write+0x211/0xb20 [ 53.331865][ T5892] n_tty_write+0x431/0x1160 [ 53.331873][ T5892] file_tty_write.isra.0+0x4d2/0x890 [ 53.331887][ T5892] redirected_tty_write+0xd4/0x120 [ 53.331900][ T5892] vfs_write+0x6ac/0x1050 [ 53.331909][ T5892] ksys_write+0x12a/0x250 [ 53.331918][ T5892] do_syscall_64+0x115/0x840 [ 53.331931][ T5892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.331941][ T5892] [ 53.331941][ T5892] -> #1 (&port_lock_key){-...}-{3:3}: [ 53.331955][ T5892] lock_acquire+0x1b9/0x370 [ 53.331984][ T5892] _raw_spin_lock_irqsave+0x3a/0x60 [ 53.331996][ T5892] serial8250_console_write+0x177/0x1a50 [ 53.332016][ T5892] console_flush_one_record+0x790/0xe50 [ 53.332028][ T5892] console_unlock+0x103/0x260 [ 53.332039][ T5892] vprintk_emit+0x407/0x6b0 [ 53.332051][ T5892] _printk+0xcf/0x110 [ 53.332060][ T5892] register_console.cold+0xc0/0x248 [ 53.332071][ T5892] univ8250_console_init+0x6f/0x80 [ 53.332084][ T5892] console_init+0x3d5/0x5b0 [ 53.332096][ T5892] start_kernel+0x314/0x490 [ 53.332110][ T5892] x86_64_start_reservations+0x24/0x30 [ 53.332130][ T5892] x86_64_start_kernel+0x12b/0x130 [ 53.332146][ T5892] common_startup_64+0x13e/0x158 [ 53.332161][ T5892] [ 53.332161][ T5892] -> #0 (console_owner){....}-{0:0}: [ 53.332173][ T5892] check_prev_add+0xeb/0xe60 [ 53.332189][ T5892] __lock_acquire+0x136c/0x1a40 [ 53.332204][ T5892] lock_acquire+0x1b9/0x370 [ 53.332220][ T5892] console_lock_spinning_enable+0x72/0x80 [ 53.332232][ T5892] console_flush_one_record+0x739/0xe50 [ 53.332244][ T5892] console_unlock+0x103/0x260 [ 53.332255][ T5892] vprintk_emit+0x407/0x6b0 [ 53.332267][ T5892] _printk+0xcf/0x110 [ 53.332275][ T5892] __report_bug.cold+0x34/0x141 [ 53.332286][ T5892] report_bug+0xb2/0x220 [ 53.332300][ T5892] handle_bug+0x16a/0x2a0 [ 53.332315][ T5892] exc_invalid_op+0x17/0x50 [ 53.332331][ T5892] asm_exc_invalid_op+0x1a/0x20 [ 53.332340][ T5892] update_rq_clock+0x40a/0xd20 [ 53.332351][ T5892] __schedule+0x1e2d/0x6730 [ 53.332362][ T5892] preempt_schedule_irq+0x50/0x90 [ 53.332375][ T5892] irqentry_exit+0x205/0xa00 [ 53.332389][ T5892] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 53.332400][ T5892] lock_acquire+0x5e/0x370 [ 53.332415][ T5892] unwind_next_frame+0xd1/0x2090 [ 53.332431][ T5892] arch_stack_walk+0x94/0xf0 [ 53.332447][ T5892] stack_trace_save+0x8e/0xc0 [ 53.332461][ T5892] save_stack+0x162/0x1e0 [ 53.332475][ T5892] __reset_page_owner+0x84/0x190 [ 53.332489][ T5892] free_unref_folios+0xa44/0x1710 [ 53.332500][ T5892] folios_put_refs+0x585/0xaa0 [ 53.332510][ T5892] shmem_undo_range+0x5e5/0x1570 [ 53.332521][ T5892] shmem_evict_inode+0x3a5/0xbe0 [ 53.332532][ T5892] evict+0x3c2/0xad0 [ 53.332544][ T5892] iput.part.0+0x989/0x1050 [ 53.332556][ T5892] iput+0x35/0x40 [ 53.332567][ T5892] dentry_unlink_inode+0x284/0x470 [ 53.332579][ T5892] dentry_kill+0x25d/0xc20 [ 53.332592][ T5892] dput.part.0+0xd7/0x240 [ 53.332604][ T5892] dput+0x1f/0x30 [ 53.332616][ T5892] __fput+0x519/0xb50 [ 53.332627][ T5892] task_work_run+0x150/0x240 [ 53.332643][ T5892] do_exit+0x951/0x2ae0 [ 53.332657][ T5892] do_group_exit+0xd5/0x2a0 [ 53.332670][ T5892] get_signal+0x1ec7/0x21e0 [ 53.332682][ T5892] arch_do_signal_or_restart+0x91/0x7a0 [ 53.332691][ T5892] irqentry_exit+0x402/0xa00 [ 53.332705][ T5892] asm_exc_page_fault+0x26/0x30 [ 53.332714][ T5892] [ 53.332714][ T5892] other info that might help us debug this: [ 53.332714][ T5892] [ 53.332717][ T5892] Chain exists of: [ 53.332717][ T5892] console_owner --> &p->pi_lock --> &rq->__lock [ 53.332717][ T5892] [ 53.332732][ T5892] Possible unsafe locking scenario: [ 53.332732][ T5892] [ 53.332735][ T5892] CPU0 CPU1 [ 53.332737][ T5892] ---- ---- [ 53.332740][ T5892] lock(&rq->__lock); [ 53.332746][ T5892] lock(&p->pi_lock); [ 53.332753][ T5892] lock(&rq->__lock); [ 53.332760][ T5892] lock(console_owner); [ 53.332766][ T5892] [ 53.332766][ T5892] *** DEADLOCK *** [ 53.332766][ T5892] [ 53.332768][ T5892] 4 locks held by syz.3.3/5892: [ 53.332778][ T5892] #0: ffffffff8ebe8000 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 53.332813][ T5892] #1: ffff88802b23b660 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 53.332843][ T5892] #2: ffffffff8ebd43a0 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x110 [ 53.332865][ T5892] #3: ffffffff8ebd4418 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfd/0xe50 [ 53.332891][ T5892] [ 53.332891][ T5892] stack backtrace: [ 53.332902][ T5892] CPU: 0 UID: 0 PID: 5892 Comm: syz.3.3 Tainted: G L syzkaller #0 PREEMPT(full) [ 53.332920][ T5892] Tainted: [L]=SOFTLOCKUP [ 53.332924][ T5892] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.332931][ T5892] Call Trace: [ 53.332935][ T5892] [ 53.332939][ T5892] dump_stack_lvl+0x100/0x190 [ 53.332950][ T5892] print_circular_bug.cold+0x178/0x1c7 [ 53.332972][ T5892] check_noncircular+0x146/0x160 [ 53.332989][ T5892] check_prev_add+0xeb/0xe60 [ 53.333006][ T5892] __lock_acquire+0x136c/0x1a40 [ 53.333025][ T5892] lock_acquire+0x1b9/0x370 [ 53.333041][ T5892] ? console_lock_spinning_enable+0x61/0x80 [ 53.333057][ T5892] ? console_lock_spinning_enable+0x4a/0x80 [ 53.333071][ T5892] console_lock_spinning_enable+0x72/0x80 [ 53.333083][ T5892] ? console_lock_spinning_enable+0x61/0x80 [ 53.333096][ T5892] console_flush_one_record+0x739/0xe50 [ 53.333110][ T5892] ? __pfx_console_flush_one_record+0x10/0x10 [ 53.333128][ T5892] ? is_printk_cpu_sync_owner+0x32/0x40 [ 53.333143][ T5892] console_unlock+0x103/0x260 [ 53.333156][ T5892] ? __pfx_console_unlock+0x10/0x10 [ 53.333169][ T5892] ? do_raw_spin_unlock+0x145/0x1e0 [ 53.333181][ T5892] ? _printk+0xcf/0x110 [ 53.333191][ T5892] vprintk_emit+0x407/0x6b0 [ 53.333204][ T5892] ? __pfx_vprintk_emit+0x10/0x10 [ 53.333216][ T5892] ? __lock_acquire+0x49f/0x1a40 [ 53.333234][ T5892] _printk+0xcf/0x110 [ 53.333243][ T5892] ? __pfx__printk+0x10/0x10 [ 53.333254][ T5892] ? __lock_acquire+0x49f/0x1a40 [ 53.333270][ T5892] ? __report_bug.cold+0x24/0x141 [ 53.333280][ T5892] ? __report_bug+0x2ab/0x440 [ 53.333295][ T5892] __report_bug.cold+0x34/0x141 [ 53.333305][ T5892] ? update_rq_clock+0x40a/0xd20 [ 53.333316][ T5892] ? __pfx___report_bug+0x10/0x10 [ 53.333332][ T5892] ? update_curr+0x71/0x540 [ 53.333341][ T5892] ? lock_acquire+0x1b9/0x370 [ 53.333358][ T5892] ? update_rq_clock+0x40a/0xd20 [ 53.333370][ T5892] report_bug+0xb2/0x220 [ 53.333384][ T5892] ? update_rq_clock+0x40a/0xd20 [ 53.333395][ T5892] handle_bug+0x16a/0x2a0 [ 53.333411][ T5892] exc_invalid_op+0x17/0x50 [ 53.333428][ T5892] asm_exc_invalid_op+0x1a/0x20 [ 53.333438][ T5892] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 53.333451][ T5892] Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 58 60 e5 09 a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00 [ 53.333461][ T5892] RSP: 0000:ffffc90006836bf0 EFLAGS: 00010046 [ 53.333476][ T5892] RAX: 0000000000000000 RBX: ffff88802b33b600 RCX: 0000000000000001 [ 53.333483][ T5892] RDX: 0000000000000046 RSI: ffffffff8e17c819 RDI: ffffffff8c3fe580 [ 53.333489][ T5892] RBP: ffffc90006836d98 R08: 0000000000000001 R09: 0000000000000001 [ 53.333495][ T5892] R10: ffffffff9121b7d7 R11: 0000000c6ac0c400 R12: ffffffff9121eb84 [ 53.333502][ T5892] R13: ffff88802b33c4e0 R14: ffff888025310000 R15: ffff88802b23c198 [ 53.333512][ T5892] __schedule+0x1e2d/0x6730 [ 53.333528][ T5892] ? __pfx___schedule+0x10/0x10 [ 53.333542][ T5892] ? rcu_is_watching+0x12/0xc0 [ 53.333555][ T5892] preempt_schedule_irq+0x50/0x90 [ 53.333569][ T5892] irqentry_exit+0x205/0xa00 [ 53.333588][ T5892] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 53.333600][ T5892] RIP: 0010:lock_acquire+0x5e/0x370 [ 53.333620][ T5892] Code: 05 fb 62 7d 12 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 86 5a 3c 0f 0f 82 ac 02 00 00 8b 35 2e 8e 3c 0f 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 9d 62 7d 12 0f 85 ec 02 00 00 48 83 c4 [ 53.333630][ T5892] RSP: 0000:ffffc90006836eb8 EFLAGS: 00000206 [ 53.333637][ T5892] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000000 [ 53.333644][ T5892] RDX: 0000000000000000 RSI: ffffffff8e17c819 RDI: ffffffff8c3fe580 [ 53.333650][ T5892] RBP: ffffffff8ebe8000 R08: 00000000ffffffff R09: 0000000000000007 [ 53.333656][ T5892] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 53.333662][ T5892] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 53.333671][ T5892] ? unwind_next_frame+0x3be/0x2090 [ 53.333687][ T5892] ? unwind_next_frame+0x3be/0x2090 [ 53.333706][ T5892] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 53.333722][ T5892] unwind_next_frame+0xd1/0x2090 [ 53.333737][ T5892] ? unwind_next_frame+0xbd/0x2090 [ 53.333753][ T5892] ? __fput+0x519/0xb50 [ 53.333765][ T5892] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 53.333781][ T5892] arch_stack_walk+0x94/0xf0 [ 53.333796][ T5892] ? __fput+0x519/0xb50 [ 53.333808][ T5892] stack_trace_save+0x8e/0xc0 [ 53.333823][ T5892] ? __pfx_stack_trace_save+0x10/0x10 [ 53.333838][ T5892] ? __lock_acquire+0x49f/0x1a40 [ 53.333855][ T5892] save_stack+0x162/0x1e0 [ 53.333868][ T5892] ? __pfx_save_stack+0x10/0x10 [ 53.333882][ T5892] ? free_unref_folios+0xa44/0x1710 [ 53.333893][ T5892] ? folios_put_refs+0x585/0xaa0 [ 53.333902][ T5892] ? shmem_undo_range+0x5e5/0x1570 [ 53.333913][ T5892] ? shmem_evict_inode+0x3a5/0xbe0 [ 53.333924][ T5892] ? evict+0x3c2/0xad0 [ 53.333936][ T5892] ? iput.part.0+0x989/0x1050 [ 53.333948][ T5892] ? iput+0x35/0x40 [ 53.333960][ T5892] ? dentry_unlink_inode+0x284/0x470 [ 53.333972][ T5892] ? dentry_kill+0x25d/0xc20 [ 53.333985][ T5892] ? dput.part.0+0xd7/0x240 [ 53.333998][ T5892] ? dput+0x1f/0x30 [ 53.334010][ T5892] ? __fput+0x519/0xb50 [ 53.334022][ T5892] ? page_ext_put+0x3e/0xd0 [ 53.334041][ T5892] __reset_page_owner+0x84/0x190 [ 53.334059][ T5892] free_unref_folios+0xa44/0x1710 [ 53.334071][ T5892] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 53.334086][ T5892] folios_put_refs+0x585/0xaa0 [ 53.334097][ T5892] ? __pfx_folios_put_refs+0x10/0x10 [ 53.334108][ T5892] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 53.334125][ T5892] shmem_undo_range+0x5e5/0x1570 [ 53.334138][ T5892] ? __pfx_shmem_undo_range+0x10/0x10 [ 53.334155][ T5892] ? __lock_acquire+0x49f/0x1a40 [ 53.334175][ T5892] ? find_held_lock+0x2b/0x80 [ 53.334188][ T5892] ? is_bpf_text_address+0x8a/0x1a0 [ 53.334204][ T5892] ? is_bpf_text_address+0x8a/0x1a0 [ 53.334220][ T5892] shmem_evict_inode+0x3a5/0xbe0 [ 53.334232][ T5892] ? inode_wait_for_writeback+0x171/0x390 [ 53.334250][ T5892] ? __pfx_shmem_evict_inode+0x10/0x10 [ 53.334262][ T5892] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 53.334279][ T5892] ? find_held_lock+0x2b/0x80 [ 53.334296][ T5892] ? evict+0x37e/0xad0 [ 53.334308][ T5892] ? evict+0x37e/0xad0 [ 53.334321][ T5892] ? __pfx_shmem_evict_inode+0x10/0x10 [ 53.334333][ T5892] evict+0x3c2/0xad0 [ 53.334345][ T5892] ? __pfx_evict+0x10/0x10 [ 53.334359][ T5892] ? iput.part.0+0x981/0x1050 [ 53.334373][ T5892] iput.part.0+0x989/0x1050 [ 53.334387][ T5892] iput+0x35/0x40 [ 53.334399][ T5892] dentry_unlink_inode+0x284/0x470 [ 53.334411][ T5892] dentry_kill+0x25d/0xc20 [ 53.334449][ T5892] dput.part.0+0xd7/0x240 [ 53.334463][ T5892] dput+0x1f/0x30 [ 53.334476][ T5892] __fput+0x519/0xb50 [ 53.334488][ T5892] ? _raw_spin_unlock_irq+0x23/0x50 [ 53.334501][ T5892] task_work_run+0x150/0x240 [ 53.334517][ T5892] ? __pfx_task_work_run+0x10/0x10 [ 53.334532][ T5892] ? do_raw_spin_unlock+0x145/0x1e0 [ 53.334545][ T5892] do_exit+0x951/0x2ae0 [ 53.334560][ T5892] ? __pfx_do_exit+0x10/0x10 [ 53.334574][ T5892] ? __pfx_proc_coredump_connector+0x10/0x10 [ 53.334588][ T5892] do_group_exit+0xd5/0x2a0 [ 53.334604][ T5892] get_signal+0x1ec7/0x21e0 [ 53.334617][ T5892] ? __pfx_get_signal+0x10/0x10 [ 53.334628][ T5892] ? __pfx_force_sig_fault+0x10/0x10 [ 53.334641][ T5892] arch_do_signal_or_restart+0x91/0x7a0 [ 53.334651][ T5892] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 53.334664][ T5892] irqentry_exit+0x402/0xa00 [ 53.334679][ T5892] asm_exc_page_fault+0x26/0x30 [ 53.334689][ T5892] RIP: 0023:0xf7fb6fec [ 53.334698][ T5892] Code: Unable to access opcode bytes at 0xf7fb6fc2. [ 53.334702][ T5892] RSP: 002b:00000000fffffe70 EFLAGS: 00010282 [ 53.334710][ T5892] RAX: 0000000000000000 RBX: 0000000000008000 RCX: 00000000fffffe70 [ 53.334716][ T5892] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 53.334722][ T5892] RBP: 00000000f54765ec R08: 0000000000000000 R09: 0000000000000000 [ 53.334728][ T5892] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 53.334734][ T5892] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 53.334743][ T5892] [ 53.839610][ T5892] debug_locks && !(lock_is_held(&(__rq_lockp(rq))->dep_map) != 0) [ 53.839622][ T5892] WARNING: kernel/sched/sched.h:1641 at update_rq_clock+0x40a/0xd20, CPU#0: syz.3.3/5892 [ 53.844675][ T5892] Modules linked in: [ 53.845829][ T5892] CPU: 0 UID: 0 PID: 5892 Comm: syz.3.3 Tainted: G L syzkaller #0 PREEMPT(full) [ 53.848848][ T5892] Tainted: [L]=SOFTLOCKUP [ 53.850221][ T5892] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.853244][ T5892] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 53.854905][ T5892] Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 58 60 e5 09 a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00 [ 53.860755][ T5892] RSP: 0000:ffffc90006836bf0 EFLAGS: 00010046 [ 53.862654][ T5892] RAX: 0000000000000000 RBX: ffff88802b33b600 RCX: 0000000000000001 [ 53.865111][ T5892] RDX: 0000000000000046 RSI: ffffffff8e17c819 RDI: ffffffff8c3fe580 [ 53.867575][ T5892] RBP: ffffc90006836d98 R08: 0000000000000001 R09: 0000000000000001 [ 53.870043][ T5892] R10: ffffffff9121b7d7 R11: 0000000c6ac0c400 R12: ffffffff9121eb84 [ 53.872522][ T5892] R13: ffff88802b33c4e0 R14: ffff888025310000 R15: ffff88802b23c198 [ 53.874999][ T5892] FS: 0000000000000000(0000) GS:ffff888096bf4000(0000) knlGS:0000000000000000 [ 53.877747][ T5892] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 53.879861][ T5892] CR2: 00000000f73e9f38 CR3: 000000005cce3000 CR4: 0000000000352ef0 [ 53.882367][ T5892] Call Trace: [ 53.883441][ T5892] [ 53.884381][ T5892] __schedule+0x1e2d/0x6730 [ 53.885841][ T5892] ? __pfx___schedule+0x10/0x10 [ 53.887439][ T5892] ? rcu_is_watching+0x12/0xc0 [ 53.888968][ T5892] preempt_schedule_irq+0x50/0x90 [ 53.890564][ T5892] irqentry_exit+0x205/0xa00 [ 53.891985][ T5892] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 53.893793][ T5892] RIP: 0010:lock_acquire+0x5e/0x370 [ 53.895387][ T5892] Code: 05 fb 62 7d 12 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 86 5a 3c 0f 0f 82 ac 02 00 00 8b 35 2e 8e 3c 0f 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 9d 62 7d 12 0f 85 ec 02 00 00 48 83 c4 [ 53.901195][ T5892] RSP: 0000:ffffc90006836eb8 EFLAGS: 00000206 [ 53.903034][ T5892] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000000 [ 53.905449][ T5892] RDX: 0000000000000000 RSI: ffffffff8e17c819 RDI: ffffffff8c3fe580 [ 53.907827][ T5892] RBP: ffffffff8ebe8000 R08: 00000000ffffffff R09: 0000000000000007 [ 53.910242][ T5892] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 53.912623][ T5892] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 53.915010][ T5892] ? unwind_next_frame+0x3be/0x2090 [ 53.916606][ T5892] ? unwind_next_frame+0x3be/0x2090 [ 53.918212][ T5892] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 53.920176][ T5892] unwind_next_frame+0xd1/0x2090 [ 53.921728][ T5892] ? unwind_next_frame+0xbd/0x2090 [ 53.923338][ T5892] ? __fput+0x519/0xb50 [ 53.924631][ T5892] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 53.926493][ T5892] arch_stack_walk+0x94/0xf0 [ 53.927906][ T5892] ? __fput+0x519/0xb50 [ 53.929236][ T5892] stack_trace_save+0x8e/0xc0 [ 53.930730][ T5892] ? __pfx_stack_trace_save+0x10/0x10 [ 53.932410][ T5892] ? __lock_acquire+0x49f/0x1a40 [ 53.933989][ T5892] save_stack+0x162/0x1e0 [ 53.935363][ T5892] ? __pfx_save_stack+0x10/0x10 [ 53.936889][ T5892] ? free_unref_folios+0xa44/0x1710 [ 53.938522][ T5892] ? folios_put_refs+0x585/0xaa0 [ 53.940097][ T5892] ? shmem_undo_range+0x5e5/0x1570 [ 53.941711][ T5892] ? shmem_evict_inode+0x3a5/0xbe0 [ 53.943307][ T5892] ? evict+0x3c2/0xad0 [ 53.944597][ T5892] ? iput.part.0+0x989/0x1050 [ 53.946081][ T5892] ? iput+0x35/0x40 [ 53.947300][ T5892] ? dentry_unlink_inode+0x284/0x470 [ 53.948960][ T5892] ? dentry_kill+0x25d/0xc20 [ 53.950485][ T5892] ? dput.part.0+0xd7/0x240 [ 53.951928][ T5892] ? dput+0x1f/0x30 [ 53.953143][ T5892] ? __fput+0x519/0xb50 [ 53.954468][ T5892] ? page_ext_put+0x3e/0xd0 [ 53.955908][ T5892] __reset_page_owner+0x84/0x190 [ 53.957469][ T5892] free_unref_folios+0xa44/0x1710 [ 53.959054][ T5892] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 53.960880][ T5892] folios_put_refs+0x585/0xaa0 [ 53.962386][ T5892] ? __pfx_folios_put_refs+0x10/0x10 [ 53.964040][ T5892] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 53.966014][ T5892] shmem_undo_range+0x5e5/0x1570 [ 53.967577][ T5892] ? __pfx_shmem_undo_range+0x10/0x10 [ 53.969304][ T5892] ? __lock_acquire+0x49f/0x1a40 [ 53.970881][ T5892] ? find_held_lock+0x2b/0x80 [ 53.972371][ T5892] ? is_bpf_text_address+0x8a/0x1a0 [ 53.974008][ T5892] ? is_bpf_text_address+0x8a/0x1a0 [ 53.975658][ T5892] shmem_evict_inode+0x3a5/0xbe0 [ 53.977214][ T5892] ? inode_wait_for_writeback+0x171/0x390 [ 53.979062][ T5892] ? __pfx_shmem_evict_inode+0x10/0x10 [ 53.980814][ T5892] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 53.982724][ T5892] ? find_held_lock+0x2b/0x80 [ 53.984227][ T5892] ? evict+0x37e/0xad0 [ 53.985517][ T5892] ? evict+0x37e/0xad0 [ 53.986810][ T5892] ? __pfx_shmem_evict_inode+0x10/0x10 [ 53.988521][ T5892] evict+0x3c2/0xad0 [ 53.989772][ T5892] ? __pfx_evict+0x10/0x10 [ 53.991192][ T5892] ? iput.part.0+0x981/0x1050 [ 53.992673][ T5892] iput.part.0+0x989/0x1050 [ 53.994109][ T5892] iput+0x35/0x40 [ 53.995281][ T5892] dentry_unlink_inode+0x284/0x470 [ 53.996883][ T5892] dentry_kill+0x25d/0xc20 [ 53.998295][ T5892] dput.part.0+0xd7/0x240 [ 53.999677][ T5892] dput+0x1f/0x30 [ 54.000877][ T5892] __fput+0x519/0xb50 [ 54.002160][ T5892] ? _raw_spin_unlock_irq+0x23/0x50 [ 54.003832][ T5892] task_work_run+0x150/0x240 [ 54.005299][ T5892] ? __pfx_task_work_run+0x10/0x10 [ 54.006917][ T5892] ? do_raw_spin_unlock+0x145/0x1e0 [ 54.008562][ T5892] do_exit+0x951/0x2ae0 [ 54.009909][ T5892] ? __pfx_do_exit+0x10/0x10 [ 54.011371][ T5892] ? __pfx_proc_coredump_connector+0x10/0x10 [ 54.013245][ T5892] do_group_exit+0xd5/0x2a0 [ 54.014685][ T5892] get_signal+0x1ec7/0x21e0 [ 54.016147][ T5892] ? __pfx_get_signal+0x10/0x10 [ 54.017681][ T5892] ? __pfx_force_sig_fault+0x10/0x10 [ 54.019470][ T5892] arch_do_signal_or_restart+0x91/0x7a0 [ 54.021219][ T5892] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 54.023212][ T5892] irqentry_exit+0x402/0xa00 [ 54.024715][ T5892] asm_exc_page_fault+0x26/0x30 [ 54.026230][ T5892] RIP: 0023:0xf7fb6fec [ 54.027492][ T5892] Code: Unable to access opcode bytes at 0xf7fb6fc2. [ 54.029535][ T5892] RSP: 002b:00000000fffffe70 EFLAGS: 00010282 [ 54.031471][ T5892] RAX: 0000000000000000 RBX: 0000000000008000 RCX: 00000000fffffe70 [ 54.034258][ T5892] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 54.036783][ T5892] RBP: 00000000f54765ec R08: 0000000000000000 R09: 0000000000000000 [ 54.039256][ T5892] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 54.041635][ T5892] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 54.044180][ T5892] [ 54.045140][ T5892] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 54.047433][ T5892] CPU: 0 UID: 0 PID: 5892 Comm: syz.3.3 Tainted: G L syzkaller #0 PREEMPT(full) [ 54.050659][ T5892] Tainted: [L]=SOFTLOCKUP [ 54.052035][ T5892] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.055259][ T5892] Call Trace: [ 54.056303][ T5892] [ 54.057236][ T5892] dump_stack_lvl+0x100/0x190 [ 54.058789][ T5892] vpanic+0x552/0x970 [ 54.060054][ T5892] ? __pfx_vpanic+0x10/0x10 [ 54.061450][ T5892] ? lock_release+0x24d/0x310 [ 54.063013][ T5892] panic+0xd1/0xe0 [ 54.064247][ T5892] ? __pfx_panic+0x10/0x10 [ 54.065625][ T5892] ? check_panic_on_warn+0x1f/0x90 [ 54.067239][ T5892] check_panic_on_warn.cold+0x19/0x34 [ 54.068999][ T5892] ? update_rq_clock+0x40a/0xd20 [ 54.070560][ T5892] __warn.cold+0x191/0x318 [ 54.072013][ T5892] __report_bug+0x30f/0x440 [ 54.073462][ T5892] ? update_rq_clock+0x40a/0xd20 [ 54.075102][ T5892] ? __pfx___report_bug+0x10/0x10 [ 54.076665][ T5892] ? update_curr+0x71/0x540 [ 54.078083][ T5892] ? lock_acquire+0x1b9/0x370 [ 54.079583][ T5892] ? update_rq_clock+0x40a/0xd20 [ 54.081193][ T5892] report_bug+0xb2/0x220 [ 54.082601][ T5892] ? update_rq_clock+0x40a/0xd20 [ 54.084133][ T5892] handle_bug+0x16a/0x2a0 [ 54.085484][ T5892] exc_invalid_op+0x17/0x50 [ 54.086990][ T5892] asm_exc_invalid_op+0x1a/0x20 [ 54.088587][ T5892] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 54.090322][ T5892] Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 58 60 e5 09 a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00 [ 54.096418][ T5892] RSP: 0000:ffffc90006836bf0 EFLAGS: 00010046 [ 54.098364][ T5892] RAX: 0000000000000000 RBX: ffff88802b33b600 RCX: 0000000000000001 [ 54.100911][ T5892] RDX: 0000000000000046 RSI: ffffffff8e17c819 RDI: ffffffff8c3fe580 [ 54.103424][ T5892] RBP: ffffc90006836d98 R08: 0000000000000001 R09: 0000000000000001 [ 54.105911][ T5892] R10: ffffffff9121b7d7 R11: 0000000c6ac0c400 R12: ffffffff9121eb84 [ 54.108396][ T5892] R13: ffff88802b33c4e0 R14: ffff888025310000 R15: ffff88802b23c198 [ 54.110972][ T5892] __schedule+0x1e2d/0x6730 [ 54.112452][ T5892] ? __pfx___schedule+0x10/0x10 [ 54.113981][ T5892] ? rcu_is_watching+0x12/0xc0 [ 54.115589][ T5892] preempt_schedule_irq+0x50/0x90 [ 54.117209][ T5892] irqentry_exit+0x205/0xa00 [ 54.118678][ T5892] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 54.120649][ T5892] RIP: 0010:lock_acquire+0x5e/0x370 [ 54.122355][ T5892] Code: 05 fb 62 7d 12 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 86 5a 3c 0f 0f 82 ac 02 00 00 8b 35 2e 8e 3c 0f 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 9d 62 7d 12 0f 85 ec 02 00 00 48 83 c4 [ 54.128414][ T5892] RSP: 0000:ffffc90006836eb8 EFLAGS: 00000206 [ 54.130307][ T5892] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000000 [ 54.132898][ T5892] RDX: 0000000000000000 RSI: ffffffff8e17c819 RDI: ffffffff8c3fe580 [ 54.135448][ T5892] RBP: ffffffff8ebe8000 R08: 00000000ffffffff R09: 0000000000000007 [ 54.137937][ T5892] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 54.140502][ T5892] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 54.143173][ T5892] ? unwind_next_frame+0x3be/0x2090 [ 54.145027][ T5892] ? unwind_next_frame+0x3be/0x2090 [ 54.147015][ T5892] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 54.149540][ T5892] unwind_next_frame+0xd1/0x2090 [ 54.151592][ T5892] ? unwind_next_frame+0xbd/0x2090 [ 54.153680][ T5892] ? __fput+0x519/0xb50 [ 54.155399][ T5892] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 54.157865][ T5892] arch_stack_walk+0x94/0xf0 [ 54.159739][ T5892] ? __fput+0x519/0xb50 [ 54.161408][ T5892] stack_trace_save+0x8e/0xc0 [ 54.163347][ T5892] ? __pfx_stack_trace_save+0x10/0x10 [ 54.165536][ T5892] ? __lock_acquire+0x49f/0x1a40 [ 54.167502][ T5892] save_stack+0x162/0x1e0 [ 54.169222][ T5892] ? __pfx_save_stack+0x10/0x10 [ 54.171197][ T5892] ? free_unref_folios+0xa44/0x1710 [ 54.173213][ T5892] ? folios_put_refs+0x585/0xaa0 [ 54.175286][ T5892] ? shmem_undo_range+0x5e5/0x1570 [ 54.177295][ T5892] ? shmem_evict_inode+0x3a5/0xbe0 [ 54.179348][ T5892] ? evict+0x3c2/0xad0 [ 54.180964][ T5892] ? iput.part.0+0x989/0x1050 [ 54.182820][ T5892] ? iput+0x35/0x40 [ 54.184349][ T5892] ? dentry_unlink_inode+0x284/0x470 [ 54.186386][ T5892] ? dentry_kill+0x25d/0xc20 [ 54.188227][ T5892] ? dput.part.0+0xd7/0x240 [ 54.190037][ T5892] ? dput+0x1f/0x30 [ 54.191579][ T5892] ? __fput+0x519/0xb50 [ 54.193218][ T5892] ? page_ext_put+0x3e/0xd0 [ 54.195046][ T5892] __reset_page_owner+0x84/0x190 [ 54.196990][ T5892] free_unref_folios+0xa44/0x1710 [ 54.198978][ T5892] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 54.201314][ T5892] folios_put_refs+0x585/0xaa0 [ 54.203168][ T5892] ? __pfx_folios_put_refs+0x10/0x10 [ 54.205200][ T5892] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 54.207648][ T5892] shmem_undo_range+0x5e5/0x1570 [ 54.209596][ T5892] ? __pfx_shmem_undo_range+0x10/0x10 [ 54.211753][ T5892] ? __lock_acquire+0x49f/0x1a40 [ 54.213711][ T5892] ? find_held_lock+0x2b/0x80 [ 54.215579][ T5892] ? is_bpf_text_address+0x8a/0x1a0 [ 54.217598][ T5892] ? is_bpf_text_address+0x8a/0x1a0 [ 54.219690][ T5892] shmem_evict_inode+0x3a5/0xbe0 [ 54.221645][ T5892] ? inode_wait_for_writeback+0x171/0x390 [ 54.223963][ T5892] ? __pfx_shmem_evict_inode+0x10/0x10 [ 54.226197][ T5892] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 54.228198][ T5892] ? find_held_lock+0x2b/0x80 [ 54.229716][ T5892] ? evict+0x37e/0xad0 [ 54.231029][ T5892] ? evict+0x37e/0xad0 [ 54.232347][ T5892] ? __pfx_shmem_evict_inode+0x10/0x10 [ 54.234063][ T5892] evict+0x3c2/0xad0 [ 54.235329][ T5892] ? __pfx_evict+0x10/0x10 [ 54.236745][ T5892] ? iput.part.0+0x981/0x1050 [ 54.238255][ T5892] iput.part.0+0x989/0x1050 [ 54.239745][ T5892] iput+0x35/0x40 [ 54.240919][ T5892] dentry_unlink_inode+0x284/0x470 [ 54.242544][ T5892] dentry_kill+0x25d/0xc20 [ 54.243960][ T5892] dput.part.0+0xd7/0x240 [ 54.245331][ T5892] dput+0x1f/0x30 [ 54.246514][ T5892] __fput+0x519/0xb50 [ 54.247788][ T5892] ? _raw_spin_unlock_irq+0x23/0x50 [ 54.249460][ T5892] task_work_run+0x150/0x240 [ 54.250933][ T5892] ? __pfx_task_work_run+0x10/0x10 [ 54.252552][ T5892] ? do_raw_spin_unlock+0x145/0x1e0 [ 54.254212][ T5892] do_exit+0x951/0x2ae0 [ 54.255580][ T5892] ? __pfx_do_exit+0x10/0x10 [ 54.257077][ T5892] ? __pfx_proc_coredump_connector+0x10/0x10 [ 54.258963][ T5892] do_group_exit+0xd5/0x2a0 [ 54.260411][ T5892] get_signal+0x1ec7/0x21e0 [ 54.261851][ T5892] ? __pfx_get_signal+0x10/0x10 [ 54.263394][ T5892] ? __pfx_force_sig_fault+0x10/0x10 [ 54.265053][ T5892] arch_do_signal_or_restart+0x91/0x7a0 [ 54.266793][ T5892] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 54.268724][ T5892] irqentry_exit+0x402/0xa00 [ 54.270223][ T5892] asm_exc_page_fault+0x26/0x30 [ 54.271761][ T5892] RIP: 0023:0xf7fb6fec [ 54.273048][ T5892] Code: Unable to access opcode bytes at 0xf7fb6fc2. [ 54.275132][ T5892] RSP: 002b:00000000fffffe70 EFLAGS: 00010282 [ 54.277034][ T5892] RAX: 0000000000000000 RBX: 0000000000008000 RCX: 00000000fffffe70 [ 54.279537][ T5892] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 54.282050][ T5892] RBP: 00000000f54765ec R08: 0000000000000000 R09: 0000000000000000 [ 54.284536][ T5892] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 54.287002][ T5892] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 54.289508][ T5892] [ 55.363093][ T5892] Shutting down cpus with NMI [ 55.365145][ T5892] Kernel Offset: disabled [ 55.366486][ T5892] Rebooting in 86400 seconds..