last executing test programs: 1m24.07807574s ago: executing program 1 (id=2): socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x68001, 0x3f00) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x2, 0xffff, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x0, 0x0, 0x0, 0xfdfffffb, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x2, 0xb}, {0xfffffffd, 0x0, 0x3}, {0x0, 0x80004, 0x10100, 0x3}], 0x10, 0x1}, 0x94) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000680)="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", 0x5e7}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x100085, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa99, 0x3}, 0x8500, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="9febbf0000000701001800000000000000eaffffff0b00000002000000000000000000000400"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000700000000000000008000009500000000000000ea25cbb6c99bdc60d8eb90e07c83b75ac6fd"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x30, &(0x7f0000000140), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a"], 0xfe33) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1a210, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) syz_clone(0x8001000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYRES16=r3], 0xfe33) 1m23.809335608s ago: executing program 0 (id=1): r0 = socket$kcm(0x2, 0x1000000000000005, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0x94040000}, 0x140, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003001100000000000000000000001c00000f00000000000f00fdffff0700", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f020c000000", @ANYRES32=0x0, @ANYBLOB="a00500000000000000000000240000000000000084000000070000009404000044100000000000000000000000000000000000001100000000000000000001160100"/76], 0x98}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0xc0e}, 0x38) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0xec, 0x5, 0x40, 0x5, 0x0, 0x7fffffff, 0xf2594, 0xd, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdbffbfff, 0x0, @perf_bp={0x0, 0xd}, 0xe401, 0x1, 0x7, 0x1, 0x81, 0x4, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x8000000a, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080)) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x101, 0x4}, 0x100208}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x34000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x10000, 0xc8, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x2e, &(0x7f0000000000)=r2, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg(r0, &(0x7f0000000700)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000580)}], 0x1, &(0x7f0000000600)=""/254, 0xfe}, 0x2122) r5 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r5, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) r6 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) r7 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r7, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x24000800) perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x2, 0x0, 0x0, 0x10000, 0x7ffffd, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0xc0189436, &(0x7f0000000440)={'veth1_to_team\x00', @random="7a5c27cebf6e"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xffffffffffffffae}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r9, &(0x7f00000001c0)="5e4c269c13282beca87546c433b04f78762abdc53d78249a5bbd78343d3a8359869aa954fb3f75fe4ca3af45059bca44f763244c94231341a39b81126dd9847b", &(0x7f0000000200)=""/194}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000004000000040000000a00000000000000330f563d6c9ee2e5fa40fe848f88b900e2d1c7b17256e22da7af4f9cd567f457201c34ff0100002880d300749e58412bcb47c7d84de2e1ad5d11ff01ebe0bdc098b5aea97820ae7d34919008409b297e524aaa", @ANYRES32=r9, @ANYBLOB='8\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000020000000500"/28], 0x50) 33.086546141s ago: executing program 32 (id=1): r0 = socket$kcm(0x2, 0x1000000000000005, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0x94040000}, 0x140, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003001100000000000000000000001c00000f00000000000f00fdffff0700", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f020c000000", @ANYRES32=0x0, @ANYBLOB="a00500000000000000000000240000000000000084000000070000009404000044100000000000000000000000000000000000001100000000000000000001160100"/76], 0x98}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0xc0e}, 0x38) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0xec, 0x5, 0x40, 0x5, 0x0, 0x7fffffff, 0xf2594, 0xd, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdbffbfff, 0x0, @perf_bp={0x0, 0xd}, 0xe401, 0x1, 0x7, 0x1, 0x81, 0x4, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x8000000a, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080)) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x101, 0x4}, 0x100208}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x34000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x10000, 0xc8, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x2e, &(0x7f0000000000)=r2, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg(r0, &(0x7f0000000700)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000580)}], 0x1, &(0x7f0000000600)=""/254, 0xfe}, 0x2122) r5 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r5, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) r6 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) r7 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r7, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x24000800) perf_event_open(&(0x7f0000000740)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x2, 0x0, 0x0, 0x10000, 0x7ffffd, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0xc0189436, &(0x7f0000000440)={'veth1_to_team\x00', @random="7a5c27cebf6e"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xffffffffffffffae}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r9, &(0x7f00000001c0)="5e4c269c13282beca87546c433b04f78762abdc53d78249a5bbd78343d3a8359869aa954fb3f75fe4ca3af45059bca44f763244c94231341a39b81126dd9847b", &(0x7f0000000200)=""/194}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000004000000040000000a00000000000000330f563d6c9ee2e5fa40fe848f88b900e2d1c7b17256e22da7af4f9cd567f457201c34ff0100002880d300749e58412bcb47c7d84de2e1ad5d11ff01ebe0bdc098b5aea97820ae7d34919008409b297e524aaa", @ANYRES32=r9, @ANYBLOB='8\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000020000000500"/28], 0x50) 0s ago: executing program 33 (id=2): socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x68001, 0x3f00) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x2, 0xffff, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x0, 0x0, 0x0, 0xfdfffffb, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x2, 0xb}, {0xfffffffd, 0x0, 0x3}, {0x0, 0x80004, 0x10100, 0x3}], 0x10, 0x1}, 0x94) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000680)="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", 0x5e7}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x100085, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa99, 0x3}, 0x8500, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="9febbf0000000701001800000000000000eaffffff0b00000002000000000000000000000400"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000700000000000000008000009500000000000000ea25cbb6c99bdc60d8eb90e07c83b75ac6fd"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x30, &(0x7f0000000140), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a"], 0xfe33) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1a210, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) syz_clone(0x8001000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYRES16=r3], 0xfe33) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.10' (ED25519) to the list of known hosts. [ 76.249130][ T5765] cgroup: Unknown subsys name 'net' [ 76.385057][ T5765] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.812593][ T5765] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.740850][ T5779] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.747707][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.759214][ T5783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.760279][ T5779] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.771370][ T5783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.784751][ T5779] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.787318][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.794768][ T5779] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.805457][ T5783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 79.822266][ T5779] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.833546][ T5779] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 79.843541][ T5779] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.849520][ T5086] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.863555][ T5086] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.876267][ T5086] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.906579][ T5086] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.919923][ T5086] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 79.928562][ T5086] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.993952][ T5086] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.005591][ T5086] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.017572][ T5086] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.029311][ T5086] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.039157][ T5086] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 80.048927][ T5086] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.344393][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 80.374740][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 80.527674][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.535815][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.544502][ T5777] bridge_slave_0: entered allmulticast mode [ 80.553056][ T5777] bridge_slave_0: entered promiscuous mode [ 80.561751][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.573376][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.581523][ T5776] bridge_slave_0: entered allmulticast mode [ 80.590571][ T5776] bridge_slave_0: entered promiscuous mode [ 80.603564][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.611715][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.619242][ T5776] bridge_slave_1: entered allmulticast mode [ 80.626362][ T5776] bridge_slave_1: entered promiscuous mode [ 80.640686][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.648519][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.657721][ T5777] bridge_slave_1: entered allmulticast mode [ 80.665007][ T5777] bridge_slave_1: entered promiscuous mode [ 80.709033][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.740086][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.770436][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.784014][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.826001][ T5776] team0: Port device team_slave_0 added [ 80.833111][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 80.854533][ T5776] team0: Port device team_slave_1 added [ 80.903191][ T5777] team0: Port device team_slave_0 added [ 80.940659][ T5777] team0: Port device team_slave_1 added [ 80.950514][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.961152][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.990625][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.007609][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.014973][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.041851][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.066365][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 81.135650][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.142981][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.170025][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.203655][ T5776] hsr_slave_0: entered promiscuous mode [ 81.211052][ T5776] hsr_slave_1: entered promiscuous mode [ 81.228407][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.235504][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.265172][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.282693][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.293067][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.302033][ T5784] bridge_slave_0: entered allmulticast mode [ 81.311468][ T5784] bridge_slave_0: entered promiscuous mode [ 81.325490][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.333133][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.341773][ T5784] bridge_slave_1: entered allmulticast mode [ 81.349426][ T5784] bridge_slave_1: entered promiscuous mode [ 81.465834][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.479296][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.487440][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.497000][ T5788] bridge_slave_0: entered allmulticast mode [ 81.504651][ T5788] bridge_slave_0: entered promiscuous mode [ 81.533996][ T5777] hsr_slave_0: entered promiscuous mode [ 81.542197][ T5777] hsr_slave_1: entered promiscuous mode [ 81.548723][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.556721][ T5777] Cannot create hsr debugfs directory [ 81.565134][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.575203][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.585661][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.593134][ T5788] bridge_slave_1: entered allmulticast mode [ 81.600970][ T5788] bridge_slave_1: entered promiscuous mode [ 81.666432][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.706113][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.720164][ T5784] team0: Port device team_slave_0 added [ 81.735519][ T5784] team0: Port device team_slave_1 added [ 81.800169][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.807168][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.835986][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.859179][ T5788] team0: Port device team_slave_0 added [ 81.874792][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.882361][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.912773][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.925764][ T5086] Bluetooth: hci1: command tx timeout [ 81.929310][ T5788] team0: Port device team_slave_1 added [ 81.998591][ T5086] Bluetooth: hci0: command tx timeout [ 82.008394][ T5086] Bluetooth: hci2: command tx timeout [ 82.021988][ T5784] hsr_slave_0: entered promiscuous mode [ 82.028948][ T5784] hsr_slave_1: entered promiscuous mode [ 82.035223][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.042952][ T5784] Cannot create hsr debugfs directory [ 82.055120][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.062478][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.089861][ T5086] Bluetooth: hci3: command tx timeout [ 82.094537][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.109660][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.117016][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.145553][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.291402][ T5776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.339353][ T5776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.356627][ T5788] hsr_slave_0: entered promiscuous mode [ 82.365293][ T5788] hsr_slave_1: entered promiscuous mode [ 82.373826][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.382391][ T5788] Cannot create hsr debugfs directory [ 82.418742][ T5776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.429268][ T5776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.562601][ T5777] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.588644][ T5777] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.599780][ T5777] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.631368][ T5777] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.754614][ T5784] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.774990][ T5784] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.784269][ T5784] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.797218][ T5784] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.876359][ T5788] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.889111][ T5788] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.901947][ T5788] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.914944][ T5788] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.980589][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.993185][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.042437][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.063287][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.095855][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.105434][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.122264][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.130425][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.174183][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.182150][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.226329][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.233586][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.327621][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.367724][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.386462][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.393688][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.431863][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.439187][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.487102][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.557906][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.579040][ T5788] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.617521][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.624947][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.637464][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.645838][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.896056][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.934378][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.000291][ T5086] Bluetooth: hci1: command tx timeout [ 84.024239][ T5777] veth0_vlan: entered promiscuous mode [ 84.055339][ T5776] veth0_vlan: entered promiscuous mode [ 84.076296][ T5777] veth1_vlan: entered promiscuous mode [ 84.089460][ T5086] Bluetooth: hci2: command tx timeout [ 84.096538][ T5086] Bluetooth: hci0: command tx timeout [ 84.133169][ T5776] veth1_vlan: entered promiscuous mode [ 84.158445][ T5086] Bluetooth: hci3: command tx timeout [ 84.203882][ T5777] veth0_macvtap: entered promiscuous mode [ 84.217562][ T5777] veth1_macvtap: entered promiscuous mode [ 84.264039][ T5776] veth0_macvtap: entered promiscuous mode [ 84.278462][ T5776] veth1_macvtap: entered promiscuous mode [ 84.306827][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.335642][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.354568][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.367582][ T5776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.382472][ T5776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.392707][ T5776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.406413][ T5776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.427708][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.452248][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.466136][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.481318][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.539714][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.555899][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.571057][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.605171][ T5777] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.617239][ T5777] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.631221][ T5777] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.647531][ T5777] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.662933][ T5788] veth0_vlan: entered promiscuous mode [ 84.705881][ T5788] veth1_vlan: entered promiscuous mode [ 84.823339][ T2987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.832969][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.842985][ T2987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.855672][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.903486][ T5784] veth0_vlan: entered promiscuous mode [ 84.917103][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.932263][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.945323][ T5788] veth0_macvtap: entered promiscuous mode [ 84.968455][ T5784] veth1_vlan: entered promiscuous mode [ 84.996723][ T5788] veth1_macvtap: entered promiscuous mode [ 85.031745][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.063119][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.066742][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.076934][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.097569][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.112780][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.137359][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.166007][ T5784] veth0_macvtap: entered promiscuous mode [ 85.195747][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.239284][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.255693][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.268880][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.289755][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.310699][ T5788] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.325421][ T5788] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.338112][ T5788] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.350220][ T5788] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.378731][ T5784] veth1_macvtap: entered promiscuous mode [ 85.456671][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 85.483375][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.503417][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.544734][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.559405][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.578604][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.579852][ C0] hrtimer: interrupt took 104507 ns [ 85.592999][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.621143][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.687135][ T5845] netlink: 'syz.1.2': attribute type 11 has an invalid length. [ 85.696968][ T5845] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.2'. [ 85.738237][ T5848] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.2'. [ 86.081375][ T5086] Bluetooth: hci1: command tx timeout [ 86.159008][ T5086] Bluetooth: hci0: command tx timeout [ 86.249466][ T5086] Bluetooth: hci3: command tx timeout [ 86.476610][ T5086] Bluetooth: hci2: command tx timeout [ 88.168817][ T5086] Bluetooth: hci1: command tx timeout [ 88.238256][ T5086] Bluetooth: hci0: command tx timeout [ 88.328881][ T5086] Bluetooth: hci3: command tx timeout [ 88.569576][ T5086] Bluetooth: hci2: command tx timeout [ 92.258695][ T786] cfg80211: failed to load regulatory.db [ 101.568747][ T5783] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 101.580504][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 101.591383][ T5783] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 101.602796][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 101.612227][ T5783] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 101.629356][ T5783] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 101.640136][ T5783] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 101.664709][ T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 101.674775][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 101.709628][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 101.718434][ T51] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 101.730779][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 103.758348][ T51] Bluetooth: hci4: command tx timeout [ 103.838524][ T51] Bluetooth: hci5: command tx timeout [ 105.838167][ T51] Bluetooth: hci4: command tx timeout [ 105.928340][ T51] Bluetooth: hci5: command tx timeout [ 107.918349][ T51] Bluetooth: hci4: command tx timeout [ 107.998275][ T51] Bluetooth: hci5: command tx timeout [ 109.998323][ T51] Bluetooth: hci4: command tx timeout [ 110.078608][ T51] Bluetooth: hci5: command tx timeout [ 142.471050][ T5779] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 142.486764][ T5779] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 142.498204][ T5779] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 142.509598][ T5779] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 142.527335][ T5779] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 142.536182][ T5779] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 142.669510][ T51] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 142.680906][ T51] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 142.691808][ T51] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 142.703672][ T51] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 142.719133][ T51] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 142.726925][ T51] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 144.558340][ T51] Bluetooth: hci6: command tx timeout [ 144.798406][ T51] Bluetooth: hci7: command tx timeout [ 146.645740][ T51] Bluetooth: hci6: command tx timeout [ 146.888294][ T51] Bluetooth: hci7: command tx timeout [ 148.718357][ T51] Bluetooth: hci6: command tx timeout [ 148.958285][ T51] Bluetooth: hci7: command tx timeout [ 150.798282][ T51] Bluetooth: hci6: command tx timeout [ 151.038337][ T51] Bluetooth: hci7: command tx timeout [ 154.704025][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 154.718364][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 161.241411][ T5779] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 161.254936][ T5779] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 161.263516][ T5779] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 161.279204][ T5779] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 161.294915][ T5779] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 161.303255][ T5779] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 162.298763][ T5779] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 162.316574][ T5779] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 162.325419][ T5779] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 162.334117][ T5779] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 162.342540][ T5779] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 162.350945][ T5779] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 163.359034][ T51] Bluetooth: hci8: command tx timeout [ 164.398652][ T51] Bluetooth: hci9: command tx timeout [ 165.438736][ T51] Bluetooth: hci8: command tx timeout [ 166.478395][ T51] Bluetooth: hci9: command tx timeout [ 167.518898][ T51] Bluetooth: hci8: command tx timeout [ 168.558683][ T51] Bluetooth: hci9: command tx timeout [ 170.118277][ T51] Bluetooth: hci8: command tx timeout [ 171.038847][ T51] Bluetooth: hci9: command tx timeout [ 203.200826][ T5779] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 203.211262][ T5779] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 203.223097][ T5779] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 203.231603][ T5779] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 203.240826][ T5779] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 203.248894][ T5779] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 203.433107][ T5779] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 203.449819][ T5779] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 203.459016][ T5779] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 203.468519][ T5779] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 203.478063][ T5779] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 203.485918][ T5779] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 203.714861][ T5891] chnl_net:caif_netlink_parms(): no params data found [ 203.853001][ T5891] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.867047][ T5891] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.876330][ T5891] bridge_slave_0: entered allmulticast mode [ 203.892107][ T5891] bridge_slave_0: entered promiscuous mode [ 203.906245][ T5891] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.916370][ T5891] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.932214][ T5891] bridge_slave_1: entered allmulticast mode [ 203.940985][ T5891] bridge_slave_1: entered promiscuous mode [ 204.003164][ T5891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.023260][ T5891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.084064][ T5891] team0: Port device team_slave_0 added [ 204.103350][ T5891] team0: Port device team_slave_1 added [ 204.154066][ T5891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.161908][ T5891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.204148][ T5891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.224824][ T5891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.234685][ T5891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.278119][ T5891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.278736][ T5785] Bluetooth: hci10: command tx timeout [ 205.518658][ T5785] Bluetooth: hci11: command tx timeout [ 206.963703][ T5783] Bluetooth: hci0: command 0x0406 tx timeout [ 206.970928][ T5783] Bluetooth: hci1: command 0x0406 tx timeout [ 206.978324][ T5785] Bluetooth: hci3: command 0x0406 tx timeout [ 207.358454][ T5782] Bluetooth: hci10: command tx timeout [ 207.599300][ T5782] Bluetooth: hci11: command tx timeout [ 209.438337][ T5782] Bluetooth: hci10: command tx timeout [ 209.678331][ T5782] Bluetooth: hci11: command tx timeout [ 211.038275][ T5782] Bluetooth: hci2: command 0x0406 tx timeout [ 211.635993][ T5782] Bluetooth: hci10: command tx timeout [ 211.758351][ T5782] Bluetooth: hci11: command tx timeout [ 215.125200][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 215.138193][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 221.570157][ T5907] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 221.588162][ T5907] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 221.597069][ T5907] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 221.606195][ T5907] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 221.615859][ T5907] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 221.625118][ T5907] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 222.635545][ T5912] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 222.654250][ T5912] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 222.668723][ T5912] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 222.679624][ T5912] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 222.696669][ T5912] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 222.709155][ T5912] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 229.598603][ T5785] Bluetooth: hci4: command 0x0406 tx timeout [ 229.605579][ T5785] Bluetooth: hci5: command 0x0406 tx timeout [ 244.558691][ T29] INFO: task syz.1.2:5840 blocked for more than 144 seconds. [ 244.578106][ T29] Not tainted syzkaller #0 [ 244.583794][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 244.609257][ T29] task:syz.1.2 state:D stack:24232 pid:5840 ppid:5776 flags:0x00004004 [ 244.648287][ T29] Call Trace: [ 244.653248][ T29] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 244.656520][ T29] __schedule+0x1553/0x45a0 [ 244.724539][ T29] ? asan.module_dtor+0x20/0x20 [ 244.731815][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 244.737313][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 244.811508][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 244.821994][ T29] schedule+0xbd/0x170 [ 244.827634][ T29] schedule_preempt_disabled+0x13/0x20 [ 244.838199][ T29] __mutex_lock+0x6a9/0xcc0 [ 244.844035][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 244.858285][ T29] ? perf_event_ctx_lock_nested+0x3b9/0x490 [ 244.866289][ T29] ? mutex_lock_nested+0x20/0x20 [ 244.882221][ T29] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 244.897274][ T29] perf_event_ctx_lock_nested+0x3b9/0x490 [ 244.907025][ T29] ? perf_event_ctx_lock_nested+0xb4/0x490 [ 244.924347][ T29] ? perf_event_update_sibling_time+0x4c0/0x4c0 [ 244.932843][ T29] ? perf_remove_from_owner+0x444/0x4f0 [ 244.942183][ T29] ? perf_remove_from_owner+0x22/0x4f0 [ 244.957173][ T29] ? perf_mmap+0x15c0/0x15c0 [ 244.963899][ T29] perf_event_release_kernel+0x1a0/0x8d0 [ 244.976533][ T29] ? __might_sleep+0xe0/0xe0 [ 244.983473][ T29] ? calc_timer_values+0x400/0x400 [ 245.007248][ T29] ? __fput+0x61c/0x970 [ 245.015928][ T29] ? perf_mmap+0x15c0/0x15c0 [ 245.027676][ T29] perf_release+0x3b/0x40 [ 245.034095][ T29] __fput+0x234/0x970 [ 245.044398][ T29] task_work_run+0x1d4/0x260 [ 245.050051][ T29] ? task_work_cancel+0x220/0x220 [ 245.057548][ T29] ? exit_to_user_mode_loop+0x3b/0x110 [ 245.065770][ T29] exit_to_user_mode_loop+0xe6/0x110 [ 245.082825][ T29] exit_to_user_mode_prepare+0xee/0x180 [ 245.092859][ T29] syscall_exit_to_user_mode+0x1a/0x50 [ 245.106466][ T29] do_syscall_64+0x61/0xb0 [ 245.115984][ T29] ? clear_bhb_loop+0x40/0x90 [ 245.129489][ T29] ? clear_bhb_loop+0x40/0x90 [ 245.134635][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 245.151110][ T29] RIP: 0033:0x7f12f7d9ce59 [ 245.156843][ T29] RSP: 002b:00007ffc820c9508 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 245.175141][ T29] RAX: 0000000000000000 RBX: 00007f12f8017da0 RCX: 00007f12f7d9ce59 [ 245.194221][ T29] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 245.218086][ T29] RBP: 00007f12f8017da0 R08: 0000000000000006 R09: 0000000000000000 [ 245.227653][ T29] R10: 00007f12f8017cb0 R11: 0000000000000246 R12: 0000000000015123 [ 245.249104][ T29] R13: 00007f12f801618c R14: 00000000000150d8 R15: 00007f12f8016180 [ 245.266437][ T29] [ 245.274314][ T29] [ 245.274314][ T29] Showing all locks held in the system: [ 245.293446][ T29] 1 lock held by khungtaskd/29: [ 245.301078][ T29] #0: ffffffff8d132160 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 245.320876][ T29] 6 locks held by kworker/u5:0/51: [ 245.326939][ T29] #0: ffff88802fcb9138 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 245.345702][ T29] #1: ffffc90000bc7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 245.379814][ T29] #2: ffff88802f8a8e70 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1d4/0x380 [ 245.398354][ T29] #3: ffff88802f8a80b8 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x98a/0xec0 [ 245.417147][ T29] #4: ffffffff8e534ca8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x165/0x300 [ 245.439806][ T29] #5: ffff88803124ab38 (&conn->lock#2){+.+.}-{3:3}, at: l2cap_conn_del+0x70/0x660 [ 245.455849][ T29] 3 locks held by kworker/u4:4/59: [ 245.462930][ T29] #0: ffff88802c9fd138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 245.485876][ T29] #1: ffffc900015a7d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 245.512090][ T29] #2: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd4/0x1530 [ 245.534741][ T29] 3 locks held by kworker/1:2/786: [ 245.544203][ T29] 3 locks held by kworker/u4:6/1091: [ 245.557683][ T29] #0: ffff888017c71538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 245.580628][ T29] #1: ffffc9000476fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 245.603557][ T29] #2: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 245.616987][ T29] 5 locks held by kworker/u5:1/5086: [ 245.627648][ T29] #0: ffff88802276bd38 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 245.640688][ T29] #1: ffffc900105efd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 245.664488][ T29] #2: ffff88802f3b0e70 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1d4/0x380 [ 245.677589][ T29] #3: ffff88802f3b00b8 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x98a/0xec0 [ 245.702757][ T29] #4: ffffffff8e534ca8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x165/0x300 [ 245.716787][ T29] 2 locks held by getty/5536: [ 245.731081][ T29] #0: ffff88814cac30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 245.743113][ T29] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390 [ 245.764154][ T29] 5 locks held by kworker/u5:2/5779: [ 245.773392][ T29] #0: ffff88802205f538 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 245.793040][ T29] #1: ffffc9000454fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 245.818064][ T29] #2: ffff88807d580e70 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1d4/0x380 [ 245.842640][ T29] #3: ffff88807d5800b8 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x98a/0xec0 [ 245.861639][ T29] #4: ffffffff8e534ca8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x165/0x300 [ 245.884433][ T29] 4 locks held by kworker/u5:3/5782: [ 245.892024][ T29] #0: ffff888025b58138 ((wq_completion)hci12#2){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 245.907151][ T29] #1: ffffc9000465fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 245.932651][ T29] #2: ffff888041fd40b8 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x9c/0x900 [ 245.945381][ T29] #3: ffffffff8e534ca8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x547/0x900 [ 245.965273][ T29] 5 locks held by kworker/u5:4/5783: [ 245.971807][ T29] #0: ffff88802d2c0138 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 245.993350][ T29] #1: ffffc9000469fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 246.020999][ T29] #2: ffff88807d584e70 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1d4/0x380 [ 246.043317][ T29] #3: ffff88807d5840b8 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x98a/0xec0 [ 246.057876][ T29] #4: ffffffff8e534ca8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x165/0x300 [ 246.076928][ T29] 3 locks held by kworker/0:5/5818: [ 246.092971][ T29] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 246.118317][ T29] #1: ffffc9000484fd00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 246.137926][ T29] #2: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 246.160436][ T29] 2 locks held by kworker/1:4/5820: [ 246.167361][ T29] 3 locks held by kworker/0:6/5836: [ 246.183010][ T29] #0: ffff888017c71d38 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 246.207869][ T29] #1: ffffc9000488fd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 246.235148][ T29] #2: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x92/0xd90 [ 246.268451][ T29] 3 locks held by kworker/1:5/5839: [ 246.276468][ T29] 1 lock held by syz.1.2/5840: [ 246.288766][ T29] #0: ffff8880276f18a8 (&ctx->mutex){+.+.}-{3:3}, at: perf_event_ctx_lock_nested+0x3b9/0x490 [ 246.312749][ T29] 4 locks held by syz.1.2/5841: [ 246.324506][ T29] 1 lock held by syz.0.1/5843: [ 246.332048][ T29] #0: ffffffff8d188368 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2e/0x140 [ 246.351803][ T29] 2 locks held by dhcpcd/5847: [ 246.362075][ T29] #0: ffff88805d9c1420 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x9b/0x230 [ 246.378185][ T29] #1: ffffffff8d137b38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x306/0x880 [ 246.396130][ T29] 1 lock held by dhcpcd/5851: [ 246.407841][ T29] #0: ffff8880300ed020 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x9b/0x230 [ 246.430656][ T29] 1 lock held by dhcpcd/5857: [ 246.435860][ T29] #0: ffff88805d9c8e20 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x9b/0x230 [ 246.458257][ T29] 1 lock held by dhcpcd/5858: [ 246.463430][ T29] #0: ffff88805d9ca020 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x9b/0x230 [ 246.488862][ T29] 1 lock held by syz-executor/5862: [ 246.497608][ T29] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 246.516955][ T29] 1 lock held by syz-executor/5865: [ 246.524581][ T29] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 246.546369][ T29] 1 lock held by dhcpcd/5869: [ 246.552690][ T29] #0: ffff88805d9cee20 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x9b/0x230 [ 246.576051][ T29] 2 locks held by dhcpcd/5870: [ 246.583402][ T29] #0: ffff888076f1a620 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x9b/0x230 [ 246.606146][ T29] #1: ffffffff8d137b38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3da/0x880 [ 246.628059][ T29] 1 lock held by syz-executor/5873: [ 246.634230][ T29] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 246.659461][ T29] 1 lock held by syz-executor/5877: [ 246.665697][ T29] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 246.685127][ T29] 1 lock held by syz-executor/5881: [ 246.694630][ T29] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 246.718475][ T29] 1 lock held by syz-executor/5886: [ 246.724793][ T29] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 246.745754][ T29] 1 lock held by syz-executor/5891: [ 246.752558][ T29] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 246.770596][ T29] 1 lock held by syz-executor/5896: [ 246.777725][ T29] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 246.798691][ T29] 1 lock held by syz-executor/5905: [ 246.805899][ T29] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 246.830141][ T29] 5 locks held by kworker/u5:6/5907: [ 246.843990][ T29] #0: ffff88802c5a8138 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 246.859867][ T29] #1: ffffc90005107d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 246.882979][ T29] #2: ffff88807d27ce70 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1d4/0x380 [ 246.905333][ T29] #3: ffff88807d27c0b8 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x98a/0xec0 [ 246.925367][ T29] #4: ffffffff8e534ca8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x165/0x300 [ 246.948648][ T29] 1 lock held by syz-executor/5911: [ 246.955060][ T29] #0: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 246.973695][ T29] 4 locks held by kworker/u5:7/5912: [ 246.982259][ T29] #0: ffff888026f97538 ((wq_completion)hci13#2){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 247.005639][ T29] #1: ffffc90005137d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 247.021794][ T29] #2: ffff88805d2540b8 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x9c/0x900 [ 247.042814][ T29] #3: ffffffff8e534ca8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x547/0x900 [ 247.065962][ T29] 5 locks held by kworker/u5:8/5914: [ 247.075187][ T29] #0: ffff88802c5aa138 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 247.098022][ T29] #1: ffffc90005147d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 247.120834][ T29] #2: ffff888031410e70 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1d4/0x380 [ 247.142915][ T29] #3: ffff8880314100b8 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x98a/0xec0 [ 247.164070][ T29] #4: ffffffff8e534ca8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x165/0x300 [ 247.186067][ T29] [ 247.189691][ T29] ============================================= [ 247.189691][ T29] [ 247.209522][ T29] NMI backtrace for cpu 0 [ 247.217471][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 247.225900][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 247.237528][ T29] Call Trace: [ 247.241034][ T29] [ 247.244509][ T29] dump_stack_lvl+0x18c/0x250 [ 247.251424][ T29] ? show_regs_print_info+0x20/0x20 [ 247.257101][ T29] ? load_image+0x420/0x420 [ 247.262460][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 247.269527][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 247.278518][ T29] ? _printk+0xde/0x130 [ 247.283395][ T29] ? load_image+0x420/0x420 [ 247.288925][ T29] ? load_image+0x420/0x420 [ 247.295363][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 247.302939][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 247.311245][ T29] watchdog+0xf3d/0xf80 [ 247.315631][ T29] ? watchdog+0x1e1/0xf80 [ 247.321683][ T29] kthread+0x2fa/0x390 [ 247.328016][ T29] ? hungtask_pm_notify+0x90/0x90 [ 247.333291][ T29] ? kthread_blkcg+0xd0/0xd0 [ 247.339107][ T29] ret_from_fork+0x48/0x80 [ 247.345313][ T29] ? kthread_blkcg+0xd0/0xd0 [ 247.351057][ T29] ret_from_fork_asm+0x11/0x20 [ 247.358469][ T29] [ 247.364088][ T29] Sending NMI from CPU 0 to CPUs 1: [ 247.372649][ C1] NMI backtrace for cpu 1 [ 247.372661][ C1] CPU: 1 PID: 5841 Comm: syz.1.2 Not tainted syzkaller #0 [ 247.372675][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 247.372683][ C1] RIP: 0010:check_preemption_disabled+0x1/0x110 [ 247.372720][ C1] Code: e9 6e ff ff ff cc cc cc cc f3 0f 1e fa 48 c7 c7 c0 9b 1c 8b 48 c7 c6 00 9c 1c 8b eb 0c 66 2e 0f 1f 84 00 00 00 00 00 66 90 55 <41> 57 41 56 53 48 83 ec 10 65 48 8b 04 25 28 00 00 00 48 89 44 24 [ 247.372731][ C1] RSP: 0018:ffffc900001f0a28 EFLAGS: 00000002 [ 247.372744][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 70196920ac0c2a00 [ 247.372753][ C1] RDX: 0000000000000000 RSI: ffffffff8b1c9c00 RDI: ffffffff8b1c9bc0 [ 247.372762][ C1] RBP: 0000000000000000 R08: ffffffff8e8b666f R09: 1ffffffff1d16ccd [ 247.372771][ C1] R10: dffffc0000000000 R11: fffffbfff1d16cce R12: dffffc0000000000 [ 247.372781][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 247.372789][ C1] FS: 00007f12f8bfe6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 247.372805][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 247.372814][ C1] CR2: 000055c971c984b0 CR3: 000000005cb5f000 CR4: 00000000003506e0 [ 247.372827][ C1] Call Trace: [ 247.372832][ C1] [ 247.372837][ C1] __sysvec_apic_timer_interrupt+0x8d/0x3b0 [ 247.372858][ C1] sysvec_apic_timer_interrupt+0x51/0xc0 [ 247.372876][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 247.372896][ C1] RIP: 0010:__mod_timer+0x8c/0xdb0 [ 247.372916][ C1] Code: 41 83 fc 04 48 89 1c 24 73 70 4c 8d 6b 08 4c 89 ed 48 c1 ed 03 42 80 7c 35 00 00 74 08 4c 89 ef e8 e9 f6 68 00 49 83 7d 00 00 <74> 55 48 8b 04 24 48 8d 58 10 48 89 d8 48 c1 e8 03 48 89 44 24 20 [ 247.372926][ C1] RSP: 0018:ffffc900001f0b28 EFLAGS: 00000246 [ 247.372936][ C1] RAX: ffffffff817674a2 RBX: ffff88805dc1ed88 RCX: 0000000000000100 [ 247.372946][ C1] RDX: ffff888021133c00 RSI: 0000000000000000 RDI: 0000000000000004 [ 247.372954][ C1] RBP: 1ffff1100bb83db2 R08: ffffffff911cd5f7 R09: 1ffffffff2239abe [ 247.372964][ C1] R10: dffffc0000000000 R11: fffffbfff2239abf R12: 0000000000000000 [ 247.372973][ C1] R13: ffff88805dc1ed90 R14: dffffc0000000000 R15: 00000000ffffebb5 [ 247.372985][ C1] ? __mod_timer+0x62/0xdb0 [ 247.373007][ C1] ? __mod_timer+0x62/0xdb0 [ 247.373024][ C1] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 247.373045][ C1] call_timer_fn+0x189/0x540 [ 247.373058][ C1] ? hsr_register_frame_out+0x3a0/0x3a0 [ 247.373077][ C1] ? call_timer_fn+0xd2/0x540 [ 247.373090][ C1] ? __run_timers+0x800/0x800 [ 247.373107][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 247.373125][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 247.373142][ C1] ? hsr_register_frame_out+0x3a0/0x3a0 [ 247.373161][ C1] __run_timers+0x542/0x800 [ 247.373180][ C1] ? detach_timer+0x2b0/0x2b0 [ 247.373195][ C1] ? lock_chain_count+0x20/0x20 [ 247.373318][ C1] run_timer_softirq+0x67/0xf0 [ 247.373335][ C1] handle_softirqs+0x280/0x820 [ 247.373371][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 247.373388][ C1] ? do_softirq+0x1a0/0x1a0 [ 247.373405][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 247.373425][ C1] __irq_exit_rcu+0xd3/0x190 [ 247.373439][ C1] ? irq_exit_rcu+0x20/0x20 [ 247.373456][ C1] irq_exit_rcu+0x9/0x20 [ 247.373469][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 247.373491][ C1] [ 247.373495][ C1] [ 247.373500][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 247.373521][ C1] RIP: 0010:finish_task_switch+0x26a/0x8f0 [ 247.373538][ C1] Code: 0f 84 33 01 00 00 48 85 db 0f 85 52 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 e0 94 34 09 e8 1b 2f 30 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 247.373549][ C1] RSP: 0018:ffffc900048ff758 EFLAGS: 00000282 [ 247.373562][ C1] RAX: 70196920ac0c2a00 RBX: 0000000000000000 RCX: 70196920ac0c2a00 [ 247.373573][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1c9c20 [ 247.373583][ C1] RBP: ffffc900048ff7b0 R08: ffffffff911cd5ff R09: 1ffffffff2239abf [ 247.373593][ C1] R10: dffffc0000000000 R11: fffffbfff2239ac0 R12: ffff888021133c00 [ 247.373603][ C1] R13: dffffc0000000000 R14: ffff88802c499e00 R15: ffff8880b8f3cb48 [ 247.373622][ C1] ? finish_task_switch+0x265/0x8f0 [ 247.373641][ C1] __schedule+0x155b/0x45a0 [ 247.373661][ C1] ? mark_lock+0x94/0x320 [ 247.373677][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 247.373696][ C1] ? lock_chain_count+0x20/0x20 [ 247.373718][ C1] ? asan.module_dtor+0x20/0x20 [ 247.373744][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 247.373765][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 247.373789][ C1] ? preempt_schedule+0xc0/0xd0 [ 247.373810][ C1] preempt_schedule_common+0x82/0xc0 [ 247.373827][ C1] preempt_schedule+0xc0/0xd0 [ 247.373842][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 247.373858][ C1] ? event_function+0x300/0x300 [ 247.373875][ C1] ? smp_call_function_single+0x5a0/0x5a0 [ 247.373894][ C1] preempt_schedule_thunk+0x1a/0x30 [ 247.373918][ C1] ? smp_call_function_single+0x488/0x5a0 [ 247.373936][ C1] smp_call_function_single+0x48d/0x5a0 [ 247.373953][ C1] ? event_function+0x300/0x300 [ 247.373970][ C1] ? flush_smp_call_function_queue+0x250/0x250 [ 247.373987][ C1] ? event_function+0x300/0x300 [ 247.374005][ C1] ? perf_install_in_context+0x4b4/0x920 [ 247.374025][ C1] perf_install_in_context+0x5be/0x920 [ 247.374046][ C1] ? exclusive_event_installable+0x2c0/0x2c0 [ 247.374063][ C1] ? add_event_to_ctx+0x1180/0x1180 [ 247.374088][ C1] ? anon_inode_getfile+0x109/0x1a0 [ 247.374108][ C1] ? perf_event__header_size+0x165/0x220 [ 247.374128][ C1] __se_sys_perf_event_open+0x1836/0x1c50 [ 247.374157][ C1] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 247.374180][ C1] ? lock_chain_count+0x20/0x20 [ 247.374200][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 247.374218][ C1] ? __x64_sys_perf_event_open+0x20/0xc0 [ 247.374236][ C1] do_syscall_64+0x55/0xb0 [ 247.374252][ C1] ? clear_bhb_loop+0x40/0x90 [ 247.374264][ C1] ? clear_bhb_loop+0x40/0x90 [ 247.374277][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 247.374298][ C1] RIP: 0033:0x7f12f7d9ce59 [ 247.374312][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.374324][ C1] RSP: 002b:00007f12f8bfe028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 247.374339][ C1] RAX: ffffffffffffffda RBX: 00007f12f8015fa0 RCX: 00007f12f7d9ce59 [ 247.374350][ C1] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000140 [ 247.374359][ C1] RBP: 00007f12f7e32d6f R08: 0000000000000002 R09: 0000000000000000 [ 247.374368][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 247.374377][ C1] R13: 00007f12f8016038 R14: 00007f12f8015fa0 R15: 00007ffc820c93a8 [ 247.374394][ C1] [ 248.316328][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 248.325319][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 248.335229][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 248.347950][ T29] Call Trace: [ 248.351707][ T29] [ 248.354865][ T29] dump_stack_lvl+0x18c/0x250 [ 248.360125][ T29] ? show_regs_print_info+0x20/0x20 [ 248.368932][ T29] ? load_image+0x420/0x420 [ 248.375057][ T29] panic+0x2dc/0x730 [ 248.380834][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 248.387220][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 248.394567][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 248.402826][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 248.409929][ T29] watchdog+0xf7c/0xf80 [ 248.414735][ T29] ? watchdog+0x1e1/0xf80 [ 248.420588][ T29] kthread+0x2fa/0x390 [ 248.425848][ T29] ? hungtask_pm_notify+0x90/0x90 [ 248.431044][ T29] ? kthread_blkcg+0xd0/0xd0 [ 248.436837][ T29] ret_from_fork+0x48/0x80 [ 248.443247][ T29] ? kthread_blkcg+0xd0/0xd0 [ 248.450764][ T29] ret_from_fork_asm+0x11/0x20 [ 248.456390][ T29] [ 248.460787][ T29] Kernel Offset: disabled [ 248.465314][ T29] Rebooting in 86400 seconds..