last executing test programs: 1m6.484315289s ago: executing program 0 (id=145): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x400000000010, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) dup(r0) epoll_create1(0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x24004804}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 1m5.736466866s ago: executing program 2 (id=147): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) preadv(r0, &(0x7f0000000b00)=[{0x0}, {&(0x7f00000005c0)=""/28, 0x1c}], 0x2, 0x1001002, 0x3) 1m5.376748193s ago: executing program 0 (id=150): r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) read$FUSE(r0, &(0x7f0000002900)={0x2020}, 0x2020) 1m3.921139957s ago: executing program 2 (id=153): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r2, 0x80106f53, &(0x7f00000002c0)={0x4, &(0x7f00000000c0)=[{0x38, '\x00', @st={0x4, [{0x1, @svalue=0x3}, {0x3}, {0x0, @uvalue=0x1}, {0x0, @uvalue=0xa182}]}, 0x3}, {0x12, '\x00', @st={0x4, [{0x1, @svalue=0x4}, {0x1, @svalue=0x400}, {0x3, @uvalue=0x40000}, {0x1, @uvalue=0x41}]}, 0xfff}, {0x39, '\x00', @buffer={"cd5a585529647c60c5ccc64aca130e0f968982e34913b76bd9482a68561e7b05", 0x20}, 0x5}, {0x46, '\x00', @data=0x2, 0x45}]}) 1m2.449325867s ago: executing program 0 (id=155): ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r4, &(0x7f0000000180)='p:s/p ./file0:0', 0xf) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r5, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x20040894) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) 1m2.071575285s ago: executing program 5 (id=156): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/machinecheck/machinecheck0/cmci_disabled\x00', 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0xa5, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffff3f54aaaaaaaaaa08004f04009700680000ff069078e000000100000000940a9b40f51983638a38890f746401010200000000ac1414aa", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e10a0008907800801e10230c0400000000000000800000000402fe06e2d4c3d9fe06e2d4c3d90104020000003b2378b45fa666a7dc"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x100}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000004c0)=0x0) r8 = syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x0, 0x0, r3, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x2, 0x268, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bd9a}}}, &(0x7f00000001c0)=0x0) r11 = syz_open_dev$ublk_chdev(0x0, r8, 0x2) r12 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$get_keyring_id(0x0, r12, 0x1) syz_ublk_setup_queues(r11, r10, &(0x7f00000005c0)={0x0, 0x3e0e, 0x400, 0x1, 0x28e, 0x0, r4}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x701, 0x200, 0x3, 0x23f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3, 0x2, 0x0, 0x32d, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x42d3, 0x8000, 0x1, 0x2db}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x118d, 0x4, 0x0, 0xb1}}], 0x4, &(0x7f0000001f40)={0x2e, 0x0, 0x0, r11, 0xc0107526, 0x0, 0x20000700, 0x0, 0x1, {0x10}, 0x0, r9, '\x00', {0x3, 0xee3, 0x100104, 0x0}}, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000300)={0x1, 0x8}, &(0x7f0000000340)) write(r0, &(0x7f0000000140)='1', 0x1) socket$igmp(0x2, 0x3, 0x2) 1m0.771777488s ago: executing program 0 (id=158): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x400000000010, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x24004804}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 1m0.534050439s ago: executing program 2 (id=159): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={0x0, 0xa4}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x4) 57.66920259s ago: executing program 0 (id=169): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r4, 0x4e, 0x5) 57.553005918s ago: executing program 2 (id=170): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf2500000000", @ANYRES32, @ANYBLOB="38030600400202002c0012801100010056726964672c0b79ba617665000000001400058008002a00", @ANYRES32=0x0, @ANYBLOB="06001f"], 0x4c}, 0x1, 0x0, 0x0, 0x80c5}, 0x40040c4) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 56.999669348s ago: executing program 2 (id=173): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sigaltstack(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fff, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x18) 55.246864271s ago: executing program 2 (id=174): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000140)=0x4f4e, 0x4) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x80049367, &(0x7f0000000080)) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, r5, 0x400, 0x70bd29, 0x0, {}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20000010) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000180)=0xff) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r5, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r3, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3fff}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x52, '\x00', 0x0, @fallback=0x9af8dba271b76fd5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 55.073996657s ago: executing program 0 (id=176): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setns(0xc9, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000140)=0x4f4e, 0x4) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000180)=0xff) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 54.74865003s ago: executing program 5 (id=178): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r3 = open(&(0x7f0000000040)='./bus\x00', 0x4ca7e, 0x10) fallocate(r3, 0x0, 0x0, 0x1000f4) sendfile(r3, r3, 0x0, 0x40000000800) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r4, 0x100000000000011, 0x2000, 0x2f93) 50.221505928s ago: executing program 1 (id=180): socket(0xa, 0x3, 0x87) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "750600", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "ffffffffffffffff"}, 0x28) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(r3, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) getpriority(0x1, r0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) 49.60661922s ago: executing program 5 (id=181): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x400000000010, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x24004804}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 47.581526416s ago: executing program 1 (id=183): r0 = epoll_create1(0x80000) epoll_pwait(r0, 0x0, 0x0, 0x1ff, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r2 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r2}, &(0x7f0000000080)) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4080040) read$FUSE(r1, &(0x7f0000002900)={0x2020}, 0x2020) 47.435201456s ago: executing program 5 (id=184): openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000007c0)={0x28, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x24000880) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_emit_ethernet(0xde, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) pselect6(0x40, &(0x7f0000000080)={0x5, 0x3, 0x248, 0x5d92, 0x9, 0x1ce, 0x7fff, 0x2}, 0x0, &(0x7f0000000140)={0x3ff, 0x80, 0x5, 0x0, 0x101, 0xafc2, 0x5, 0x1}, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r2, &(0x7f0000000040)=""/75, 0x4b) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8a000, 0x0) ppoll(&(0x7f0000000040)=[{r3, 0x23}], 0x1, 0x0, 0x0, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f00000000c0), 0x8) close(0x3) write$sysctl(0xffffffffffffffff, &(0x7f0000000040)='0\x00', 0x2) 37.913217769s ago: executing program 32 (id=176): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setns(0xc9, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000140)=0x4f4e, 0x4) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000180)=0xff) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 35.486024134s ago: executing program 33 (id=174): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000140)=0x4f4e, 0x4) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x80049367, &(0x7f0000000080)) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, r5, 0x400, 0x70bd29, 0x0, {}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20000010) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000180)=0xff) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r5, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r3, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3fff}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x52, '\x00', 0x0, @fallback=0x9af8dba271b76fd5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 35.448781757s ago: executing program 1 (id=189): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close(0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) mlockall(0x2) r2 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x39c4, 0x2, 0x3, 0xfffffffe}, &(0x7f0000000580), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r2, 0x11, &(0x7f0000000500)='n', 0x1) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x13, &(0x7f0000000180)=[0x2, 0x6], 0x2) 35.408051792s ago: executing program 5 (id=191): socket(0xa, 0x3, 0x87) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "750600", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "ffffffffffffffff"}, 0x28) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(r3, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) getpriority(0x1, r0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) 31.808610441s ago: executing program 5 (id=192): r0 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x722, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="58000000020601020000000000000000000000000c000780080012400006000011000300686173683a69702c6d61726b00000000050005000a00000005000400000000000900020073797a31000000000500010007"], 0x58}, 0x1, 0x0, 0x0, 0x15}, 0x40044050) 26.548937987s ago: executing program 1 (id=196): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x400000000010, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x24004804}, 0x48885) bpf$MAP_CREATE(0x0, 0x0, 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 25.418527222s ago: executing program 3 (id=198): socket$inet6(0xa, 0x3, 0xff) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x0, 0x4, 0x13, 0x80000001, 0x76, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @mcast2, 0x40, 0x10, 0xfffffe01, 0x1}}) r1 = socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x83) unlinkat(0xffffffffffffff9c, &(0x7f0000000600)='./proc\x00', 0x200) r3 = openat$cgroup_ro(r2, &(0x7f0000000140)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x20000, 0xb) fcntl$notify(r6, 0x402, 0x80000002) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x20, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_MODE={0xa, 0x2, {0xffff, 0x1}}]}, 0x20}}, 0x0) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r5, 0x0, 0x0) sendmsg$NFT_BATCH(r5, 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0x5, 0x11, 0x0, 0x1, [@generic='/']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 25.061738119s ago: executing program 1 (id=200): r0 = epoll_create1(0x80000) epoll_pwait(r0, 0x0, 0x0, 0x1ff, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r2 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r2}, &(0x7f0000000080)) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4080040) read$FUSE(r1, &(0x7f0000002900)={0x2020}, 0x2020) 24.559894526s ago: executing program 4 (id=201): openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000007c0)={0x28, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x24000880) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_emit_ethernet(0xde, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) pselect6(0x40, &(0x7f0000000080)={0x5, 0x3, 0x248, 0x5d92, 0x9, 0x1ce, 0x7fff, 0x2}, 0x0, &(0x7f0000000140)={0x3ff, 0x80, 0x5, 0x0, 0x101, 0xafc2, 0x5, 0x1}, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r2, &(0x7f0000000040)=""/75, 0x4b) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8a000, 0x0) ppoll(&(0x7f0000000040)=[{r3, 0x23}], 0x1, 0x0, 0x0, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f00000000c0), 0x8) close(0x3) write$sysctl(0xffffffffffffffff, &(0x7f0000000040)='0\x00', 0x2) 20.944364518s ago: executing program 3 (id=202): r0 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, 0x0, 0x35, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) timerfd_gettime(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000002000)='./sys\x00', &(0x7f0000002040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./sys/bus/acpi/devices/PNP0501:00/status\x00', 0x0, 0x0) read(r3, &(0x7f0000000c80)=""/265, 0x109) r4 = eventfd2(0x800, 0x1) write$eventfd(r4, 0x0, 0x0) add_key$keyring(&(0x7f0000000440), 0x0, 0x0, 0x0, r0) fremovexattr(r4, &(0x7f0000000080)=@random={'user.', '-\x00'}) keyctl$KEYCTL_MOVE(0x1e, r0, r0, 0x0, 0x0) add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) 18.92961543s ago: executing program 3 (id=203): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x400000000010, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) dup(r0) epoll_create1(0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x24004804}, 0x48885) bpf$MAP_CREATE(0x0, 0x0, 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 18.837036163s ago: executing program 1 (id=204): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setns(0xc9, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000140)=0x4f4e, 0x4) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, 0x0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 16.148229493s ago: executing program 34 (id=192): r0 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x722, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="58000000020601020000000000000000000000000c000780080012400006000011000300686173683a69702c6d61726b00000000050005000a00000005000400000000000900020073797a31000000000500010007"], 0x58}, 0x1, 0x0, 0x0, 0x15}, 0x40044050) 15.875137519s ago: executing program 4 (id=206): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3100000000140004000800010000000001080002000000000050000000120a01040000000000000000020000000900010073797a300000"], 0x130}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x4000}, 0x20008000) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, ["", "", ""]}, 0x14}}, 0x40) 14.977103787s ago: executing program 4 (id=207): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socket$l2tp(0x2, 0x2, 0x73) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x1e, 0x4, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="64796e2c00c4bc028f592e8a95ba6d714e5521b2ebaa7d62e247bf1747f678a5e047976018da7aef126ec8cafd7aa358004bf31c125ed3f7d8aa9d5667ece18c5ff94e4565d911659ac5e6077427f7c6e452b290130ca55a7b6ec2e71430c3b0aa902a6c882ec84d36f0825a85a8a6049d76c42c79f3f8152bdad122f460179d5316c420ec48fa349de9070c623321dd46ddb0354702e52396a3281d4f15eb5a6a5d"]) mkdirat(0xffffffffffffff9c, 0x0, 0x1) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="08003fbd7000fedb1b424d34fd9105428f1514ab9929fa6cd6018408000100", @ANYRES32, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x20000814}, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x41, 0x0) writev(r3, &(0x7f0000001040)=[{&(0x7f00000001c0), 0xffffff60}, {0x0, 0x13}], 0x2) 13.699282507s ago: executing program 4 (id=208): r0 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, 0x0, 0x35, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) timerfd_gettime(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000002000)='./sys\x00', &(0x7f0000002040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./sys/bus/acpi/devices/PNP0501:00/status\x00', 0x0, 0x0) read(r3, &(0x7f0000000c80)=""/265, 0x109) r4 = eventfd2(0x800, 0x1) write$eventfd(r4, 0x0, 0x0) add_key$keyring(&(0x7f0000000440), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r0) fremovexattr(r4, 0x0) keyctl$KEYCTL_MOVE(0x1e, r0, r0, 0x0, 0x0) add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) 11.241880373s ago: executing program 4 (id=209): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 10.566808808s ago: executing program 3 (id=210): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x400000000010, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x24004804}, 0x48885) bpf$MAP_CREATE(0x0, 0x0, 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 10.396758707s ago: executing program 3 (id=211): r0 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, 0x0, 0x35, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) timerfd_gettime(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000002000)='./sys\x00', &(0x7f0000002040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./sys/bus/acpi/devices/PNP0501:00/status\x00', 0x0, 0x0) read(r3, &(0x7f0000000c80)=""/265, 0x109) r4 = eventfd2(0x800, 0x1) write$eventfd(r4, 0x0, 0x0) add_key$keyring(&(0x7f0000000440), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r0) fremovexattr(r4, 0x0) keyctl$KEYCTL_MOVE(0x1e, r0, r0, 0x0, 0x0) add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) 8.632313725s ago: executing program 3 (id=212): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) fanotify_init(0x4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) listen(r1, 0x2) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x40010) recvfrom(r2, &(0x7f0000000080)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) 7.293787076s ago: executing program 4 (id=213): openat$null(0xffffffffffffff9c, 0x0, 0x80, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x2000b, 0x1000005, 0x401d031, 0xffffffffffffffff, 0x0) setreuid(0xffffffffffffffff, 0xee01) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x0, 0x2}, 0x30, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1) landlock_restrict_self(r0, 0xe) landlock_restrict_self(r0, 0x9) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x4) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b80, &(0x7f0000000040)={0x0, 0x8970, 0x1f280, 0x0, 0x8000399}) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2802) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x24004804) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r3) 0s ago: executing program 35 (id=204): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setns(0xc9, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000140)=0x4f4e, 0x4) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, 0x0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.204' (ED25519) to the list of known hosts. [ 80.069584][ T5599] cgroup: Unknown subsys name 'net' [ 80.159012][ T5599] cgroup: Unknown subsys name 'cpuset' [ 80.162946][ T5599] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.765716][ T5599] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.391772][ T4927] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.392879][ T4927] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.401837][ T5626] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.403500][ T5626] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.404906][ T5626] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.408090][ T5626] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.409083][ T5626] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.410404][ T5626] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.411176][ T5626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.425474][ T5626] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.448243][ T5620] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.448789][ T5620] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.451737][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.452313][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.453400][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.454172][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.454858][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.455421][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.456387][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.457039][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.524134][ T5619] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 84.526834][ T5619] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 84.528395][ T5619] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 84.531926][ T5619] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 84.533200][ T5619] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 84.538367][ T5626] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.547930][ T5619] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.548803][ T5619] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.549772][ T5619] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.550510][ T5619] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.100437][ T971] cfg80211: failed to load regulatory.db [ 86.495170][ T5619] Bluetooth: hci0: command tx timeout [ 86.495304][ T5619] Bluetooth: hci4: command tx timeout [ 86.495407][ T5619] Bluetooth: hci1: command tx timeout [ 86.497150][ T4927] Bluetooth: hci3: command tx timeout [ 86.574991][ T5626] Bluetooth: hci2: command tx timeout [ 86.575118][ T5626] Bluetooth: hci5: command tx timeout [ 86.964826][ T5624] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.965246][ T5624] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.965355][ T5624] bridge_slave_0: entered allmulticast mode [ 86.967037][ T5624] bridge_slave_0: entered promiscuous mode [ 86.979955][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.980074][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.980205][ T5628] bridge_slave_0: entered allmulticast mode [ 86.982504][ T5628] bridge_slave_0: entered promiscuous mode [ 87.035740][ T5624] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.035924][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.036077][ T5624] bridge_slave_1: entered allmulticast mode [ 87.038036][ T5624] bridge_slave_1: entered promiscuous mode [ 87.072628][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.072734][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.072858][ T5628] bridge_slave_1: entered allmulticast mode [ 87.075039][ T5628] bridge_slave_1: entered promiscuous mode [ 87.107532][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.107738][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.107867][ T5618] bridge_slave_0: entered allmulticast mode [ 87.109780][ T5618] bridge_slave_0: entered promiscuous mode [ 87.161221][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.161332][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.161785][ T5617] bridge_slave_0: entered allmulticast mode [ 87.163404][ T5617] bridge_slave_0: entered promiscuous mode [ 87.166683][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.166792][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.167216][ T5618] bridge_slave_1: entered allmulticast mode [ 87.169679][ T5618] bridge_slave_1: entered promiscuous mode [ 87.208332][ T5624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.217258][ T5624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.254718][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.254823][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.255250][ T5625] bridge_slave_0: entered allmulticast mode [ 87.257127][ T5625] bridge_slave_0: entered promiscuous mode [ 87.260230][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.260338][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.260479][ T5625] bridge_slave_1: entered allmulticast mode [ 87.262907][ T5625] bridge_slave_1: entered promiscuous mode [ 87.311890][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.311982][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.312356][ T5617] bridge_slave_1: entered allmulticast mode [ 87.314055][ T5617] bridge_slave_1: entered promiscuous mode [ 87.353022][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.413301][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.431218][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.448754][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.451883][ T5624] team0: Port device team_slave_0 added [ 87.482563][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.486749][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.490489][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.493785][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.497490][ T5624] team0: Port device team_slave_1 added [ 87.514121][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.514236][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.514375][ T5627] bridge_slave_0: entered allmulticast mode [ 87.517101][ T5627] bridge_slave_0: entered promiscuous mode [ 87.521223][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.521355][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.521785][ T5627] bridge_slave_1: entered allmulticast mode [ 87.523975][ T5627] bridge_slave_1: entered promiscuous mode [ 87.621035][ T5628] team0: Port device team_slave_0 added [ 87.638212][ T5625] team0: Port device team_slave_0 added [ 87.665639][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.665658][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.665686][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.669057][ T5628] team0: Port device team_slave_1 added [ 87.688811][ T5625] team0: Port device team_slave_1 added [ 87.706903][ T5617] team0: Port device team_slave_0 added [ 87.711243][ T5618] team0: Port device team_slave_0 added [ 87.713964][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.713980][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.714011][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.731179][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.789407][ T5617] team0: Port device team_slave_1 added [ 87.810635][ T5618] team0: Port device team_slave_1 added [ 87.841281][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.842112][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.842127][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.842155][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.843948][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.843964][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.843994][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.882733][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.882758][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.882788][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.918928][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.918949][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.918979][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.921449][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.921465][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.921495][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.923389][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.923405][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.923434][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.926953][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.926969][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.927005][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.943069][ T5624] hsr_slave_0: entered promiscuous mode [ 87.946098][ T5624] hsr_slave_1: entered promiscuous mode [ 87.990807][ T5627] team0: Port device team_slave_0 added [ 88.013596][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.013618][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.013648][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.050352][ T5627] team0: Port device team_slave_1 added [ 88.248166][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.248188][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.248215][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.276033][ T5625] hsr_slave_0: entered promiscuous mode [ 88.277221][ T5625] hsr_slave_1: entered promiscuous mode [ 88.278133][ T5625] debugfs: 'hsr0' already exists in 'hsr' [ 88.278217][ T5625] Cannot create hsr debugfs directory [ 88.335516][ T5618] hsr_slave_0: entered promiscuous mode [ 88.336371][ T5618] hsr_slave_1: entered promiscuous mode [ 88.336973][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 88.336995][ T5618] Cannot create hsr debugfs directory [ 88.376869][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.376891][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.376914][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.383513][ T5628] hsr_slave_0: entered promiscuous mode [ 88.384912][ T5628] hsr_slave_1: entered promiscuous mode [ 88.385757][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 88.385778][ T5628] Cannot create hsr debugfs directory [ 88.397146][ T5617] hsr_slave_0: entered promiscuous mode [ 88.398239][ T5617] hsr_slave_1: entered promiscuous mode [ 88.398983][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 88.399010][ T5617] Cannot create hsr debugfs directory [ 88.575109][ T4927] Bluetooth: hci3: command tx timeout [ 88.575148][ T4927] Bluetooth: hci1: command tx timeout [ 88.575180][ T4927] Bluetooth: hci0: command tx timeout [ 88.575180][ T5626] Bluetooth: hci4: command tx timeout [ 88.654945][ T5619] Bluetooth: hci5: command tx timeout [ 88.654995][ T5619] Bluetooth: hci2: command tx timeout [ 88.713519][ T5627] hsr_slave_0: entered promiscuous mode [ 88.714343][ T5627] hsr_slave_1: entered promiscuous mode [ 88.716169][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 88.716191][ T5627] Cannot create hsr debugfs directory [ 89.173727][ T5624] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.181397][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.182496][ T5624] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.193970][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.215943][ T5624] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.219161][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.230745][ T5624] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.240380][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.341369][ T5625] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.347879][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.349743][ T5625] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.366680][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.367702][ T5625] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.380618][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.397038][ T5625] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.399952][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.502021][ T5628] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 89.510751][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.523296][ T5628] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 89.528868][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.529718][ T5628] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 89.537310][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.547000][ T5628] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 89.559766][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.622297][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.667159][ T5617] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.671575][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.672416][ T5617] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.690262][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.705700][ T5617] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.710447][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.712290][ T5617] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.721189][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.731009][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.781759][ T979] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.781862][ T979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.819451][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.819538][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.863317][ T5618] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.877896][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.880519][ T5618] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.883551][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.889783][ T5618] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.898068][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.937119][ T5618] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.941571][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.049735][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.063612][ T5627] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.070270][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.071288][ T5627] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.076858][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.103779][ T5627] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.111407][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.112445][ T5627] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.123359][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.193412][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.252326][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.252613][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.287638][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.314066][ T1028] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.314193][ T1028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.345889][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.417617][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.459577][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.459698][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.488490][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.499045][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.499170][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.538941][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.553109][ T5625] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.571775][ T1028] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.571857][ T1028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.617253][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.617367][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.655542][ T5619] Bluetooth: hci3: command tx timeout [ 90.655585][ T5619] Bluetooth: hci4: command tx timeout [ 90.655611][ T5619] Bluetooth: hci1: command tx timeout [ 90.655784][ T5626] Bluetooth: hci0: command tx timeout [ 90.683291][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.734679][ T4927] Bluetooth: hci5: command tx timeout [ 90.734775][ T5626] Bluetooth: hci2: command tx timeout [ 90.752055][ T1028] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.752167][ T1028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.805286][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.811340][ T1028] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.811447][ T1028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.983537][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.078931][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.079044][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.109692][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.109799][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.449528][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.619631][ T5624] veth0_vlan: entered promiscuous mode [ 91.677941][ T5624] veth1_vlan: entered promiscuous mode [ 91.895592][ T5624] veth0_macvtap: entered promiscuous mode [ 91.938918][ T5624] veth1_macvtap: entered promiscuous mode [ 92.040199][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.071168][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.120893][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.206030][ T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.207171][ T134] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.207219][ T134] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.207262][ T134] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.476870][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.601288][ T979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.602405][ T979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.708474][ T3244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.708503][ T3244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.736125][ T4927] Bluetooth: hci1: command tx timeout [ 92.736165][ T4927] Bluetooth: hci4: command tx timeout [ 92.736192][ T4927] Bluetooth: hci3: command tx timeout [ 92.736260][ T5626] Bluetooth: hci0: command tx timeout [ 92.819364][ T5619] Bluetooth: hci5: command tx timeout [ 92.819422][ T5626] Bluetooth: hci2: command tx timeout [ 92.919423][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.996958][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.055528][ T5624] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.170817][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.221525][ T5618] veth0_vlan: entered promiscuous mode [ 93.238323][ T5618] veth1_vlan: entered promiscuous mode [ 93.270260][ T5618] veth0_macvtap: entered promiscuous mode [ 93.282589][ T5618] veth1_macvtap: entered promiscuous mode [ 93.306115][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.311474][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.357711][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.450147][ T5625] veth0_vlan: entered promiscuous mode [ 93.479421][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.104592][ T1190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.163486][ T1028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.163509][ T1028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.163776][ T1028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.163792][ T1028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.224900][ T5625] veth1_vlan: entered promiscuous mode [ 94.243788][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.264299][ T5617] veth0_vlan: entered promiscuous mode [ 94.330631][ T5617] veth1_vlan: entered promiscuous mode [ 94.421223][ T5625] veth0_macvtap: entered promiscuous mode [ 94.466670][ T5625] veth1_macvtap: entered promiscuous mode [ 94.519860][ T5627] veth0_vlan: entered promiscuous mode [ 94.537037][ T5628] veth0_vlan: entered promiscuous mode [ 94.593203][ T5627] veth1_vlan: entered promiscuous mode [ 94.631145][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.648141][ T5617] veth0_macvtap: entered promiscuous mode [ 94.662158][ T5628] veth1_vlan: entered promiscuous mode [ 94.693515][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.708334][ T5617] veth1_macvtap: entered promiscuous mode [ 94.750879][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.750964][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.751037][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.751081][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.852242][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.903435][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.925244][ T5628] veth0_macvtap: entered promiscuous mode [ 94.933066][ T5627] veth0_macvtap: entered promiscuous mode [ 94.982866][ T5628] veth1_macvtap: entered promiscuous mode [ 94.991039][ T5627] veth1_macvtap: entered promiscuous mode [ 95.020656][ T5857] loop9: detected capacity change from 0 to 7 [ 95.027659][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 95.027804][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 95.034000][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 95.034077][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 95.036656][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 95.036756][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 95.037707][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 95.037776][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 95.039978][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 95.040048][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 95.040298][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 95.040377][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 95.040660][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 95.040731][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 95.040780][ T5857] ldm_validate_partition_table(): Disk read failed. [ 95.041217][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 95.041310][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 95.041857][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 95.041924][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 95.042100][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 95.042167][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 95.043354][ T5857] Dev loop9: unable to read RDB block 0 [ 95.055923][ T979] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.055981][ T979] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.056024][ T979] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.056066][ T979] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.071529][ T5857] loop9: unable to read partition table [ 95.071781][ T5857] loop9: partition table beyond EOD, truncated [ 95.071831][ T5857] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 95.319543][ T1028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.319570][ T1028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.338456][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.378868][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.483924][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.498688][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.508476][ T1190] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.508735][ T1190] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.508785][ T1190] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.508828][ T1190] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.508871][ T1190] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.508915][ T1190] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.508959][ T1190] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.509002][ T1190] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.548223][ T1028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.548249][ T1028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.090625][ T5868] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.090672][ T5868] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.845567][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.845593][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.196974][ T979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.197037][ T979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.437654][ T5874] Zero length message leads to an empty skb [ 100.532022][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.532042][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.680230][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.680248][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.485590][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.486024][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.034792][ T5887] Bluetooth: MGMT ver 1.23 [ 102.034838][ T5887] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 103.036254][ T5883] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 104.673466][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 108.810224][ T5912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22'. [ 111.167733][ T5940] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 111.355844][ T5748] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 111.396391][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.397360][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.505288][ T5748] usb 2-1: device descriptor read/64, error -71 [ 111.784654][ T5748] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 111.913322][ T5932] bridge_slave_0: left allmulticast mode [ 111.913354][ T5932] bridge_slave_0: left promiscuous mode [ 111.913999][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.933148][ T5748] usb 2-1: device descriptor read/64, error -71 [ 112.026291][ T5932] bridge_slave_1: left allmulticast mode [ 112.026328][ T5932] bridge_slave_1: left promiscuous mode [ 112.026527][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.057514][ T5748] usb usb2-port1: attempt power cycle [ 113.125469][ T5748] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 113.145641][ T5748] usb 2-1: device descriptor read/8, error -71 [ 113.181158][ T5932] bond0: (slave bond_slave_0): Releasing backup interface [ 113.447848][ T5932] bond0: (slave bond_slave_1): Releasing backup interface [ 113.531744][ T5967] netlink: 20 bytes leftover after parsing attributes in process `syz.2.34'. [ 113.542705][ T5748] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 114.376207][ T5932] team0: Port device team_slave_0 removed [ 114.427087][ T5932] team0: Port device team_slave_1 removed [ 114.433657][ T5932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.451938][ T5748] usb 2-1: device descriptor read/8, error -71 [ 114.467912][ T5932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.498015][ T5932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.517023][ T5932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.557035][ T5748] usb usb2-port1: unable to enumerate USB device [ 114.580301][ T5932] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 124.017881][ T6036] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 124.055017][ T6036] bond1: (slave lo): Enslaving as an active interface with an up link [ 124.056742][ T6036] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 124.736583][ T6043] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 125.468667][ T25] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 125.725535][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 125.726586][ T25] usb 6-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 125.751775][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.751808][ T25] usb 6-1: Product: syz [ 125.751827][ T25] usb 6-1: Manufacturer: syz [ 125.751844][ T25] usb 6-1: SerialNumber: syz [ 125.870911][ T25] usb 6-1: config 0 descriptor?? [ 125.891095][ T25] usb 6-1: selecting invalid altsetting 1 [ 125.891123][ T25] technisat-usb2: could not set alternate setting to 0 [ 126.046593][ T1174] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 126.115868][ T25] technisat-usb2: firmware version: 0.0 [ 126.115920][ T25] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 126.604454][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 126.870496][ T1174] usb 4-1: device descriptor read/64, error -71 [ 126.933561][ T25] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 126.947426][ T25] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 126.947492][ T25] usb 6-1: media controller created [ 126.970950][ T25] technisat-usb2: i2c-error: out failed 53 = -22 [ 126.971059][ T25] dvb-usb: MAC address reading failed. [ 127.018821][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 127.114542][ T1174] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 127.729423][ T1174] usb 4-1: device descriptor read/64, error -71 [ 128.030516][ T1174] usb usb4-port1: attempt power cycle [ 130.256141][ T1174] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 130.572788][ T25] DVB: Unable to find symbol stv090x_attach() [ 130.622730][ T1174] usb 4-1: device descriptor read/8, error -71 [ 130.641588][ T25] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 130.934604][ T25] rc_core: IR keymap rc-technisat-usb2 not found [ 130.934647][ T25] Registered IR keymap rc-empty [ 131.615720][ T25] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 131.618569][ T25] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input13 [ 131.898794][ T25] dvb-usb: schedule remote query interval to 100 msecs. [ 132.007297][ T6101] netlink: 20 bytes leftover after parsing attributes in process `syz.0.67'. [ 132.215099][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.215196][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.221481][ T5747] dvb-usb: error -71 while querying for an remote control event. [ 132.222189][ T25] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 132.242225][ T25] usb 6-1: USB disconnect, device number 2 [ 132.325051][ T5747] dvb-usb: error -19 while querying for an remote control event. [ 132.404652][ T5343] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 132.437498][ T5747] dvb-usb: error -19 while querying for an remote control event. [ 132.575360][ T5343] usb 2-1: Using ep0 maxpacket: 32 [ 132.577286][ T5343] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 132.580324][ T5343] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.580349][ T5343] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 132.580403][ T5343] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.766520][ T5343] usb 2-1: config 0 descriptor?? [ 133.068680][ T25] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 133.115733][ T9] usb 2-1: USB disconnect, device number 6 [ 133.193960][ T6015] udevd[6015]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 133.397788][ T6029] udevd[6029]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 133.538654][ T1174] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 133.550499][ T1174] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 136.786351][ T5891] rpcbind: server 127.0.0.1 not responding, timed out [ 136.955424][ T6159] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 138.038764][ T6178] kAFS: No cell specified [ 139.131233][ T6190] fuse: Bad value for 'fd' [ 139.168196][ T6190] netlink: 'syz.1.92': attribute type 1 has an invalid length. [ 140.435480][ T5747] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 140.531507][ T6207] fuse: Bad value for 'fd' [ 140.570212][ T6207] netlink: 'syz.2.96': attribute type 1 has an invalid length. [ 140.589953][ T5747] usb 2-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 140.593740][ T5747] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 140.593791][ T5747] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.625644][ T5343] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 140.666879][ T5343] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 140.673076][ T5747] usb 2-1: config 0 descriptor?? [ 140.673859][ T6202] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 141.199220][ T5747] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 141.199258][ T5747] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 141.199282][ T5747] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 141.199306][ T5747] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 141.199330][ T5747] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 141.199354][ T5747] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 141.199378][ T5747] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 141.199402][ T5747] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 141.199425][ T5747] uclogic 0003:5543:0064.0003: unknown main item tag 0x0 [ 141.281229][ T5747] uclogic 0003:5543:0064.0003: collection stack underflow [ 141.281259][ T5747] uclogic 0003:5543:0064.0003: item 0 0 0 12 parsing failed [ 141.312675][ T5747] uclogic 0003:5543:0064.0003: parse failed [ 141.314340][ T5747] uclogic 0003:5543:0064.0003: probe with driver uclogic failed with error -22 [ 141.362427][ T5747] usb 2-1: USB disconnect, device number 7 [ 141.745542][ T6220] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 142.683518][ T6231] debugfs: '!' already exists in 'ieee80211' [ 142.713080][ T6237] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 143.396747][ T6253] kAFS: No cell specified [ 144.089247][ T6079] rpcbind: server 127.0.0.1 not responding, timed out [ 144.642043][ T6261] netlink: 12 bytes leftover after parsing attributes in process `syz.2.109'. [ 145.594275][ T6266] netlink: 12 bytes leftover after parsing attributes in process `syz.0.110'. [ 146.239373][ T6270] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 146.624270][ T6281] netlink: 12 bytes leftover after parsing attributes in process `syz.1.117'. [ 152.527575][ T6312] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 154.035594][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 154.334622][ T6323] overlayfs: failed to clone upperpath [ 154.569386][ T9] hid_parser_main: 126 callbacks suppressed [ 154.569416][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 154.582311][ T9] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 154.854832][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 156.084588][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 157.114881][ T5734] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 157.256681][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 157.274317][ T9] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 157.285070][ T5734] usb 6-1: Using ep0 maxpacket: 8 [ 157.286291][ T5734] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 157.307138][ T5734] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 157.307173][ T5734] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 157.307220][ T5734] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 157.307272][ T5734] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.375657][ T5734] usbtmc 6-1:16.0: bulk endpoints not found [ 158.704681][ T6366] kAFS: No cell specified [ 158.706647][ T6366] overlayfs: failed to clone upperpath [ 160.044698][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 161.452638][ T5774] usb 6-1: USB disconnect, device number 3 [ 161.766957][ T6383] netlink: 72 bytes leftover after parsing attributes in process `syz.1.149'. [ 161.954690][ T5734] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 162.029755][ T6388] netlink: 12 bytes leftover after parsing attributes in process `syz.3.146'. [ 162.795018][ T5734] usb 5-1: Using ep0 maxpacket: 8 [ 162.880061][ T5734] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 162.929476][ T5734] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 162.929678][ T5734] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 162.929751][ T5734] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 162.929825][ T5734] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 162.929899][ T5734] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 162.930047][ T5734] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.944642][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 164.132541][ T6394] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 165.299420][ T5769] usb 5-1: USB disconnect, device number 2 [ 167.955136][ T6425] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 168.650202][ T6441] netlink: 20 bytes leftover after parsing attributes in process `syz.3.166'. [ 171.954472][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 172.089336][ T6467] fuse: Bad value for 'fd' [ 172.325190][ T5343] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 173.389030][ T5343] usb 5-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 176.084956][ T5343] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 176.085005][ T5343] usb 5-1: can't read configurations, error -71 [ 176.869030][ T31] audit: type=1800 audit(1791338511.256:2): pid=6486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.178" name=08 dev="sda1" ino=2051 res=0 errno=0 [ 184.754557][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 185.074650][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 191.991880][ T6514] netlink: 24 bytes leftover after parsing attributes in process `syz.4.186'. [ 191.991945][ T6514] netlink: 24 bytes leftover after parsing attributes in process `syz.4.186'. [ 193.190017][ C1] sched: DL replenish lagged too much [ 193.777495][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.785861][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.844861][ T4927] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 195.847767][ T4927] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 195.849882][ T4927] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 195.850482][ T4927] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 195.851202][ T4927] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 195.975806][ T4927] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 196.824174][ T4927] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 196.833612][ T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 196.834293][ T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 197.280709][ T52] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 199.374589][ T5626] Bluetooth: hci6: command tx timeout [ 199.454797][ T5626] Bluetooth: hci7: command tx timeout [ 201.456724][ T5626] Bluetooth: hci6: command tx timeout [ 201.536142][ T5626] Bluetooth: hci7: command tx timeout [ 202.813220][ T6565] debugfs: '!' already exists in 'ieee80211' [ 204.460932][ T5626] Bluetooth: hci6: command tx timeout [ 204.460989][ T5626] Bluetooth: hci7: command tx timeout [ 206.514521][ T5619] Bluetooth: hci7: command tx timeout [ 206.514563][ T5619] Bluetooth: hci6: command tx timeout [ 212.767878][ T4927] Bluetooth: hci3: command 0x0406 tx timeout [ 212.767934][ T4927] Bluetooth: hci4: command 0x0406 tx timeout [ 212.767968][ T4927] Bluetooth: hci5: command 0x0406 tx timeout [ 212.768000][ T4927] Bluetooth: hci2: command 0x0406 tx timeout [ 213.301527][ T6602] overlayfs: failed to resolve './file1': -2 [ 213.678267][ T4927] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 213.682889][ T4927] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 213.683722][ T4927] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 213.708921][ T4927] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 213.710023][ T4927] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 215.778349][ T4927] Bluetooth: hci0: command tx timeout [ 217.974443][ T4927] Bluetooth: hci0: command tx timeout [ 219.279379][ T5891] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.014508][ T4927] Bluetooth: hci0: command tx timeout [ 220.258644][ T5891] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.935879][ T5891] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.273083][ T4927] Bluetooth: hci0: command tx timeout [ 255.869478][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.880303][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.052732][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.063549][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.911096][ T5626] Bluetooth: hci6: command 0x0406 tx timeout [ 324.911150][ T5626] Bluetooth: hci7: command 0x0406 tx timeout [ 342.746607][ T6587] Bluetooth: hci0: command 0x0406 tx timeout [ 371.711984][ T32] INFO: task kworker/u8:11:5891 blocked for more than 144 seconds. [ 371.712019][ T32] Not tainted syzkaller #0 [ 371.712033][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 371.712045][ T32] task:kworker/u8:11 state:D stack:22184 pid:5891 tgid:5891 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 371.712122][ T32] Workqueue: netns cleanup_net [ 371.712166][ T32] Call Trace: [ 371.712176][ T32] [ 371.712193][ T32] __schedule+0x17db/0x58f0 [ 371.712249][ T32] ? ops_undo_list+0x17d/0x8d0 [ 371.712286][ T32] ? process_scheduled_works+0xc3d/0x1630 [ 371.712323][ T32] ? ret_from_fork+0x514/0xb70 [ 371.712357][ T32] ? __pfx___schedule+0x10/0x10 [ 371.712403][ T32] ? schedule+0x90/0x2b0 [ 371.712443][ T32] schedule+0x164/0x2b0 [ 371.712481][ T32] schedule_preempt_disabled+0x13/0x30 [ 371.712516][ T32] __mutex_lock+0x7c1/0x1550 [ 371.712562][ T32] ? __mutex_lock+0x5d4/0x1550 [ 371.712614][ T32] ? nsim_destroy+0x173/0x800 [ 371.712649][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 371.712690][ T32] ? __kfree_rcu_sheaf+0x1c2/0x690 [ 371.712727][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 371.712759][ T32] ? kvfree_call_rcu+0xa1/0x430 [ 371.712805][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 371.712841][ T32] nsim_destroy+0x173/0x800 [ 371.712880][ T32] __nsim_dev_port_del+0x14e/0x200 [ 371.712922][ T32] nsim_dev_reload_destroy+0x288/0x490 [ 371.712960][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 371.712996][ T32] nsim_dev_reload_down+0x8a/0xc0 [ 371.713037][ T32] devlink_reload+0x1c5/0x890 [ 371.713086][ T32] ? __pfx_devlink_reload+0x10/0x10 [ 371.713123][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 371.713171][ T32] devlink_pernet_pre_exit+0x1ff/0x420 [ 371.713213][ T32] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 371.713250][ T32] ? _raw_spin_unlock+0x28/0x50 [ 371.713283][ T32] ? iput+0xb84/0xf00 [ 371.713334][ T32] ops_undo_list+0x17d/0x8d0 [ 371.713379][ T32] ? __pfx_ops_undo_list+0x10/0x10 [ 371.713413][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 371.713448][ T32] ? idr_destroy+0x218/0x290 [ 371.713483][ T32] ? do_raw_spin_unlock+0xf5/0x200 [ 371.713528][ T32] cleanup_net+0x572/0x810 [ 371.713574][ T32] ? __pfx_cleanup_net+0x10/0x10 [ 371.713609][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 371.713647][ T32] ? rcu_is_watching+0x16/0xb0 [ 371.713681][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 371.713713][ T32] ? process_scheduled_works+0x97a/0x1630 [ 371.713749][ T32] process_scheduled_works+0xc3d/0x1630 [ 371.713784][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 371.713860][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 371.713903][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 371.713933][ T32] ? assign_work+0x3cf/0x5d0 [ 371.713974][ T32] worker_thread+0xa47/0xfb0 [ 371.714013][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 371.714054][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 371.714085][ T32] ? __kthread_parkme+0x71/0x1f0 [ 371.714134][ T32] kthread+0x38b/0x480 [ 371.714161][ T32] ? __pfx_worker_thread+0x10/0x10 [ 371.714195][ T32] ? __pfx_kthread+0x10/0x10 [ 371.714223][ T32] ret_from_fork+0x514/0xb70 [ 371.714253][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 371.714278][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 371.731069][ T32] ? __switch_to+0xc89/0x1420 [ 371.731134][ T32] ? __pfx_kthread+0x10/0x10 [ 371.731165][ T32] ret_from_fork_asm+0x1a/0x30 [ 371.731227][ T32] [ 371.731261][ T32] [ 371.731261][ T32] Showing all locks held in the system: [ 371.731272][ T32] locks held by kthreadd/2: 2, last CPU#1: [ 371.731291][ T32] #0: ffffffff8eeac630 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 371.731364][ T32] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 371.731439][ T32] locks held by kworker/u8:0/12: 3, last CPU#1: [ 371.731458][ T32] #0: ffff88801b0a4140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 371.731532][ T32] #1: ffffc90000117c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 371.731606][ T32] #2: ffff888052130800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 371.731678][ T32] locks held by kworker/u8:1/13: 4, last CPU#0: [ 371.731696][ T32] #0: ffff8880355ba940 ((wq_completion)wg-kex-wg0#10){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 371.731777][ T32] #1: ffffc90000127c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 371.731851][ T32] #2: ffff888078801440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 371.731922][ T32] #3: ffff88807aa86640 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 371.732000][ T32] locks held by kworker/R-mm_pe/14: 1, on CPU#1: [ 371.732018][ T32] #0: ffffffff8ebf92a0 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xc0b/0x10e0 [ 371.732099][ T32] locks held by kworker/1:0/25: 1, last CPU#1: [ 371.732117][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: process_scheduled_works+0x97a/0x1630 [ 371.732191][ T32] locks held by kworker/1:1/30: 3, last CPU#1: [ 371.732210][ T32] #0: ffff888032a39140 ((wq_completion)wg-kex-wg0#12){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 371.732290][ T32] #1: ffffc90000a57c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 371.732382][ T32] #2: ffff888078801440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 371.732452][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 371.732470][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 371.732536][ T32] locks held by kworker/u8:2/43: 3, last CPU#1: [ 371.732555][ T32] #0: ffff88801b0a4140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 371.732628][ T32] #1: ffffc90000b37c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 371.732702][ T32] #2: ffff8880538f0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 371.732772][ T32] locks held by kworker/u8:3/50: 5, last CPU#0: