last executing test programs: 1m3.180562029s ago: executing program 1 (id=571): mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074") ioctl(r0, 0xc138fd0e, &(0x7f0000000000)="040000000000000000000000380100003801") r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r1, 0xc138fd05, &(0x7f0000000000)="040000000200000000007c2fc2") 1m2.660626646s ago: executing program 1 (id=573): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000340)="2e1221b23bb6", 0x6}, {&(0x7f0000000300)="0400000002e877", 0x7}], 0x2) 1m0.216620932s ago: executing program 0 (id=582): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r0, &(0x7f0000000700)='/', 0x1) 1m0.06145047s ago: executing program 1 (id=584): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@multicast2, @in6=@private1, 0x4f23, 0x0, 0x4e23, 0x2, 0xa, 0x2a11bad3d5f03f24, 0x10, 0x89, 0x0, 0xee01}, {0xfffffffe, 0x2, 0xfffffffffffffffc, 0x1, 0xfffffffffffffffb, 0x3, 0x9, 0x7fff}, {0x4800000, 0xfffffffffffffffe, 0x4, 0x1000000007}, 0xd8, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in=@private=0xa010102, 0x210000, 0x2b}, 0xa, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x17, 0x1, 0x0, 0xfffffffb}}, 0xe8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xa4}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, 0x0, 0x4040084) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 59.540148393s ago: executing program 0 (id=585): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRES32=r2, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 59.380792188s ago: executing program 1 (id=587): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90b24fc60", 0x8c0}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000d40)=""/204, 0xcc}, {&(0x7f0000001280)=""/196, 0xc4}, {&(0x7f0000000680)=""/145, 0x91}, {&(0x7f0000000a80)=""/193, 0xc1}, {&(0x7f0000004480)=""/4080, 0xff0}, {&(0x7f0000000240)=""/125, 0x7d}, {&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000003100)=""/4092, 0xffc}, {&(0x7f0000000580)=""/239, 0xef}, {&(0x7f00000009c0)=""/132, 0x84}, {&(0x7f0000001380)=""/222, 0xde}, {&(0x7f0000000780)=""/233, 0xe9}, {&(0x7f0000000e40)=""/68, 0x44}, {&(0x7f0000000f00)=""/134, 0x86}], 0xe}, 0x140) 59.062261649s ago: executing program 0 (id=588): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x44840) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 57.011406012s ago: executing program 0 (id=591): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c000000090601020000000000000000030000000900020073797a31000000000500010007000000440007801800018014000240fe8000000000000000800000000000aa1800148014000240ff020000000000000000000000000001060004404e1f00000500070084"], 0x6c}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 56.608717765s ago: executing program 1 (id=594): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x80000) 56.536604763s ago: executing program 0 (id=595): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@empty, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x68, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f0000000940)=[{{0x0, 0xffffff07, &(0x7f0000000540), 0x2}, 0x3b61}], 0x4000048, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0xfffffffe, @empty}, 0x20) bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x658, @empty, 0x0, 0x6}, 0x20) 56.123945586s ago: executing program 1 (id=598): madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r0 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x0, 0x200) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0xfffffffb, 0x6, 0x0, 0x1, 'syz1\x00'}, 0x6, 0x100, 0x4, r2, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_emit_vhci(0x0, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x14) 51.744926969s ago: executing program 0 (id=604): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90b24fc60", 0x8c0}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000d40)=""/204, 0xcc}, {&(0x7f0000001280)=""/196, 0xc4}, {&(0x7f0000000680)=""/145, 0x91}, {&(0x7f0000000a80)=""/193, 0xc1}, {&(0x7f0000004480)=""/4080, 0xff0}, {0x0}, {&(0x7f0000000240)=""/125, 0x7d}, {&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000003100)=""/4092, 0xffc}, {&(0x7f0000000580)=""/239, 0xef}, {&(0x7f00000009c0)=""/132, 0x84}, {&(0x7f0000001380)=""/222, 0xde}, {&(0x7f0000000780)=""/233, 0xe9}, {&(0x7f0000000e40)=""/68, 0x44}, {&(0x7f0000000f00)=""/134, 0x86}], 0xf}, 0x140) 36.724734696s ago: executing program 32 (id=598): madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r0 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x0, 0x200) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0xfffffffb, 0x6, 0x0, 0x1, 'syz1\x00'}, 0x6, 0x100, 0x4, r2, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_emit_vhci(0x0, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x14) 33.682708318s ago: executing program 33 (id=604): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90b24fc60", 0x8c0}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000d40)=""/204, 0xcc}, {&(0x7f0000001280)=""/196, 0xc4}, {&(0x7f0000000680)=""/145, 0x91}, {&(0x7f0000000a80)=""/193, 0xc1}, {&(0x7f0000004480)=""/4080, 0xff0}, {0x0}, {&(0x7f0000000240)=""/125, 0x7d}, {&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000003100)=""/4092, 0xffc}, {&(0x7f0000000580)=""/239, 0xef}, {&(0x7f00000009c0)=""/132, 0x84}, {&(0x7f0000001380)=""/222, 0xde}, {&(0x7f0000000780)=""/233, 0xe9}, {&(0x7f0000000e40)=""/68, 0x44}, {&(0x7f0000000f00)=""/134, 0x86}], 0xf}, 0x140) 21.358493724s ago: executing program 3 (id=647): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c000000090601020000000000000000030000000900020073797a31000000000500010007000000440007801800018014000240fe8000000000000000800000000000aa1800148014000240ff020000000000000000000000000001060004404e1f00000500070084"], 0x6c}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 21.03998715s ago: executing program 3 (id=650): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000300)=0xfffffd7c, 0x4) 20.861861877s ago: executing program 3 (id=652): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000006104000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@empty, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x68, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f0000000940)=[{{0x0, 0xffffff07, &(0x7f0000000540), 0x2}, 0x3b61}], 0x4000048, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0xfffffffe, @empty}, 0x20) bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x658, @empty, 0x0, 0x6}, 0x20) 20.811144617s ago: executing program 2 (id=653): socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000140)}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="00042dbd7000fddb4b38ddb2658926c499"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4804) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000000)=0x1, 0x4) r3 = socket(0x2b, 0x80801, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000000)={r4, 0x7, 0xfff, 0xa0000000000}) sendmsg$nl_route_sched(r4, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000400)='./file0\x00'}, 0x18) sendmsg$nl_route_sched(r4, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f00000003c0)={0x2, 0x4e24, @empty}, 0x10) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x0, 0x0, @local, 0x1}], 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r6, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000003440)={&(0x7f0000002180)={0x20, 0xa, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x1014) 19.67105617s ago: executing program 2 (id=658): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, 0x0, 0x0) connect$unix(r0, &(0x7f0000000440)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 19.449411335s ago: executing program 3 (id=660): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000300)=0xfffffd7c, 0x4) 19.236999728s ago: executing program 2 (id=661): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e50200000000000000000700", @ANYRES32=r2, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 18.475308337s ago: executing program 4 (id=664): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2043) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x2d, 0x4, 0x8}}, 0x50) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000040)={0x34, 0x6, 0x0, {0x1, 0x5, 0xb, 0x0, 'unlock all\x00'}}, 0x34) 18.07753323s ago: executing program 4 (id=665): socket(0x10, 0x803, 0x0) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) read(r1, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000300)={0x58, 0x0, 0x68}) tkill(r0, 0x7) 17.78791167s ago: executing program 2 (id=666): socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000140)}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="00042dbd7000fddb4b38ddb2658926c499"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4804) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000000)=0x1, 0x4) r3 = socket(0x2b, 0x80801, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000000)={r4, 0x7, 0xfff, 0xa0000000000}) sendmsg$nl_route_sched(r4, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000400)='./file0\x00'}, 0x18) sendmsg$nl_route_sched(r4, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f00000003c0)={0x2, 0x4e24, @empty}, 0x10) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x0, 0x0, @local, 0x1}], 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r6, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000003440)={&(0x7f0000002180)={0x20, 0xa, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x1014) 17.687611501s ago: executing program 4 (id=667): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x2383, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB="b70000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map=r1, r2, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000340), &(0x7f0000000380)=@tcp=r0}, 0x20) write(r0, &(0x7f0000000700)='h', 0x1) recvfrom(r0, 0x0, 0x0, 0x12e, 0x0, 0x0) 17.313440621s ago: executing program 4 (id=668): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000006104000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@empty, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x68, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f0000000940)=[{{0x0, 0xffffff07, &(0x7f0000000540), 0x2}, 0x3b61}], 0x4000048, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0xfffffffe, @empty}, 0x20) bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x658, @empty, 0x0, 0x6}, 0x20) 16.791047082s ago: executing program 3 (id=669): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x80840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000015c000/0x18000)=nil, &(0x7f0000000400)=[@text32={0x20, &(0x7f00000000c0)="2e0f785c7f06660fc7b503000000b9ec0200000f320f300f784e0026660fc7b69edf0000b8010000000f01c1ea53000000be00660f303e0fc75fab", 0x3b}], 0x1, 0x1c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, 0x0, 0x4000090) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000b00000000000500000014000500200100000000000000000100000000001c00"], 0x4c}}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x30}}, 0x0) 16.160146403s ago: executing program 4 (id=670): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@multicast2, @in6=@private1, 0x4f23, 0x0, 0x4e23, 0x2, 0xa, 0x2a11bad3d5f03f24, 0x10, 0x89, 0x0, 0xee01}, {0xfffffffe, 0x2, 0xfffffffffffffffc, 0x1, 0xfffffffffffffffb, 0x3, 0x9, 0x7fff}, {0x4800000, 0xfffffffffffffffe, 0x4, 0x1000000007}, 0xd8, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in=@private=0xa010102, 0x210000, 0x2b}, 0xa, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x17, 0x1, 0x0, 0xfffffffb}}, 0xe8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xa4}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, 0x0, 0x4040084) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443", 0x67}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 16.030518106s ago: executing program 2 (id=671): setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000100)=0x375, 0x4) symlink(0x0, &(0x7f00000000c0)='./file0\x00') sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={0x0, 0x10}}, 0x20040010) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x4, 0xffffffffffffffff, 0x0}]) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x8}, &(0x7f00000000c0)=0x8) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0285628, &(0x7f0000000080)={0x3, @win={{}, 0x5, 0x0, 0x0, 0x0, 0x0}}) 15.885126288s ago: executing program 4 (id=672): socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c000000090601020000000000000000030000000900020073797a31000000000500010007000000440007801800018014000240fe8000000000000000800000000000aa1800148014000240ff020000000000000000000000000001060004404e1f00000500070084"], 0x6c}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 15.731862387s ago: executing program 2 (id=673): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2043) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x2d, 0x4, 0x8}}, 0x50) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000040)={0x34, 0x6, 0x0, {0x1, 0x5, 0xb, 0x0, 'unlock all\x00'}}, 0x34) 15.731000312s ago: executing program 3 (id=674): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e50200000000000000000700", @ANYRES32=r2, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 0s ago: executing program 34 (id=673): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2043) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x2d, 0x4, 0x8}}, 0x50) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000040)={0x34, 0x6, 0x0, {0x1, 0x5, 0xb, 0x0, 'unlock all\x00'}}, 0x34) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.201' (ED25519) to the list of known hosts. [ 74.896113][ T5569] cgroup: Unknown subsys name 'net' [ 75.137454][ T5569] cgroup: Unknown subsys name 'cpuset' [ 75.192415][ T5569] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.842476][ T5569] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.070847][ T5585] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.076286][ T5585] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.111305][ T5583] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.119282][ T5583] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.120802][ T5583] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.123562][ T5583] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.124257][ T5583] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.165787][ T4897] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.206542][ T4897] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.207671][ T4897] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.265530][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.283952][ T5583] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.286063][ T5583] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.291521][ T5585] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.297386][ T5585] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.327344][ T5585] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.332547][ T5585] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.336452][ T5585] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.339155][ T5585] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.340608][ T5585] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.417608][ T4897] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.437938][ T4897] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.454919][ T4897] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.461301][ T4897] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.477543][ T4897] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.213174][ T59] Bluetooth: hci0: command tx timeout [ 81.292077][ T59] Bluetooth: hci1: command tx timeout [ 81.372311][ T59] Bluetooth: hci2: command tx timeout [ 81.372662][ T59] Bluetooth: hci3: command tx timeout [ 81.480150][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.480893][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.481194][ T5596] bridge_slave_0: entered allmulticast mode [ 81.484640][ T5596] bridge_slave_0: entered promiscuous mode [ 81.531160][ T5581] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.531271][ T5581] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.531688][ T5581] bridge_slave_0: entered allmulticast mode [ 81.533208][ T59] Bluetooth: hci4: command tx timeout [ 81.535432][ T5581] bridge_slave_0: entered promiscuous mode [ 81.537163][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.537272][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.537456][ T5596] bridge_slave_1: entered allmulticast mode [ 81.541095][ T5596] bridge_slave_1: entered promiscuous mode [ 81.555026][ T5582] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.555135][ T5582] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.555269][ T5582] bridge_slave_0: entered allmulticast mode [ 81.560367][ T5582] bridge_slave_0: entered promiscuous mode [ 81.576549][ T5581] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.576906][ T5581] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.577358][ T5581] bridge_slave_1: entered allmulticast mode [ 81.579818][ T5581] bridge_slave_1: entered promiscuous mode [ 81.627009][ T5582] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.627121][ T5582] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.627271][ T5582] bridge_slave_1: entered allmulticast mode [ 81.630012][ T5582] bridge_slave_1: entered promiscuous mode [ 81.769469][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.837754][ T5581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.845008][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.845207][ T5593] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.845358][ T5593] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.845903][ T5593] bridge_slave_0: entered allmulticast mode [ 81.848614][ T5593] bridge_slave_0: entered promiscuous mode [ 81.857481][ T5582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.881022][ T5581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.899297][ T5593] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.899712][ T5593] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.899849][ T5593] bridge_slave_1: entered allmulticast mode [ 81.902420][ T5593] bridge_slave_1: entered promiscuous mode [ 81.907749][ T5582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.092556][ T5592] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.092711][ T5592] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.092855][ T5592] bridge_slave_0: entered allmulticast mode [ 82.094239][ T5592] bridge_slave_0: entered promiscuous mode [ 82.151687][ T5592] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.151795][ T5592] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.151890][ T5592] bridge_slave_1: entered allmulticast mode [ 82.155865][ T5592] bridge_slave_1: entered promiscuous mode [ 82.181201][ T5596] team0: Port device team_slave_0 added [ 82.221167][ T5581] team0: Port device team_slave_0 added [ 82.224373][ T5596] team0: Port device team_slave_1 added [ 82.228075][ T5593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.231336][ T5582] team0: Port device team_slave_0 added [ 82.253013][ T5581] team0: Port device team_slave_1 added [ 82.268473][ T5593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.270119][ T5582] team0: Port device team_slave_1 added [ 82.274474][ T5592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.328224][ T5592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.348891][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.348905][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.348932][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.414533][ T5581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.414548][ T5581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.414572][ T5581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.416636][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.416648][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.416672][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.418571][ T5593] team0: Port device team_slave_0 added [ 82.419522][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.419532][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.419553][ T5582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.438491][ T5581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.438504][ T5581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.438527][ T5581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.460796][ T5593] team0: Port device team_slave_1 added [ 82.461819][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.461829][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.461853][ T5582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.466352][ T5592] team0: Port device team_slave_0 added [ 82.515476][ T5592] team0: Port device team_slave_1 added [ 82.582652][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.582681][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.582706][ T5593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.647197][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.647211][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.647234][ T5593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.670090][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.670111][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.670135][ T5592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.703169][ T5596] hsr_slave_0: entered promiscuous mode [ 82.704596][ T5596] hsr_slave_1: entered promiscuous mode [ 82.741131][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.741144][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.741167][ T5592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.753617][ T5581] hsr_slave_0: entered promiscuous mode [ 82.755722][ T5581] hsr_slave_1: entered promiscuous mode [ 82.756637][ T5581] debugfs: 'hsr0' already exists in 'hsr' [ 82.756738][ T5581] Cannot create hsr debugfs directory [ 82.773368][ T5582] hsr_slave_0: entered promiscuous mode [ 82.774568][ T5582] hsr_slave_1: entered promiscuous mode [ 82.775384][ T5582] debugfs: 'hsr0' already exists in 'hsr' [ 82.775404][ T5582] Cannot create hsr debugfs directory [ 82.939183][ T5593] hsr_slave_0: entered promiscuous mode [ 82.939942][ T5593] hsr_slave_1: entered promiscuous mode [ 82.940480][ T5593] debugfs: 'hsr0' already exists in 'hsr' [ 82.940500][ T5593] Cannot create hsr debugfs directory [ 83.292145][ T59] Bluetooth: hci0: command tx timeout [ 83.373809][ T59] Bluetooth: hci1: command tx timeout [ 83.452269][ T59] Bluetooth: hci2: command tx timeout [ 83.452301][ T59] Bluetooth: hci3: command tx timeout [ 83.538106][ T5592] hsr_slave_0: entered promiscuous mode [ 83.538876][ T5592] hsr_slave_1: entered promiscuous mode [ 83.539389][ T5592] debugfs: 'hsr0' already exists in 'hsr' [ 83.539408][ T5592] Cannot create hsr debugfs directory [ 83.612187][ T4897] Bluetooth: hci4: command tx timeout [ 84.113668][ T5596] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.154986][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.173390][ T5596] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.206298][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.209159][ T5596] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.229242][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.264183][ T5596] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.305691][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.439346][ T5582] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.475071][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.478707][ T5582] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.525852][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.528046][ T5582] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.564198][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.585211][ T5582] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.624513][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.726675][ T5593] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.766389][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.773026][ T5593] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.806539][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.811025][ T5593] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.846042][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.866615][ T5593] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.907060][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.051088][ T5592] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.086207][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.094439][ T5592] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.135650][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.149646][ T5592] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.180379][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.205359][ T5592] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.234675][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.257542][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.360818][ T5581] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.372352][ T4897] Bluetooth: hci0: command tx timeout [ 85.395577][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.399687][ T5581] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.418037][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.421527][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.430581][ T5581] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.452187][ T4897] Bluetooth: hci1: command tx timeout [ 85.469976][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.484009][ T5581] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.524630][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.532264][ T59] Bluetooth: hci2: command tx timeout [ 85.532361][ T4897] Bluetooth: hci3: command tx timeout [ 85.573712][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.573897][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.617903][ T5582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.629825][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.629944][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.702835][ T4897] Bluetooth: hci4: command tx timeout [ 85.730172][ T5582] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.756487][ T5593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.766063][ T3418] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.766286][ T3418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.812971][ T1130] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.813100][ T1130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.867638][ T5593] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.908084][ T121] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.919939][ T121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.964663][ T5592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.004755][ T3418] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.004900][ T3418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.117545][ T5592] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.151721][ T5581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.181402][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.181537][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.296950][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.297080][ T3321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.374644][ T5581] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.470564][ T121] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.470851][ T121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.560810][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.560975][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.686183][ T36] cfg80211: failed to load regulatory.db [ 86.938207][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.253699][ T5582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.358409][ T5596] veth0_vlan: entered promiscuous mode [ 87.416786][ T5596] veth1_vlan: entered promiscuous mode [ 87.452119][ T4897] Bluetooth: hci0: command tx timeout [ 87.536255][ T4897] Bluetooth: hci1: command tx timeout [ 87.598428][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.612865][ T4897] Bluetooth: hci3: command tx timeout [ 87.612895][ T4897] Bluetooth: hci2: command tx timeout [ 87.655877][ T5582] veth0_vlan: entered promiscuous mode [ 87.677088][ T5596] veth0_macvtap: entered promiscuous mode [ 87.718119][ T5596] veth1_macvtap: entered promiscuous mode [ 87.742173][ T5582] veth1_vlan: entered promiscuous mode [ 87.772104][ T4897] Bluetooth: hci4: command tx timeout [ 87.885693][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.923131][ T5593] veth0_vlan: entered promiscuous mode [ 87.925405][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.967512][ T5582] veth0_macvtap: entered promiscuous mode [ 87.986498][ T5592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.041730][ T5593] veth1_vlan: entered promiscuous mode [ 88.047179][ T5582] veth1_macvtap: entered promiscuous mode [ 88.221546][ T5581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.310191][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.391361][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.449496][ T5593] veth0_macvtap: entered promiscuous mode [ 88.488238][ T5593] veth1_macvtap: entered promiscuous mode [ 88.736709][ T121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.736734][ T121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.915998][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.949046][ T5581] veth0_vlan: entered promiscuous mode [ 88.970732][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.027027][ T3321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.027043][ T3321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.037185][ T5581] veth1_vlan: entered promiscuous mode [ 89.144740][ T5592] veth0_vlan: entered promiscuous mode [ 89.364330][ T4288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.364348][ T4288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.396593][ T5592] veth1_vlan: entered promiscuous mode [ 89.649940][ T1130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.649958][ T1130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.788553][ T5581] veth0_macvtap: entered promiscuous mode [ 89.803005][ T121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.803023][ T121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.844401][ T5581] veth1_macvtap: entered promiscuous mode [ 89.979642][ T5592] veth0_macvtap: entered promiscuous mode [ 90.004771][ T3321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.004787][ T3321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.062784][ T5592] veth1_macvtap: entered promiscuous mode [ 90.073793][ T5581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.190030][ T5581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.230857][ T5778] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.344639][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.377976][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.226723][ T5782] device-mapper: ioctl: Invalid target message parameters. [ 91.665143][ T1116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.665163][ T1116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.825538][ T3418] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.874652][ T3321] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.895013][ T3321] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.066687][ T4288] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.073830][ T766] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.184006][ T3321] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.232313][ T766] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.534704][ T766] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.534722][ T766] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.926367][ T3418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.926384][ T3418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.967456][ T37] audit: type=1326 audit(1787639856.850:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5801 comm="syz.3.11" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa91ee3e0d9 code=0x0 [ 93.041193][ T5807] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.583727][ T766] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.583747][ T766] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.518343][ T121] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.520536][ T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.565865][ T121] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.695952][ T121] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.696121][ T121] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.773279][ T121] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.992253][ T3288] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.992452][ T3288] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.292213][ T5823] Zero length message leads to an empty skb [ 95.297185][ T5819] syz.2.3: vmalloc error: size 4096, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 95.328873][ T5819] CPU: 0 UID: 0 PID: 5819 Comm: syz.2.3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 95.328896][ T5819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 95.328914][ T5819] Call Trace: [ 95.328922][ T5819] [ 95.328931][ T5819] dump_stack_lvl+0xe8/0x150 [ 95.328970][ T5819] warn_alloc+0x24d/0x270 [ 95.328996][ T5819] ? __pfx_warn_alloc+0x10/0x10 [ 95.329023][ T5819] ? alloc_pages_mpol+0x11b/0x280 [ 95.329053][ T5819] ? alloc_pages_noprof+0x17c/0x2f0 [ 95.329080][ T5819] __vmalloc_node_range_noprof+0xfb8/0x1560 [ 95.329124][ T5819] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 95.329142][ T5819] ? __kasan_kmalloc+0x93/0xb0 [ 95.329166][ T5819] ? __kmalloc_cache_noprof+0x3d5/0x680 [ 95.329185][ T5819] ? bpf_diag_init+0x87/0x140 [ 95.329210][ T5819] ? bpf_diag_init+0x87/0x140 [ 95.329240][ T5819] ? bpf_check+0x10f7/0x2e20 [ 95.329261][ T5819] __vmalloc_noprof+0xd2/0x120 [ 95.329280][ T5819] ? bpf_check+0x10f7/0x2e20 [ 95.329304][ T5819] bpf_check+0x10f7/0x2e20 [ 95.329336][ T5819] ? ktime_get_with_offset+0x93/0x2d0 [ 95.329362][ T5819] ? __pfx_bpf_check+0x10/0x10 [ 95.329386][ T5819] ? bpf_obj_name_cpy+0x194/0x1e0 [ 95.329417][ T5819] bpf_prog_load+0x14d6/0x1c20 [ 95.329459][ T5819] ? __pfx_bpf_prog_load+0x10/0x10 [ 95.329502][ T5819] __sys_bpf+0xd0d/0xd90 [ 95.329533][ T5819] ? __pfx___sys_bpf+0x10/0x10 [ 95.329559][ T5819] ? do_futex+0x3e7/0x4e0 [ 95.329612][ T5819] ? rcu_is_watching+0x16/0xb0 [ 95.329642][ T5819] __x64_sys_bpf+0xba/0xd0 [ 95.329666][ T5819] do_syscall_64+0x166/0x520 [ 95.329688][ T5819] ? trace_irq_disable+0x3b/0x140 [ 95.329708][ T5819] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.329728][ T5819] ? clear_bhb_loop+0x70/0xc0 [ 95.329752][ T5819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.329771][ T5819] RIP: 0033:0x7fda0ebce0d9 [ 95.329801][ T5819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.329816][ T5819] RSP: 002b:00007fda0ce26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 95.329834][ T5819] RAX: ffffffffffffffda RBX: 00007fda0ee55fa0 RCX: 00007fda0ebce0d9 [ 95.329849][ T5819] RDX: 0000000000000094 RSI: 0000200000000540 RDI: 0000000000000005 [ 95.329861][ T5819] RBP: 00007fda0ec65024 R08: 0000000000000000 R09: 0000000000000000 [ 95.329874][ T5819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.329885][ T5819] R13: 00007fda0ee56038 R14: 00007fda0ee55fa0 R15: 00007fffa0c7c108 [ 95.329914][ T5819] [ 95.329927][ T5819] Mem-Info: [ 95.329936][ T5819] active_anon:185 inactive_anon:11538 isolated_anon:0 [ 95.329936][ T5819] active_file:5089 inactive_file:42649 isolated_file:0 [ 95.329936][ T5819] unevictable:24 dirty:505 writeback:7 [ 95.329936][ T5819] slab_reclaimable:11403 slab_unreclaimable:98715 [ 95.329936][ T5819] mapped:34713 shmem:6338 pagetables:1169 [ 95.329936][ T5819] sec_pagetables:0 bounce:0 [ 95.329936][ T5819] kernel_misc_reclaimable:0 [ 95.329936][ T5819] free:1324309 free_pcp:5593 free_cma:0 [ 95.329991][ T5819] Node 0 active_anon:740kB inactive_anon:46152kB active_file:20140kB inactive_file:170596kB unevictable:96kB isolated(anon):0kB isolated(file):0kB mapped:138852kB dirty:2020kB writeback:28kB shmem:25352kB kernel_stack:12772kB pagetables:4532kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 95.330043][ T5819] Node 1 active_anon:0kB inactive_anon:0kB active_file:216kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 95.330090][ T5819] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 95.330150][ T5819] lowmem_reserve[]: 0 2499 2500 2500 2500 [ 95.330184][ T5819] Node 0 DMA32 free:1355364kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:740kB inactive_anon:46152kB active_file:20140kB inactive_file:170596kB unevictable:96kB writepending:2048kB zspages:0kB present:3129332kB managed:2559152kB mlocked:96kB bounce:0kB free_pcp:21704kB local_pcp:8192kB free_cma:0kB [ 95.330246][ T5819] lowmem_reserve[]: 0 0 1 1 1 [ 95.330279][ T5819] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1824kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 95.439742][ T5819] lowmem_reserve[]: 0 0 0 0 0 [ 95.439783][ T5819] Node 1 Normal free:3926512kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:216kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:660kB local_pcp:0kB free_cma:0kB [ 95.439840][ T5819] lowmem_reserve[]: 0 0 0 0 0 [ 95.439870][ T5819] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 95.439999][ T5819] Node 0 DMA32: 543*4kB (UME) 445*8kB (U) 2*16kB (U) 2*32kB (UE) 2*64kB (UE) 3*128kB (UME) 2*256kB (ME) 2*512kB (UM) 1*1024kB (E) 3*2048kB (UM) 327*4096kB (M) = 1354436kB [ 95.440144][ T5819] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 95.440236][ T5819] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 2*16kB (UM) 2*32kB (UM) 2*64kB (UM) 2*128kB (UM) 4*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 957*4096kB (M) = 3926512kB [ 95.440382][ T5819] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 95.440398][ T5819] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 95.440412][ T5819] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 95.440427][ T5819] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 95.440443][ T5819] 54152 total pagecache pages [ 95.440454][ T5819] 0 pages in swap cache [ 95.440460][ T5819] Free swap = 124996kB [ 95.440467][ T5819] Total swap = 124996kB [ 95.440475][ T5819] 2097051 pages RAM [ 95.440481][ T5819] 0 pages HighMem/MovableOnly [ 95.440487][ T5819] 425191 pages reserved [ 95.440493][ T5819] 0 pages cma reserved [ 95.792394][ T3288] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.802000][ T3418] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.899944][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.900369][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.997568][ T5814] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 96.183763][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.378566][ T5850] syzkaller1: entered promiscuous mode [ 98.378593][ T5850] syzkaller1: entered allmulticast mode [ 99.322680][ T5869] kAFS: No cell specified [ 99.554400][ T5880] device-mapper: ioctl: Invalid target message parameters. [ 101.490552][ T5909] ======================================================= [ 101.490552][ T5909] WARNING: The mand mount option has been deprecated and [ 101.490552][ T5909] and is ignored by this kernel. Remove the mand [ 101.490552][ T5909] option from the mount to silence this warning. [ 101.490552][ T5909] ======================================================= [ 103.680268][ T5937] overlayfs: statfs failed on './file0' [ 105.974772][ T6031] process 'syz.3.82' launched '/dev/fd/4' with NULL argv: empty string added [ 105.999414][ T6030] netlink: 48 bytes leftover after parsing attributes in process `syz.2.81'. [ 105.999700][ T6030] netlink: 48 bytes leftover after parsing attributes in process `syz.2.81'. [ 106.204394][ T6034] sctp: [Deprecated]: syz.3.83 (pid 6034) Use of int in max_burst socket option deprecated. [ 106.204394][ T6034] Use struct sctp_assoc_value instead [ 108.645855][ T6086] sctp: [Deprecated]: syz.2.99 (pid 6086) Use of int in max_burst socket option deprecated. [ 108.645855][ T6086] Use struct sctp_assoc_value instead [ 108.807192][ T6090] bridge0: port 3(dummy0) entered blocking state [ 108.810716][ T6090] bridge0: port 3(dummy0) entered disabled state [ 108.826658][ T6090] dummy0: entered allmulticast mode [ 108.975765][ T6090] dummy0: entered promiscuous mode [ 108.980603][ T6090] bridge0: port 3(dummy0) entered blocking state [ 108.980748][ T6090] bridge0: port 3(dummy0) entered forwarding state [ 109.790270][ T6102] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.851734][ T6102] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.545745][ T6102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.555753][ T6102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.067247][ T6147] syz.4.127: vmalloc error: size 4096, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 112.067290][ T6147] CPU: 0 UID: 0 PID: 6147 Comm: syz.4.127 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 112.067302][ T6147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.067309][ T6147] Call Trace: [ 112.067313][ T6147] [ 112.067318][ T6147] dump_stack_lvl+0xe8/0x150 [ 112.067338][ T6147] warn_alloc+0x24d/0x270 [ 112.067353][ T6147] ? __pfx_warn_alloc+0x10/0x10 [ 112.067374][ T6147] ? alloc_pages_mpol+0x11b/0x280 [ 112.067390][ T6147] ? alloc_pages_noprof+0x17c/0x2f0 [ 112.067404][ T6147] __vmalloc_node_range_noprof+0xfb8/0x1560 [ 112.067429][ T6147] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 112.067440][ T6147] ? __kasan_kmalloc+0x93/0xb0 [ 112.067452][ T6147] ? __kmalloc_cache_noprof+0x3d5/0x680 [ 112.067464][ T6147] ? bpf_diag_init+0x87/0x140 [ 112.067477][ T6147] ? bpf_diag_init+0x87/0x140 [ 112.067490][ T6147] ? bpf_check+0x10f7/0x2e20 [ 112.067500][ T6147] __vmalloc_noprof+0xd2/0x120 [ 112.067510][ T6147] ? bpf_check+0x10f7/0x2e20 [ 112.067522][ T6147] bpf_check+0x10f7/0x2e20 [ 112.067539][ T6147] ? ktime_get_with_offset+0x93/0x2d0 [ 112.067552][ T6147] ? __pfx_bpf_check+0x10/0x10 [ 112.067565][ T6147] ? bpf_obj_name_cpy+0x194/0x1e0 [ 112.067581][ T6147] bpf_prog_load+0x14d6/0x1c20 [ 112.067599][ T6147] ? __pfx_bpf_prog_load+0x10/0x10 [ 112.067624][ T6147] __sys_bpf+0xd0d/0xd90 [ 112.067639][ T6147] ? __pfx___sys_bpf+0x10/0x10 [ 112.067653][ T6147] ? do_futex+0x3e7/0x4e0 [ 112.067680][ T6147] ? rcu_is_watching+0x16/0xb0 [ 112.067696][ T6147] __x64_sys_bpf+0xba/0xd0 [ 112.067708][ T6147] do_syscall_64+0x166/0x520 [ 112.067718][ T6147] ? trace_irq_disable+0x3b/0x140 [ 112.067729][ T6147] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.067739][ T6147] ? clear_bhb_loop+0x70/0xc0 [ 112.067751][ T6147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.067760][ T6147] RIP: 0033:0x7f8909cee0d9 [ 112.067771][ T6147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.067779][ T6147] RSP: 002b:00007f8907f46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 112.067789][ T6147] RAX: ffffffffffffffda RBX: 00007f8909f75fa0 RCX: 00007f8909cee0d9 [ 112.067796][ T6147] RDX: 0000000000000094 RSI: 0000200000000540 RDI: 0000000000000005 [ 112.067802][ T6147] RBP: 00007f8909d85024 R08: 0000000000000000 R09: 0000000000000000 [ 112.067808][ T6147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.067814][ T6147] R13: 00007f8909f76038 R14: 00007f8909f75fa0 R15: 00007ffd9c9fee88 [ 112.067829][ T6147] [ 112.067832][ T6147] Mem-Info: [ 112.067837][ T6147] active_anon:186 inactive_anon:31478 isolated_anon:0 [ 112.067837][ T6147] active_file:13392 inactive_file:39911 isolated_file:0 [ 112.067837][ T6147] unevictable:0 dirty:214 writeback:0 [ 112.067837][ T6147] slab_reclaimable:11295 slab_unreclaimable:100498 [ 112.067837][ T6147] mapped:31613 shmem:26224 pagetables:1141 [ 112.067837][ T6147] sec_pagetables:0 bounce:0 [ 112.067837][ T6147] kernel_misc_reclaimable:0 [ 112.067837][ T6147] free:1295713 free_pcp:6724 free_cma:0 [ 112.067869][ T6147] Node 0 active_anon:744kB inactive_anon:125912kB active_file:53352kB inactive_file:159644kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:126452kB dirty:852kB writeback:0kB shmem:104896kB kernel_stack:12732kB pagetables:4420kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 112.067898][ T6147] Node 1 active_anon:0kB inactive_anon:0kB active_file:216kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 112.067921][ T6147] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 112.067951][ T6147] lowmem_reserve[]: 0 2499 2500 2500 2500 [ 112.067968][ T6147] Node 0 DMA32 free:1240320kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:744kB inactive_anon:125912kB active_file:53352kB inactive_file:159644kB unevictable:0kB writepending:852kB zspages:0kB present:3129332kB managed:2559152kB mlocked:0kB bounce:0kB free_pcp:26888kB local_pcp:9948kB free_cma:0kB [ 112.067999][ T6147] lowmem_reserve[]: 0 0 1 1 1 [ 112.068016][ T6147] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1824kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 112.068043][ T6147] lowmem_reserve[]: 0 0 0 0 0 [ 112.068063][ T6147] Node 1 Normal free:3927172kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:216kB inactive_file:0kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 112.068091][ T6147] lowmem_reserve[]: 0 0 0 0 0 [ 112.068106][ T6147] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 112.068164][ T6147] Node 0 DMA32: 233*4kB (UME) 715*8kB (UM) 128*16kB (UME) 3*32kB (UM) 3*64kB (ME) 2*128kB (UM) 3*256kB (ME) 1*512kB (M) 3*1024kB (UME) 1*2048kB (U) 299*4096kB (M) = 1240348kB [ 112.068238][ T6147] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 112.068284][ T6147] Node 1 Normal: 1*4kB (M) 6*8kB (UM) 11*16kB (UM) 5*32kB (UM) 6*64kB (UM) 3*128kB (UM) 4*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 957*4096kB (M) = 3927172kB [ 112.068366][ T6147] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 112.068374][ T6147] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 112.068382][ T6147] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 112.068391][ T6147] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 112.068399][ T6147] 79523 total pagecache pages [ 112.068403][ T6147] 0 pages in swap cache [ 112.068406][ T6147] Free swap = 124996kB [ 112.068410][ T6147] Total swap = 124996kB [ 112.068414][ T6147] 2097051 pages RAM [ 112.068417][ T6147] 0 pages HighMem/MovableOnly [ 112.068421][ T6147] 425191 pages reserved [ 112.068424][ T6147] 0 pages cma reserved [ 113.653458][ T57] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.653513][ T57] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.653545][ T57] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.653577][ T57] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.933528][ T6194] syz.4.140 uses obsolete (PF_INET,SOCK_PACKET) [ 115.482342][ T5244] veth0_vlan: left promiscuous mode [ 115.627464][ T6211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.143'. [ 115.825121][ T6211] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.852142][ T6211] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.612624][ T31] veth0_vlan: entered promiscuous mode [ 116.756495][ T6215] genirq: Flags mismatch irq 4. 00202000 (aio_iiro_16) vs. 00202080 (ttyS0) [ 116.935197][ T36] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 117.009766][ T6224] usb usb7: check_ctrlrecip: process 6224 (syz.2.146) requesting ep 01 but needs 81 [ 117.509745][ T36] usb 4-1: device descriptor read/all, error -71 [ 120.244501][ T6263] netlink: 40 bytes leftover after parsing attributes in process `syz.2.157'. [ 121.345385][ T6268] MTD: Couldn't look up './cgroup': -15 [ 122.748706][ T6297] warning: `syz.0.166' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 123.018497][ T6289] smpboot: CPU 1 is now offline [ 123.762092][ T6293] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 124.322260][ T6324] netlink: 12 bytes leftover after parsing attributes in process `syz.3.176'. [ 124.646773][ T6332] fuse: Bad value for 'group_id' [ 124.646791][ T6332] fuse: Bad value for 'group_id' [ 124.662010][ T9] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 124.848041][ T9] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 124.920331][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.920357][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 124.920392][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.974677][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 125.039013][ T9] usb 5-1: config 0 descriptor?? [ 125.194779][ T10] usb 2-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 125.218546][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 125.218563][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 125.218584][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.330826][ T6327] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 125.330843][ T6327] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 125.331033][ T6327] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 125.331043][ T6327] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 125.407471][ T10] spcp8x5 2-1:1.0: SPCP8x5 converter detected [ 125.448592][ T10] usb 2-1: SPCP8x5 converter now attached to ttyUSB0 [ 125.664091][ T10] usb 5-1: USB disconnect, device number 2 [ 126.058179][ T6345] netlink: 40 bytes leftover after parsing attributes in process `syz.2.183'. [ 126.067496][ T5716] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 126.178818][ T6334] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 126.179673][ T6334] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 126.242617][ T6334] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 126.281209][ T5716] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 126.283887][ T5716] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.284083][ T5716] usb 1-1: config 0 has no interfaces? [ 126.284113][ T5716] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.485383][ T6333] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 126.521078][ T36] usb 2-1: USB disconnect, device number 2 [ 126.627648][ T5716] usb 1-1: config 0 descriptor?? [ 126.926155][ T36] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 127.026627][ T36] spcp8x5 2-1:1.0: device disconnected [ 127.748454][ T6365] fuse: Bad value for 'group_id' [ 127.748467][ T6365] fuse: Bad value for 'group_id' [ 128.179762][ T10] usb 1-1: USB disconnect, device number 2 [ 128.492619][ T6376] netlink: 40 bytes leftover after parsing attributes in process `syz.3.195'. [ 129.175665][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880601ff800: rx timeout, send abort [ 129.677755][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880601ff800: abort rx timeout. Force session deactivation [ 129.947084][ T6400] fuse: Bad value for 'group_id' [ 129.947103][ T6400] fuse: Bad value for 'group_id' [ 131.623102][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.623195][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.679688][ T6417] netlink: 12 bytes leftover after parsing attributes in process `syz.1.209'. [ 132.255431][ T6436] netlink: 'syz.2.216': attribute type 10 has an invalid length. [ 132.261015][ T6436] team0: Port device dummy0 added [ 132.642252][ T6451] input: syz0 as /devices/virtual/input/input5 [ 132.729936][ T10] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 133.585829][ T6451] input: failed to attach handler evdev to device input5, error: -4 [ 133.811967][ T10] usb 3-1: Invalid ep0 maxpacket: 32 [ 134.414906][ T10] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 134.511919][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 134.521907][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 134.531904][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 134.541934][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 134.551907][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 134.561911][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 134.571904][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 134.581905][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 134.591899][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 134.601902][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 134.852022][ T10] usb 3-1: Invalid ep0 maxpacket: 32 [ 134.857692][ T10] usb usb3-port1: attempt power cycle [ 135.204053][ T10] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 135.413640][ T10] usb 3-1: device not accepting address 4, error -71 [ 135.600217][ T6497] input: syz0 as /devices/virtual/input/input6 [ 139.204043][ T6551] input: syz0 as /devices/virtual/input/input7 [ 140.945622][ T6593] sctp: [Deprecated]: syz.0.268 (pid 6593) Use of int in max_burst socket option deprecated. [ 140.945622][ T6593] Use struct sctp_assoc_value instead [ 143.065574][ T6660] device-mapper: ioctl: Invalid target message parameters. [ 145.119529][ T6701] device-mapper: ioctl: Invalid target message parameters. [ 145.702005][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 145.852017][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 145.853147][ T9] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 145.856103][ T9] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 145.856126][ T9] usb 4-1: config 1 has no interface number 0 [ 145.856167][ T9] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 145.856191][ T9] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 145.856214][ T9] usb 4-1: config 1 interface 105 has no altsetting 0 [ 145.861360][ T9] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 145.861392][ T9] usb 4-1: Product: syz [ 145.861406][ T9] usb 4-1: Manufacturer: syz [ 145.861419][ T9] usb 4-1: SerialNumber: syz [ 145.983011][ T6713] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 145.983152][ T6713] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 146.986803][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 147.051591][ T6730] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 147.051695][ T6730] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 147.152728][ T10] usb 5-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01 [ 147.154481][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 147.154519][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 147.158198][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.158220][ T10] usb 5-1: Product: syz [ 147.158233][ T10] usb 5-1: Manufacturer: syz [ 147.158298][ T10] usb 5-1: SerialNumber: syz [ 147.295845][ T9] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 147.296358][ T9] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 147.296846][ T9] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 147.351332][ T10] ums-onetouch 5-1:1.0: USB Mass Storage device detected [ 148.504689][ T10] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8 [ 148.505040][ T10] input input8: usb_submit_urb failed [ 148.602212][ T10] input: failed to attach handler kbd to device input8, error: -5 [ 148.754203][ T4934] input input8: usb_submit_urb failed [ 148.780116][ T6756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.322'. [ 148.846642][ T10] scsi host1: usb-storage 5-1:1.0 [ 148.850960][ T9] aqc111 4-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 36:e7:1f:7f:ea:f8 [ 148.908497][ T9] usb 4-1: USB disconnect, device number 4 [ 148.912878][ T4934] input input8: usb_submit_urb failed [ 148.978111][ T9] aqc111 4-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 149.165220][ T10] usb 5-1: USB disconnect, device number 3 [ 149.905450][ T5678] input input8: usb_submit_urb failed [ 150.062663][ T9] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 150.064131][ T4934] input input8: usb_submit_urb failed [ 150.065394][ T9] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 150.065616][ T9] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 154.436693][ T6860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.355'. [ 154.669342][ T6866] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 156.838562][ T6905] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 156.921961][ T36] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 157.084958][ T36] usb 2-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 157.086681][ T36] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 157.086706][ T36] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 157.086741][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.176899][ T36] spcp8x5 2-1:1.0: SPCP8x5 converter detected [ 157.304528][ T36] usb 2-1: SPCP8x5 converter now attached to ttyUSB0 [ 157.784947][ T36] usb 2-1: USB disconnect, device number 3 [ 157.884744][ T36] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 157.887094][ T36] spcp8x5 2-1:1.0: device disconnected [ 158.659272][ T6937] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 159.702006][ T36] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 159.852797][ T36] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 159.854455][ T36] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 159.854485][ T36] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.854520][ T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.943290][ T36] usb 5-1: config 0 descriptor?? [ 161.395689][ T36] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 161.395824][ T36] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 161.395859][ T36] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 161.395970][ T36] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 161.396004][ T36] elan 0003:04F3:0755.0001: unknown main item tag 0x0 [ 162.602681][ T36] elan 0003:04F3:0755.0001: failed to start in urb: -90 [ 163.360508][ T36] elan 0003:04F3:0755.0001: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 163.438696][ T36] usb 5-1: USB disconnect, device number 4 [ 164.772846][ T6993] netlink: 32 bytes leftover after parsing attributes in process `syz.4.400'. [ 164.963760][ T6989] fido_id[6989]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 164.991970][ T5686] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 165.089470][ T7001] netlink: 46 bytes leftover after parsing attributes in process `syz.3.403'. [ 165.089499][ T7001] netlink: 'syz.3.403': attribute type 3 has an invalid length. [ 165.089512][ T7001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.403'. [ 165.141948][ T5686] usb 2-1: Using ep0 maxpacket: 16 [ 165.285578][ T5686] usb 2-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 165.287852][ T5686] usb 2-1: config 0 interface 0 altsetting 183 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 165.287884][ T5686] usb 2-1: config 0 interface 0 has no altsetting 0 [ 165.287913][ T5686] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.969186][ T5686] usb 2-1: config 0 descriptor?? [ 166.589783][ T5686] hid_mf 0003:0079:1846.0002: ignoring exceeding usage max [ 166.591254][ T5686] hid_mf 0003:0079:1846.0002: invalid report_size 35106 [ 166.591273][ T5686] hid_mf 0003:0079:1846.0002: item 0 2 1 7 parsing failed [ 166.592132][ T5686] hid_mf 0003:0079:1846.0002: HID parse failed. [ 166.592202][ T5686] hid_mf 0003:0079:1846.0002: probe with driver hid_mf failed with error -22 [ 166.701988][ T31] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 166.840064][ T9] usb 2-1: USB disconnect, device number 4 [ 166.861968][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 166.870392][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 166.870441][ T31] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 166.900628][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.900685][ T31] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 166.931830][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.931974][ T31] usb 4-1: Product: syz [ 166.931989][ T31] usb 4-1: Manufacturer: syz [ 166.932001][ T31] usb 4-1: SerialNumber: syz [ 167.141980][ T5686] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 167.260511][ T31] usb 4-1: selecting invalid altsetting 1 [ 167.332844][ T5686] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 167.338415][ T5686] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 167.338439][ T5686] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 167.338475][ T5686] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.585154][ T7035] syz.0.416 (7035) used greatest stack depth: 17960 bytes left [ 168.774668][ T5686] spcp8x5 5-1:1.0: SPCP8x5 converter detected [ 169.234739][ T7049] o2cb: This node has not been configured. [ 169.234774][ T7049] o2cb: Cluster check failed. Fix errors before retrying. [ 169.234976][ T7049] (syz.2.418,7049,0):user_dlm_register:674 ERROR: status = -22 [ 169.235022][ T7049] (syz.2.418,7049,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file2" [ 169.845587][ T5686] usb 5-1: SPCP8x5 converter now attached to ttyUSB0 [ 170.032687][ T31] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 170.081463][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 170.205865][ T31] usb 4-1: USB disconnect, device number 5 [ 170.246942][ T10] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 170.267724][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.267770][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.323651][ T5678] udevd[5678]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 170.360867][ T10] usb 2-1: config 0 descriptor?? [ 170.607177][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 170.607294][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 170.637727][ T10] usb 2-1: USB disconnect, device number 5 [ 170.691176][ T7064] block2mtd: error: cannot open device / [ 170.845454][ T7070] capability: warning: `syz.3.431' uses 32-bit capabilities (legacy support in use) [ 170.847363][ T7070] ªªªªª»: renamed from veth1_vlan (while UP) [ 170.915531][ T9] usb 5-1: USB disconnect, device number 5 [ 170.944000][ T9] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 170.945767][ T9] spcp8x5 5-1:1.0: device disconnected [ 171.112198][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 171.264186][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 171.266213][ T10] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 171.269470][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.269514][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.322045][ T10] usb 2-1: config 0 descriptor?? [ 171.352638][ T10] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 171.586690][ T10] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 171.777381][ T31] usb 2-1: USB disconnect, device number 6 [ 171.797137][ T31] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 178.489272][ T7196] input: syz0 as /devices/virtual/input/input9 [ 178.699664][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 179.492632][ T10] usb 5-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 179.694331][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.694388][ T10] usb 5-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 179.694436][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.883650][ T7207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.482'. [ 180.030679][ T7207] syz_tun: entered promiscuous mode [ 180.111104][ T7207] macvtap1: entered promiscuous mode [ 180.118018][ T7207] macvtap1: entered allmulticast mode [ 180.118421][ T7207] syz_tun: entered allmulticast mode [ 181.268154][ T10] snd-usb-caiaq 5-1:1.0: can't set alt interface. [ 181.268192][ T10] usb 5-1: unable to init card! (ret=-5) [ 181.315398][ T10] snd-usb-caiaq 5-1:1.0: probe with driver snd-usb-caiaq failed with error -5 [ 181.317947][ T10] usb 5-1: USB disconnect, device number 6 [ 181.396923][ T7214] syz_tun: left allmulticast mode [ 181.397136][ T7214] syz_tun: left promiscuous mode [ 181.422126][ T7214] macvtap1: left promiscuous mode [ 181.422150][ T7214] macvtap1: left allmulticast mode [ 182.502144][ T7230] netlink: 20 bytes leftover after parsing attributes in process `syz.4.487'. [ 182.767999][ T7240] input: syz0 as /devices/virtual/input/input10 [ 183.509822][ T7242] device-mapper: ioctl: Invalid target message parameters. [ 183.512265][ T7242] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 183.866848][ T7230] vlan2: entered promiscuous mode [ 183.866870][ T7230] gretap0: entered promiscuous mode [ 185.839740][ T7269] netlink: 28 bytes leftover after parsing attributes in process `syz.4.499'. [ 185.839774][ T7269] netlink: 'syz.4.499': attribute type 7 has an invalid length. [ 185.839787][ T7269] netlink: 'syz.4.499': attribute type 8 has an invalid length. [ 185.839798][ T7269] netlink: 4 bytes leftover after parsing attributes in process `syz.4.499'. [ 185.858925][ T7269] ip6gretap0: entered promiscuous mode [ 185.889611][ T7269] syz_tun: entered promiscuous mode [ 186.029473][ T7277] device-mapper: ioctl: Invalid target message parameters. [ 186.042247][ T7277] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 186.427060][ T7283] input: syz0 as /devices/virtual/input/input11 [ 187.048940][ T5716] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 187.375782][ T5716] usb 5-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 187.377367][ T5716] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.377419][ T5716] usb 5-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 187.377468][ T5716] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.501978][ T36] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 187.657170][ T36] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 187.683241][ T36] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.683265][ T36] usb 2-1: Product: syz [ 187.683278][ T36] usb 2-1: Manufacturer: syz [ 187.683344][ T36] usb 2-1: SerialNumber: syz [ 187.873631][ C1] usb 5-1: received EP1 urb->status = -71 [ 187.874009][ T5716] usb 5-1: unable to init card! (ret=-71) [ 187.916830][ T5716] snd-usb-caiaq 5-1:1.0: probe with driver snd-usb-caiaq failed with error -71 [ 187.957186][ T5716] usb 5-1: USB disconnect, device number 7 [ 188.557967][ T36] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 188.558043][ T36] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 188.676149][ T36] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 188.735020][ T36] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 188.783017][ T36] usb 2-1: USB disconnect, device number 7 [ 188.948565][ T7308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.512'. [ 188.948586][ T7308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.512'. [ 189.333119][ T7316] device-mapper: ioctl: Invalid target message parameters. [ 189.336546][ T7316] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 189.700551][ T7329] netlink: 'syz.1.519': attribute type 12 has an invalid length. [ 190.190445][ T7341] netlink: 4 bytes leftover after parsing attributes in process `syz.2.526'. [ 190.190466][ T7341] netlink: 4 bytes leftover after parsing attributes in process `syz.2.526'. [ 191.565074][ T7361] netlink: 32 bytes leftover after parsing attributes in process `syz.4.535'. [ 192.532183][ T7389] netlink: 32 bytes leftover after parsing attributes in process `syz.2.546'. [ 193.654236][ T5715] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 193.832638][ T5715] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 193.839405][ T5715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.839429][ T5715] usb 2-1: Product: syz [ 193.839442][ T5715] usb 2-1: Manufacturer: syz [ 193.839455][ T5715] usb 2-1: SerialNumber: syz [ 194.180363][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.202851][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.326506][ T5715] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 194.326566][ T5715] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 194.646207][ T7423] netlink: 32 bytes leftover after parsing attributes in process `syz.3.560'. [ 201.451952][ T59] Bluetooth: hci0: command 0x0406 tx timeout [ 202.377093][ T5715] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -ETIMEDOUT [ 202.377160][ T5715] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 202.811978][ T59] Bluetooth: hci1: command 0x0406 tx timeout [ 203.189722][ T5715] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 203.253336][ T5715] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -110 [ 203.584363][ T5715] usb 2-1: USB disconnect, device number 8 [ 206.513068][ T4897] Bluetooth: hci3: command 0x0406 tx timeout [ 206.557877][ T4897] Bluetooth: hci4: command 0x0406 tx timeout [ 206.557909][ T4897] Bluetooth: hci2: command 0x0406 tx timeout [ 206.961927][ T196] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 206.963424][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 207.091955][ T196] usb 5-1: device descriptor read/64, error -32 [ 207.342065][ T196] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 207.349165][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 207.472085][ T196] usb 5-1: device descriptor read/64, error -32 [ 207.583768][ T196] usb usb5-port1: attempt power cycle [ 207.744686][ T7480] netlink: 28 bytes leftover after parsing attributes in process `syz.3.581'. [ 207.744721][ T7480] netlink: 28 bytes leftover after parsing attributes in process `syz.3.581'. [ 207.991790][ T7480] gretap0: entered promiscuous mode [ 208.036861][ T7480] gretap0: left promiscuous mode [ 208.142015][ T196] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 208.163443][ T196] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 208.165135][ T196] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 208.165176][ T196] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.868365][ T196] qmi_wwan 5-1:1.0: cdc-wdm0: USB WDM device [ 209.522543][ T196] wwan wwan0: port wwan0qmi0 attached [ 211.349999][ T196] qmi_wwan 5-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.4-1, WWAN/QMI device, 02:61:35:d2:8c:f8 [ 211.403228][ T196] usb 5-1: USB disconnect, device number 10 [ 211.447065][ T196] qmi_wwan 5-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.4-1, WWAN/QMI device [ 217.397910][ T196] wwan wwan0: port wwan0qmi0 disconnected [ 236.294426][ T7568] syzkaller0: entered promiscuous mode [ 236.294450][ T7568] syzkaller0: entered allmulticast mode [ 236.675660][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 236.714501][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 236.715729][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 236.717921][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 236.718668][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 237.335330][ T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 237.412323][ T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 237.418677][ T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 237.438207][ T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 237.438987][ T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 238.373028][ C1] sched: DL replenish lagged too much [ 238.813255][ T5583] Bluetooth: hci5: command tx timeout [ 239.532326][ T5583] Bluetooth: hci6: command tx timeout [ 240.892604][ T5583] Bluetooth: hci5: command tx timeout [ 241.623293][ T5583] Bluetooth: hci6: command tx timeout [ 242.972148][ T5583] Bluetooth: hci5: command tx timeout [ 243.691959][ T5583] Bluetooth: hci6: command tx timeout [ 245.052141][ T5583] Bluetooth: hci5: command tx timeout [ 245.772584][ T5583] Bluetooth: hci6: command tx timeout [ 250.240161][ T7722] netlink: 32 bytes leftover after parsing attributes in process `syz.2.661'. [ 255.614064][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.614132][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.056659][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.056729][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 357.431781][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 357.431803][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7752/1:b..l [ 357.431842][ C1] rcu: (detected by 1, t=10502 jiffies, g=20169, q=2217 ncpus=2) [ 357.431869][ C1] task:syz.4.672 state:R running task stack:25608 pid:7752 tgid:7752 ppid:5592 task_flags:0x400040 flags:0x00080002 [ 357.431918][ C1] Call Trace: [ 357.431923][ C1] [ 357.431931][ C1] __schedule+0x16d9/0x5700 [ 357.431957][ C1] ? try_to_take_rt_mutex+0x842/0xb00 [ 357.431974][ C1] ? _raw_spin_unlock_irqrestore+0x21/0x80 [ 357.431998][ C1] ? __pfx___schedule+0x10/0x10 [ 357.432011][ C1] ? __lock_acquire+0x683/0x2ce0 [ 357.432028][ C1] preempt_schedule_irq+0x4b/0x90 [ 357.432040][ C1] irqentry_exit+0x14f/0x910 [ 357.432052][ C1] ? trace_irq_disable+0x3b/0x140 [ 357.432067][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 357.432081][ C1] RIP: 0010:lock_is_held_type+0x106/0x150 [ 357.432094][ C1] Code: 1a 00 00 b8 ff ff ff ff 65 0f c1 05 f4 3d 51 07 83 f8 01 75 25 9c 58 a9 00 02 00 00 75 39 41 f7 c4 00 02 00 00 74 01 fb 89 d8 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 90 0f 0b 90 48 c7 [ 357.432104][ C1] RSP: 0018:ffffc9000e56f7f8 EFLAGS: 00000206 [ 357.432113][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 0000000000000046 [ 357.432120][ C1] RDX: 0000000000000000 RSI: ffffffff8db34bdf RDI: ffffffff8bcbef80 [ 357.432128][ C1] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 357.432135][ C1] R10: 0000000000000000 R11: ffffffff8e1c3800 R12: 0000000000000246 [ 357.432142][ C1] R13: ffff88802d2eddc0 R14: ffffffff8e203c78 R15: 0000000000000001 [ 357.432160][ C1] css_set_move_task+0x66/0x820 [ 357.432177][ C1] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 357.432194][ C1] cgroup_post_fork+0x209/0x980 [ 357.432210][ C1] ? __pfx_proc_fork_connector+0x10/0x10 [ 357.432225][ C1] ? __pfx_cgroup_post_fork+0x10/0x10 [ 357.432238][ C1] ? rt_write_unlock+0x19e/0x360 [ 357.432256][ C1] ? rt_write_unlock+0x1aa/0x360 [ 357.432273][ C1] copy_process+0x406d/0x43f0 [ 357.432291][ C1] ? copy_process+0xd3c/0x43f0 [ 357.432313][ C1] ? __pfx_copy_process+0x10/0x10 [ 357.432327][ C1] ? __asan_memset+0x22/0x50 [ 357.432342][ C1] kernel_clone+0x2d2/0x8d0 [ 357.432357][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 357.432376][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 357.432391][ C1] __se_sys_clone3+0x33c/0x360 [ 357.432406][ C1] ? __might_fault+0xaf/0x130 [ 357.432418][ C1] ? __pfx___se_sys_clone3+0x10/0x10 [ 357.432440][ C1] ? _copy_to_user+0x8a/0xb0 [ 357.432469][ C1] ? do_user_addr_fault+0xc4c/0x1340 [ 357.432491][ C1] do_syscall_64+0x166/0x520 [ 357.432504][ C1] ? trace_irq_disable+0x3b/0x140 [ 357.432515][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.432527][ C1] ? clear_bhb_loop+0x70/0xc0 [ 357.432540][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.432551][ C1] RIP: 0033:0x7f8909ceeec9 [ 357.432566][ C1] RSP: 002b:00007ffd9c9fed48 EFLAGS: 00000206 ORIG_RAX: 00000000000001b3 [ 357.432576][ C1] RAX: ffffffffffffffda RBX: 00007f8909caa460 RCX: 00007f8909ceeec9 [ 357.432584][ C1] RDX: 00007f8909caa460 RSI: 0000000000000058 RDI: 00007ffd9c9feda0 [ 357.432592][ C1] RBP: 00007f8907f466c0 R08: 00007f8907f466c0 R09: 00007ffd9c9fee87 [ 357.432599][ C1] R10: 0000000000000008 R11: 0000000000000206 R12: ffffffffffffffe8 [ 357.432606][ C1] R13: 000000000000000b R14: 00007ffd9c9feda0 R15: 00007ffd9c9fee88 [ 357.432622][ C1] [ 360.104747][ T5583] Bluetooth: hci5: command 0x0406 tx timeout [ 360.123637][ T5583] Bluetooth: hci6: command 0x0406 tx timeout [ 378.509607][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.509679][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 402.812076][ T38] INFO: task kworker/u8:1:13 blocked for more than 143 seconds. [ 402.812098][ T38] Not tainted syzkaller #0 [ 402.812108][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 402.812117][ T38] task:kworker/u8:1 state:D stack:22112 pid:13 tgid:13 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 402.812170][ T38] Workqueue: netns cleanup_net [ 402.812212][ T38] Call Trace: [ 402.812219][ T38] [ 402.812233][ T38] __schedule+0x16d9/0x5700 [ 402.812255][ T38] ? __lock_acquire+0x683/0x2ce0 [ 402.812279][ T38] ? __lock_acquire+0x683/0x2ce0 [ 402.812309][ T38] ? look_up_lock_class+0x57/0x110 [ 402.812344][ T38] ? __pfx___schedule+0x10/0x10 [ 402.812372][ T38] ? schedule+0x90/0x2b0 [ 402.812393][ T38] schedule+0x164/0x2b0 [ 402.812414][ T38] schedule_timeout+0xc0/0x2c0 [ 402.812432][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 402.812451][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 402.812487][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 402.812507][ T38] ? wait_for_completion+0x272/0x5e0 [ 402.812526][ T38] wait_for_completion+0x2ca/0x5e0 [ 402.812558][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 402.812579][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 402.812601][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 402.812625][ T38] synchronize_rcu_normal+0x2a4/0x380 [ 402.812650][ T38] ? __pfx_synchronize_rcu_normal+0x10/0x10 [ 402.812674][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 402.812707][ T38] ? kasan_save_track+0x4f/0x80 [ 402.812726][ T38] ? kasan_save_track+0x3e/0x80 [ 402.812743][ T38] ? kasan_save_free_info+0x40/0x50 [ 402.812767][ T38] ? __kasan_slab_free+0x5c/0x80 [ 402.812785][ T38] ? kfree+0x1c5/0x6d0 [ 402.812801][ T38] ? rhashtable_free_and_destroy+0x3b3/0x410 [ 402.812822][ T38] ? nsim_fib_destroy+0xda/0x170 [ 402.812842][ T38] ? nsim_dev_reload_destroy+0x2e3/0x490 [ 402.812865][ T38] ? nsim_dev_reload_down+0x8a/0xc0 [ 402.812888][ T38] ? devlink_reload+0x1c5/0x890 [ 402.812908][ T38] ? devlink_pernet_pre_exit+0x1ff/0x420 [ 402.812925][ T38] ? ops_undo_list+0x17d/0x8d0 [ 402.812946][ T38] ? cleanup_net+0x575/0x810 [ 402.812967][ T38] ? process_scheduled_works+0xc3d/0x1630 [ 402.812987][ T38] ? worker_thread+0xa47/0xfb0 [ 402.813013][ T38] ? __pfx_nsim_nexthop_free+0x10/0x10 [ 402.813041][ T38] ? __pfx_nsim_nexthop_free+0x10/0x10 [ 402.813061][ T38] synchronize_rcu_expedited+0x15a/0x770 [ 402.813089][ T38] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 402.813131][ T38] ? __pfx_nsim_nexthop_free+0x10/0x10 [ 402.813158][ T38] ? __pfx_nsim_nexthop_free+0x10/0x10 [ 402.813180][ T38] ? __pfx_nsim_nexthop_free+0x10/0x10 [ 402.813201][ T38] rhashtable_free_and_destroy+0x38/0x410 [ 402.813236][ T38] nsim_fib_destroy+0xf0/0x170 [ 402.813258][ T38] nsim_dev_reload_destroy+0x2e3/0x490 [ 402.813283][ T38] ? xa_get_mark+0x67/0x7a0 [ 402.813308][ T38] nsim_dev_reload_down+0x8a/0xc0 [ 402.813342][ T38] devlink_reload+0x1c5/0x890 [ 402.813383][ T38] ? __pfx_devlink_reload+0x10/0x10 [ 402.813441][ T38] devlink_pernet_pre_exit+0x1ff/0x420 [ 402.813465][ T38] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 402.813486][ T38] ? iput+0xb84/0xf00 [ 402.813519][ T38] ops_undo_list+0x17d/0x8d0 [ 402.813549][ T38] ? __pfx_ops_undo_list+0x10/0x10 [ 402.813570][ T38] ? rt_spin_unlock+0x159/0x200 [ 402.813597][ T38] ? idr_destroy+0x21b/0x2a0 [ 402.813616][ T38] ? rt_spin_unlock+0x165/0x200 [ 402.813642][ T38] cleanup_net+0x575/0x810 [ 402.813668][ T38] ? __pfx_cleanup_net+0x10/0x10 [ 402.813696][ T38] ? rcu_is_watching+0x16/0xb0 [ 402.813720][ T38] ? process_scheduled_works+0x97a/0x1630 [ 402.813742][ T38] process_scheduled_works+0xc3d/0x1630 [ 402.813795][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 402.813822][ T38] ? assign_work+0x3cf/0x5d0 [ 402.813849][ T38] worker_thread+0xa47/0xfb0 [ 402.813898][ T38] kthread+0x38b/0x470 [ 402.813923][ T38] ? __pfx_worker_thread+0x10/0x10 [ 402.813943][ T38] ? __pfx_kthread+0x10/0x10 [ 402.813969][ T38] ret_from_fork+0x514/0xb70 [ 402.813998][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 402.814023][ T38] ? __switch_to+0xc89/0x1420 [ 402.814048][ T38] ? __pfx_kthread+0x10/0x10 [ 402.814074][ T38] ret_from_fork_asm+0x1a/0x30 [ 402.814109][ T38] [ 402.814172][ T38] INFO: task kworker/u8:9:1308 blocked for more than 143 seconds. [ 402.814185][ T38] Not tainted syzkaller #0 [ 402.814194][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 402.814202][ T38] task:kworker/u8:9 state:D stack:21824 pid:1308 tgid:1308 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 402.814250][ T38] Workqueue: events_unbound fsnotify_mark_destroy_workfn [ 402.814274][ T38] Call Trace: [ 402.814280][ T38] [ 402.814291][ T38] __schedule+0x16d9/0x5700 [ 402.814310][ T38] ? __lock_acquire+0x683/0x2ce0 [ 402.814349][ T38] ? unwind_next_frame+0x8f/0x2550 [ 402.814371][ T38] ? look_up_lock_class+0x57/0x110 [ 402.814397][ T38] ? __pfx___schedule+0x10/0x10 [ 402.814425][ T38] ? schedule+0x90/0x2b0 [ 402.814446][ T38] schedule+0x164/0x2b0 [ 402.814466][ T38] schedule_timeout+0xc0/0x2c0 [ 402.814484][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 402.814503][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 402.814538][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 402.814557][ T38] ? wait_for_completion+0x272/0x5e0 [ 402.814577][ T38] wait_for_completion+0x2ca/0x5e0 [ 402.814608][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 402.814641][ T38] __synchronize_srcu+0x23b/0x2f0 [ 402.814665][ T38] ? __pfx___synchronize_srcu+0x10/0x10 [ 402.814685][ T38] ? __pfx_wakeme_after_rcu+0x10/0x10 [ 402.814719][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 402.814741][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 402.814761][ T38] ? synchronize_srcu+0x20a/0x260 [ 402.814784][ T38] fsnotify_mark_destroy_workfn+0x109/0x2f0 [ 402.814810][ T38] ? __pfx_fsnotify_mark_destroy_workfn+0x10/0x10 [ 402.814836][ T38] ? rcu_is_watching+0x16/0xb0 [ 402.814860][ T38] ? process_scheduled_works+0x97a/0x1630 [ 402.814882][ T38] process_scheduled_works+0xc3d/0x1630 [ 402.814934][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 402.814962][ T38] ? assign_work+0x3cf/0x5d0 [ 402.814989][ T38] worker_thread+0xa47/0xfb0 [ 402.815024][ T38] ? __kthread_parkme+0x71/0x1f0 [ 402.815057][ T38] kthread+0x38b/0x470 [ 402.815082][ T38] ? __pfx_worker_thread+0x10/0x10 [ 402.815101][ T38] ? __pfx_kthread+0x10/0x10 [ 402.815127][ T38] ret_from_fork+0x514/0xb70 [ 402.815155][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 402.815180][ T38] ? __switch_to+0xc89/0x1420 [ 402.815205][ T38] ? __pfx_kthread+0x10/0x10 [ 402.815231][ T38] ret_from_fork_asm+0x1a/0x30 [ 402.815265][ T38] [ 402.815379][ T38] INFO: task kworker/u8:16:7431 blocked for more than 143 seconds. [ 402.815392][ T38] Not tainted syzkaller #0 [ 402.815400][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 402.815409][ T38] task:kworker/u8:16 state:D stack:24408 pid:7431 tgid:7431 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 402.815458][ T38] Workqueue: events_unbound fsnotify_connector_destroy_workfn [ 402.815480][ T38] Call Trace: [ 402.815486][ T38] [ 402.815496][ T38] __schedule+0x16d9/0x5700 [ 402.815515][ T38] ? __lock_acquire+0x683/0x2ce0 [ 402.815547][ T38] ? unwind_next_frame+0x8f/0x2550 [ 402.815568][ T38] ? look_up_lock_class+0x57/0x110 [ 402.815593][ T38] ? __pfx___schedule+0x10/0x10 [ 402.815621][ T38] ? schedule+0x90/0x2b0 [ 402.815642][ T38] schedule+0x164/0x2b0 [ 402.815662][ T38] schedule_timeout+0xc0/0x2c0 [ 402.815679][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 402.815698][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 402.815733][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 402.815753][ T38] ? wait_for_completion+0x272/0x5e0 [ 402.815773][ T38] wait_for_completion+0x2ca/0x5e0 [ 402.815804][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 402.815836][ T38] __synchronize_srcu+0x23b/0x2f0 [ 402.815859][ T38] ? __pfx___synchronize_srcu+0x10/0x10 [ 402.815879][ T38] ? __pfx_wakeme_after_rcu+0x10/0x10 [ 402.815912][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 402.815931][ T38] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 402.815954][ T38] ? synchronize_srcu+0x20a/0x260 [ 402.815974][ T38] ? process_scheduled_works+0x97a/0x1630 [ 402.815995][ T38] fsnotify_connector_destroy_workfn+0x44/0xb0 [ 402.816019][ T38] process_scheduled_works+0xc3d/0x1630 [ 402.816071][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 402.816099][ T38] ? assign_work+0x3cf/0x5d0 [ 402.816126][ T38] worker_thread+0xa47/0xfb0 [ 402.816161][ T38] ? __kthread_parkme+0x71/0x1f0 [ 402.816194][ T38] kthread+0x38b/0x470 [ 402.816219][ T38] ? __pfx_worker_thread+0x10/0x10 [ 402.816239][ T38] ? __pfx_kthread+0x10/0x10 [ 402.816265][ T38] ret_from_fork+0x514/0xb70 [ 402.816293][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 402.816318][ T38] ? __switch_to+0xc89/0x1420 [ 402.816349][ T38] ? __pfx_kthread+0x10/0x10 [ 402.816375][ T38] ret_from_fork_asm+0x1a/0x30 [ 402.816409][ T38] [ 402.816427][ T38] [ 402.816427][ T38] Showing all locks held in the system: [ 402.816438][ T38] locks held by kthreadd/2: 2, on CPU#0: [ 402.816452][ T38] #0: ffffffff8e204030 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: copy_process+0x28c5/0x43f0 [ 402.816498][ T38] #1: ffffffff8e203c78 (css_set_lock){+.+.}-{3:3}, at: cgroup_can_fork+0x239/0xe80 [ 402.816548][ T38] locks held by kworker/u8:1/13: 5, on CPU#0: [ 402.816561][ T38] #0: ffff88801aea8938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 402.816605][ T38] #1: ffffc90000127c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 402.816649][ T38] #2: ffffffff8f5bd240 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 402.816694][ T38] #3: ffff88805f45a160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 402.816736][ T38] #4: ffff888024c00310 (&devlink->lock_key#3){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 402.816784][ T38] locks held by irq_work/0/23: 2, on CPU#0: [ 402.816797][ T38] #0: ffffffff8e1c3800 (rcu_read_lock){....}-{1:3}, at: run_irq_workd+0x1d/0x240 [ 402.816842][ T38] #1: ffffffff8e203c78 (css_set_lock){+.+.}-{3:3}, at: cgrp_dead_tasks_iwork_fn+0xc6/0x8a0 [ 402.816887][ T38] locks held by ktimers/1/29: 5, last CPU#1: [ 402.816899][ T38] #0: ffffffff8e059240 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 402.816943][ T38] #1: ffffffff8e1c3800 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 402.816987][ T38] #2: ffff8880b87285f8 (&base->softirq_expiry_lock){+...}-{3:3}, at: hrtimer_run_softirq+0x7d/0x2e0 [ 402.817037][ T38] #3: ffff8880b87285b8 (_T->lock){....}-{2:2}, at: rt_mutex_slowunlock+0xbf/0xa30 [ 402.817083][ T38] #4: ffff8880b8728558 (hrtimer_bases.lock){-...}-{2:2}, at: __hrtimer_rearm_deferred+0x99/0x4d0 [ 402.817132][ T38] locks held by khungtaskd/38: 1, last CPU#0: [ 402.817145][ T38] #0: ffffffff8e1c3800 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 402.817188][ T38] locks held by kworker/u8:2/48: 2, on CPU#0: [ 402.817201][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 402.817245][ T38] #1: ffffc90000ba7c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 402.817291][ T38] locks held by kworker/u9:0/59: 5, on CPU#0: [ 402.817303][ T38] #0: ffff8880619cf938 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 402.817354][ T38] #1: ffffc9000125fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 402.817398][ T38] #2: ffff88801e7d4f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 402.817447][ T38] #3: ffff88801e7d40b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 402.817491][ T38] #4: ffffffff8f7510d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x149/0x320 [ 402.817542][ T38] locks held by kworker/u8:9/1308: 2, on CPU#0: [ 402.817555][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 402.817599][ T38] #1: ffffc90006f1fc40 ((reaper_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 402.817654][ T38] locks held by dhcpcd/5244: 2, on CPU#0: [ 402.817666][ T38] #0: ffffffff8e204030 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: copy_process+0x28c5/0x43f0 [ 402.817710][ T38] #1: ffffffff8e203c78 (css_set_lock){+.+.}-{3:3}, at: cgroup_can_fork+0x239/0xe80 [ 402.817756][ T38] locks held by getty/5339: 2, on CPU#1: [ 402.817768][ T38] #0: ffff88803294a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 402.817811][ T38] #1: ffffc900044cb2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 402.817856][ T38] locks held by syz-executor/5569: 2, on CPU#0: [ 402.817869][ T38] #0: ffffffff8e204030 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: copy_process+0x28c5/0x43f0 [ 402.817913][ T38] #1: ffffffff8e203c78 (css_set_lock){+.+.}-{3:3}, at: cgroup_can_fork+0x239/0xe80 [ 402.817959][ T38] locks held by syz-executor/5581: 2, on CPU#0: [ 402.817971][ T38] #0: ffffffff8e204030 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: copy_process+0x28c5/0x43f0 [ 402.818014][ T38] #1: ffffffff8e203c78 (css_set_lock){+.+.}-{3:3}, at: cgroup_can_fork+0x239/0xe80 [ 402.818060][ T38] locks held by syz-executor/5582: 2, on CPU#1: [ 402.818072][ T38] #0: ffffffff8e204030 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: copy_process+0x28c5/0x43f0 [ 402.818116][ T38] #1: ffffffff8e203c78 (css_set_lock){+.+.}-{3:3}, at: cgroup_can_fork+0x239/0xe80 [ 402.818161][ T38] locks held by kworker/u9:3/5585: 6, on CPU#1: [ 402.818174][ T38] #0: ffff88806028d938 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 402.818217][ T38] #1: ffffc90005717c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 402.818262][ T38] #2: ffff888036d40f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 402.818309][ T38] #3: ffff888036d400b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 402.818359][ T38] #4: ffffffff8f7510d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x149/0x320 [ 402.818402][ T38] #5: ffff88802afc2370 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x9f/0x550 [ 402.818457][ T38] locks held by kworker/u8:16/7431: 2, on CPU#0: [ 402.818470][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 402.818514][ T38] #1: ffffc90010d8fc40 (connector_reaper_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 402.822314][ T38] locks held by syz-executor/7573: 3, on CPU#0: [ 402.822335][ T38] #0: ffffffff8f5bd240 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4e2/0x720 [ 402.822394][ T38] #1: ffff888036925058 (k-sk_lock-AF_RXRPC){+.+.}-{0:0}, at: rxrpc_bind+0x90/0x450 [ 402.822441][ T38] #2: ffff88805cc88268 (&rxnet->local_mutex){+.+.}-{4:4}, at: rxrpc_lookup_local+0xc8/0x1640 [ 402.822484][ T38] locks held by syz-executor/7574: 3, on CPU#0: [ 402.822497][ T38] #0: ffffffff8f5bd240 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4e2/0x720 [ 402.822540][ T38] #1: ffff888036925b58 (k-sk_lock-AF_RXRPC){+.+.}-{0:0}, at: rxrpc_bind+0x90/0x450 [ 402.822586][ T38] #2: ffff88805e264268 (&rxnet->local_mutex){+.+.}-{4:4}, at: rxrpc_lookup_local+0xc8/0x1640 [ 402.822628][ T38] locks held by syz.4.672/7752: 3, last CPU#1: [ 402.822640][ T38] #0: ffffffff8e204030 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: copy_process+0x28c5/0x43f0 [ 402.822684][ T38] #1: ffffffff8e203c78 (css_set_lock){+.+.}-{3:3}, at: cgroup_post_fork+0xc8/0x980 [ 402.822730][ T38] #2: ffffffff8e1c3800 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 402.822778][ T38] [ 402.822783][ T38] ============================================= [ 402.822783][ T38] [ 402.822805][ T38] NMI backtrace for cpu 0 [ 402.822826][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 402.822846][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 402.822855][ T38] Call Trace: [ 402.822862][ T38] [ 402.822870][ T38] dump_stack_lvl+0xe8/0x150 [ 402.822896][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 402.822921][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 402.822948][ T38] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 402.822975][ T38] sys_info+0x135/0x170 [ 402.822997][ T38] watchdog+0xfd7/0x1030 [ 402.823024][ T38] ? watchdog+0x1c7/0x1030 [ 402.823049][ T38] kthread+0x38b/0x470 [ 402.823074][ T38] ? __pfx_watchdog+0x10/0x10 [ 402.823091][ T38] ? __pfx_kthread+0x10/0x10 [ 402.823117][ T38] ret_from_fork+0x514/0xb70 [ 402.823144][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 402.823168][ T38] ? __switch_to+0xc89/0x1420 [ 402.823193][ T38] ? __pfx_kthread+0x10/0x10 [ 402.823218][ T38] ret_from_fork_asm+0x1a/0x30 [ 402.823250][ T38] [ 402.823256][ T38] Sending NMI from CPU 0 to CPUs 1: [ 402.823283][ C1] NMI backtrace for cpu 1 [ 402.823305][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 402.823336][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 402.823351][ C1] RIP: 0010:lock_release+0xbd/0x3c0 [ 402.823375][ C1] Code: 5b fa 48 c7 c7 78 d6 8d 8d e8 9f 32 b1 09 65 ff 05 a8 55 02 11 c7 44 24 24 01 00 00 00 83 3d 29 56 10 0e 00 0f 84 90 01 00 00 <41> 8b 87 08 0c 00 00 85 c0 0f 84 17 01 00 00 4c 89 6c 24 18 48 89 [ 402.823391][ C1] RSP: 0018:ffffc90000a3fa20 EFLAGS: 00000002 [ 402.823408][ C1] RAX: 0000000000000001 RBX: 0000000000000002 RCX: 8000000000000002 [ 402.823421][ C1] RDX: 0000000000000001 RSI: ffffffff8d8dd678 RDI: ffffffff8bcbef80 [ 402.823434][ C1] RBP: ffffc90000a3fb58 R08: ffff88805f6078d7 R09: 1ffff1100bec0f1a [ 402.823449][ C1] R10: dffffc0000000000 R11: ffffed100bec0f1b R12: 1ffff92000147f5d [ 402.823464][ C1] R13: ffffffff8b54ddea R14: ffff88805f607898 R15: ffff88801d2f3e80 [ 402.823479][ C1] FS: 0000000000000000(0000) GS:ffff888125ce8000(0000) knlGS:0000000000000000 [ 402.823495][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 402.823509][ C1] CR2: 00007fa91fbf56c8 CR3: 0000000036ef8000 CR4: 00000000003526f0 [ 402.823526][ C1] Call Trace: [ 402.823532][ C1] [ 402.823540][ C1] ? rcu_is_watching+0x16/0xb0 [ 402.823567][ C1] _raw_spin_unlock_irqrestore+0x1b/0x80 [ 402.823588][ C1] rt_spin_lock+0x17a/0x400 [ 402.823615][ C1] ? __pfx_rt_spin_lock+0x10/0x10 [ 402.823645][ C1] ? __pfx_gate_timer_func+0x10/0x10 [ 402.823672][ C1] gate_timer_func+0x2b/0x450 [ 402.823698][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 402.823719][ C1] ? __pfx_gate_timer_func+0x10/0x10 [ 402.823746][ C1] __hrtimer_run_queues+0x3eb/0xaf0 [ 402.823781][ C1] hrtimer_run_softirq+0x1e1/0x2e0 [ 402.823812][ C1] handle_softirqs+0x1da/0x6d0 [ 402.823848][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 402.823872][ C1] run_ktimerd+0x6a/0x100 [ 402.823896][ C1] smpboot_thread_fn+0x565/0xa70 [ 402.823922][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 402.823950][ C1] kthread+0x38b/0x470 [ 402.823976][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 402.824000][ C1] ? __pfx_kthread+0x10/0x10 [ 402.824028][ C1] ret_from_fork+0x514/0xb70 [ 402.824056][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 402.824083][ C1] ? __switch_to+0xc89/0x1420 [ 402.824107][ C1] ? __pfx_kthread+0x10/0x10 [ 402.824135][ C1] ret_from_fork_asm+0x1a/0x30 [ 402.824159][ C1] [ 402.824295][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 402.824308][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 402.824333][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 402.824342][ T38] Call Trace: [ 402.824349][ T38] [ 402.824356][ T38] vpanic+0x56d/0xa60 [ 402.824374][ T38] ? __pfx___schedule+0x10/0x10 [ 402.824392][ T38] ? __pfx_vpanic+0x10/0x10 [ 402.824427][ T38] panic+0xc5/0xd0 [ 402.824452][ T38] ? __pfx_panic+0x10/0x10 [ 402.824474][ T38] ? preempt_schedule_common+0x7f/0xd0 [ 402.824493][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 402.824526][ T38] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 402.824554][ T38] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 402.824582][ T38] watchdog+0x1030/0x1030 [ 402.824609][ T38] ? watchdog+0x1c7/0x1030 [ 402.824635][ T38] kthread+0x38b/0x470 [ 402.824660][ T38] ? __pfx_watchdog+0x10/0x10 [ 402.824677][ T38] ? __pfx_kthread+0x10/0x10 [ 402.824702][ T38] ret_from_fork+0x514/0xb70 [ 402.824729][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 402.824753][ T38] ? __switch_to+0xc89/0x1420 [ 402.824778][ T38] ? __pfx_kthread+0x10/0x10 [ 402.824803][ T38] ret_from_fork_asm+0x1a/0x30 [ 402.824835][ T38] [ 402.825090][ T38] Kernel Offset: disabled