last executing test programs: 2m50.31882123s ago: executing program 2 (id=3): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f00000002c0)=""/102392, 0x18ff8) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/events/sched/filter\x00', 0x1, 0x15d) write(r3, 0x0, 0x0) 2m49.042244491s ago: executing program 2 (id=7): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x5e62, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x2}, &(0x7f00000005c0)=0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004048, &(0x7f00000000c0)={0xa, 0x4e1d, 0x80000, @local, 0x4}, 0x1c) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1002000) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = gettid() r6 = epoll_create(0x3fc) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000440)) kcmp$KCMP_EPOLL_TFD(r5, r5, 0x7, 0xffffffffffffffff, &(0x7f0000000540)={r6, 0xffffffffffffffff, 0x1000000}) splice(r4, 0x0, r3, 0x0, 0x6, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0) 2m48.609203268s ago: executing program 2 (id=8): socket$nl_route(0x10, 0x3, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/172, 0xac, 0x38) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x8) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x810, &(0x7f00000001c0)={[{@grpquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@discard}, {@dioread_nolock}, {@nodiscard}]}, 0x3, 0x49e, &(0x7f0000001040)="$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") r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000500)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) recvmmsg(r1, &(0x7f0000000640), 0x10106, 0x2, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000680), 0xf, 0x101301) setpgid(r0, r0) ioctl$USBDEVFS_IOCTL(r2, 0x80045505, &(0x7f0000000700)=@usbdevfs_driver={0xffffffff, 0x9, 0x0}) ioctl$USBDEVFS_SETCONFIGURATION(r2, 0x80045505, &(0x7f0000000800)=0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) 2m47.03591803s ago: executing program 2 (id=9): mount$9p_tcp(&(0x7f0000000340), &(0x7f0000000380)='.\x00', &(0x7f00000003c0), 0x8010, 0x0) r0 = epoll_create1(0x80000) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) read$msr(r2, &(0x7f0000000740)=""/102368, 0x18fe0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000019740)={0x0, 0x0, &(0x7f0000019780)={&(0x7f00000197c0)=ANY=[@ANYBLOB], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000019880)={0x0, 0x0, &(0x7f00000198c0)={&(0x7f0000019900)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1000001}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xac}}, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000199c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000019a00)={0x4, 0x0, {0x0, 0x5, 0x0, 0x18, 0x0, 0x5c, 0x4}}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000019a40)={0x60002013}) epoll_pwait(r0, &(0x7f0000019a80)=[{}], 0x1, 0x3, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000019ac0)={0x3, 0x0, &(0x7f0000019b00)={&(0x7f0000019b40)={0x2, 0x3, 0x0, 0x3, 0x7, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x4e24, 0x9, @private2, 0x6}}]}, 0x38}, 0x1, 0x7}, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000240)) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 2m43.136472363s ago: executing program 1 (id=12): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) membarrier(0x10, 0x0) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendfile(r1, r0, 0x0, 0x7ffff000) 2m40.58183575s ago: executing program 2 (id=15): socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r2, &(0x7f0000000500)=""/102368, 0x18fe0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000019500)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r3, &(0x7f0000019540), 0xffffffffffffff58, 0x20008005, &(0x7f0000019580)={0x2, 0x4e20}, 0x10) recvfrom(r3, &(0x7f00000195c0)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 2m37.614751992s ago: executing program 2 (id=18): sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f00000002c0)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/events/sched/filter\x00', 0x1, 0x15d) write(r3, 0x0, 0x0) 2m37.499532706s ago: executing program 1 (id=20): syz_mount_image$nilfs2(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00'], 0xf, 0xa02, &(0x7f0000000c00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./bus\x00', 0x140) chdir(&(0x7f0000001880)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000018c0)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, 0x0, 0xa00810, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001640)='.\x00', 0x80, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000001680)={{0x0, 0x0, 0x40, 0xd, 0xde}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff7}, {0x0, 0x0, 0x8, 0x4, 0x3}, {0x0, 0x0, 0x28, 0x9, 0xffffffffffffff2d}, {0x0, 0x0, 0x8, 0x98f, 0x8}}) 2m34.956675603s ago: executing program 1 (id=26): openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r1, &(0x7f0000000600)=""/102392, 0x18ff8) epoll_create1(0x80000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1f, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000400)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000019680)=@bpf_ext={0x1a, 0xf, &(0x7f0000019740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000197c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) write(0xffffffffffffffff, &(0x7f0000019640)="2e000000010002", 0x7) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) 2m30.986387728s ago: executing program 1 (id=30): socket$nl_route(0x10, 0x3, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/172, 0xac, 0x38) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x8) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x810, &(0x7f00000001c0)={[{@grpquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@discard}, {@dioread_nolock}, {@nodiscard}]}, 0x3, 0x49e, &(0x7f0000001040)="$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") r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000500)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000600), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000640), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000680), 0xf, 0x101301) setpgid(r0, r0) ioctl$USBDEVFS_IOCTL(r3, 0x80045505, &(0x7f0000000700)=@usbdevfs_driver={0xffffffff, 0x9, 0x0}) ioctl$USBDEVFS_SETCONFIGURATION(r3, 0x80045505, &(0x7f0000000800)=0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) 2m26.73260332s ago: executing program 1 (id=34): socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x6) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r1, &(0x7f0000000500)=""/102368, 0x18fe0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000019500)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r2, &(0x7f0000019540), 0xffffffffffffff58, 0x20008005, &(0x7f0000019580)={0x2, 0x4e20}, 0x10) recvfrom(r2, &(0x7f00000195c0)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 2m21.723347343s ago: executing program 32 (id=18): sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f00000002c0)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/events/sched/filter\x00', 0x1, 0x15d) write(r3, 0x0, 0x0) 2m21.704548923s ago: executing program 1 (id=41): socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x803, 0x0) socket(0xa, 0x3, 0x87) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x200, 0x1, 0xffffffff, 0x0, r4}}], 0x1, 0x0, 0x0) 2m14.009760802s ago: executing program 4 (id=52): syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r0, 0x5b02, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) 2m10.967711099s ago: executing program 3 (id=54): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x5e62, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x2}, &(0x7f00000005c0)=0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004048, &(0x7f00000000c0)={0xa, 0x4e1d, 0x80000, @local, 0x4}, 0x1c) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1002000) pipe2(0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = gettid() r5 = epoll_create(0x3fc) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000440)) kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, 0xffffffffffffffff, &(0x7f0000000540)={r5, 0xffffffffffffffff, 0x1000000}) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0) 2m9.683907928s ago: executing program 3 (id=55): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000100)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3}}, {@usrjquota}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpsa107hx6rb+fKRNZrzjzHx3d+zZGTsBDKyx7EcSsTkifouIkUb2vwXGGr+uXTk389eVczNJ1Otv/Jnk5a5eOTdTFi2ft6mRqdeL/Lo29V54O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TdbezcX+5jh6ZaxxdNt6qteV9dmWpnRS7WND6EolIrLTNZT3/5GoxIalfSPx8qd9bRywpur1er3d+3PhfB24hyXR7xYA/VG+0Wf3v+V2m4Yed4TLhyPeP9iI/1qxNfZUIy3KDLXc3/bSWEQcOf/3l9kWazQPAQDQ7LvDEfFcu/FfGg82lftfsYYyGhH/j4j7IuL+iNgaEQ9E5GUfioiHu6y/dYXkxvFPeumWAluhbPz3QrG2tTT++6eex18YrRS5LXn8Q8nR47W5PcUx2R1D67L85DJ1fP/Sr5932tc8/su2rP5yLNiQXqq2TNDNTi9OrzLsJZc/idhebYk/l0S5jJNExLaI2N7VX75+h3H8ma93dCp18/iX0YN1pvpXEU83zv/5aIm/lHRcn5w8eGBq/8T6qM3tmSivihv9/MuF1zvVv6r4eyA7/xtbr//cUvyjyfqIhTNnT+TrtQvd13Hh98863tPc6vU/nLyZp4eLxz6cXlw8PRkxnLx64+NT159b5svyWfy7d7WLP81f48oj8UhEZBfxzoh4NCIeK9r+eEQ8ERG7lon/xxeffLf7+JeZle+hLP7Zm53/aD7/3ScqJ374tvv4S9n535endhePrOT1b6UNXM2xAwAAgLtFmn8GPknHl9JpOj7e+Az/1tiY1uYXFp89Ov/BqdnGZ+VHYygtZ7pGmuZDJ4u54TI/1ZLfW8wbf1HZkOfHZ+Zrs/0OHgbcpg79P/NHpd+tA9ac72vB4NL/YXDp/zC49H8YXPo/DK52/f/jPrQDuP28/8Pg0v9hcOn/MLj0fxhIHb8bn67qK/8S93wi0u6fVY07pPF3U6K64n9mcYuJdW139fuVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDf+DQAA//9X4u4v") gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000001140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYRES16=0x0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x1, 0xc, &(0x7f0000001000)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file2\x00', 0x0, 0x10}, 0x18) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f00007af000/0x3000)=nil, &(0x7f00007fd000/0x800000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a4a000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x0, 0xffff], [0x0, 0xffff], 0x0, 0x2, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x578}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f00000008c0)={0xa, 0x4e22, 0x0, @mcast2, 0x3}, 0x1c) sendmsg(r4, &(0x7f0000000d80)={0x0, 0x9533, &(0x7f0000000dc0)=[{&(0x7f0000000e00)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 2m8.324623328s ago: executing program 3 (id=56): openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r1, &(0x7f0000000600)=""/102392, 0x18ff8) epoll_create1(0x80000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1f, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x34}, 0x28) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000400)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000019680)=@bpf_ext={0x1a, 0xf, &(0x7f0000019740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000197c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) write(0xffffffffffffffff, &(0x7f0000019640)="2e000000010002", 0x7) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) 2m8.276786706s ago: executing program 0 (id=57): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000100)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3}}, {@usrjquota}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000001140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYRES16=0x0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x1, 0xc, &(0x7f0000001000)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file2\x00', 0x0, 0x10}, 0x18) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f00007af000/0x3000)=nil, &(0x7f00007fd000/0x800000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a4a000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x0, 0xffff], [0x0, 0xffff], 0x0, 0x2, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x578}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f00000008c0)={0xa, 0x4e22, 0x0, @mcast2, 0x3}, 0x1c) sendmsg(r4, &(0x7f0000000d80)={0x0, 0x9533, &(0x7f0000000dc0)=[{&(0x7f0000000e00)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 2m8.246329983s ago: executing program 4 (id=58): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f00000002c0)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/events/sched/filter\x00', 0x1, 0x15d) write(r2, 0x0, 0x0) 2m4.788791009s ago: executing program 33 (id=41): socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x803, 0x0) socket(0xa, 0x3, 0x87) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x200, 0x1, 0xffffffff, 0x0, r4}}], 0x1, 0x0, 0x0) 2m4.773024525s ago: executing program 5 (id=61): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0xfffffffffffffec8) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x12, r0, 0x6fbd5000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000040)=""/14, 0x1a, 0xe, 0x1}, 0x28) 2m4.697516994s ago: executing program 4 (id=62): mount$9p_tcp(&(0x7f0000000340), &(0x7f0000000380)='.\x00', &(0x7f00000003c0), 0x8010, 0x0) r0 = epoll_create1(0x80000) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) read$msr(r2, &(0x7f0000000740)=""/102368, 0x18fe0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000019740)={0x0, 0x0, &(0x7f0000019780)={&(0x7f00000197c0)=ANY=[@ANYBLOB], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000019880)={0x0, 0x0, &(0x7f00000198c0)={&(0x7f0000019900)={0xa4, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xa4}}, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000199c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000019a00)={0x4, 0x0, {0x0, 0x5, 0x0, 0x18, 0x0, 0x5c, 0x4}}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000019a40)={0x60002013}) epoll_pwait(r0, &(0x7f0000019a80)=[{}], 0x1, 0x3, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000019ac0)={0x3, 0x0, &(0x7f0000019b00)={&(0x7f0000019b40)={0x2, 0x3, 0x0, 0x3, 0x7, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x4e24, 0x9, @private2, 0x6}}]}, 0x38}, 0x1, 0x7}, 0x0) capset(&(0x7f0000000180)={0x20080522}, &(0x7f00000001c0)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000300)={{0x77359400}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2m3.791829965s ago: executing program 0 (id=63): socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000196c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="0d00000007000000002300002b3171ce6c5ee56512fb15e171f1ee7743bf9c14faf20d14000000d7b4863f1546c8eb", @ANYRES32=0x0, @ANYRES64=0x0], 0x20) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r0, &(0x7f0000000500)=""/102368, 0x18fe0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000019640)={'\x00', 0x8, 0x200, 0x100000, 0x8, 0xd4}) sendto$inet(r1, 0x0, 0x0, 0x20008005, 0x0, 0x0) 2m3.591121601s ago: executing program 5 (id=64): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f00000002c0)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/events/sched/filter\x00', 0x1, 0x15d) write(r3, 0x0, 0x0) 2m2.635564043s ago: executing program 3 (id=65): openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001100)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001140)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000001180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000011c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000001200), 0x0, 0x0) read$msr(r2, &(0x7f0000001240)=""/102392, 0x18ff8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = shmget$private(0x0, 0x800000, 0x20, &(0x7f0000173000/0x800000)=nil) shmat(r3, &(0x7f0000fee000/0x10000)=nil, 0xffffffffffffcfff) 2m2.146482303s ago: executing program 0 (id=66): socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) socket$kcm(0xa, 0x3, 0x87) socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x300) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x86dd, 0x12, 0x0, &(0x7f0000000540)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m0.454363181s ago: executing program 3 (id=67): mount$9p_tcp(&(0x7f0000000340), &(0x7f0000000380)='.\x00', &(0x7f00000003c0), 0x8010, 0x0) r0 = epoll_create1(0x80000) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) read$msr(r2, &(0x7f0000000740)=""/102368, 0x18fe0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000019740)={0x0, 0x0, &(0x7f0000019780)={&(0x7f00000197c0)=ANY=[@ANYBLOB], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000019880)={0x0, 0x0, &(0x7f00000198c0)={&(0x7f0000019900)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1000001}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xac}}, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000199c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000019a00)={0x4, 0x0, {0x0, 0x5, 0x0, 0x18, 0x0, 0x5c, 0x4}}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000019a40)={0x60002013}) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000019ac0)={0x3, 0x0, &(0x7f0000019b00)={&(0x7f0000019b40)={0x2, 0x3, 0x0, 0x3, 0x7, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x4e24, 0x9, @private2, 0x6}}]}, 0x38}, 0x1, 0x7}, 0x0) capset(&(0x7f0000000180)={0x20080522}, &(0x7f00000001c0)={0x200002, 0x200003, 0x801, 0x4, 0x7}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000240)) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 1m58.64603429s ago: executing program 4 (id=68): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f00000002c0)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/events/sched/filter\x00', 0x1, 0x15d) write(r2, 0x0, 0x0) 1m58.599446717s ago: executing program 5 (id=69): r0 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) 1m58.278722268s ago: executing program 0 (id=70): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f00000002c0)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/events/sched/filter\x00', 0x1, 0x15d) write(r2, 0x0, 0x0) 1m58.071557585s ago: executing program 3 (id=71): mount$9p_tcp(&(0x7f0000000340), &(0x7f0000000380)='.\x00', &(0x7f00000003c0), 0x8010, 0x0) r0 = epoll_create1(0x80000) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) read$msr(r2, &(0x7f0000000740)=""/102368, 0x18fe0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000019740)={0x0, 0x0, &(0x7f0000019780)={&(0x7f00000197c0)=ANY=[@ANYBLOB], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000019880)={0x0, 0x0, &(0x7f00000198c0)={&(0x7f0000019900)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1000001}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xac}}, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000199c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000019a00)={0x4, 0x0, {0x0, 0x5, 0x0, 0x18, 0x0, 0x5c, 0x4}}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000019a40)={0x60002013}) epoll_pwait(r0, &(0x7f0000019a80)=[{}], 0x1, 0x3, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000019ac0)={0x3, 0x0, &(0x7f0000019b00)={&(0x7f0000019b40)={0x2, 0x3, 0x0, 0x3, 0x7, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x4e24, 0x9, @private2, 0x6}}]}, 0x38}, 0x1, 0x7}, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000240)) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 1m55.791283907s ago: executing program 5 (id=72): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f00000002c0)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/events/sched/filter\x00', 0x1, 0x15d) write(r1, 0x0, 0x0) 1m54.49484435s ago: executing program 5 (id=73): mount$9p_tcp(&(0x7f0000000340), &(0x7f0000000380)='.\x00', &(0x7f00000003c0), 0x8010, 0x0) r0 = epoll_create1(0x80000) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) read$msr(r1, &(0x7f0000000740)=""/102368, 0x18fe0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000019740)={0x0, 0x0, &(0x7f0000019780)={&(0x7f00000197c0)=ANY=[@ANYBLOB], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000019880)={0x0, 0x0, &(0x7f00000198c0)={&(0x7f0000019900)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1000001}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xac}}, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000199c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r3, 0x4028700f, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000019a40)={0x60002013}) epoll_pwait(r0, &(0x7f0000019a80)=[{}], 0x1, 0x3, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000019ac0)={0x3, 0x0, &(0x7f0000019b00)={&(0x7f0000019b40)={0x2, 0x3, 0x0, 0x3, 0x7, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x4e24, 0x9, @private2, 0x6}}]}, 0x38}, 0x1, 0x7}, 0x0) capset(&(0x7f0000000180)={0x20080522}, &(0x7f00000001c0)={0x200002, 0x200003, 0x801, 0x4, 0x7}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) timer_settime(r5, 0x1, &(0x7f0000000300)={{0x77359400}}, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 1m54.475657941s ago: executing program 4 (id=74): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0xfffffffffffffec8) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x12, r0, 0x6fbd5000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x28) 1m54.18378481s ago: executing program 0 (id=75): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0xe, 0x5, &(0x7f0000000700)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000740)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000007c0)={r1, &(0x7f0000000800), &(0x7f0000000840)=@udp=r0}, 0x20) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000900)=0xfffffffe, 0x4) 1m53.630827537s ago: executing program 5 (id=76): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./trace\x00', &(0x7f0000000380)='tracefs\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./trace/set_event\x00', 0x2, 0x0) write$vga_arbiter(r0, &(0x7f0000000440)=@other={'lock', ' ', 'none'}, 0xa) 1m53.475830631s ago: executing program 4 (id=77): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001100)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001140)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000001180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000011c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000001200), 0x0, 0x0) read$msr(r2, &(0x7f0000001240)=""/102392, 0x18ff8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = shmget$private(0x0, 0x800000, 0x20, &(0x7f0000173000/0x800000)=nil) shmat(r3, &(0x7f0000fee000/0x10000)=nil, 0xffffffffffffcfff) 1m53.104228348s ago: executing program 0 (id=78): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x5}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r1, r0}, 0xc) 1m23.759838671s ago: executing program 34 (id=71): mount$9p_tcp(&(0x7f0000000340), &(0x7f0000000380)='.\x00', &(0x7f00000003c0), 0x8010, 0x0) r0 = epoll_create1(0x80000) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) read$msr(r2, &(0x7f0000000740)=""/102368, 0x18fe0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000019740)={0x0, 0x0, &(0x7f0000019780)={&(0x7f00000197c0)=ANY=[@ANYBLOB], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000019880)={0x0, 0x0, &(0x7f00000198c0)={&(0x7f0000019900)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1000001}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xac}}, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000199c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000019a00)={0x4, 0x0, {0x0, 0x5, 0x0, 0x18, 0x0, 0x5c, 0x4}}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000019a40)={0x60002013}) epoll_pwait(r0, &(0x7f0000019a80)=[{}], 0x1, 0x3, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000019ac0)={0x3, 0x0, &(0x7f0000019b00)={&(0x7f0000019b40)={0x2, 0x3, 0x0, 0x3, 0x7, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_address={0x5, 0x5, 0x0, 0xa0, 0x0, @in6={0xa, 0x4e24, 0x9, @private2, 0x6}}]}, 0x38}, 0x1, 0x7}, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000240)) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 1m1.007541712s ago: executing program 35 (id=78): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x5}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r1, r0}, 0xc) 19.782316231s ago: executing program 36 (id=77): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001100)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001140)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000001180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000011c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000001200), 0x0, 0x0) read$msr(r2, &(0x7f0000001240)=""/102392, 0x18ff8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = shmget$private(0x0, 0x800000, 0x20, &(0x7f0000173000/0x800000)=nil) shmat(r3, &(0x7f0000fee000/0x10000)=nil, 0xffffffffffffcfff) 0s ago: executing program 37 (id=76): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./trace\x00', &(0x7f0000000380)='tracefs\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./trace/set_event\x00', 0x2, 0x0) write$vga_arbiter(r0, &(0x7f0000000440)=@other={'lock', ' ', 'none'}, 0xa) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.71' (ED25519) to the list of known hosts. [ 422.315764][ T5663] cgroup: Unknown subsys name 'net' [ 422.407271][ T5663] cgroup: Unknown subsys name 'cpuset' [ 422.416406][ T5663] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 423.894894][ T5663] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 426.633259][ T5681] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 426.640921][ T5688] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 426.642463][ T5688] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 426.645794][ T5688] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 426.646453][ T5688] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 426.647150][ T5688] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 426.648234][ T5688] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 426.648670][ T5688] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 426.649295][ T5688] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 426.649735][ T5688] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 426.660749][ T5693] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 426.661014][ T5693] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 426.661397][ T5693] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 426.662445][ T5693] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 426.662859][ T5693] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 426.664013][ T5693] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 426.665079][ T5693] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 426.665758][ T5693] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 426.666183][ T5693] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 426.667547][ T5692] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 426.677174][ T5693] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 426.677397][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 426.684070][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 426.746289][ T5694] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 426.750155][ T5694] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 426.853204][ T5688] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 426.854318][ T5688] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 426.854772][ T5688] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 426.859156][ T5688] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 426.862341][ T5688] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 427.941067][ T5679] rxe_eth0 speed is unknown, defaulting to 1000 [ 427.946125][ T5679] rxe_eth0 speed is unknown, defaulting to 1000 [ 427.951481][ T5679] rxe_eth0 speed is unknown, defaulting to 1000 [ 428.036125][ T5676] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 428.048216][ T5677] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 428.225493][ T5675] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 428.286881][ T5678] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 428.355300][ T5680] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 428.391848][ T5679] infiniband rxe0: set active [ 428.392531][ T5679] infiniband rxe0: added rxe_eth0 [ 428.422347][ T5679] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 428.422391][ T5679] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 428.422439][ T5679] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 428.457679][ T5679] RDS/IB: rxe0: added [ 428.458010][ T5679] smc: adding ib device rxe0 with port count 1 [ 428.458099][ T5679] smc: ib device rxe0 port 1 has no pnetid [ 428.479513][ T5750] rxe_eth0 speed is unknown, defaulting to 1000 [ 428.480631][ T29] rxe_eth0 speed is unknown, defaulting to 1000 [ 428.511454][ T5679] rxe_eth0 speed is unknown, defaulting to 1000 [ 428.789083][ T5679] rxe_eth0 speed is unknown, defaulting to 1000 [ 428.854346][ T5688] Bluetooth: hci3: command tx timeout [ 428.854447][ T5688] Bluetooth: hci4: command tx timeout [ 428.854511][ T5688] Bluetooth: hci0: command tx timeout [ 428.854570][ T5688] Bluetooth: hci1: command tx timeout [ 428.854919][ T5681] Bluetooth: hci2: command tx timeout [ 428.933372][ T5681] Bluetooth: hci5: command tx timeout [ 429.254222][ T5680] rxe_eth0 speed is unknown, defaulting to 1000 [ 429.309033][ T5677] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.309769][ T5677] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.309918][ T5677] bridge_slave_0: entered allmulticast mode [ 429.311996][ T5677] bridge_slave_0: entered promiscuous mode [ 429.384056][ T5677] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.384238][ T5677] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.384641][ T5677] bridge_slave_1: entered allmulticast mode [ 429.386614][ T5677] bridge_slave_1: entered promiscuous mode [ 429.524576][ T5677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.547945][ T5679] rxe_eth0 speed is unknown, defaulting to 1000 [ 429.583949][ T5676] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.584140][ T5676] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.584558][ T5676] bridge_slave_0: entered allmulticast mode [ 429.586891][ T5676] bridge_slave_0: entered promiscuous mode [ 429.620214][ T5677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.670966][ T5676] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.671154][ T5676] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.671604][ T5676] bridge_slave_1: entered allmulticast mode [ 429.694010][ T5676] bridge_slave_1: entered promiscuous mode [ 429.732261][ T5675] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.732381][ T5675] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.732512][ T5675] bridge_slave_0: entered allmulticast mode [ 429.736957][ T5675] bridge_slave_0: entered promiscuous mode [ 429.740465][ T5675] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.740573][ T5675] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.740983][ T5675] bridge_slave_1: entered allmulticast mode [ 429.744479][ T5675] bridge_slave_1: entered promiscuous mode [ 429.837225][ T5677] team0: Port device team_slave_0 added [ 429.879478][ T5679] rxe_eth0 speed is unknown, defaulting to 1000 [ 429.880678][ T5678] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.880934][ T5678] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.881429][ T5678] bridge_slave_0: entered allmulticast mode [ 429.911670][ T5678] bridge_slave_0: entered promiscuous mode [ 429.937322][ T5677] team0: Port device team_slave_1 added [ 429.956245][ T5675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.958347][ T5678] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.958447][ T5678] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.958576][ T5678] bridge_slave_1: entered allmulticast mode [ 429.960338][ T5678] bridge_slave_1: entered promiscuous mode [ 429.965795][ T5676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.987520][ T5675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.062812][ T5676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.079276][ T5677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 430.079292][ T5677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.079321][ T5677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.091247][ T5675] team0: Port device team_slave_0 added [ 430.098533][ T5678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.119632][ T5677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.119651][ T5677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.119688][ T5677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.175615][ T5675] team0: Port device team_slave_1 added [ 430.203303][ T5678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.206106][ T5676] team0: Port device team_slave_0 added [ 430.281392][ T5676] team0: Port device team_slave_1 added [ 430.294319][ T5675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 430.294335][ T5675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.294365][ T5675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.300056][ T5678] team0: Port device team_slave_0 added [ 430.315359][ T5678] team0: Port device team_slave_1 added [ 430.372262][ T5675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.372282][ T5675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.372310][ T5675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.445484][ T5677] hsr_slave_0: entered promiscuous mode [ 430.446416][ T5677] hsr_slave_1: entered promiscuous mode [ 430.449590][ T5679] rxe_eth0 speed is unknown, defaulting to 1000 [ 430.468996][ T5678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 430.469015][ T5678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.469044][ T5678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.487894][ T5676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 430.487911][ T5676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.487940][ T5676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.571086][ T5678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.571105][ T5678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.571135][ T5678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.596814][ T5676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.596832][ T5676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.596861][ T5676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.729978][ T5675] hsr_slave_0: entered promiscuous mode [ 430.731716][ T5675] hsr_slave_1: entered promiscuous mode [ 430.733480][ T5675] debugfs: 'hsr0' already exists in 'hsr' [ 430.733498][ T5675] Cannot create hsr debugfs directory [ 430.851795][ T5678] hsr_slave_0: entered promiscuous mode [ 430.854587][ T5678] hsr_slave_1: entered promiscuous mode [ 430.855367][ T5678] debugfs: 'hsr0' already exists in 'hsr' [ 430.855383][ T5678] Cannot create hsr debugfs directory [ 430.864077][ T5676] hsr_slave_0: entered promiscuous mode [ 430.865169][ T5676] hsr_slave_1: entered promiscuous mode [ 430.866431][ T5676] debugfs: 'hsr0' already exists in 'hsr' [ 430.866448][ T5676] Cannot create hsr debugfs directory [ 430.933021][ T5681] Bluetooth: hci2: command tx timeout [ 430.933062][ T5681] Bluetooth: hci1: command tx timeout [ 430.933087][ T5681] Bluetooth: hci4: command tx timeout [ 430.933102][ T5688] Bluetooth: hci3: command tx timeout [ 430.933229][ T53] Bluetooth: hci0: command tx timeout [ 431.012784][ T53] Bluetooth: hci5: command tx timeout [ 431.150712][ T5680] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.150826][ T5680] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.151459][ T5680] bridge_slave_0: entered allmulticast mode [ 431.153680][ T5680] bridge_slave_0: entered promiscuous mode [ 431.219912][ T5680] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.220032][ T5680] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.220169][ T5680] bridge_slave_1: entered allmulticast mode [ 431.221844][ T5680] bridge_slave_1: entered promiscuous mode [ 431.337044][ T5680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.384744][ T5680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.534492][ T5680] team0: Port device team_slave_0 added [ 431.565286][ T5680] team0: Port device team_slave_1 added [ 431.630720][ T5680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.630741][ T5680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.630769][ T5680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.643019][ T5680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.643034][ T5680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.643064][ T5680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.644051][ T5677] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 431.683850][ T5677] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 431.719621][ T5677] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 431.744542][ T5677] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 431.749561][ T5677] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 431.757918][ T5677] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 431.796185][ T5677] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 431.800739][ T5677] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 431.833834][ T5680] hsr_slave_0: entered promiscuous mode [ 431.834706][ T5680] hsr_slave_1: entered promiscuous mode [ 431.835314][ T5680] debugfs: 'hsr0' already exists in 'hsr' [ 431.835331][ T5680] Cannot create hsr debugfs directory [ 432.006126][ T5679] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.006215][ T5679] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.006320][ T5679] bridge_slave_0: entered allmulticast mode [ 432.007736][ T5679] bridge_slave_0: entered promiscuous mode [ 432.015957][ T5675] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 432.028286][ T5675] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 432.029262][ T5675] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 432.038741][ T5675] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 432.053867][ T5679] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.053981][ T5679] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.054224][ T5679] bridge_slave_1: entered allmulticast mode [ 432.056780][ T5679] bridge_slave_1: entered promiscuous mode [ 432.067478][ T5675] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 432.075968][ T5675] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 432.135709][ T5679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.137641][ T5675] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 432.140864][ T5675] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 432.196975][ T5679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.273754][ T5679] team0: Port device team_slave_0 added [ 432.295733][ T5679] team0: Port device team_slave_1 added [ 432.340491][ T5676] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 432.345207][ T5676] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 432.346294][ T5676] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 432.354717][ T5676] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 432.357694][ T5679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.357709][ T5679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.357738][ T5679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.358814][ T5676] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 432.367877][ T5676] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 432.378021][ T5679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.378038][ T5679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.378067][ T5679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.390932][ T5676] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 432.408654][ T5676] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 432.525313][ T5679] hsr_slave_0: entered promiscuous mode [ 432.526198][ T5679] hsr_slave_1: entered promiscuous mode [ 432.526810][ T5679] debugfs: 'hsr0' already exists in 'hsr' [ 432.526828][ T5679] Cannot create hsr debugfs directory [ 432.666903][ T5678] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 432.670635][ T5678] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 432.710466][ T5678] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 432.715590][ T5678] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 432.716578][ T5678] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 432.725093][ T5678] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 432.729435][ T5678] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 432.737653][ T5678] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 432.880551][ T5677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.890593][ T5680] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 432.898395][ T5680] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 432.899393][ T5680] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 432.907306][ T5680] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 432.908525][ T5680] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 432.912149][ T5680] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 432.925617][ T5680] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 432.941431][ T5680] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 432.968900][ T5675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.013223][ T5694] Bluetooth: hci4: command tx timeout [ 433.013261][ T5694] Bluetooth: hci1: command tx timeout [ 433.013285][ T5694] Bluetooth: hci3: command tx timeout [ 433.013309][ T5694] Bluetooth: hci2: command tx timeout [ 433.013692][ T53] Bluetooth: hci0: command tx timeout [ 433.039678][ T5677] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.084320][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.084418][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.088675][ T5675] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.092907][ T5681] Bluetooth: hci5: command tx timeout [ 433.144149][ T5701] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.144272][ T5701] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.146032][ T5701] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.146108][ T5701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.192542][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.192687][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.204381][ T5679] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 433.212325][ T5679] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 433.214053][ T5679] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 433.226835][ T5679] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 433.244258][ T5679] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 433.247760][ T5679] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 433.249858][ T5679] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 433.258763][ T5679] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 433.305097][ T5676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.369337][ T5678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.426302][ T5676] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.456912][ T5678] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.470507][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.470613][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.518660][ T5710] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.518768][ T5710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.521408][ T5710] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.521564][ T5710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.536409][ T5680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.595751][ T5701] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.595866][ T5701] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.697360][ T5680] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.761403][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.761516][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.815242][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.815385][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.990329][ T5679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.134001][ T5679] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.160109][ T5708] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.160229][ T5708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.230747][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.230884][ T5861] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.879825][ T5677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.989706][ T5675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.093855][ T5681] Bluetooth: hci0: command tx timeout [ 435.093895][ T5681] Bluetooth: hci2: command tx timeout [ 435.093921][ T5681] Bluetooth: hci1: command tx timeout [ 435.093931][ T5694] Bluetooth: hci4: command tx timeout [ 435.093985][ T53] Bluetooth: hci3: command tx timeout [ 435.178449][ T53] Bluetooth: hci5: command tx timeout [ 435.287184][ T5675] veth0_vlan: entered promiscuous mode [ 435.364510][ T5675] veth1_vlan: entered promiscuous mode [ 435.491170][ T5676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.592211][ T5675] veth0_macvtap: entered promiscuous mode [ 435.617757][ T5675] veth1_macvtap: entered promiscuous mode [ 435.707689][ T5680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.732142][ T5675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.773168][ T5678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.777035][ T5675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.830850][ T5676] veth0_vlan: entered promiscuous mode [ 435.914925][ T5676] veth1_vlan: entered promiscuous mode [ 435.988809][ T5680] veth0_vlan: entered promiscuous mode [ 436.040006][ T5678] veth0_vlan: entered promiscuous mode [ 436.063272][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.064290][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.064337][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.064379][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.070471][ T5680] veth1_vlan: entered promiscuous mode [ 436.098701][ T5679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.158995][ T5678] veth1_vlan: entered promiscuous mode [ 436.198458][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.198481][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.245643][ T5676] veth0_macvtap: entered promiscuous mode [ 436.247673][ T5677] veth0_vlan: entered promiscuous mode [ 436.276415][ T5676] veth1_macvtap: entered promiscuous mode [ 436.292526][ T5865] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.292547][ T5865] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.353241][ T5677] veth1_vlan: entered promiscuous mode [ 436.377460][ T5680] veth0_macvtap: entered promiscuous mode [ 436.428069][ T5676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 436.430376][ T5680] veth1_macvtap: entered promiscuous mode [ 436.456848][ T5678] veth0_macvtap: entered promiscuous mode [ 436.474558][ T5676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 436.480515][ T5678] veth1_macvtap: entered promiscuous mode [ 436.544926][ T142] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.545268][ T142] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.545314][ T142] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.545355][ T142] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.557222][ T5680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 436.619138][ T5680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 436.626975][ T5678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 436.657504][ T5677] veth0_macvtap: entered promiscuous mode [ 436.669366][ T5678] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 436.711894][ T5677] veth1_macvtap: entered promiscuous mode [ 436.719315][ T5675] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 436.793426][ T5861] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.823381][ T5710] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.823435][ T5710] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.823479][ T5710] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.823521][ T5710] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.826796][ T5710] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.826818][ T5710] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.895772][ T5865] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.897415][ T5710] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.897463][ T5710] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.942545][ T5677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 436.963110][ T5865] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.963134][ T5865] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.179524][ T5677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.293225][ T5710] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.293249][ T5710] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.373456][ T5679] veth0_vlan: entered promiscuous mode [ 437.373971][ T5710] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.374079][ T5710] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.374111][ T5710] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.374143][ T5710] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.506811][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.506830][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.072678][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 438.127895][ T5679] veth1_vlan: entered promiscuous mode [ 438.170759][ T5710] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.170787][ T5710] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.425943][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.425970][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.551442][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.551467][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.746203][ T5679] veth0_macvtap: entered promiscuous mode [ 438.759562][ T5861] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.759582][ T5861] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.816870][ T5679] veth1_macvtap: entered promiscuous mode [ 438.838388][ T5949] loop2: detected capacity change from 0 to 512 [ 438.864961][ T5949] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.8: inode has both inline data and extents flags [ 438.865113][ T5949] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 438.865636][ T5949] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.8: couldn't read orphan inode 15 (err -117) [ 438.865715][ T5949] loop2: lost filesystem error report for type 5 error -117 [ 438.867864][ T5949] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.140644][ T5679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 439.160972][ T5679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 439.186658][ T5953] usb usb5: usbfs: interface 0 claimed by hub while 'syz.2.8' sets config #-1 [ 439.186955][ T5953] usb usb5: usbfs: interface 0 claimed by hub while 'syz.2.8' sets config #1 [ 439.230935][ T5701] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.244527][ T5704] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.443399][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.443517][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.483104][ T5708] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.497518][ T5931] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.216894][ T5853] rxe_eth0 speed is unknown, defaulting to 1000 [ 441.059065][ T5675] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.306749][ T5865] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.306774][ T5865] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.569328][ T5975] 9pnet_virtio: no channels available for device 127.0.0.1 [ 444.005278][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.005297][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.422892][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 448.833097][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 449.242649][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 449.937018][ T6019] loop1: detected capacity change from 0 to 2048 [ 450.035478][ T6019] NILFS (loop1): invalid segment: Magic number mismatch [ 450.035501][ T6019] NILFS (loop1): trying rollback from an earlier position [ 450.711144][ T6019] NILFS (loop1): recovery complete [ 450.754238][ T6025] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 450.831248][ T6026] FAULT_INJECTION: forcing a failure. [ 450.831248][ T6026] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 450.831285][ T6026] CPU: 1 UID: 0 PID: 6026 Comm: syz.5.21 Not tainted syzkaller #0 PREEMPT(full) [ 450.831312][ T6026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 450.831327][ T6026] Call Trace: [ 450.831337][ T6026] [ 450.831347][ T6026] dump_stack_lvl+0xe8/0x150 [ 450.831395][ T6026] should_fail_ex+0x3eb/0x540 [ 450.831431][ T6026] strncpy_from_user+0x36/0x2c0 [ 450.831466][ T6026] __se_sys_add_key+0xdb/0x420 [ 450.831499][ T6026] ? __pfx___se_sys_add_key+0x10/0x10 [ 450.831530][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 450.831569][ T6026] ? srso_alias_return_thunk+0x5/0xfbef5 [ 450.831599][ T6026] ? __x64_sys_add_key+0x20/0xc0 [ 450.831631][ T6026] do_syscall_64+0x166/0x520 [ 450.831669][ T6026] ? trace_irq_disable+0x3b/0x140 [ 450.831707][ T6026] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.831740][ T6026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.831766][ T6026] RIP: 0033:0x7f5e3059fb19 [ 450.831789][ T6026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.831810][ T6026] RSP: 002b:00007f5e314b6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 450.831836][ T6026] RAX: ffffffffffffffda RBX: 00007f5e30825fa0 RCX: 00007f5e3059fb19 [ 450.831856][ T6026] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 450.831873][ T6026] RBP: 00007f5e30637b70 R08: 000000001ebef8b2 R09: 0000000000000000 [ 450.831890][ T6026] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 450.831905][ T6026] R13: 00007f5e30826038 R14: 00007f5e30825fa0 R15: 00007ffceaee5f18 [ 450.831945][ T6026] [ 454.472031][ T6053] 9pnet_virtio: no channels available for device 127.0.0.1 [ 458.292389][ T6071] cgroup: No subsys list or none specified [ 459.536916][ T6076] loop1: detected capacity change from 0 to 512 [ 459.562864][ T6076] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.30: inode has both inline data and extents flags [ 459.562898][ T6076] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 459.563907][ T6076] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.30: couldn't read orphan inode 15 (err -117) [ 459.563931][ T6076] loop1: lost filesystem error report for type 5 error -117 [ 459.572704][ C1] EXT4-fs (loop1): error count since last fsck: 2 [ 459.572728][ C1] EXT4-fs (loop1): initial error at time 1793873262: ext4_orphan_get:1404: inode 15 [ 459.572763][ C1] EXT4-fs (loop1): last error at time 1793873262: ext4_orphan_get:1409 [ 459.591880][ T6076] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.970207][ T6080] usb usb5: usbfs: interface 0 claimed by hub while 'syz.1.30' sets config #-1 [ 459.971586][ T6080] usb usb5: usbfs: interface 0 claimed by hub while 'syz.1.30' sets config #1 [ 460.431314][ T5678] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.470262][ T5686] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 460.647067][ T5686] usb 1-1: Using ep0 maxpacket: 16 [ 460.650231][ T5686] usb 1-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 460.694132][ T5686] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 460.694156][ T5686] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 460.725825][ T5686] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.725856][ T5686] usb 1-1: Product: syz [ 460.725873][ T5686] usb 1-1: Manufacturer: syz [ 460.725890][ T5686] usb 1-1: SerialNumber: syz [ 460.833366][ T5686] usb 1-1: 0:2 : does not exist [ 461.184176][ T5686] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 462.776658][ T5686] usb 1-1: USB disconnect, device number 2 [ 463.429651][ T6089] loop3: detected capacity change from 0 to 4096 [ 463.430601][ T6089] ======================================================= [ 463.430601][ T6089] WARNING: The mand mount option has been deprecated and [ 463.430601][ T6089] and is ignored by this kernel. Remove the mand [ 463.430601][ T6089] option from the mount to silence this warning. [ 463.430601][ T6089] ======================================================= [ 463.442107][ T6085] udevd[6085]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 464.119184][ T6102] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 468.559169][ T5688] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 468.563440][ T5688] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 468.601426][ T5688] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 468.610407][ T5688] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 468.611660][ T5688] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 470.543126][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 470.712934][ T53] Bluetooth: hci6: command tx timeout [ 472.050033][ T6144] loop4: detected capacity change from 0 to 512 [ 472.100520][ T6144] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 472.189178][ T6144] EXT4-fs (loop4): 1 truncate cleaned up [ 472.195578][ T6144] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 472.558229][ T6150] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 472.773175][ T53] Bluetooth: hci6: command tx timeout [ 474.022987][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 474.433068][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 474.842737][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 475.008987][ T53] Bluetooth: hci6: command tx timeout [ 475.571188][ T5679] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.738907][ T5849] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 476.595081][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.012825][ T53] Bluetooth: hci6: command tx timeout [ 477.394018][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.688313][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.714375][ T6177] loop3: detected capacity change from 0 to 512 [ 477.780107][ T6177] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 477.826487][ T6177] EXT4-fs (loop3): 1 truncate cleaned up [ 477.830144][ T6177] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 477.898901][ T6120] rxe_eth0 speed is unknown, defaulting to 1000 [ 478.218405][ T6183] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 478.795676][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.878120][ T5680] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.655796][ T30] audit: type=1800 audit(1793873283.548:2): pid=6197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.59" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=-22 [ 482.113237][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 482.210392][ T6196] loop0: detected capacity change from 0 to 512 [ 482.283263][ T6196] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 482.381309][ T6196] EXT4-fs (loop0): 1 truncate cleaned up [ 482.427563][ T6196] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 482.515302][ T12] bridge_slave_1: left allmulticast mode [ 482.515359][ T12] bridge_slave_1: left promiscuous mode [ 482.516487][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.599065][ T6204] FAULT_INJECTION: forcing a failure. [ 482.599065][ T6204] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 482.599100][ T6204] CPU: 1 UID: 0 PID: 6204 Comm: syz.5.61 Not tainted syzkaller #0 PREEMPT(full) [ 482.599129][ T6204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 482.599144][ T6204] Call Trace: [ 482.599154][ T6204] [ 482.599165][ T6204] dump_stack_lvl+0xe8/0x150 [ 482.599214][ T6204] should_fail_ex+0x3eb/0x540 [ 482.599252][ T6204] _copy_from_user+0x2d/0xb0 [ 482.599287][ T6204] bpf_vlog_reverse_ubuf+0xb1/0x3e0 [ 482.599333][ T6204] bpf_vlog_finalize+0x154/0x3f0 [ 482.599369][ T6204] bpf_log_attr_finalize+0x80/0x1e0 [ 482.599403][ T6204] ? __pfx_bpf_log_attr_finalize+0x10/0x10 [ 482.599441][ T6204] ? srso_alias_return_thunk+0x5/0xfbef5 [ 482.599477][ T6204] ? srso_alias_return_thunk+0x5/0xfbef5 [ 482.599508][ T6204] ? btf_parse_str_sec+0x244/0x2f0 [ 482.599538][ T6204] ? srso_alias_return_thunk+0x5/0xfbef5 [ 482.599576][ T6204] btf_new_fd+0x6a0/0x8f0 [ 482.599609][ T6204] __sys_bpf+0xda7/0xe00 [ 482.599645][ T6204] ? __pfx___sys_bpf+0x10/0x10 [ 482.599669][ T6204] ? vm_mmap_pgoff+0x332/0x520 [ 482.599706][ T6204] ? srso_alias_return_thunk+0x5/0xfbef5 [ 482.599745][ T6204] ? do_futex+0x3e7/0x4e0 [ 482.599807][ T6204] ? rcu_is_watching+0x16/0xb0 [ 482.599849][ T6204] ? srso_alias_return_thunk+0x5/0xfbef5 [ 482.599887][ T6204] __x64_sys_bpf+0xba/0xd0 [ 482.599930][ T6204] do_syscall_64+0x166/0x520 [ 482.599962][ T6204] ? trace_irq_disable+0x3b/0x140 [ 482.600000][ T6204] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.600033][ T6204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.600060][ T6204] RIP: 0033:0x7f5e3059fb19 [ 482.600083][ T6204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 482.600104][ T6204] RSP: 002b:00007f5e314b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 482.600130][ T6204] RAX: ffffffffffffffda RBX: 00007f5e30825fa0 RCX: 00007f5e3059fb19 [ 482.600149][ T6204] RDX: 0000000000000028 RSI: 0000200000001380 RDI: 0000000000000012 [ 482.600166][ T6204] RBP: 00007f5e30637b70 R08: 0000000000000000 R09: 0000000000000000 [ 482.600183][ T6204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 482.600198][ T6204] R13: 00007f5e30826038 R14: 00007f5e30825fa0 R15: 00007ffceaee5f18 [ 482.600239][ T6204] [ 482.841934][ T6206] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 483.379760][ T5676] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.475946][ T12] bridge_slave_0: left allmulticast mode [ 483.475978][ T12] bridge_slave_0: left promiscuous mode [ 483.476207][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.789377][ T6213] 9pnet_virtio: no channels available for device 127.0.0.1 [ 484.807798][ T5688] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 484.812422][ T5688] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 484.813875][ T5688] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 484.835706][ T5688] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 484.844988][ T5688] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 486.658178][ T30] audit: type=1800 audit(1793873288.558:3): pid=6227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.65" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=-22 [ 487.192648][ T53] Bluetooth: hci0: command tx timeout [ 487.477122][ T6234] 9pnet_virtio: no channels available for device 127.0.0.1 [ 489.078111][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 489.252913][ T53] Bluetooth: hci0: command tx timeout [ 489.294687][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 489.382978][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 489.494897][ T12] bond0 (unregistering): Released all slaves [ 490.538530][ T6258] 9pnet_virtio: no channels available for device 127.0.0.1 [ 491.332712][ T53] Bluetooth: hci0: command tx timeout [ 492.327033][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 492.889756][ T6272] 9pnet_virtio: no channels available for device 127.0.0.1 [ 493.412695][ T53] Bluetooth: hci0: command tx timeout [ 501.124099][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.125123][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 548.119429][ T6220] rxe_eth0 speed is unknown, defaulting to 1000 [ 549.020820][ T5685] Bluetooth: hci2: command 0x0406 tx timeout [ 549.154892][ T5685] Bluetooth: hci1: command 0x0406 tx timeout [ 549.155696][ T5685] Bluetooth: hci4: command 0x0406 tx timeout [ 549.156072][ T5685] Bluetooth: hci5: command 0x0406 tx timeout [ 562.481065][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.482087][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 595.344925][ T53] Bluetooth: hci6: command 0x0406 tx timeout [ 610.487825][ T5694] Bluetooth: hci0: command 0x0406 tx timeout [ 623.794316][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.795324][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 635.377645][ T12] hsr_slave_0: left promiscuous mode [ 636.201780][ T12] hsr_slave_1: left promiscuous mode [ 637.473991][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 637.474107][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 639.143858][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 639.144036][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 646.558607][ T12] veth1_macvtap: left promiscuous mode [ 646.558955][ T12] veth0_macvtap: left promiscuous mode [ 646.725706][ T12] veth1_vlan: left promiscuous mode [ 646.727509][ T12] veth0_vlan: left promiscuous mode [ 651.208975][ T53] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 651.304696][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 651.517246][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 651.628656][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 652.032126][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 652.764930][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 656.776349][ T53] Bluetooth: hci3: command tx timeout [ 658.942041][ T53] Bluetooth: hci3: command tx timeout [ 661.021020][ T5694] Bluetooth: hci3: command tx timeout [ 663.107948][ T5694] Bluetooth: hci3: command tx timeout [ 685.448678][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.449754][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 704.766306][ T53] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 705.003176][ T53] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 705.110731][ T53] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 705.630365][ T53] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 706.085140][ T53] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 709.426030][ T5694] Bluetooth: hci7: command tx timeout [ 711.537875][ T5694] Bluetooth: hci7: command tx timeout [ 713.590995][ T5694] Bluetooth: hci7: command tx timeout [ 715.653640][ T5694] Bluetooth: hci7: command tx timeout [ 722.108677][ T53] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 722.227410][ T53] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 722.703869][ T53] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 723.221321][ T53] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 723.361291][ T53] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 726.290059][ T53] Bluetooth: hci8: command tx timeout [ 728.319456][ T53] Bluetooth: hci8: command tx timeout [ 730.384356][ T53] Bluetooth: hci8: command tx timeout [ 732.533081][ T53] Bluetooth: hci8: command tx timeout [ 744.388300][ T5694] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 744.416797][ T5694] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 744.654272][ T5694] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 745.161392][ T5694] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 745.462369][ T5694] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 746.870899][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.872018][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.038186][ T5694] Bluetooth: hci9: command tx timeout [ 750.060405][ T5694] Bluetooth: hci9: command tx timeout [ 752.226882][ T5694] Bluetooth: hci9: command tx timeout [ 754.364963][ T5694] Bluetooth: hci9: command tx timeout [ 779.434820][ T5694] Bluetooth: hci3: command 0x0406 tx timeout [ 790.814565][ T33] INFO: task kworker/u8:21:6297 blocked for more than 143 seconds. [ 790.814635][ T33] Not tainted syzkaller #0 [ 790.814688][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 790.814740][ T33] task:kworker/u8:21 state:D stack:22296 pid:6297 tgid:6297 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 790.814853][ T33] Workqueue: events_unbound linkwatch_event [ 790.814928][ T33] Call Trace: [ 790.814948][ T33] [ 790.815172][ T33] __schedule+0x17dd/0x5830 [ 791.026956][ T33] ? __pfx___schedule+0x10/0x10 [ 791.027474][ T33] ? schedule+0x90/0x2b0 [ 791.027787][ T33] ? schedule+0x90/0x2b0 [ 791.113948][ T33] schedule+0x164/0x2b0 [ 791.114480][ T33] schedule_preempt_disabled+0x13/0x30 [ 791.114659][ T33] __mutex_lock+0x7c4/0x15a0 [ 791.114938][ T33] ? __mutex_lock+0x5cd/0x15a0 [ 791.115474][ T33] ? linkwatch_event+0xe/0x60 [ 791.255233][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 791.255472][ T33] ? lock_acquire+0x115/0x350 [ 791.256314][ T33] ? rcu_is_watching+0x16/0xb0 [ 791.256548][ T33] ? process_scheduled_works+0x97a/0x1630 [ 791.256807][ T33] linkwatch_event+0xe/0x60 [ 791.256993][ T33] process_scheduled_works+0xc3d/0x1630 [ 791.334058][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 791.449835][ T33] ? __pfx_process_scheduled_works+0x10/0x10 [ 791.450277][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 791.450374][ T33] ? assign_work+0x3cf/0x5d0 [ 791.604783][ T33] worker_thread+0xa47/0xfb0 [ 791.604941][ T33] ? pv_queued_spin_unlock_traced+0x5a/0x1b0 [ 791.605870][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 791.605931][ T33] ? __kthread_parkme+0x71/0x1f0 [ 791.649391][ T33] kthread+0x38b/0x480 [ 791.649720][ T33] ? __pfx_worker_thread+0x10/0x10 [ 791.649786][ T33] ? __pfx_kthread+0x10/0x10 [ 791.650139][ T33] ret_from_fork+0x514/0xb70 [ 791.650267][ T33] ? save_fpregs_to_fpstate+0x176/0x200 [ 791.863486][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 791.863790][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 791.863859][ T33] ? __switch_to+0xc78/0x1410 [ 791.864260][ T33] ? __pfx_kthread+0x10/0x10 [ 791.973498][ T33] ret_from_fork_asm+0x1a/0x30 [ 791.981506][ T33] [ 791.981710][ T33] [ 791.981710][ T33] Showing all locks held in the system: [ 792.166645][ T33] locks held by kworker/0:0/9: 3, on CPU#0: [ 792.166692][ T33] #0: ffff88813fe0ed48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 792.166978][ T33] #1: ffffc900000e7c40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 792.167301][ T33] #2: ffffffff916931a0 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 792.167679][ T33] locks held by kworker/u8:0/12: 6, last CPU#0: [ 792.167722][ T33] #0: ffff88801d286148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 792.167869][ T33] #1: ffffc90000117c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 792.168064][ T33] #2: ffffffff916844c8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 792.168309][ T33] #3: ffffffff916931a0 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xd0/0x760 [ 792.267377][ T33] #4: ffff88801d2852a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 792.267536][ T33] #5: ffff88801d285180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140 [ 792.267730][ T33] locks held by kworker/u8:1/13: 3, last CPU#0: [ 792.267767][ T33] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 792.268022][ T33] #1: ffffc90000127c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 792.453197][ T33] #2: ffff88804ef20800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 792.453548][ T33] locks held by pr/ttyS0/32: 2, last CPU#0: [ 792.453603][ T33] #0: ffffffff90033d58 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 792.453803][ T33] #1: ffffffff9c1feeb8 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 [ 792.453982][ T33] locks held by khungtaskd/33: 1, last CPU#1: [ 792.454015][ T33] #0: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 792.454391][ T33] locks held by kworker/u8:6/142: 3, last CPU#1: [ 792.454435][ T33] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 792.454755][ T33] #1: ffffc90002e6fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 792.455125][ T33] #2: ffff88804ebe0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 792.455282][ T33] locks held by kworker/u8:7/154: 3, last CPU#1: [ 792.455311][ T33] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 792.563757][ T33] #1: ffffc90002ebfc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 792.564141][ T33] #2: ffff8880678d0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 792.564489][ T33] locks held by kworker/0:2/988: 2, last CPU#0: [ 792.564515][ T33] #0: ffff88813fe0dd48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 792.785708][ T33] #1: ffff8880b823c5e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb2/0x160 [ 792.786057][ T33] locks held by klogd/4982: 1, last CPU#1: [ 792.786110][ T33] #0: ffffffff902b1a50 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 792.786267][ T33] locks held by getty/5386: 2, on CPU#1: [ 792.786296][ T33] #0: ffff888033b340a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 792.786486][ T33] #1: ffffc900032362e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 792.786736][ T33] locks held by kworker/u8:2/5701: 5, last CPU#1: [ 792.786780][ T33] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 792.787087][ T33] #1: ffffc900037cfc40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 792.787448][ T33] #2: ffffffff8ffe6050 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_disable+0x12/0x20 [ 792.787713][ T33] #3: ffffffff9023cb80 (jump_label_mutex){+.+.}-{4:4}, at: static_key_disable_cpuslocked+0x8d/0x1a0 [ 792.787939][ T33] #4: ffffffff8fffd0a0 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30 [ 792.788178][ T33] locks held by kworker/u8:3/5704: 3, last CPU#1: [ 792.788222][ T33] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 793.048166][ T33] #1: ffffc9000382fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 793.048361][ T33] #2: ffff8880668c0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 793.048543][ T33] locks held by kworker/u8:4/5708: 3, last CPU#1: [ 793.048578][ T33] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 793.048818][ T33] #1: ffffc9000388fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 793.049121][ T33] #2: ffff88804e7c0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 793.049460][ T33] locks held by kworker/u8:5/5710: 3, last CPU#1: [ 793.049514][ T33] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 793.266736][ T33] #1: ffffc900038afc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 793.267098][ T33] #2: ffff888067ba0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 793.267435][ T33] locks held by kworker/0:6/5827: 3, last CPU#0: [ 793.267461][ T33] #0: ffff88813fe0ed48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 793.267670][ T33] #1: ffffc9000459fc40 (drain_vmap_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 793.267888][ T33] #2: ffffffff90290740 (vmap_purge_lock){+.+.}-{4:4}, at: drain_vmap_area_work+0x17/0x40 [ 793.268161][ T33] locks held by kworker/u8:8/5861: 3, last CPU#1: [ 793.268208][ T33] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 793.268536][ T33] #1: ffffc9000489fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 793.268926][ T33] #2: ffff88804ed90800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 793.269123][ T33] locks held by kworker/u8:9/5865: 2, on CPU#1: [ 793.269152][ T33] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 793.269339][ T33] #1: ffffc900048f7c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 793.269583][ T33] locks held by kworker/u8:11/5958: 2, on CPU#0: [ 793.269624][ T33] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 793.269926][ T33] #1: ffffc90004bc7c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 793.270280][ T33] locks held by kworker/u8:12/6065: 3, last CPU#1: [ 793.270334][ T33] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 793.270643][ T33] #1: ffffc90004f5fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 793.270806][ T33] #2: ffff8880669c0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 793.271013][ T33] locks held by kworker/u8:13/6066: 3, last CPU#1: [ 793.271051][ T33] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 793.271322][ T33] #1: ffffc90004fdfc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 793.344660][ T33] #2: ffff888067a40800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 793.344843][ T33] locks held by syz-executor/6200: 2, last CPU#1: [ 793.344878][ T33] #0: ffff88807d3bd900 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x19c/0xa40 [ 793.345402][ T33] #1: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 793.345762][ T33] locks held by syz-executor/6220: 5, on CPU#1: [ 793.345804][ T33] #0: ffffffff916844c8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x51f/0x770 [ 793.345949][ T33] #1: ffffffff913e5628 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1fb/0x2f0 [ 793.451474][ T33] #2: ffffffff913e57e8 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x233/0x2f0 [ 793.451634][ T33] #3: ffff88807f5c9020 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xf0/0x640 [ 793.451838][ T33] #4: ffff8880b823c5e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb2/0x160 [ 793.452100][ T33] locks held by kworker/u8:14/6289: 3, last CPU#1: [ 793.452145][ T33] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 793.452470][ T33] #1: ffffc900048c7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 793.625078][ T33] #2: ffff888066bc0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 793.625287][ T33] locks held by kworker/u8:15/6290: 3, last CPU#1: [ 793.625328][ T33] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 793.625604][ T33] #1: ffffc900048afc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 793.625925][ T33] #2: ffff88802b7db258 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 793.626284][ T33] locks held by kworker/u8:16/6291: 3, last CPU#1: [ 793.626340][ T33] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 793.626553][ T33] #1: ffffc9000359fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 793.626736][ T33] #2: ffff88804f8dc258 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 793.626988][ T33] locks held by kworker/u8:17/6292: 3, last CPU#1: [ 793.627028][ T33] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 793.627319][ T33] #1: ffffc900049d7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 793.627674][ T33] #2: ffff888079183258 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 794.090213][ T33] locks held by kworker/u8:19/6294: 5, last CPU#1: [ 794.090257][ T33] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 794.090574][ T33] #1: ffffc9000358fc40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 794.090920][ T33] #2: ffffffff8ffe6050 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_enable+0x12/0x20 [ 794.091205][ T33] #3: ffffffff9023cb80 (jump_label_mutex){+.+.}-{4:4}, at: static_key_enable_cpuslocked+0xcb/0x240 [ 794.091358][ T33] #4: ffffffff8fffd0a0 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30 [ 794.091567][ T33] locks held by kworker/u8:20/6295: 3, on CPU#1: [ 794.091605][ T33] #0: ffff88801c74f948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 794.091874][ T33] #1: ffffc9000487fc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 794.092202][ T33] #2: ffffffff916931a0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 794.224793][ T33] locks held by kworker/u8:21/6297: 3, on CPU#0: [ 794.224843][ T33] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 794.225158][ T33] #1: ffffc9000486fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 794.225510][ T33] #2: ffffffff916931a0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 794.225657][ T33] locks held by kworker/u8:22/6299: 3, last CPU#1: [ 794.225687][ T33] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 794.226269][ T33] #1: ffffc9000356fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 794.226613][ T33] #2: ffff88804f8dc258 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 794.318181][ T33] locks held by syz-executor/6318: 1, on CPU#0: [ 794.318228][ T33] #0: ffffffff916931a0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 794.318566][ T33] locks held by kworker/u8:24/6325: 2, last CPU#1: [ 794.318618][ T33] #0: ffff888033a26948 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 794.318977][ T33] #1: ffffc90003ddfc40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 794.319128][ T33] locks held by syz-executor/6327: 1, on CPU#0: [ 794.319158][ T33] #0: ffffffff916931a0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 794.319362][ T33] locks held by udevd/6335: 1, last CPU#1: [ 794.319399][ T33] #0: ffff88807d3bc080 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d5/0xa40 [ 794.319670][ T33] locks held by udevd/6339: 1, last CPU#1: [ 794.560971][ T33] #0: ffff88807d3bb440 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d5/0xa40 [ 794.561158][ T33] locks held by udevd/6341: 1, last CPU#0: [ 794.561192][ T33] #0: ffff8880216b1bc0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d5/0xa40 [ 794.561417][ T33] locks held by rm/6344: 1, last CPU#0: [ 794.561458][ T33] #0: ffff8880216b0340 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d5/0xa40 [ 794.561741][ T33] locks held by udevd/6345: 2, last CPU#0: [ 794.561807][ T33] #0: ffff88813fe39bc0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d5/0xa40 [ 794.562148][ T33] #1: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 794.562455][ T33] locks held by modprobe/6346: 1, last CPU#0: [ 794.562480][ T33] #0: ffff88813fe3d900 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d5/0xa40 [ 794.659303][ T33] locks held by udevd/6347: 2, last CPU#0: [ 794.659351][ T33] #0: ffff8880216b7180 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d5/0xa40 [ 794.659614][ T33] #1: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 794.659933][ T33] locks held by kworker/u8:26/6348: 3, last CPU#0: [ 794.659983][ T33] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 794.660348][ T33] #1: ffffc900001f7c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 794.660553][ T33] #2: ffff888067eb0258 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 794.660750][ T33] locks held by syz-executor/6349: 2, last CPU#0: [ 794.660785][ T33] #0: ffff8880758b6308 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 794.661019][ T33] #1: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 794.834707][ T33] locks held by udevd/6350: 1, last CPU#0: [ 794.834747][ T33] #0: ffff8880350fb8e0 (&sb->s_type->i_mutex_key#12){++++}-{4:4}, at: lookup_slow+0x46/0x80 [ 794.835020][ T33] locks held by kworker/u8:9/6351: 2, last CPU#0: [ 794.835062][ T33] #0: ffff88803081eb60 (&sig->cred_guard_mutex){+.+.}-{4:4}, at: bprm_execve+0xbc/0x1590 [ 794.835356][ T33] #1: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: filemap_get_read_batch+0x10d/0xa40 [ 794.835920][ T33] [ 794.835933][ T33] ============================================= [ 794.835933][ T33] [ 794.835950][ T33] NMI backtrace for cpu 0 [ 794.835973][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 794.836008][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 794.836031][ T33] Call Trace: [ 794.836073][ T33] [ 794.836126][ T33] dump_stack_lvl+0xe8/0x150 [ 794.836391][ T33] nmi_cpu_backtrace+0x274/0x2d0 [ 794.836639][ T33] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 794.837109][ T33] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 794.837360][ T33] sys_info+0x135/0x170 [ 794.837495][ T33] watchdog+0x1073/0x10f0 [ 794.838378][ T33] ? watchdog+0x209/0x10f0 [ 794.838839][ T33] kthread+0x38b/0x480 [ 794.839171][ T33] ? __pfx_watchdog+0x10/0x10 [ 794.839307][ T33] ? __pfx_kthread+0x10/0x10 [ 794.839625][ T33] ret_from_fork+0x514/0xb70 [ 794.839934][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 794.840140][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 794.840257][ T33] ? __switch_to+0xc78/0x1410 [ 794.840786][ T33] ? __pfx_kthread+0x10/0x10 [ 794.841003][ T33] ret_from_fork_asm+0x1a/0x30 [ 794.842198][ T33] [ 794.863927][ T33] Sending NMI from CPU 0 to CPUs 1: [ 794.863995][ C1] NMI backtrace for cpu 1 [ 794.864016][ C1] CPU: 1 UID: 0 PID: 32 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 794.864045][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 794.864063][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x80 [ 794.864132][ C1] Code: 8b 3d c4 d0 ce 0c 48 89 de 5b e9 e3 83 6b 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0d 58 f0 17 13 65 48 8b 15 58 f0 17 13 f7 c2 00 01 00 ff [ 794.864155][ C1] RSP: 0018:ffffc90000a08148 EFLAGS: 00000246 [ 794.864184][ C1] RAX: ffffffff81cd296b RBX: ffffffff81cafd60 RCX: ffffffff81cd28d5 [ 794.864205][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88801d2a6948 [ 794.864225][ C1] RBP: ffff88801d2a6810 R08: ffff88801d2a694f R09: 1ffff11003a54d29 [ 794.864246][ C1] R10: dffffc0000000000 R11: ffffed1003a54d2a R12: ffff88801d2a6800 [ 794.864267][ C1] R13: dffffc0000000000 R14: ffffc90000a082b8 R15: 000000003cb00e5c [ 794.864291][ C1] FS: 0000000000000000(0000) GS:ffff888123510000(0000) knlGS:0000000000000000 [ 794.864314][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 794.864334][ C1] CR2: 00007f8ec3500070 CR3: 000000005a421000 CR4: 0000000000350ef0 [ 794.864361][ C1] Call Trace: [ 794.864378][ C1] [ 794.864390][ C1] __rb_reserve_next+0x1bb/0xdd0 [ 794.864670][ C1] ring_buffer_lock_reserve+0xc0d/0x10c0 [ 794.864746][ C1] ? ring_buffer_unlock_commit+0x51d/0x6c0 [ 794.864868][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 794.864909][ C1] ? trace_buffer_unlock_commit_regs+0x156/0x520 [ 794.865070][ C1] trace_event_buffer_lock_reserve+0x1d4/0x700 [ 794.865189][ C1] trace_event_buffer_reserve+0x1ef/0x2d0 [ 794.865295][ C1] trace_event_raw_event_lock+0x127/0x280 [ 794.865403][ C1] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 794.865447][ C1] ? lock_acquire+0x115/0x350 [ 794.865563][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 794.865603][ C1] ? lock_acquire+0x115/0x350 [ 794.865678][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 794.865738][ C1] ? unwind_next_frame+0x8f/0x2550 [ 794.865792][ C1] ? unwind_next_frame+0x8f/0x2550 [ 794.865844][ C1] lock_release+0x396/0x3c0 [ 794.865906][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 794.865946][ C1] ? deref_stack_reg+0x18e/0x220 [ 794.866024][ C1] ? unwind_next_frame+0x8f/0x2550 [ 794.866094][ C1] unwind_next_frame+0x1baa/0x2550 [ 794.866210][ C1] ? kthread+0x38b/0x480 [ 794.866257][ C1] ? unwind_next_frame+0x8f/0x2550 [ 794.866362][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 794.866429][ C1] arch_stack_walk+0x11b/0x150 [ 794.866555][ C1] ? ret_from_fork+0x514/0xb70 [ 794.866661][ C1] stack_trace_save+0xa9/0x100 [ 794.866723][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 794.866847][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 794.866894][ C1] ? ring_buffer_unlock_commit+0x51d/0x6c0 [ 794.866966][ C1] kasan_save_track+0x3e/0x80 [ 794.867014][ C1] ? kasan_save_track+0x3e/0x80 [ 794.867057][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 794.867105][ C1] ? kmem_cache_alloc_node_noprof+0x34f/0x600 [ 794.867146][ C1] ? __alloc_skb+0x1db/0x7a0 [ 794.867194][ C1] ? skb_copy+0x19d/0x880 [ 794.867230][ C1] ? mac80211_hwsim_tx_frame_no_nl+0x1047/0x1820 [ 794.867275][ C1] ? mac80211_hwsim_tx_frame+0x199/0x1f0 [ 794.867316][ C1] ? mac80211_hwsim_beacon_tx+0x396/0x820 [ 794.867360][ C1] ? __iterate_interfaces+0x2af/0x5a0 [ 794.867409][ C1] ? ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 794.867459][ C1] ? mac80211_hwsim_beacon+0xaf/0x240 [ 794.867504][ C1] ? __hrtimer_run_queues+0x3bc/0xa10 [ 794.867542][ C1] ? hrtimer_run_softirq+0x1e3/0x2e0 [ 794.867582][ C1] ? handle_softirqs+0x265/0x8d0 [ 794.867626][ C1] ? __irq_exit_rcu+0xc6/0x220 [ 794.867669][ C1] ? irq_exit_rcu+0x9/0x30 [ 794.867712][ C1] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 794.867749][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 794.867787][ C1] ? _raw_spin_unlock_irqrestore+0x47/0x80 [ 794.867822][ C1] ? nbcon_kthread_func+0x724/0x8d0 [ 794.867864][ C1] ? kthread+0x38b/0x480 [ 794.868274][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 794.868353][ C1] __kasan_slab_alloc+0x6c/0x80 [ 794.868436][ C1] kmem_cache_alloc_node_noprof+0x34f/0x600 [ 794.868508][ C1] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 794.868548][ C1] ? __alloc_skb+0x1db/0x7a0 [ 794.868594][ C1] ? __alloc_skb+0x1db/0x7a0 [ 794.868733][ C1] __alloc_skb+0x1db/0x7a0 [ 794.868853][ C1] skb_copy+0x19d/0x880 [ 794.868911][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 794.868951][ C1] ? seqcount_lockdep_reader_access+0xea/0x100 [ 794.869097][ C1] mac80211_hwsim_tx_frame_no_nl+0x1047/0x1820 [ 794.869246][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 794.869435][ C1] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 794.869615][ C1] ? ieee80211_beacon_get_tim+0x218/0x2c0 [ 794.869702][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 794.869811][ C1] mac80211_hwsim_tx_frame+0x199/0x1f0 [ 794.869917][ C1] mac80211_hwsim_beacon_tx+0x396/0x820 [ 794.869984][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 794.870074][ C1] __iterate_interfaces+0x2af/0x5a0 [ 794.870160][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 794.870206][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 794.870281][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 794.870327][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 794.870403][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 794.870474][ C1] mac80211_hwsim_beacon+0xaf/0x240 [ 794.870542][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 794.870629][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 794.870880][ C1] hrtimer_run_softirq+0x1e3/0x2e0 [ 794.870982][ C1] handle_softirqs+0x265/0x8d0 [ 794.871030][ C1] ? __raw_callee_save_pv_queued_spin_unlock_traced+0x15/0x40 [ 794.871222][ C1] __irq_exit_rcu+0xc6/0x220 [ 794.871303][ C1] irq_exit_rcu+0x9/0x30 [ 794.871364][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 794.871415][ C1] [ 794.871427][ C1] [ 794.871456][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 794.871499][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 794.871537][ C1] Code: f7 e8 6d 9f 9d f5 f7 c3 00 02 00 00 74 05 e8 20 41 ca f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 a4 93 8e f5 65 48 8b 05 ac e1 d9 08 48 85 c0 74 18 5b 41 5e e9 [ 794.871559][ C1] RSP: 0018:ffffc90000a87ca8 EFLAGS: 00000206 [ 794.871587][ C1] RAX: 0000000000000002 RBX: 0000000000000292 RCX: 8000000000000001 [ 794.871606][ C1] RDX: 0000000000000000 RSI: ffffffff8e6a84f3 RDI: 0000000000000001 [ 794.871625][ C1] RBP: ffffc90000a87e18 R08: ffffffff91bdeebf R09: 1ffffffff237bdd7 [ 794.871647][ C1] R10: dffffc0000000000 R11: fffffbfff237bdd8 R12: 0000000000000002 [ 794.871667][ C1] R13: ffff88801f690000 R14: ffffffff9c1feea0 R15: dffffc0000000000 [ 794.871889][ C1] nbcon_kthread_func+0x724/0x8d0 [ 794.872030][ C1] ? nbcon_kthread_func+0x163/0x8d0 [ 794.872088][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 794.872189][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 794.872289][ C1] ? __kthread_parkme+0x71/0x1f0 [ 794.872371][ C1] ? __kthread_parkme+0x199/0x1f0 [ 794.872489][ C1] kthread+0x38b/0x480 [ 794.872559][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 794.872601][ C1] ? __pfx_kthread+0x10/0x10 [ 794.872687][ C1] ret_from_fork+0x514/0xb70 [ 794.872786][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 794.872843][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 794.872886][ C1] ? __switch_to+0xc78/0x1410 [ 794.873002][ C1] ? __pfx_kthread+0x10/0x10 [ 794.873088][ C1] ret_from_fork_asm+0x1a/0x30 [ 794.873360][ C1] [ 796.533514][ T33] Kernel panic - not syncing: hung_task: blocked tasks [ 797.023174][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 797.032326][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 797.042417][ T33] Call Trace: [ 797.045784][ T33] [ 797.048731][ T33] vpanic+0x26f/0x710 [ 797.052966][ T33] panic+0xc5/0xd0 [ 797.056896][ T33] ? __pfx_panic+0x10/0x10 [ 797.061398][ T33] ? preempt_schedule_common+0x7f/0xd0 [ 797.067167][ T33] ? preempt_schedule_thunk+0x16/0x40 [ 797.072826][ T33] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 797.079188][ T33] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 797.085806][ T33] watchdog+0x10e7/0x10f0 [ 797.090779][ T33] ? watchdog+0x209/0x10f0 [ 797.095990][ T33] kthread+0x38b/0x480 [ 797.100217][ T33] ? __pfx_watchdog+0x10/0x10 [ 797.104939][ T33] ? __pfx_kthread+0x10/0x10 [ 797.109779][ T33] ret_from_fork+0x514/0xb70 [ 797.114869][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 797.120228][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 797.125976][ T33] ? __switch_to+0xc78/0x1410 [ 797.130927][ T33] ? __pfx_kthread+0x10/0x10 [ 797.135887][ T33] ret_from_fork_asm+0x1a/0x30 [ 797.141881][ T33] [ 797.145199][ T33] Kernel Offset: disabled [ 797.149636][ T33] Rebooting in 86400 seconds..