last executing test programs: 7.418134582s ago: executing program 2 (id=3): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004e000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = eventfd(0x0) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000080)={r6, 0x11, 0x0, r6}) syz_usb_connect(0x2, 0x913, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) getpeername$netrom(0xffffffffffffffff, 0x0, 0x0) 6.092305953s ago: executing program 3 (id=4): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004e000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = eventfd(0x0) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000080)={r6, 0x11, 0x0, r6}) syz_usb_connect(0x2, 0x913, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getpeername$netrom(r9, 0x0, 0x0) 5.064247128s ago: executing program 1 (id=2): syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d044", 0x2}], 0x1) 4.803400314s ago: executing program 4 (id=5): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00'}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 4.69641929s ago: executing program 0 (id=1): socket(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"/5036], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r5, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x0, 0x88, 0x0, &(0x7f0000002c80)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d4"}, 0x50) 4.475941926s ago: executing program 4 (id=6): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x43, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) 4.13114877s ago: executing program 2 (id=7): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0x400826e, 0x40, 0x3, 0xf0}) io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/protocols\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/4089, 0xff9}], 0x2, 0x740, 0x0) 4.12307904s ago: executing program 4 (id=8): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0x400826e, 0x40, 0x3, 0xf0}) io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open_by_handle_at(0xffffffffffffffff, 0x0, 0x1) 3.032222559s ago: executing program 2 (id=9): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f000000f8c0)={0x0, 0x0, &(0x7f000000f880)={0x0}}, 0x10) 2.970604746s ago: executing program 4 (id=10): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x1b00, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r7, 0x2, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)=[r7], 0x1}) io_uring_enter(r7, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0x1b2e}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) close(r10) syz_open_procfs(0x0, &(0x7f0000000780)='net/tcp\x00') preadv(r10, &(0x7f0000000800)=[{&(0x7f00000007c0)=""/63, 0x3f}], 0x1, 0x2, 0xa00) dup(r2) 2.751985625s ago: executing program 3 (id=11): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x30) syz_usb_connect(0x0, 0x5d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a00"], 0x0) 2.450168628s ago: executing program 2 (id=12): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x40) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x8080583a, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c) 2.408586693s ago: executing program 0 (id=13): socket$inet6(0xa, 0x11, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) chown(&(0x7f00000079c0)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x10, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0x100000, 0x8, 0x1}, {0x0, 0x2000, 0xf, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5}, {0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, 0x0, 0x80, 0x80, 0x4}, {0x10000, 0xffff1000, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x3}, {0x0, 0xffff1000, 0xc, 0x2, 0x3, 0x10, 0x6, 0x0, 0x1, 0x0, 0x4}, {0x8080000, 0x10000, 0x0, 0x0, 0x0, 0xfd}, {0x0, 0x0, 0xa, 0x0, 0x80, 0xf9, 0x0, 0x7, 0x3a, 0x2}, {0x0, 0x3000, 0x0, 0x2, 0x0, 0x54, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x2, 0x400}, {}, 0xddf8ffdb, 0x0, 0x11111001, 0x100, 0x8, 0x8000, 0x3000, [0x0, 0x0, 0x2]}) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x5, 0x50}) 1.675765446s ago: executing program 4 (id=14): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x22400) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0xffffffffffffffe0, &(0x7f0000000180)=0x6) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="28000000b141ff7701", @ANYRES16=r5, @ANYBLOB="050000000000000000006b00000008000300", @ANYRES32=r6, @ANYBLOB="0a0006000802110000000000"], 0x28}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCFLSH(r9, 0x400455c8, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x4, 0x65, &(0x7f0000000500)=ANY=[], 0x0) 1.653317187s ago: executing program 1 (id=15): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@can={{0x4, 0x0, 0x0, 0x1}, 0x6, 0x0, 0x0, 0x0, "a7a278571758745d"}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) readv(r0, &(0x7f0000000700)=[{&(0x7f0000000200)=""/228, 0xe4}], 0x1) 25.642785ms ago: executing program 1 (id=16): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) getpid() fcntl$getownex(r1, 0x10, &(0x7f00000001c0)) setns(0xffffffffffffffff, 0x24020000) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f00000007c0)={0x48, 0x2, r4}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r4, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) r5 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = syz_open_dev$media(&(0x7f0000000680), 0x8, 0x48081) ioctl$MEDIA_IOC_REQUEST_ALLOC(r6, 0x80047c05, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 24.487815ms ago: executing program 0 (id=17): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) 0s ago: executing program 2 (id=18): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000004e000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = eventfd(0x0) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000080)={r6, 0x11, 0x0, r6}) syz_usb_connect(0x2, 0x913, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) getpeername$netrom(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.176' (ED25519) to the list of known hosts. [ 84.293805][ T5821] cgroup: Unknown subsys name 'net' [ 84.396556][ T5821] cgroup: Unknown subsys name 'cpuset' [ 84.409363][ T5821] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.255398][ T5821] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.180684][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.223907][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.233744][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.243520][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.252345][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.262603][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.272595][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.280162][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.290260][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.310726][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.322563][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.334345][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.342775][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.343877][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.359949][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.408126][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.417100][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.426048][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.434300][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.445365][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.454144][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.462925][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.466910][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.473148][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.486844][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.203995][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 90.407496][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 90.520903][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 90.542168][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 90.589443][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 90.750406][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.759242][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.769036][ T5832] bridge_slave_0: entered allmulticast mode [ 90.777573][ T5832] bridge_slave_0: entered promiscuous mode [ 90.842416][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.850075][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.857746][ T5832] bridge_slave_1: entered allmulticast mode [ 90.865571][ T5832] bridge_slave_1: entered promiscuous mode [ 90.880484][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.889011][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.897299][ T5847] bridge_slave_0: entered allmulticast mode [ 90.906089][ T5847] bridge_slave_0: entered promiscuous mode [ 90.983198][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.990551][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.001147][ T5847] bridge_slave_1: entered allmulticast mode [ 91.008832][ T5847] bridge_slave_1: entered promiscuous mode [ 91.046459][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.053869][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.062298][ T5831] bridge_slave_0: entered allmulticast mode [ 91.070226][ T5831] bridge_slave_0: entered promiscuous mode [ 91.082922][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.158955][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.166473][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.174494][ T5831] bridge_slave_1: entered allmulticast mode [ 91.182411][ T5831] bridge_slave_1: entered promiscuous mode [ 91.193461][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.203273][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.211015][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.221517][ T5839] bridge_slave_0: entered allmulticast mode [ 91.228851][ T5839] bridge_slave_0: entered promiscuous mode [ 91.240232][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.251963][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.259201][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.267301][ T5846] bridge_slave_0: entered allmulticast mode [ 91.275438][ T5846] bridge_slave_0: entered promiscuous mode [ 91.337328][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.345206][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.353397][ T5839] bridge_slave_1: entered allmulticast mode [ 91.361716][ T5839] bridge_slave_1: entered promiscuous mode [ 91.372614][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.382759][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.390182][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.400078][ T51] Bluetooth: hci1: command tx timeout [ 91.400084][ T5837] Bluetooth: hci2: command tx timeout [ 91.400353][ T51] Bluetooth: hci0: command tx timeout [ 91.412006][ T5846] bridge_slave_1: entered allmulticast mode [ 91.425512][ T5846] bridge_slave_1: entered promiscuous mode [ 91.450130][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.470594][ T5832] team0: Port device team_slave_0 added [ 91.541397][ T51] Bluetooth: hci4: command tx timeout [ 91.541930][ T5844] Bluetooth: hci3: command tx timeout [ 91.553758][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.565354][ T5832] team0: Port device team_slave_1 added [ 91.588471][ T5847] team0: Port device team_slave_0 added [ 91.597969][ T5847] team0: Port device team_slave_1 added [ 91.667215][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.682632][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.710678][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.723698][ T5831] team0: Port device team_slave_0 added [ 91.781947][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.808764][ T5831] team0: Port device team_slave_1 added [ 91.819252][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.826614][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.854474][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.868634][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.875779][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.901821][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.926799][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.934073][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.961299][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.975576][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.982703][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.010586][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.066664][ T5839] team0: Port device team_slave_0 added [ 92.081782][ T5846] team0: Port device team_slave_0 added [ 92.104497][ T5839] team0: Port device team_slave_1 added [ 92.149441][ T5846] team0: Port device team_slave_1 added [ 92.185800][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.193040][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.220688][ T1210] cfg80211: failed to load regulatory.db [ 92.222543][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.264321][ T5832] hsr_slave_0: entered promiscuous mode [ 92.271482][ T5832] hsr_slave_1: entered promiscuous mode [ 92.320590][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.328977][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.357622][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.385644][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.392771][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.418967][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.434635][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.441766][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.471757][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.518263][ T5847] hsr_slave_0: entered promiscuous mode [ 92.527199][ T5847] hsr_slave_1: entered promiscuous mode [ 92.536168][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 92.543062][ T5847] Cannot create hsr debugfs directory [ 92.550590][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.562989][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.589383][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.615722][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.623062][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.651615][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.736962][ T5831] hsr_slave_0: entered promiscuous mode [ 92.744273][ T5831] hsr_slave_1: entered promiscuous mode [ 92.750609][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 92.757362][ T5831] Cannot create hsr debugfs directory [ 92.900152][ T5846] hsr_slave_0: entered promiscuous mode [ 92.907637][ T5846] hsr_slave_1: entered promiscuous mode [ 92.914699][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 92.920474][ T5846] Cannot create hsr debugfs directory [ 93.024773][ T5839] hsr_slave_0: entered promiscuous mode [ 93.032163][ T5839] hsr_slave_1: entered promiscuous mode [ 93.038538][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 93.044531][ T5839] Cannot create hsr debugfs directory [ 93.461513][ T5844] Bluetooth: hci0: command tx timeout [ 93.462506][ T51] Bluetooth: hci2: command tx timeout [ 93.467850][ T5837] Bluetooth: hci1: command tx timeout [ 93.590134][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.622020][ T51] Bluetooth: hci4: command tx timeout [ 93.634279][ T51] Bluetooth: hci3: command tx timeout [ 93.638277][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.668723][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.710136][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.756526][ T5847] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.772231][ T5847] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.806966][ T5847] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.819941][ T5847] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.910628][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.922203][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.952203][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.989937][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.044949][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.057681][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.072734][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.103110][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.251826][ T5839] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.277755][ T5839] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.311091][ T5839] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.326281][ T5839] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.417007][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.481598][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.499378][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.507708][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.557917][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.565391][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.593517][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.635823][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.661033][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.708706][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.741122][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.757504][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.800650][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.808180][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.820426][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.827798][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.839016][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.847818][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.894555][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.903346][ T5831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.931502][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.938697][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.953206][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.960408][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.994070][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.001391][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.070563][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.101087][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.108426][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.145209][ T4523] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.153851][ T4523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.495388][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.550717][ T51] Bluetooth: hci0: command tx timeout [ 95.554129][ T5844] Bluetooth: hci1: command tx timeout [ 95.556800][ T51] Bluetooth: hci2: command tx timeout [ 95.701461][ T5837] Bluetooth: hci4: command tx timeout [ 95.707038][ T5844] Bluetooth: hci3: command tx timeout [ 95.860305][ T5831] veth0_vlan: entered promiscuous mode [ 95.947055][ T5831] veth1_vlan: entered promiscuous mode [ 95.998122][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.103757][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.123557][ T5831] veth0_macvtap: entered promiscuous mode [ 96.159180][ T5831] veth1_macvtap: entered promiscuous mode [ 96.213487][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.237760][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.266181][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.287616][ T5847] veth0_vlan: entered promiscuous mode [ 96.312368][ T4523] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.325397][ T4523] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.341080][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.367905][ T4523] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.394366][ T4523] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.410717][ T5847] veth1_vlan: entered promiscuous mode [ 96.500921][ T5832] veth0_vlan: entered promiscuous mode [ 96.548361][ T5846] veth0_vlan: entered promiscuous mode [ 96.605525][ T5832] veth1_vlan: entered promiscuous mode [ 96.624334][ T5847] veth0_macvtap: entered promiscuous mode [ 96.689141][ T5847] veth1_macvtap: entered promiscuous mode [ 96.714214][ T4523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.734368][ T5846] veth1_vlan: entered promiscuous mode [ 96.743602][ T4523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.769915][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.865089][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.917427][ T59] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.929529][ T59] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.940408][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.949506][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.970167][ T5846] veth0_macvtap: entered promiscuous mode [ 96.978559][ T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.996336][ T5832] veth0_macvtap: entered promiscuous mode [ 97.008998][ T5846] veth1_macvtap: entered promiscuous mode [ 97.020893][ T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.047381][ T5832] veth1_macvtap: entered promiscuous mode [ 97.094480][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.109411][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.173982][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.253420][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.268281][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.287391][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.296340][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.315582][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.337156][ T5839] veth0_vlan: entered promiscuous mode [ 97.357752][ T5839] veth1_vlan: entered promiscuous mode [ 97.421783][ T5839] veth0_macvtap: entered promiscuous mode [ 97.439136][ T5839] veth1_macvtap: entered promiscuous mode [ 97.480990][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.503721][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.607090][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.619151][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.628781][ T5844] Bluetooth: hci2: command tx timeout [ 97.628833][ T5844] Bluetooth: hci0: command tx timeout [ 97.631610][ T5837] Bluetooth: hci1: command tx timeout [ 97.701787][ T5951] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.783322][ T5837] Bluetooth: hci3: command tx timeout [ 97.790411][ T5837] Bluetooth: hci4: command tx timeout [ 98.266862][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.276359][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.287418][ T59] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.318162][ T59] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.329512][ T59] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.353004][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.361852][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.398308][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.436731][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.455018][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.481585][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.540525][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.563145][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.714775][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.757028][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.867790][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.876800][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.548902][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.584745][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.628444][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.643998][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.706860][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.719306][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.916694][ T5946] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 100.082223][ T5946] usb 2-1: device descriptor read/64, error -71 [ 100.359983][ T5946] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 100.551902][ T5946] usb 2-1: device descriptor read/64, error -71 [ 100.881956][ T5946] usb usb2-port1: attempt power cycle [ 101.882011][ T5946] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 101.962171][ T5946] usb 2-1: device descriptor read/8, error -71 [ 102.038328][ T5984] Zero length message leads to an empty skb [ 102.231427][ T5946] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 102.295460][ T59] Bluetooth: hci5: Frame reassembly failed (-84) [ 102.439539][ T5946] usb 2-1: device descriptor read/8, error -71 [ 102.564372][ T59] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 102.732556][ T5946] usb usb2-port1: unable to enumerate USB device [ 103.049831][ T5905] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 103.251397][ T5905] usb 4-1: Using ep0 maxpacket: 32 [ 104.294295][ T5837] Bluetooth: hci5: command 0x1003 tx timeout [ 104.300904][ T5844] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 104.344571][ T5905] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.365049][ T5905] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 104.374381][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.476032][ T5905] usb 4-1: Product: syz [ 104.481760][ T5905] usb 4-1: Manufacturer: syz [ 104.486419][ T5905] usb 4-1: SerialNumber: syz [ 104.533420][ T5905] usb 4-1: config 0 descriptor?? [ 104.587165][ T5905] usb 4-1: bad CDC descriptors [ 104.643509][ T5832] [ 104.646712][ T5832] ============================================ [ 104.653060][ T5832] WARNING: possible recursive locking detected [ 104.659720][ T5832] 6.16.0-rc4-next-20250703-syzkaller #0 Not tainted [ 104.667857][ T5832] -------------------------------------------- [ 104.674576][ T5832] syz-executor/5832 is trying to acquire lock: [ 104.681384][ T5832] ffff8880572dc8c8 (&sb->s_type->i_mutex_key#20){+.+.}-{4:4}, at: rpc_close_pipes+0x10a/0x730 [ 104.693163][ T5832] [ 104.693163][ T5832] but task is already holding lock: [ 104.700838][ T5832] ffff8880572d91c8 (&sb->s_type->i_mutex_key#20){+.+.}-{4:4}, at: __simple_recursive_removal+0x190/0x510 [ 104.713104][ T5832] [ 104.713104][ T5832] other info that might help us debug this: [ 104.722048][ T5832] Possible unsafe locking scenario: [ 104.722048][ T5832] [ 104.730958][ T5832] CPU0 [ 104.734785][ T5832] ---- [ 104.738167][ T5832] lock(&sb->s_type->i_mutex_key#20); [ 104.743767][ T5832] lock(&sb->s_type->i_mutex_key#20); [ 104.749479][ T5832] [ 104.749479][ T5832] *** DEADLOCK *** [ 104.749479][ T5832] [ 104.758283][ T5832] May be due to missing lock nesting notation [ 104.758283][ T5832] [ 104.767830][ T5832] 4 locks held by syz-executor/5832: [ 104.773226][ T5832] #0: ffff8880774c40e0 (&type->s_umount_key#50){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 104.783757][ T5832] #1: ffff888025cfe0a0 (&sn->pipefs_sb_lock){+.+.}-{4:4}, at: rpc_kill_sb+0x77/0x190 [ 104.795315][ T5832] #2: ffffffff8f6d0e30 ((rpc_pipefs_notifier_list).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 104.811647][ T5832] #3: ffff8880572d91c8 (&sb->s_type->i_mutex_key#20){+.+.}-{4:4}, at: __simple_recursive_removal+0x190/0x510 [ 104.824780][ T5832] [ 104.824780][ T5832] stack backtrace: [ 104.831316][ T5832] CPU: 0 UID: 0 PID: 5832 Comm: syz-executor Not tainted 6.16.0-rc4-next-20250703-syzkaller #0 PREEMPT(full) [ 104.831344][ T5832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 104.831366][ T5832] Call Trace: [ 104.831377][ T5832] [ 104.831385][ T5832] dump_stack_lvl+0x189/0x250 [ 104.831421][ T5832] ? __pfx_dump_stack_lvl+0x10/0x10 [ 104.831447][ T5832] ? __pfx__printk+0x10/0x10 [ 104.831467][ T5832] ? print_lock_name+0xde/0x100 [ 104.831485][ T5832] print_deadlock_bug+0x28b/0x2a0 [ 104.831511][ T5832] validate_chain+0x1a3f/0x2140 [ 104.831545][ T5832] __lock_acquire+0xab9/0xd20 [ 104.831567][ T5832] ? rpc_close_pipes+0x10a/0x730 [ 104.831588][ T5832] lock_acquire+0x120/0x360 [ 104.831608][ T5832] ? rpc_close_pipes+0x10a/0x730 [ 104.831634][ T5832] down_write+0x96/0x1f0 [ 104.831653][ T5832] ? rpc_close_pipes+0x10a/0x730 [ 104.831672][ T5832] ? __pfx_down_write+0x10/0x10 [ 104.831689][ T5832] ? __pfx_find_submount+0x10/0x10 [ 104.831708][ T5832] ? _raw_spin_unlock+0x28/0x50 [ 104.831730][ T5832] ? d_walk+0x6f4/0x780 [ 104.831753][ T5832] rpc_close_pipes+0x10a/0x730 [ 104.831774][ T5832] ? d_invalidate+0x204/0x260 [ 104.831793][ T5832] ? __pfx_rpc_close_pipes+0x10/0x10 [ 104.831814][ T5832] ? up_write+0x1c4/0x420 [ 104.831838][ T5832] ? __pfx_rpc_close_pipes+0x10/0x10 [ 104.831859][ T5832] __simple_recursive_removal+0x20b/0x510 [ 104.831883][ T5832] ? __pfx_rpc_close_pipes+0x10/0x10 [ 104.831904][ T5832] rpc_unlink+0x56/0x80 [ 104.831923][ T5832] rpc_pipefs_event+0xc0/0x170 [ 104.831941][ T5832] notifier_call_chain+0x1b3/0x3e0 [ 104.831968][ T5832] blocking_notifier_call_chain+0x6a/0x90 [ 104.831992][ T5832] rpc_kill_sb+0xd0/0x190 [ 104.832016][ T5832] deactivate_locked_super+0xb9/0x130 [ 104.832038][ T5832] cleanup_mnt+0x425/0x4c0 [ 104.832057][ T5832] ? lockdep_hardirqs_on+0x9c/0x150 [ 104.832084][ T5832] task_work_run+0x1d1/0x260 [ 104.832109][ T5832] ? __pfx_task_work_run+0x10/0x10 [ 104.832125][ T5832] ? __x64_sys_umount+0x122/0x160 [ 104.832150][ T5832] ? exit_to_user_mode_loop+0x40/0x110 [ 104.832171][ T5832] exit_to_user_mode_loop+0xec/0x110 [ 104.832190][ T5832] do_syscall_64+0x2bd/0x3b0 [ 104.832206][ T5832] ? lockdep_hardirqs_on+0x9c/0x150 [ 104.832230][ T5832] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.832247][ T5832] ? clear_bhb_loop+0x60/0xb0 [ 104.832266][ T5832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.832283][ T5832] RIP: 0033:0x7fa61198fc57 [ 104.832308][ T5832] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 104.832323][ T5832] RSP: 002b:00007ffc8f4719b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 104.832344][ T5832] RAX: 0000000000000000 RBX: 00007fa611a10925 RCX: 00007fa61198fc57 [ 104.832356][ T5832] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc8f471a70 [ 104.832374][ T5832] RBP: 00007ffc8f471a70 R08: 0000000000000000 R09: 0000000000000000 [ 104.832384][ T5832] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc8f472b00 [ 104.832401][ T5832] R13: 00007fa611a10925 R14: 00000000000195cb R15: 00007ffc8f472b40 [ 104.832419][ T5832] [ 105.170127][ T5905] usb 4-1: unsupported MDLM descriptors [ 107.743983][ T1210] usb 4-1: USB disconnect, device number 2 [ 107.795008][ T6017] iommufd_mock iommufd_mock0: Adding to iommu group 0