last executing test programs: 2m55.539707392s ago: executing program 3 (id=145): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180)=0x200) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) write$dsp(r0, &(0x7f0000000200)="dce480", 0x3) write$dsp(r0, &(0x7f0000000300)="cc2e68f52a044ea369be16b08144cae370837120cfd17e32c0e0db9a03fea8cf31197e0dfb660da08d39c1742d53601ab72fc10e08d4a2d2bc68979c70be", 0x3e) write$dsp(r0, &(0x7f0000000080)="cd", 0x1) 2m53.194756459s ago: executing program 2 (id=156): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='base=0x20000000 size=0x20000 type=write-back\n\x00', 0x2c) write(r0, &(0x7f0000000300), 0x0) write(r0, &(0x7f0000000400)='base=0x20004000 size=0x4000 type=write-back\n\x00', 0x2a) write(r0, &(0x7f0000000500)='base=0x0 size=0x40000000 type=write-back\n\x00', 0x29) write(r0, &(0x7f0000000600)='base=0x20000000 size=0x40000000 type=uncachable\n\x00', 0x2e) write(r0, &(0x7f0000000700)='disable=0\n\x00', 0xa) write(r0, &(0x7f0000000800)='base=0x10000000 size=0x10000000 type=write-combining\n\x00', 0x33) ioctl(r0, 0x40104d05, &(0x7f0000000900)="00000100000000000000010001000000") ioctl(r0, 0x40104d06, &(0x7f0000000a00)="00000200000000000000020001000000") 2m53.194549639s ago: executing program 1 (id=157): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='base=0x20000000 size=0x20000 type=write-back\n\x00', 0x2c) write(r0, &(0x7f0000000300)='base=0x20000000 size=0x20000 type=w', 0x23) write(r0, &(0x7f0000000400)='base=0x20004000 size=0x4000 type=write-back\n\x00', 0x2a) write(r0, &(0x7f0000000500)='base=0x0 size=0x40000000 type=write-back\n\x00', 0x29) write(r0, &(0x7f0000000600)='base=0x20000000 size=0x40000000 type=uncachable\n\x00', 0x2e) write(r0, &(0x7f0000000700)='disable=0\n\x00', 0xa) write(r0, &(0x7f0000000800)='base=0x10000000 size=0x10000000 type=write-combining\n\x00', 0x33) ioctl(r0, 0x40104d05, &(0x7f0000000900)="00000100000000000000010001000000") ioctl(r0, 0x40104d06, &(0x7f0000000a00)="00000200000000000000020001000000") 2m52.846863838s ago: executing program 2 (id=158): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/task-filter\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='Y\x00', 0x2) 2m52.781867569s ago: executing program 1 (id=159): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r0, 0x4068aea3, &(0x7f0000000180)={0xc0, 0x0, 0x1000}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0x1000, 0x1000, &(0x7f0000001000/0x1000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x11, 0x0, 0x1000}]}) 2m52.478866907s ago: executing program 2 (id=161): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r0, 0x402c542b, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 2m52.463184287s ago: executing program 1 (id=162): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x6}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 2m52.34150855s ago: executing program 3 (id=163): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc048aeca, &(0x7f0000000080)={0x6, 0x0, [{0x8cf, 0x0, 0x7}, {0x869, 0x0, 0xffffffff80000001}, {0x209, 0x0, 0x38}, {0x80a, 0x0, 0xc}, {0x9c7, 0x0, 0x8}, {0x2e3, 0x0, 0x2}]}) 2m52.32661971s ago: executing program 0 (id=164): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x3, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}, 0x1, 0x2}, 0x0) sendto$packet(r0, &(0x7f00000000c0)="f4416eb4e859495d589fefa788a8", 0xe, 0x0, &(0x7f0000002780)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) 2m51.965825159s ago: executing program 1 (id=165): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000000)="336d030faf06dbeffe82f7a5ca31c1d13ea6819747783e43c06cc6a376cef0f6259c78579d4ad76974019a97389cd8579455", 0x32) 2m51.790627993s ago: executing program 0 (id=166): mkdir(&(0x7f0000000040)='./sys_mount\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys_mount\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys_mount/block/nullb0/queue/rotational\x00', 0x2, 0x0) write$UHID_INPUT(r0, &(0x7f00000004c0)={0x8, {"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", 0x1000}}, 0x1006) 2m51.602219638s ago: executing program 1 (id=167): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x82, {0x0, 0x0, 0x0, r6, {0x4, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x7, 0x4, 0x3, 0x5}, 0x79}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x0, r6, 0x18}, 0x80, &(0x7f00000034c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005004024c10200000011125ce882cbf400930bf4533f00429c65112a093bbf60", 0x2a}, {&(0x7f00000022c0)="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", 0xfd1}], 0x2}, 0x8000) 2m51.418012302s ago: executing program 0 (id=168): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r4, &(0x7f0000000240), 0x12) 2m51.076330821s ago: executing program 2 (id=169): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/task-filter\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='Y\x00', 0x2) 2m50.72180469s ago: executing program 0 (id=170): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\tr'], 0x3d) write$cgroup_devices(r1, &(0x7f0000000540)={'c', ' *:* ', 'w\x00'}, 0x8) 2m50.70794718s ago: executing program 2 (id=171): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x4, 0x40000, 0x8, 0xffffffffffffffff, 0x11}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, 0xffffffffffffffff, 0x1}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x27800000000, 0x0, 0x1, 0xffffffffffffffff, 0x5}) 2m50.373478928s ago: executing program 0 (id=172): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000280)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/max_speed\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='dummy_udc.0\n\x00', 0xc) nanosleep(&(0x7f0000000600)={0x1}, 0x0) 2m50.142518804s ago: executing program 3 (id=173): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x6}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 2m49.932676309s ago: executing program 3 (id=174): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) poll(&(0x7f0000000100), 0x0, 0x6d) 2m49.45949805s ago: executing program 3 (id=175): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r0, 0x40104d09, &(0x7f0000000900)) 2m49.272318614s ago: executing program 0 (id=176): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000003ac0)="bb", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f00000001c0)="5a93f8b25eabafa3997fcf0068bfdf4b6db2997a52846a38dac5a545e912cd6b4ced1fedd92c1fa0afab1c4ee981049fde0806bb84989a69b540d6910ca212cb9b5e65f99979c194938a9b13f2f5adf765d69aca3eb5a439537d7333352252c8b35a6361182331ce07c70ec53d713563d033d0de532272a01e00"/139, 0xf111973a6f6ab58}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="0000585195c18b846c30882ada03476b025b0800000000000000fa6303d4808d2b4955ecd0cfe25cd6425819161e305a8f387300895f1a75f5b7116d1e3ad0345ed0fc", 0x2}], 0x1}}], 0x3, 0x60cd894) 2m49.268266155s ago: executing program 3 (id=177): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r0, 0x402c542b, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 2m23.775957948s ago: executing program 1 (id=178): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x30, 0x18, 0xfa00, {0x4, 0x0, 0x106, 0x5}}, 0x20) 2m15.435127601s ago: executing program 2 (id=179): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x3, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}, 0x1, 0x2}, 0x0) sendto$packet(r0, &(0x7f00000000c0)="f4416eb4e859495d589fefa788a8", 0xe, 0x0, &(0x7f0000002780)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) 1m54.393364096s ago: executing program 32 (id=176): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000003ac0)="bb", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f00000001c0)="5a93f8b25eabafa3997fcf0068bfdf4b6db2997a52846a38dac5a545e912cd6b4ced1fedd92c1fa0afab1c4ee981049fde0806bb84989a69b540d6910ca212cb9b5e65f99979c194938a9b13f2f5adf765d69aca3eb5a439537d7333352252c8b35a6361182331ce07c70ec53d713563d033d0de532272a01e00"/139, 0xf111973a6f6ab58}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="0000585195c18b846c30882ada03476b025b0800000000000000fa6303d4808d2b4955ecd0cfe25cd6425819161e305a8f387300895f1a75f5b7116d1e3ad0345ed0fc", 0x2}], 0x1}}], 0x3, 0x60cd894) 0s ago: executing program 33 (id=177): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r0, 0x402c542b, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.240' (ED25519) to the list of known hosts. [ 69.812692][ T5774] cgroup: Unknown subsys name 'net' [ 69.943609][ T5774] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.403587][ T5774] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 72.010357][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.017111][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.851992][ T5791] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.862457][ T5799] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.877948][ T5799] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.907130][ T5799] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.907168][ T5791] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.924456][ T5791] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.932572][ T5800] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.934961][ T5791] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.947073][ T5800] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.948987][ T5802] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.956855][ T5800] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.964561][ T5802] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.972980][ T5800] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.978894][ T5791] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.994250][ T5802] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 73.001849][ T5802] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.002289][ T5800] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 73.009899][ T5802] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 73.024037][ T5802] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.026980][ T5800] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.038835][ T5088] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.053555][ T5799] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.061876][ T5798] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 73.080217][ T5798] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.492751][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 73.515506][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 73.703752][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 73.720154][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.729091][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.736856][ T5788] bridge_slave_0: entered allmulticast mode [ 73.744060][ T5788] bridge_slave_0: entered promiscuous mode [ 73.754051][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.761689][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.770594][ T5790] bridge_slave_0: entered allmulticast mode [ 73.778805][ T5790] bridge_slave_0: entered promiscuous mode [ 73.788707][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.796330][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.803732][ T5790] bridge_slave_1: entered allmulticast mode [ 73.810869][ T5790] bridge_slave_1: entered promiscuous mode [ 73.845040][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.853728][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.861042][ T5788] bridge_slave_1: entered allmulticast mode [ 73.868669][ T5788] bridge_slave_1: entered promiscuous mode [ 73.930234][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.949884][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.963595][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.994081][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.050933][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 74.064665][ T5788] team0: Port device team_slave_0 added [ 74.075747][ T5790] team0: Port device team_slave_0 added [ 74.099006][ T5788] team0: Port device team_slave_1 added [ 74.108060][ T5790] team0: Port device team_slave_1 added [ 74.114189][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.121805][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.129314][ T5787] bridge_slave_0: entered allmulticast mode [ 74.136094][ T5787] bridge_slave_0: entered promiscuous mode [ 74.144013][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.151902][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.159259][ T5787] bridge_slave_1: entered allmulticast mode [ 74.166270][ T5787] bridge_slave_1: entered promiscuous mode [ 74.242728][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.251788][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.280813][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.293847][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.301205][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.327913][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.346525][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.353519][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.379853][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.401996][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.409163][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.435240][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.468457][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.481819][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.571169][ T5788] hsr_slave_0: entered promiscuous mode [ 74.578465][ T5788] hsr_slave_1: entered promiscuous mode [ 74.589338][ T5787] team0: Port device team_slave_0 added [ 74.598414][ T5787] team0: Port device team_slave_1 added [ 74.613135][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.620864][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.628396][ T5789] bridge_slave_0: entered allmulticast mode [ 74.635343][ T5789] bridge_slave_0: entered promiscuous mode [ 74.685268][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.692594][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.700584][ T5789] bridge_slave_1: entered allmulticast mode [ 74.707925][ T5789] bridge_slave_1: entered promiscuous mode [ 74.719624][ T5790] hsr_slave_0: entered promiscuous mode [ 74.728760][ T5790] hsr_slave_1: entered promiscuous mode [ 74.734961][ T5790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.743216][ T5790] Cannot create hsr debugfs directory [ 74.779582][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.787043][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.813802][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.853754][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.861117][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.890061][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.950753][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.969306][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.003940][ T5787] hsr_slave_0: entered promiscuous mode [ 75.011022][ T5787] hsr_slave_1: entered promiscuous mode [ 75.017865][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.025616][ T5787] Cannot create hsr debugfs directory [ 75.047560][ T5793] Bluetooth: hci0: command tx timeout [ 75.081489][ T5789] team0: Port device team_slave_0 added [ 75.091046][ T5789] team0: Port device team_slave_1 added [ 75.127097][ T5793] Bluetooth: hci1: command tx timeout [ 75.127230][ T5798] Bluetooth: hci3: command tx timeout [ 75.201503][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.208679][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.210375][ T5798] Bluetooth: hci2: command tx timeout [ 75.235639][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.284775][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.295756][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.322486][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.384828][ T5789] hsr_slave_0: entered promiscuous mode [ 75.391551][ T5789] hsr_slave_1: entered promiscuous mode [ 75.399080][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.408439][ T5789] Cannot create hsr debugfs directory [ 75.552538][ T5788] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.594445][ T5788] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.605709][ T5788] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.618299][ T5788] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.713587][ T5790] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.743283][ T5790] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.755634][ T5790] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.771737][ T5790] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.864325][ T5787] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.891545][ T5787] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.905377][ T5787] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.942312][ T5787] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.024651][ T5789] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.039835][ T5789] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.053403][ T5789] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.071213][ T5789] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.090993][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.145497][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.200772][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.208953][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.249256][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.256517][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.274236][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.339997][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.359128][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.381471][ T3525] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.388966][ T3525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.420969][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.428372][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.465480][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.509698][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.517140][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.529915][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.550352][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.557519][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.630308][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.678535][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.686257][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.711742][ T1132] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.719326][ T1132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.011830][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.128821][ T5798] Bluetooth: hci0: command tx timeout [ 77.153194][ T5788] veth0_vlan: entered promiscuous mode [ 77.185661][ T5788] veth1_vlan: entered promiscuous mode [ 77.208453][ T5798] Bluetooth: hci3: command tx timeout [ 77.210304][ T5793] Bluetooth: hci1: command tx timeout [ 77.231222][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.244278][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.286487][ T5793] Bluetooth: hci2: command tx timeout [ 77.322542][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.359896][ T5787] veth0_vlan: entered promiscuous mode [ 77.375384][ T5788] veth0_macvtap: entered promiscuous mode [ 77.405521][ T5787] veth1_vlan: entered promiscuous mode [ 77.423678][ T5788] veth1_macvtap: entered promiscuous mode [ 77.436085][ T5790] veth0_vlan: entered promiscuous mode [ 77.454027][ T5790] veth1_vlan: entered promiscuous mode [ 77.479220][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.509585][ T5789] veth0_vlan: entered promiscuous mode [ 77.522251][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.550043][ T5788] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.561829][ T5788] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.571625][ T5788] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.581419][ T5788] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.609722][ T5790] veth0_macvtap: entered promiscuous mode [ 77.621008][ T5790] veth1_macvtap: entered promiscuous mode [ 77.645244][ T5789] veth1_vlan: entered promiscuous mode [ 77.656982][ T5787] veth0_macvtap: entered promiscuous mode [ 77.694331][ T5787] veth1_macvtap: entered promiscuous mode [ 77.712116][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.723566][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.735340][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.747923][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.759513][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.775964][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.809331][ T5790] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.820834][ T5790] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.830701][ T5790] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.839540][ T5790] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.889014][ T5789] veth0_macvtap: entered promiscuous mode [ 77.896875][ T2924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.905184][ T2924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.913318][ T5789] veth1_macvtap: entered promiscuous mode [ 77.917426][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.932565][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.943270][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.954459][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.967752][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.989869][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.001476][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.013094][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.023805][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.035276][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.070444][ T5787] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.079967][ T5787] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.080175][ T3525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.094778][ T5787] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.100796][ T3525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.106034][ T5787] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.178050][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.194419][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.205067][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.217566][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.228177][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.239712][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.254148][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.289187][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.301241][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.313422][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.325211][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.336207][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.346970][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.358489][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.394335][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.421490][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.461794][ T5789] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.474922][ T5789] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.484505][ T5789] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.494478][ T5789] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.619078][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.628865][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.655957][ T3525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.667147][ T5850] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 78.686310][ T3525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.780463][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.822585][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.901438][ T5854] gadgetfs: bound to dummy_udc driver [ 78.943583][ T3525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.952715][ T3525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.985177][ T3525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.022633][ T3525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.181605][ T5859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.195257][ T5859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.208392][ T5793] Bluetooth: hci0: command tx timeout [ 79.208436][ T5827] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 79.243280][ C0] gadgetfs: connected [ 79.249520][ T5853] gadgetfs: suspended from state 3 [ 79.255479][ T5853] gadgetfs: disconnected [ 79.287618][ T5793] Bluetooth: hci1: command tx timeout [ 79.287933][ T5798] Bluetooth: hci3: command tx timeout [ 79.366414][ T5798] Bluetooth: hci2: command tx timeout [ 79.373887][ T5864] Zero length message leads to an empty skb [ 79.559884][ T5875] tipc: Started in network mode [ 79.578974][ T5875] tipc: Node identity ac1414aa, cluster identity 4711 [ 79.607418][ T5875] tipc: New replicast peer: 172.20.20.187 [ 79.634598][ T5875] tipc: Enabled bearer , priority 10 [ 79.774929][ T5879] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 79.809979][ T5879] CIFS: Attempting to mount //127.0.0.1/share [ 80.175358][ T3525] TC_ACT_REPEAT abuse ? [ 80.191663][ T3525] TC_ACT_REPEAT abuse ? [ 80.522121][ T5847] TC_ACT_REPEAT abuse ? [ 80.607780][ T23] tipc: Node number set to 2886997162 [ 80.616814][ T5879] CIFS: VFS: Error connecting to socket. Aborting operation. [ 80.628470][ T5894] syz.3.16[5894]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 80.631451][ T5879] CIFS: VFS: cifs_mount failed w/return code = -4 [ 80.706798][ T5827] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 80.892719][ T5827] usb 1-1: Dual-Role OTG device on HNP port [ 80.921113][ T5827] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.06 [ 80.944924][ T5827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.049501][ T5827] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 81.286419][ T5798] Bluetooth: hci0: command tx timeout [ 81.367380][ T5798] Bluetooth: hci1: command tx timeout [ 81.367396][ T5793] Bluetooth: hci3: command tx timeout [ 81.446817][ T5798] Bluetooth: hci2: command tx timeout [ 82.188729][ T9] TC_ACT_REPEAT abuse ? [ 82.889649][ T56] TC_ACT_REPEAT abuse ? [ 83.600541][ T5894] loop3: detected capacity change from 0 to 131072 [ 83.637801][ T5894] F2FS-fs (loop3): Wrong NAT boundary, start(2560) end(3584) blocks(0) [ 83.637899][ T5894] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 83.657057][ T5894] F2FS-fs (loop3): invalid crc value [ 83.664307][ T5894] F2FS-fs (loop3): Failed to start F2FS issue_checkpoint_thread (-4) [ 84.327242][ C0] TC_ACT_REPEAT abuse ? [ 84.939226][ T6007] netlink: 'syz.3.62': attribute type 10 has an invalid length. [ 84.976814][ T6007] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.986078][ T6007] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.094314][ T6007] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.101963][ T6007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.110778][ T6007] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.118375][ T6007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.150649][ T6007] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 85.287250][ T6009] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.311162][ T6009] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.065974][ T6038] TC_ACT_REPEAT abuse ? [ 86.240876][ T6042] netlink: 'syz.3.76': attribute type 10 has an invalid length. [ 86.359782][ T6043] lo: entered promiscuous mode [ 86.360681][ T6043] tunl0: entered promiscuous mode [ 86.361725][ T6043] gre0: entered promiscuous mode [ 86.363449][ T6043] gretap0: entered promiscuous mode [ 86.364164][ T6043] erspan0: entered promiscuous mode [ 86.364703][ T6043] ip_vti0: entered promiscuous mode [ 86.365766][ T6043] ip6_vti0: entered promiscuous mode [ 86.428258][ T6043] sit0: entered promiscuous mode [ 86.429780][ T6043] ip6tnl0: entered promiscuous mode [ 86.434834][ T6043] ip6gre0: entered promiscuous mode [ 86.443113][ T6043] syz_tun: entered promiscuous mode [ 86.443849][ T6043] ip6gretap0: entered promiscuous mode [ 86.446931][ T6043] bridge0: entered promiscuous mode [ 86.692272][ T6043] vcan0: entered promiscuous mode [ 86.693237][ T6043] bond0: entered promiscuous mode [ 86.693255][ T6043] bond_slave_0: entered promiscuous mode [ 86.693496][ T6043] bond_slave_1: entered promiscuous mode [ 86.694783][ T6043] team0: entered promiscuous mode [ 86.694801][ T6043] team_slave_0: entered promiscuous mode [ 86.695021][ T6043] team_slave_1: entered promiscuous mode [ 86.711629][ T6043] dummy0: entered promiscuous mode [ 86.713030][ T6043] nlmon0: entered promiscuous mode [ 86.725114][ T6043] caif0: entered promiscuous mode [ 86.725131][ T6043] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 88.419886][ T6072] TC_ACT_REPEAT abuse ? [ 88.514966][ T6074] netlink: 'syz.3.87': attribute type 10 has an invalid length. [ 88.689270][ T6076] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 89.354872][ T6085] binder_alloc: 6084: binder_alloc_buf, no vma [ 90.269326][ T5847] TC_ACT_REPEAT abuse ? [ 90.618777][ T6101] lo: entered promiscuous mode [ 90.647189][ T6101] tunl0: entered promiscuous mode [ 90.653443][ T6101] gre0: entered promiscuous mode [ 90.699786][ T6101] gretap0: entered promiscuous mode [ 90.730248][ T6101] erspan0: entered promiscuous mode [ 90.750561][ T6101] ip_vti0: entered promiscuous mode [ 90.779886][ T6101] ip6_vti0: entered promiscuous mode [ 90.816073][ T6101] sit0: entered promiscuous mode [ 90.853062][ T6101] ip6tnl0: entered promiscuous mode [ 90.887376][ T6101] ip6gre0: entered promiscuous mode [ 90.932546][ T6101] syz_tun: entered promiscuous mode [ 90.965226][ T6101] ip6gretap0: entered promiscuous mode [ 90.997417][ T6101] bridge0: entered promiscuous mode [ 91.022097][ T6101] vcan0: entered promiscuous mode [ 91.057492][ T6101] bond0: entered promiscuous mode [ 91.076373][ T6101] bond_slave_0: entered promiscuous mode [ 91.116532][ T6101] bond_slave_1: entered promiscuous mode [ 91.339034][ T6101] team0: entered promiscuous mode [ 91.339060][ T6101] team_slave_0: entered promiscuous mode [ 91.372248][ T6101] team_slave_1: entered promiscuous mode [ 91.547962][ T6101] dummy0: entered promiscuous mode [ 91.724856][ T6101] nlmon0: entered promiscuous mode [ 91.846418][ T6101] caif0: entered promiscuous mode [ 91.851515][ T6101] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 92.231321][ T5827] TC_ACT_REPEAT abuse ? [ 92.487512][ C0] TC_ACT_REPEAT abuse ? [ 92.504892][ T788] cfg80211: failed to load regulatory.db [ 93.780817][ T2924] TC_ACT_REPEAT abuse ? [ 95.685823][ T6195] MTRR 1 not used [ 97.378425][ T6215] MTRR 1 not used [ 97.623071][ T3525] TC_ACT_REPEAT abuse ? [ 99.188487][ T6237] type mismatch for 10000000,10000000 old: write-back new: write-combining [ 99.223491][ T6238] MTRR 0 not used [ 99.241599][ T6237] type mismatch for 20000000,20000000 old: write-back new: write-combining [ 99.261957][ T6238] type mismatch for 10000000,10000000 old: write-back new: write-combining [ 99.296788][ T6238] type mismatch for 20000000,20000000 old: write-back new: write-combining [ 99.530088][ T3525] TC_ACT_REPEAT abuse ? [ 99.656024][ T6244] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.160'. [ 100.842878][ T6260] syzkaller0: entered promiscuous mode [ 100.842906][ T6260] syzkaller0: entered allmulticast mode [ 102.728829][ T48] TC_ACT_REPEAT abuse ? [ 104.994394][ T56] TC_ACT_REPEAT abuse ? [ 107.849086][ C0] TC_ACT_REPEAT abuse ? [ 110.513091][ T12] TC_ACT_REPEAT abuse ? [ 111.846211][ T3459] TC_ACT_REPEAT abuse ? [ 118.503424][ T41] TC_ACT_REPEAT abuse ? [ 122.549869][ T41] TC_ACT_REPEAT abuse ? [ 126.152178][ T41] TC_ACT_REPEAT abuse ? [ 126.976486][ T5847] TC_ACT_REPEAT abuse ? [ 128.548179][ T5847] TC_ACT_REPEAT abuse ? [ 130.994005][ T12] TC_ACT_REPEAT abuse ? [ 134.749854][ T3459] TC_ACT_REPEAT abuse ? [ 135.216878][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.226539][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.935641][ C0] TC_ACT_REPEAT abuse ? [ 139.362165][ T6287] TC_ACT_REPEAT abuse ? [ 140.746231][ T3419] TC_ACT_REPEAT abuse ? [ 142.979809][ T5847] TC_ACT_REPEAT abuse ? [ 146.821528][ T12] TC_ACT_REPEAT abuse ? [ 147.208755][ T3459] TC_ACT_REPEAT abuse ? [ 152.318265][ T3459] TC_ACT_REPEAT abuse ? [ 154.396858][ T41] TC_ACT_REPEAT abuse ? [ 157.920910][ T6287] TC_ACT_REPEAT abuse ? [ 159.656299][ T56] TC_ACT_REPEAT abuse ? [ 161.357668][ T41] TC_ACT_REPEAT abuse ? [ 166.877702][ T3419] TC_ACT_REPEAT abuse ? [ 171.244050][ T6287] TC_ACT_REPEAT abuse ? [ 173.023953][ T41] TC_ACT_REPEAT abuse ? [ 181.000477][ T41] TC_ACT_REPEAT abuse ? [ 181.962447][ T3459] TC_ACT_REPEAT abuse ? [ 186.348287][ T3459] TC_ACT_REPEAT abuse ? [ 189.001154][ T3459] TC_ACT_REPEAT abuse ? [ 193.423055][ T3419] TC_ACT_REPEAT abuse ? [ 196.245275][ T6288] TC_ACT_REPEAT abuse ? [ 196.764396][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.852962][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.384717][ T8] TC_ACT_REPEAT abuse ? [ 199.954633][ T3419] TC_ACT_REPEAT abuse ? [ 200.021198][ C0] TC_ACT_REPEAT abuse ? [ 203.919035][ T41] TC_ACT_REPEAT abuse ? [ 205.122348][ T5799] Bluetooth: hci3: command tx timeout [ 205.122389][ T5799] Bluetooth: hci2: command tx timeout [ 205.122416][ T5799] Bluetooth: hci0: command 0x0406 tx timeout [ 207.298367][ T5802] Bluetooth: hci1: command tx timeout [ 209.156272][ T6291] TC_ACT_REPEAT abuse ? [ 209.248319][ T6288] TC_ACT_REPEAT abuse ? [ 211.056660][ T6290] TC_ACT_REPEAT abuse ? [ 216.337548][ T41] TC_ACT_REPEAT abuse ? [ 220.679525][ T6290] TC_ACT_REPEAT abuse ? [ 222.172495][ T6291] TC_ACT_REPEAT abuse ? [ 223.686800][ T41] TC_ACT_REPEAT abuse ? [ 231.520550][ T3419] TC_ACT_REPEAT abuse ? [ 234.894874][ T6290] TC_ACT_REPEAT abuse ? [ 236.393356][ T5795] TC_ACT_REPEAT abuse ? [ 241.223254][ T3419] TC_ACT_REPEAT abuse ? [ 245.550550][ T5827] TC_ACT_REPEAT abuse ? [ 246.122589][ T6288] TC_ACT_REPEAT abuse ? [ 247.381606][ T41] TC_ACT_REPEAT abuse ? [ 251.729413][ T6290] TC_ACT_REPEAT abuse ? [ 252.510211][ T6290] TC_ACT_REPEAT abuse ? [ 257.186768][ T6288] TC_ACT_REPEAT abuse ? [ 260.391029][ T3419] TC_ACT_REPEAT abuse ? [ 261.779789][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.789900][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.176674][ T3419] TC_ACT_REPEAT abuse ? [ 268.572292][ T3419] TC_ACT_REPEAT abuse ? [ 270.592605][ T6290] TC_ACT_REPEAT abuse ? [ 274.703951][ T6287] TC_ACT_REPEAT abuse ? [ 274.727334][ T28] INFO: task kworker/1:0:23 blocked for more than 143 seconds. [ 274.727371][ T28] Not tainted syzkaller #0 [ 274.727382][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 274.727404][ T28] task:kworker/1:0 state:D stack:24360 pid:23 ppid:2 flags:0x00004000 [ 274.727443][ T28] Workqueue: events_power_efficient crda_timeout_work [ 274.727487][ T28] Call Trace: [ 274.727495][ T28] [ 274.727509][ T28] __schedule+0x15ae/0x4660 [ 274.727548][ T28] ? lock_chain_count+0x20/0x20 [ 274.727576][ T28] ? asan.module_dtor+0x20/0x20 [ 274.727597][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 274.727621][ T28] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 274.727653][ T28] ? _raw_spin_unlock_irq+0x29/0x50 [ 274.727680][ T28] schedule+0xbd/0x170 [ 274.727702][ T28] schedule_preempt_disabled+0x13/0x20 [ 274.727722][ T28] __mutex_lock+0x673/0xc80 [ 274.727747][ T28] ? __mutex_lock+0x4d2/0xc80 [ 274.727771][ T28] ? crda_timeout_work+0x15/0x50 [ 274.727790][ T28] ? mutex_lock_nested+0x20/0x20 [ 274.727820][ T28] ? _raw_spin_unlock_irq+0x23/0x50 [ 274.727850][ T28] ? process_scheduled_works+0x975/0x1600 [ 274.727872][ T28] ? process_scheduled_works+0x975/0x1600 [ 274.727896][ T28] crda_timeout_work+0x15/0x50 [ 274.727920][ T28] process_scheduled_works+0xa60/0x1600 [ 274.727969][ T28] ? worker_attach_to_pool+0x370/0x370 [ 274.727997][ T28] ? assign_work+0x3cc/0x5d0 [ 274.728024][ T28] worker_thread+0xa5e/0xfe0 [ 274.728070][ T28] kthread+0x2fa/0x390 [ 274.728089][ T28] ? pr_cont_work+0x550/0x550 [ 274.728111][ T28] ? kthread_blkcg+0xd0/0xd0 [ 274.728130][ T28] ret_from_fork+0x48/0x80 [ 274.728152][ T28] ? kthread_blkcg+0xd0/0xd0 [ 274.728172][ T28] ret_from_fork_asm+0x11/0x20 [ 274.728209][ T28] [ 274.728257][ T28] INFO: task kworker/1:2:788 blocked for more than 143 seconds. [ 274.728271][ T28] Not tainted syzkaller #0 [ 274.728281][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 274.728290][ T28] task:kworker/1:2 state:D stack:24784 pid:788 ppid:2 flags:0x00004000 [ 274.728324][ T28] Workqueue: events reg_todo [ 274.728341][ T28] Call Trace: [ 274.728347][ T28] [ 274.728359][ T28] __schedule+0x15ae/0x4660 [ 274.728401][ T28] ? mark_lock+0x94/0x320 [ 274.728422][ T28] ? asan.module_dtor+0x20/0x20 [ 274.728446][ T28] ? __lock_acquire+0x7d80/0x7d80 [ 274.728476][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 274.728501][ T28] schedule+0xbd/0x170 [ 274.728523][ T28] schedule_preempt_disabled+0x13/0x20 [ 274.728543][ T28] __mutex_lock+0x673/0xc80 [ 274.728568][ T28] ? __mutex_lock+0x4d2/0xc80 [ 274.728592][ T28] ? reg_process_self_managed_hints+0x80/0x130 [ 274.728619][ T28] ? mutex_lock_nested+0x20/0x20 [ 274.728639][ T28] ? __local_bh_enable_ip+0x13a/0x1c0 [ 274.728663][ T28] ? __local_bh_enable_ip+0x13a/0x1c0 [ 274.728682][ T28] ? _local_bh_enable+0xa0/0xa0 [ 274.728708][ T28] reg_process_self_managed_hints+0x80/0x130 [ 274.728735][ T28] reg_todo+0x875/0x970 [ 274.728752][ T28] ? _raw_spin_unlock_irq+0x23/0x50 [ 274.728775][ T28] ? process_scheduled_works+0x975/0x1600 [ 274.728797][ T28] ? process_scheduled_works+0x975/0x1600 [ 274.728821][ T28] process_scheduled_works+0xa60/0x1600 [ 274.728879][ T28] ? worker_attach_to_pool+0x370/0x370 [ 274.728907][ T28] ? assign_work+0x3cc/0x5d0 [ 274.728935][ T28] worker_thread+0xa5e/0xfe0 [ 274.728968][ T28] ? _raw_spin_unlock+0x40/0x40 [ 274.728991][ T28] ? __kthread_parkme+0x71/0x1c0 [ 274.729019][ T28] kthread+0x2fa/0x390 [ 274.729036][ T28] ? pr_cont_work+0x550/0x550 [ 274.729059][ T28] ? kthread_blkcg+0xd0/0xd0 [ 274.729078][ T28] ret_from_fork+0x48/0x80 [ 274.729098][ T28] ? kthread_blkcg+0xd0/0xd0 [ 274.729118][ T28] ret_from_fork_asm+0x11/0x20 [ 274.729154][ T28] [ 274.729313][ T28] [ 274.729313][ T28] Showing all locks held in the system: [ 274.729327][ T28] 2 locks held by kthreadd/2: [ 274.729340][ T28] 4 locks held by kworker/u4:0/11: [ 274.729351][ T28] 3 locks held by kworker/u4:1/12: [ 274.729362][ T28] #0: ffff88802c2f9d38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 274.729415][ T28] #1: ffffc90000117d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 274.729466][ T28] #2: ffffffff8e3d6b08 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 274.729519][ T28] 3 locks held by kworker/1:0/23: [ 274.729531][ T28] #0: ffff888017c71d38 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 274.729585][ T28] #1: ffffc900001d7d00 ((crda_timeout).work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 274.729638][ T28] #2: ffffffff8e3d6b08 (rtnl_mutex){+.+.}-{3:3}, at: crda_timeout_work+0x15/0x50 [ 274.729687][ T28] 1 lock held by khungtaskd/28: [ 274.729698][ T28] #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 274.729754][ T28] 3 locks held by kworker/u4:2/41: [ 274.729766][ T28] 2 locks held by kworker/1:1/42: [ 274.729777][ T28] #0: ffff888017c72538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 274.729838][ T28] #1: ffffc90000b2fd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 274.729894][ T28] 4 locks held by kworker/u4:3/48: [ 274.729906][ T28] 2 locks held by kworker/0:2/56: [ 274.729917][ T28] 4 locks held by kworker/u4:4/67: [ 274.729931][ T28] 4 locks held by kworker/1:2/788: [ 274.729942][ T28] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 274.729996][ T28] #1: ffffc90003acfd00 (reg_work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 274.730049][ T28] #2: ffffffff8e3d6b08 (rtnl_mutex){+.+.}-{3:3}, at: reg_todo+0x1c/0x970 [ 274.730097][ T28] #3: ffff88807b6d8768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: reg_process_self_managed_hints+0x80/0x130 [ 274.730157][ T28] 4 locks held by kworker/u4:5/1132: [ 274.730186][ T28] 4 locks held by kworker/u4:6/2924: [ 274.730197][ T28] 4 locks held by kworker/u4:7/2937: [ 274.730210][ T28] 3 locks held by kworker/u4:8/3419: [ 274.730221][ T28] 4 locks held by kworker/u4:9/3435: [ 274.730232][ T28] 3 locks held by kworker/u4:10/3459: [ 274.730244][ T28] 8 locks held by kworker/u4:11/3484: [ 274.730255][ T28] 4 locks held by kworker/u4:12/3525: [ 274.730268][ T28] 1 lock held by klogd/5131: [ 274.730279][ T28] 4 locks held by udevd/5142: [ 274.730289][ T28] 2 locks held by dhcpcd/5436: [ 274.730300][ T28] 5 locks held by dhcpcd/5437: [ 274.730312][ T28] 2 locks held by getty/5532: [ 274.730323][ T28] #0: ffff88802cc150a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 274.730379][ T28] #1: ffffc900032832f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 274.730434][ T28] 4 locks held by syz-executor/5774: [ 274.730445][ T28] 3 locks held by kworker/1:3/5777: [ 274.730457][ T28] #0: ffff888017c71d38 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 274.730511][ T28] #1: ffffc90004447d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 274.730564][ T28] #2: ffffffff8e3d6b08 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x92/0xd90 [ 274.730614][ T28] 2 locks held by syz-executor/5788: [ 274.730625][ T28] 1 lock held by syz-executor/5789: [ 274.730636][ T28] #0: ffff88814cc08458 (&xt[i].mutex){+.+.}-{3:3}, at: xt_find_target+0x81/0x230 [ 274.730690][ T28] 2 locks held by syz-executor/5790: [ 274.730707][ T28] 1 lock held by syz.0.168/6264: [ 274.730718][ T28] 7 locks held by syz.3.177/6283: [ 274.730729][ T28] 2 locks held by kworker/u4:13/6287: [ 274.730740][ T28] 2 locks held by kworker/u4:14/6288: [ 274.730751][ T28] 8 locks held by kworker/u4:15/6290: [ 274.730763][ T28] 3 locks held by kworker/1:6/6292: [ 274.730773][ T28] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 274.730834][ T28] #1: ffffc9000330fd00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 274.730887][ T28] #2: ffffffff8d137778 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3da/0x880 [ 274.730943][ T28] 3 locks held by kworker/u4:16/6293: [ 274.730954][ T28] 3 locks held by syz-executor/6294: [ 274.730965][ T28] 3 locks held by kworker/1:7/6295: [ 274.730977][ T28] [ 274.730982][ T28] ============================================= [ 274.730982][ T28] [ 274.730999][ T28] NMI backtrace for cpu 0 [ 274.731015][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 274.731032][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 274.731042][ T28] Call Trace: [ 274.731050][ T28] [ 274.731057][ T28] dump_stack_lvl+0x18c/0x250 [ 274.731076][ T28] ? __wake_up_klogd+0xd9/0x100 [ 274.731099][ T28] ? show_regs_print_info+0x20/0x20 [ 274.731119][ T28] ? load_image+0x420/0x420 [ 274.731152][ T28] nmi_cpu_backtrace+0x3a6/0x3e0 [ 274.731175][ T28] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 274.731199][ T28] ? load_image+0x420/0x420 [ 274.731219][ T28] ? wq_watchdog_touch+0xef/0x170 [ 274.731242][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 274.731269][ T28] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 274.731291][ T28] watchdog+0xf59/0xfa0 [ 274.731315][ T28] ? watchdog+0x1e1/0xfa0 [ 274.731341][ T28] kthread+0x2fa/0x390 [ 274.731357][ T28] ? hungtask_pm_notify+0x50/0x50 [ 274.731380][ T28] ? kthread_blkcg+0xd0/0xd0 [ 274.731397][ T28] ret_from_fork+0x48/0x80 [ 274.731416][ T28] ? kthread_blkcg+0xd0/0xd0 [ 274.731434][ T28] ret_from_fork_asm+0x11/0x20 [ 274.731468][ T28] [ 274.731475][ T28] Sending NMI from CPU 0 to CPUs 1: [ 274.731508][ C1] NMI backtrace for cpu 1 [ 274.731517][ C1] CPU: 1 PID: 6290 Comm: kworker/u4:15 Not tainted syzkaller #0 [ 274.731532][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 274.731540][ C1] Workqueue: bat_events batadv_tt_purge [ 274.731568][ C1] RIP: 0010:__sanitizer_cov_trace_switch+0x41/0xe0 [ 274.731589][ C1] Code: c3 00 00 00 f3 48 0f bc c8 48 83 c1 fd 48 83 f9 03 0f 87 b0 00 00 00 48 8b 06 48 85 c0 0f 84 a4 00 00 00 41 57 41 56 41 54 53 <48> 8d 4c 09 01 48 8b 54 24 20 65 4c 8b 05 5d 3e 7c 7e 45 31 c9 eb [ 274.731600][ C1] RSP: 0018:ffffc900001efd90 EFLAGS: 00000202 [ 274.731611][ C1] RAX: 0000000000000008 RBX: 0000000000000000 RCX: 0000000000000001 [ 274.731620][ C1] RDX: 000000000000001f RSI: ffffffff8cfa05c0 RDI: 0000000000000005 [ 274.731629][ C1] RBP: ffffc900001efed8 R08: ffff888027dd5a00 R09: 0000000000000002 [ 274.731639][ C1] R10: 0000000000000001 R11: 0000000000000100 R12: ffffffff8f8c6ed2 [ 274.731649][ C1] R13: ffffc900001efe88 R14: 0000000000000005 R15: dffffc0000000000 [ 274.731659][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 274.731671][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 274.731682][ C1] CR2: 00007f0307beb158 CR3: 000000000cf32000 CR4: 00000000003506e0 [ 274.731695][ C1] Call Trace: [ 274.731700][ C1] [ 274.731706][ C1] unwind_next_frame+0x748/0x2990 [ 274.731726][ C1] ? skb_release_data+0x609/0x7f0 [ 274.731743][ C1] ? skb_release_data+0x609/0x7f0 [ 274.731757][ C1] ? stack_trace_save+0x100/0x100 [ 274.731774][ C1] arch_stack_walk+0x144/0x190 [ 274.731791][ C1] ? skb_release_data+0x609/0x7f0 [ 274.731807][ C1] stack_trace_save+0xaa/0x100 [ 274.731824][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 274.731841][ C1] ? __asan_memset+0x22/0x40 [ 274.731863][ C1] kasan_set_track+0x4e/0x70 [ 274.731879][ C1] ? kasan_set_track+0x4e/0x70 [ 274.731893][ C1] ? kasan_save_free_info+0x28/0x40 [ 274.731911][ C1] ? ____kasan_slab_free+0x126/0x1f0 [ 274.731927][ C1] ? slab_free_freelist_hook+0x130/0x1a0 [ 274.731941][ C1] ? __kmem_cache_free+0xba/0x1f0 [ 274.731961][ C1] ? skb_release_data+0x609/0x7f0 [ 274.731997][ C1] ? __kmem_cache_free+0xba/0x1f0 [ 274.732016][ C1] kasan_save_free_info+0x28/0x40 [ 274.732034][ C1] ____kasan_slab_free+0x126/0x1f0 [ 274.732052][ C1] slab_free_freelist_hook+0x130/0x1a0 [ 274.732067][ C1] ? rcuref_put+0x1cc/0x220 [ 274.732085][ C1] ? skb_release_data+0x609/0x7f0 [ 274.732100][ C1] __kmem_cache_free+0xba/0x1f0 [ 274.732122][ C1] skb_release_data+0x609/0x7f0 [ 274.732141][ C1] consume_skb+0xb2/0x110 [ 274.732156][ C1] nft_synproxy_eval_v4+0x36b/0x4e0 [ 274.732175][ C1] ? nft_synproxy_do_eval+0x550/0x550 [ 274.732192][ C1] ? nf_ip_checksum+0x13c/0x520 [ 274.732213][ C1] nft_synproxy_do_eval+0x332/0x550 [ 274.732230][ C1] ? nft_synproxy_validate+0xc0/0xc0 [ 274.732245][ C1] ? nft_trace_init+0x211/0x420 [ 274.732260][ C1] ? nf_log_packet+0x650/0x650 [ 274.732284][ C1] nft_do_chain+0x44b/0x1620 [ 274.732307][ C1] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 274.732343][ C1] ? nf_nat_packet+0xf0/0xf0 [ 274.732364][ C1] nft_do_chain_inet+0x29b/0x380 [ 274.732379][ C1] ? nft_do_chain_arp+0x110/0x110 [ 274.732394][ C1] ? ipt_do_table+0x2c5/0x15c0 [ 274.732415][ C1] ? nf_nat_ipv4_local_in+0x22d/0x5d0 [ 274.732439][ C1] ? nft_do_chain_arp+0x110/0x110 [ 274.732453][ C1] nf_hook_slow+0xbd/0x200 [ 274.732472][ C1] NF_HOOK+0x21d/0x3b0 [ 274.732487][ C1] ? NF_HOOK+0x3b0/0x3b0 [ 274.732498][ C1] ? NF_HOOK+0x9f/0x3b0 [ 274.732511][ C1] ? ip_local_deliver+0x180/0x180 [ 274.732526][ C1] ? NF_HOOK+0x3b0/0x3b0 [ 274.732540][ C1] ? ip_local_deliver+0x10b/0x180 [ 274.732555][ C1] NF_HOOK+0x32d/0x3b0 [ 274.732569][ C1] ? ip_rcv_core+0xd80/0xd80 [ 274.732581][ C1] ? NF_HOOK+0x9f/0x3b0 [ 274.732593][ C1] ? ip_local_deliver+0x180/0x180 [ 274.732608][ C1] ? ip_rcv_core+0xd80/0xd80 [ 274.732623][ C1] ? ip_local_deliver_finish+0x510/0x510 [ 274.732637][ C1] ? ip_local_deliver_finish+0x510/0x510 [ 274.732652][ C1] __netif_receive_skb+0xcc/0x290 [ 274.732670][ C1] ? process_backlog+0x2cf/0x710 [ 274.732686][ C1] process_backlog+0x380/0x710 [ 274.732708][ C1] ? trigger_rx_softirq+0x60/0x60 [ 274.732724][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 274.732740][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 274.732760][ C1] ? lock_chain_count+0x20/0x20 [ 274.732778][ C1] __napi_poll+0xbb/0x460 [ 274.732794][ C1] net_rx_action+0x65f/0xcc0 [ 274.732815][ C1] ? net_tx_action+0x950/0x950 [ 274.732830][ C1] ? detach_timer+0x2b0/0x2b0 [ 274.732847][ C1] ? lock_chain_count+0x20/0x20 [ 274.732867][ C1] handle_softirqs+0x27d/0x820 [ 274.732884][ C1] ? do_softirq+0xfa/0x1a0 [ 274.732900][ C1] ? do_softirq+0x1a0/0x1a0 [ 274.732916][ C1] ? batadv_tt_local_purge+0x2c1/0x340 [ 274.732937][ C1] do_softirq+0xfa/0x1a0 [ 274.732951][ C1] [ 274.732956][ C1] [ 274.732960][ C1] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 274.732976][ C1] ? lockdep_hardirqs_on_prepare+0x7d0/0x7d0 [ 274.732995][ C1] ? rcu_is_watching+0x15/0xb0 [ 274.733015][ C1] __local_bh_enable_ip+0x184/0x1c0 [ 274.733030][ C1] ? _local_bh_enable+0xa0/0xa0 [ 274.733047][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 274.733065][ C1] ? batadv_tt_local_purge+0x2c1/0x340 [ 274.733086][ C1] batadv_tt_local_purge+0x2c1/0x340 [ 274.733111][ C1] batadv_tt_purge+0x35/0xa20 [ 274.733132][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 274.733151][ C1] ? process_scheduled_works+0x975/0x1600 [ 274.733169][ C1] ? process_scheduled_works+0x975/0x1600 [ 274.733187][ C1] process_scheduled_works+0xa60/0x1600 [ 274.733223][ C1] ? worker_attach_to_pool+0x370/0x370 [ 274.733244][ C1] ? assign_work+0x3cc/0x5d0 [ 274.733263][ C1] worker_thread+0xa5e/0xfe0 [ 274.733286][ C1] ? _raw_spin_unlock+0x40/0x40 [ 274.733304][ C1] ? __kthread_parkme+0x71/0x1c0 [ 274.733322][ C1] kthread+0x2fa/0x390 [ 274.733347][ C1] ? pr_cont_work+0x550/0x550 [ 274.733364][ C1] ? kthread_blkcg+0xd0/0xd0 [ 274.733379][ C1] ret_from_fork+0x48/0x80 [ 274.733395][ C1] ? kthread_blkcg+0xd0/0xd0 [ 274.733410][ C1] ret_from_fork_asm+0x11/0x20 [ 274.733435][ C1] [ 274.733512][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 274.733522][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 274.733539][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 274.733547][ T28] Call Trace: [ 274.733553][ T28] [ 274.733559][ T28] dump_stack_lvl+0x18c/0x250 [ 274.733581][ T28] ? show_regs_print_info+0x20/0x20 [ 274.733599][ T28] ? load_image+0x420/0x420 [ 274.733630][ T28] panic+0x2ca/0x720 [ 274.733656][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 274.733676][ T28] ? __irq_work_queue_local+0x13a/0x3b0 [ 274.733698][ T28] ? irq_work_queue+0xbc/0x140 [ 274.733723][ T28] watchdog+0xf98/0xfa0 [ 274.733746][ T28] ? watchdog+0x1e1/0xfa0 [ 274.733771][ T28] kthread+0x2fa/0x390 [ 274.733787][ T28] ? hungtask_pm_notify+0x50/0x50 [ 274.733808][ T28] ? kthread_blkcg+0xd0/0xd0 [ 274.733832][ T28] ret_from_fork+0x48/0x80 [ 274.733851][ T28] ? kthread_blkcg+0xd0/0xd0 [ 274.733868][ T28] ret_from_fork_asm+0x11/0x20 [ 274.733900][ T28] [ 274.734240][ T28] Kernel Offset: disabled