last executing test programs: 1m4.887462694s ago: executing program 2 (id=21): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100000, 0x1, &(0x7f0000006680)) r0 = getpid() syz_pidfd_open(r0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090527bd7000fddbdf25021f00", @ANYRES32, @ANYBLOB="0800040064010104060000000003000008000200e0000002080009000600000008"], 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="18"], 0x18}}, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getrlimit(0x4, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r6 = dup2(r5, r5) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={'\x00', 0x40, 0xe, 0x1, 0x5, 0x10}) r7 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) recvmmsg$unix(r7, &(0x7f0000008f40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000004840)=""/220, 0xdc}, {&(0x7f0000004940)=""/255, 0xff}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/253, 0xfd}], 0x4}}], 0x1, 0x0, 0x0) write(r7, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) 1m3.781595199s ago: executing program 2 (id=23): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(0x0, 0x1, 0x2) openat$snapshot(0xffffff9c, &(0x7f0000000040), 0x18, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)={0x0, 0x2, 0x4, 0x0, 0x82, "0062baad630400"}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0xa0000000}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r5 = socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg(r5, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) syz_open_pts(0xffffffffffffffff, 0x80) 1m1.902013661s ago: executing program 2 (id=27): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ptrace$ARCH_MAP_VDSO_32(0x1e, 0x0, 0x6a, 0x2002) close(r1) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x1, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r5, 0x29, 0x2, &(0x7f0000000380)=0x8, 0x4) 59.649573302s ago: executing program 2 (id=31): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0xfff2, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x8, 0xb2, 0x40000a8}, 0x3a}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x2) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) sendto$packet(r6, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 58.317047341s ago: executing program 2 (id=36): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x8a103, 0x0) fcntl$setstatus(r0, 0x4, 0x40400) 54.901645938s ago: executing program 2 (id=39): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x10, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x50) 38.101805155s ago: executing program 32 (id=39): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x10, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x50) 28.999713199s ago: executing program 4 (id=111): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x388, 0x41d9fda7) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) landlock_create_ruleset(0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000100"}) 28.123091299s ago: executing program 4 (id=116): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100000, 0x1, &(0x7f0000006680)) r0 = getpid() syz_pidfd_open(r0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x811}, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="18"], 0x18}}, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getrlimit(0x4, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r6 = dup2(r5, r5) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={'\x00', 0x40, 0xe, 0x1, 0x5, 0x10}) r7 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) recvmmsg$unix(r7, &(0x7f0000008f40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000004840)=""/220, 0xdc}, {&(0x7f0000004940)=""/255, 0xff}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/253, 0xfd}], 0x4}}], 0x1, 0x0, 0x0) write(r7, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) 27.457562174s ago: executing program 4 (id=117): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000d19000/0x3000)=nil, &(0x7f0000935000/0xf000)=nil, &(0x7f0000df1000/0x4000)=nil, &(0x7f0000f2a000/0x1000)=nil, &(0x7f00008cd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000000c0)}, 0x68) writev(0xffffffffffffffff, &(0x7f0000000840)=[{0x0}], 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xcf67, 0x1f480, 0x0, 0x399}) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) ftruncate(0xffffffffffffffff, 0x800799c) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='MIC\nIGAIN \'Synth'], 0x3c) close(r0) 27.211984819s ago: executing program 4 (id=118): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1, 0x0, 0x0, 0x44800}, 0x0) recvmmsg(r3, &(0x7f0000004300), 0x4000000000000e9, 0x60, 0x0) statfs(0x0, 0x0) ftruncate(0xffffffffffffffff, 0xff) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) 24.601055788s ago: executing program 4 (id=121): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000300000050000000000000000940000008d9d6c6e0be1ec17"], 0x0, 0xf, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000810}, 0x20004000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$XFS_IOC_SET_RESBLKS(0xffffffffffffffff, 0xc0105872, &(0x7f0000000040)={0x1, 0x15}) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 24.483215401s ago: executing program 1 (id=122): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(0x0, 0x1, 0x2) openat$snapshot(0xffffff9c, &(0x7f0000000040), 0x18, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)={0x0, 0x2, 0x4, 0x0, 0x82, "0062baad630400"}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0xa0000000}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r5, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r6 = socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg(r6, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) syz_open_pts(0xffffffffffffffff, 0x80) 22.957633935s ago: executing program 3 (id=124): syz_usb_connect(0x3, 0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="92010002508bf5088205cae60bd30102030109023400010301600209042d0202ff6229010a24010c000302010209050101000203ff0609050a0308000301010725"], 0x0) 22.74493359s ago: executing program 4 (id=125): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000023000701feffffff02000000027c0000040042800c00000000000000000914bb140002"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0x4800) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x6}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x90}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 22.041477626s ago: executing program 1 (id=126): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r0, 0x8b18, 0x0) 21.873107369s ago: executing program 1 (id=127): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000d19000/0x3000)=nil, &(0x7f0000935000/0xf000)=nil, &(0x7f0000df1000/0x4000)=nil, &(0x7f0000f2a000/0x1000)=nil, &(0x7f00008cd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000000c0)}, 0x68) writev(0xffffffffffffffff, &(0x7f0000000840)=[{0x0}], 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xcf67, 0x1f480, 0x0, 0x399}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x23, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) ftruncate(0xffffffffffffffff, 0x800799c) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='MIC\nIGAIN \'Synth'], 0x3c) close(r0) 21.83879809s ago: executing program 1 (id=128): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc0ed4040, &(0x7f0000000080)={[{@noblock_validity}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x4a}}, {@nobarrier}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x48b, &(0x7f0000000f40)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x5c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21.201560994s ago: executing program 1 (id=129): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0x42, 0x4, 0x3c8, 0xffffffff, 0x330, 0x0, 0xc8, 0xffffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'wg1\x00', 'nr0\x00', {}, {}, 0x0, 0x3}, 0x74000002, 0xa0, 0xc8, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@cluster={{0x30}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x287, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@connlabel={{0x28}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x168, 0x1a8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0xde, 0x0, 'syz1\x00'}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "81d0042c436dbdac8bebde18b54dd11bf035c1d8b6b0e88ef5aee0eccad7"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB='nouser_xattr,heartbeat=none,dir_resv_level=00000000000000000250,barrier=00000000000000000004,dir_resv_level=00000000000000000002,localflocks,localalloc=00000000000000000004,coherency=buffered,nointr,acl,localalloc=00000000000022251008,uid<', @ANYRESDEC=0x0, @ANYBLOB="2c7375626a5e726f6c653d275e9b148af1147134daaeaad1251d12de0c417d242a2a252c2e2cb2a74084d068fa9b9038bf597c6fdafa6fadbea47b"], 0x1, 0x4431, &(0x7f0000008940)="$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") socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0xfffffffffffffe62}, {0x0, 0x1, 0x804}}}, 0x7) syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000200)=ANY=[], 0x1, 0x2d0, &(0x7f0000002cc0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x105042, 0xb4) truncate(&(0x7f0000000940)='./file1\x00', 0x8da6) 20.365507163s ago: executing program 3 (id=131): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xa3f, @private0, 0xc01}}, {{0xa, 0x4e24, 0x20, @dev={0xfe, 0x80, '\x00', 0x13}, 0xfffffe01}}}, 0x108) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000c00)=0x11) socket$inet6(0xa, 0x80001, 0x0) syz_open_procfs(0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000041c0)={0x2020}, 0x2020) socket$inet6(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) 19.059411162s ago: executing program 3 (id=134): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) 18.484238225s ago: executing program 3 (id=136): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0xfff2, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x1, 0xb2, 0x40000a8}, 0x3a}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x2) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 18.437110936s ago: executing program 0 (id=137): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000d19000/0x3000)=nil, &(0x7f0000935000/0xf000)=nil, &(0x7f0000df1000/0x4000)=nil, &(0x7f0000f2a000/0x1000)=nil, &(0x7f00008cd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f00000000c0)}, 0x68) writev(0xffffffffffffffff, &(0x7f0000000840)=[{0x0}], 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xcf67, 0x1f480, 0x0, 0x399}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x23, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) ftruncate(0xffffffffffffffff, 0x800799c) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='MIC\nIGAIN \'Synth'], 0x3c) close(r0) 18.169668962s ago: executing program 0 (id=138): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000003c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000080)=0x1, 0x12) 18.052377425s ago: executing program 0 (id=139): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x388, 0x41d9fda7) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) landlock_create_ruleset(0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000100"}) 17.705796923s ago: executing program 1 (id=140): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000140), 0x2) r2 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x3) close(0x3) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x1, 0x0, 0x2000}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 17.249535273s ago: executing program 3 (id=141): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1, 0x0, 0x0, 0x44800}, 0x0) recvmmsg(r3, &(0x7f0000004300), 0x4000000000000e9, 0x60, 0x0) statfs(0x0, 0x0) ftruncate(0xffffffffffffffff, 0xff) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) 17.180200164s ago: executing program 0 (id=142): io_setup(0x18, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x82, 0x0) fsopen(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) uname(&(0x7f0000000080)=""/209) 16.160350947s ago: executing program 0 (id=143): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) sendto$inet(r3, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) 16.159416997s ago: executing program 3 (id=144): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hidraw(0x0, 0x7ff, 0x2acc43) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r7], 0x50}}, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r8}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 15.130357351s ago: executing program 0 (id=145): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prlimit64(0x0, 0x8, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020) r6 = fsopen(&(0x7f0000000280)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) r8 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, 0x0}) r9 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r10 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r9, 0x3, 0x11, r8, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r8, r10, 0xaaaa) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r8, r10, 0xbbbb) 7.527921891s ago: executing program 33 (id=125): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000023000701feffffff02000000027c0000040042800c00000000000000000914bb140002"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0x4800) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x6}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x90}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 2.520268234s ago: executing program 34 (id=140): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000140), 0x2) r2 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x3) close(0x3) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x1, 0x0, 0x2000}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 517.411618ms ago: executing program 35 (id=144): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hidraw(0x0, 0x7ff, 0x2acc43) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r7], 0x50}}, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r8}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 0s ago: executing program 36 (id=145): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prlimit64(0x0, 0x8, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020) r6 = fsopen(&(0x7f0000000280)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) r8 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, 0x0}) r9 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r10 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r9, 0x3, 0x11, r8, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r8, r10, 0xaaaa) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r8, r10, 0xbbbb) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.11' (ED25519) to the list of known hosts. [ 57.593837][ T4173] cgroup: Unknown subsys name 'net' [ 57.734006][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.947906][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 60.647071][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 60.686124][ T4199] chnl_net:caif_netlink_parms(): no params data found [ 60.727494][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 60.751786][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 60.808254][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.816259][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.824457][ T4186] device bridge_slave_0 entered promiscuous mode [ 60.838152][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.845378][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.853130][ T4186] device bridge_slave_1 entered promiscuous mode [ 60.866253][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 60.908377][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.940274][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.955820][ T4199] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.963426][ T4199] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.971552][ T4199] device bridge_slave_0 entered promiscuous mode [ 61.011259][ T4186] team0: Port device team_slave_0 added [ 61.017223][ T4199] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.024490][ T4199] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.032177][ T4199] device bridge_slave_1 entered promiscuous mode [ 61.039128][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.046194][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.054050][ T4187] device bridge_slave_0 entered promiscuous mode [ 61.064796][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.071924][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.080028][ T4187] device bridge_slave_1 entered promiscuous mode [ 61.087052][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.094638][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.102795][ T4192] device bridge_slave_0 entered promiscuous mode [ 61.111914][ T4186] team0: Port device team_slave_1 added [ 61.117778][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.124976][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.133109][ T4192] device bridge_slave_1 entered promiscuous mode [ 61.189007][ T4199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.198254][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.206127][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.214368][ T4197] device bridge_slave_0 entered promiscuous mode [ 61.228142][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.235321][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.243368][ T4197] device bridge_slave_1 entered promiscuous mode [ 61.256433][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.268620][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.279618][ T4199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.297174][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.310140][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.330926][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.337886][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.364040][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.389464][ T4199] team0: Port device team_slave_0 added [ 61.407662][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.417844][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.424920][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.450867][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.468448][ T4199] team0: Port device team_slave_1 added [ 61.476192][ T4192] team0: Port device team_slave_0 added [ 61.484340][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.505466][ T4187] team0: Port device team_slave_0 added [ 61.513245][ T4187] team0: Port device team_slave_1 added [ 61.525378][ T4192] team0: Port device team_slave_1 added [ 61.540112][ T4197] team0: Port device team_slave_0 added [ 61.566646][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.573803][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.600088][ T4199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.620556][ T4197] team0: Port device team_slave_1 added [ 61.631998][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.639370][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.665343][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.681725][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.689169][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.715221][ T4199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.730667][ T4186] device hsr_slave_0 entered promiscuous mode [ 61.737678][ T4186] device hsr_slave_1 entered promiscuous mode [ 61.759101][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.766084][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.792283][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.803677][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.810739][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.836667][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.871424][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.878479][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.904574][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.935312][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.942394][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.968733][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.996963][ T4199] device hsr_slave_0 entered promiscuous mode [ 62.003761][ T4199] device hsr_slave_1 entered promiscuous mode [ 62.011506][ T4199] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.019438][ T4199] Cannot create hsr debugfs directory [ 62.030429][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.037390][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.063721][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.086319][ T4187] device hsr_slave_0 entered promiscuous mode [ 62.093619][ T4187] device hsr_slave_1 entered promiscuous mode [ 62.100682][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.108247][ T4187] Cannot create hsr debugfs directory [ 62.170307][ T4192] device hsr_slave_0 entered promiscuous mode [ 62.176999][ T4192] device hsr_slave_1 entered promiscuous mode [ 62.184788][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.192421][ T4192] Cannot create hsr debugfs directory [ 62.223678][ T4197] device hsr_slave_0 entered promiscuous mode [ 62.230596][ T4197] device hsr_slave_1 entered promiscuous mode [ 62.237104][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.244987][ T4197] Cannot create hsr debugfs directory [ 62.359780][ T1108] Bluetooth: hci2: command 0x0409 tx timeout [ 62.368958][ T4202] Bluetooth: hci1: command 0x0409 tx timeout [ 62.375006][ T4202] Bluetooth: hci0: command 0x0409 tx timeout [ 62.446232][ T1108] Bluetooth: hci4: command 0x0409 tx timeout [ 62.452488][ T1108] Bluetooth: hci3: command 0x0409 tx timeout [ 62.479190][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.491653][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.501684][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.511815][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.567874][ T4199] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.596429][ T4199] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.605438][ T4199] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.618516][ T4199] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.636271][ T4187] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.645854][ T4187] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.655521][ T4187] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.664836][ T4187] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.703736][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.746611][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.756341][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.768545][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.785874][ T4192] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.797946][ T4192] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.817334][ T4192] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.826448][ T4192] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.835590][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.849892][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.859137][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.866368][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.904136][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.912298][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.922306][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.931577][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.938924][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.947682][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.959128][ T4197] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.968687][ T4197] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.980140][ T4197] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.001054][ T4197] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.023237][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.033406][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.043132][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.056181][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.065187][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.074117][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.106795][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.115233][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.126503][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.136454][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.151451][ T4199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.182849][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.221212][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.238005][ T4199] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.246611][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.256129][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.274088][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.297105][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.316075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.331310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.343463][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.350608][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.360233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.368777][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.377448][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.384537][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.394237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.402330][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.410433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.418101][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.426315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.438770][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.457282][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.465229][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.473591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.482957][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.491961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.503669][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.512243][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.521554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.530388][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.537441][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.545875][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.560466][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.581960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.591244][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.599593][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.608686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.617976][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.626924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.635653][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.642853][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.651944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.660729][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.669281][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.676455][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.684771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.693529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.702021][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.709086][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.716736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.726417][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.736078][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.743196][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.751205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.759270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.781021][ T4199] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.792077][ T4199] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.816541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.825970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.835190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.844155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.852831][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.860285][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.868292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.876893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.886227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.899996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.908228][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.915933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.923608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.932285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.942997][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.951660][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.964318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.974894][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.985616][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.003354][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.033174][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.042545][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.055488][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.064379][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.073592][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.082385][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.091300][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.100498][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.108964][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.117438][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.126529][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.135131][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.144416][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.164859][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.182612][ T4192] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.220422][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.247091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.256703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.266366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.275946][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.285485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.294366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.303135][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.312370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.321839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.332018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.340783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.372465][ T4197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.402098][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.412891][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.425282][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.435081][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.447946][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.456073][ T4236] Bluetooth: hci0: command 0x041b tx timeout [ 64.462604][ T4236] Bluetooth: hci1: command 0x041b tx timeout [ 64.468731][ T4236] Bluetooth: hci2: command 0x041b tx timeout [ 64.475115][ T4199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.483236][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.491471][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.519912][ T4229] Bluetooth: hci3: command 0x041b tx timeout [ 64.528001][ T4229] Bluetooth: hci4: command 0x041b tx timeout [ 64.555913][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.566196][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.577262][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.604280][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.614431][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.623104][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.631733][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.642250][ T4186] device veth0_vlan entered promiscuous mode [ 64.672025][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.694649][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.704846][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.715522][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.723467][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.731551][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.740154][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.748441][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.757086][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.772437][ T4186] device veth1_vlan entered promiscuous mode [ 64.801573][ T4199] device veth0_vlan entered promiscuous mode [ 64.815074][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.824390][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.833949][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.854049][ T4199] device veth1_vlan entered promiscuous mode [ 64.870974][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.878640][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.904317][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.925921][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.943471][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.971903][ T4186] device veth0_macvtap entered promiscuous mode [ 64.983904][ T4199] device veth0_macvtap entered promiscuous mode [ 64.992172][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.001236][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.009513][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.018016][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.026908][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.035596][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.045710][ T4192] device veth0_vlan entered promiscuous mode [ 65.074307][ T4197] device veth0_vlan entered promiscuous mode [ 65.084321][ T4199] device veth1_macvtap entered promiscuous mode [ 65.094741][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.104402][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.113347][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.121739][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.131664][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.140867][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.149748][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.158072][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.166219][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.183428][ T4192] device veth1_vlan entered promiscuous mode [ 65.192235][ T4186] device veth1_macvtap entered promiscuous mode [ 65.205843][ T4197] device veth1_vlan entered promiscuous mode [ 65.216135][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.224680][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.233003][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.241892][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.250883][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.291118][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.299120][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.307213][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.317222][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.326947][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.356261][ T4197] device veth0_macvtap entered promiscuous mode [ 65.364877][ T4192] device veth0_macvtap entered promiscuous mode [ 65.377285][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.385952][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.396842][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.405805][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.415295][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.423725][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.439516][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.450283][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.462661][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.473214][ T4187] device veth0_vlan entered promiscuous mode [ 65.482453][ T4192] device veth1_macvtap entered promiscuous mode [ 65.490530][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.498539][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.507564][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.515739][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.523731][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.531910][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.540864][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.554027][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.562922][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.573812][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.585508][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.594295][ T4197] device veth1_macvtap entered promiscuous mode [ 65.606543][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.616161][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.625255][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.636020][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.646174][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.660400][ T4199] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.669435][ T4199] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.678148][ T4199] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.687328][ T4199] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.701109][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.711163][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.720875][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.729682][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.754043][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.764992][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.775122][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.787500][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.799659][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.809842][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.821691][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.831717][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.842820][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.853066][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.863852][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.874712][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.888193][ T4187] device veth1_vlan entered promiscuous mode [ 65.902345][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.918358][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.928653][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.937662][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.946310][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.957648][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.975937][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.986072][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.997408][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.009879][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.018107][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.029230][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.041504][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.052143][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.062277][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.072920][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.084319][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.104230][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.113750][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.123609][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.133266][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.151131][ T4197] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.160199][ T4197] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.168981][ T4197] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.177759][ T4197] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.198760][ T4192] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.217688][ T4192] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.227769][ T4192] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.236737][ T4192] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.338657][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.348414][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.364384][ T4245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.374664][ T4245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.392189][ T4187] device veth0_macvtap entered promiscuous mode [ 66.426490][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.438619][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.460072][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.467776][ T4187] device veth1_macvtap entered promiscuous mode [ 66.467968][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.481459][ T4245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.484706][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.498157][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.509501][ T4245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.523624][ T4229] Bluetooth: hci2: command 0x040f tx timeout [ 66.529830][ T4229] Bluetooth: hci1: command 0x040f tx timeout [ 66.536134][ T4229] Bluetooth: hci0: command 0x040f tx timeout [ 66.544626][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.555444][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.566481][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.577302][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.587440][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.598771][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.609303][ T4236] Bluetooth: hci4: command 0x040f tx timeout [ 66.614055][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.615366][ T4236] Bluetooth: hci3: command 0x040f tx timeout [ 66.626787][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.643854][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.651666][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.660345][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.668985][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.698170][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.709803][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.716021][ T4245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.727540][ T4245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.735925][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.746794][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.756929][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.767762][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.777839][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.788583][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.800698][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.816430][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.818132][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.826525][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.837649][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.841318][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.871956][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.886283][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.896503][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.905419][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.942241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.961143][ T893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.998445][ T893] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.040085][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.102279][ T893] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.119789][ T893] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.152941][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.194357][ T893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.202576][ T4245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.226207][ T4233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.253148][ T893] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.262601][ T4233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.272097][ T4245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.282566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.290894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.300176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.707783][ T4202] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 68.120806][ T4202] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 68.219811][ T4202] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 68.448155][ T4202] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 68.470665][ T4301] netlink: 91 bytes leftover after parsing attributes in process `syz.2.8'. [ 68.488899][ T4202] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.677900][ T4202] usb 4-1: config 0 descriptor?? [ 69.387423][ T4236] Bluetooth: hci0: command 0x0419 tx timeout [ 69.411319][ T4236] Bluetooth: hci1: command 0x0419 tx timeout [ 69.438457][ T4236] Bluetooth: hci2: command 0x0419 tx timeout [ 69.456796][ T4236] Bluetooth: hci3: command 0x0419 tx timeout [ 69.473341][ T4236] Bluetooth: hci4: command 0x0419 tx timeout [ 69.522824][ T4202] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 69.699101][ T4230] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 69.953898][ T3518] usb 4-1: USB disconnect, device number 2 [ 69.979122][ T4230] usb 1-1: Using ep0 maxpacket: 32 [ 70.099944][ T4230] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.205050][ T4230] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.462055][ T4230] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 70.493329][ T4230] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 70.502368][ T4230] usb 1-1: Product: syz [ 70.506648][ T4230] usb 1-1: Manufacturer: syz [ 70.570178][ T4303] loop1: detected capacity change from 0 to 32768 [ 70.810970][ T4303] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.10 (4303) [ 71.133816][ T4230] hub 1-1:4.0: USB hub found [ 71.169021][ T4230] hub 1-1:4.0: 2 ports detected [ 71.265461][ T4303] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 71.282078][ T4303] BTRFS info (device loop1): setting nodatacow, compression disabled [ 71.309593][ T4303] BTRFS info (device loop1): force clearing of disk cache [ 71.316841][ T4303] BTRFS info (device loop1): turning off barriers [ 71.328120][ T4202] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 71.336670][ T3518] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 71.338778][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.350608][ T4303] BTRFS info (device loop1): use no compression [ 71.350685][ T4303] BTRFS info (device loop1): disabling free space tree [ 71.371587][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.398671][ T4303] BTRFS info (device loop1): enabling ssd optimizations [ 71.464425][ T4303] BTRFS info (device loop1): using spread ssd allocation scheme [ 71.474219][ T4230] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 71.486240][ T4230] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 71.550665][ T4303] BTRFS info (device loop1): not using ssd optimizations [ 71.558208][ T4303] BTRFS info (device loop1): not using spread ssd allocation scheme [ 71.586328][ T4303] BTRFS info (device loop1): has skinny extents [ 71.672701][ T4230] usb 1-1: USB disconnect, device number 2 [ 71.719847][ T4202] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.735025][ T4202] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 71.744645][ T4202] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.765479][ T4202] usb 5-1: config 0 descriptor?? [ 71.995240][ T4330] usb usb8: usbfs: process 4330 (syz.3.15) did not claim interface 0 before use [ 72.060741][ T4303] BTRFS error (device loop1): open_ctree failed: -12 [ 72.109253][ T4318] udc-core: couldn't find an available UDC or it's busy [ 72.172070][ T4318] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 72.464035][ T4328] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by udevd (4328) [ 72.481019][ T4318] udc-core: couldn't find an available UDC or it's busy [ 72.685982][ T4318] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 72.848968][ T4202] usbhid 5-1:0.0: can't add hid device: -71 [ 72.855965][ T4202] usbhid: probe of 5-1:0.0 failed with error -71 [ 72.869461][ T4202] usb 5-1: USB disconnect, device number 2 [ 72.932702][ T4372] netlink: 91 bytes leftover after parsing attributes in process `syz.2.21'. [ 73.240786][ T4377] blktrace: Concurrent blktraces are not allowed on loop4 [ 73.798877][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 73.808866][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 73.818861][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 73.828861][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 73.838857][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 73.848856][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 73.858859][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 75.158843][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 75.188843][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 75.228843][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 78.341293][ T4407] loop1: detected capacity change from 0 to 4096 [ 79.450195][ T4431] loop0: detected capacity change from 0 to 128 [ 79.467306][ T4407] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 81.969491][ T4445] sched: RT throttling activated [ 83.739662][ T4460] sg_write: data in/out 28/38 bytes for SCSI command 0x5d-- guessing data in; [ 83.739662][ T4460] program syz.0.40 not setting count and/or reply_len properly [ 84.023348][ T4463] netlink: 24 bytes leftover after parsing attributes in process `syz.4.42'. [ 85.132284][ T4481] device syzkaller0 entered promiscuous mode [ 86.307692][ T3518] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 86.587631][ T4507] sg_write: data in/out 28/38 bytes for SCSI command 0x5d-- guessing data in; [ 86.587631][ T4507] program syz.3.53 not setting count and/or reply_len properly [ 87.037195][ T23] cfg80211: failed to load regulatory.db [ 87.579126][ T4236] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 87.707853][ T4518] loop4: detected capacity change from 0 to 128 [ 87.860767][ T3518] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.940221][ T4236] usb 4-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 88.055705][ T4236] usb 4-1: config 0 interface 0 has no altsetting 0 [ 88.165274][ T4236] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 88.287088][ T4236] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.454105][ T4236] usb 4-1: config 0 descriptor?? [ 88.838903][ T3518] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 88.847971][ T3518] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.870543][ T3518] usb 1-1: config 0 descriptor?? [ 88.920723][ T3518] pwc: Askey VC010 type 2 USB webcam detected. [ 88.959061][ T3518] pwc: send_video_command error -71 [ 88.964468][ T3518] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 88.989023][ T3518] Philips webcam: probe of 1-1:0.0 failed with error -71 [ 88.992913][ T4236] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 88.997742][ T3518] usb 1-1: USB disconnect, device number 3 [ 89.033562][ T4236] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 89.045169][ T4236] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 89.061090][ T4236] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 89.068450][ T4236] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 89.078320][ T4236] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 89.096225][ T4236] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 89.116512][ T4236] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 89.136775][ T4236] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 89.178985][ T4236] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 89.196532][ T4236] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 89.216790][ T4236] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 89.237069][ T4236] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 89.701814][ T4236] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 89.711390][ T4236] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 89.718651][ T4236] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 89.726456][ T4236] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 89.734672][ T4236] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 89.759139][ T4236] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 89.766332][ T4236] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 89.785836][ T4236] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 89.799012][ T4236] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 89.827102][ T4236] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 89.857339][ T4236] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 89.870844][ T4236] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 90.562966][ T4236] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 90.570242][ T4236] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 90.577619][ T4236] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 90.584852][ T4236] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 90.596204][ T4236] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 90.603464][ T4236] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 90.628927][ T4236] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 90.646301][ T4236] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 90.656318][ T4236] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 91.138286][ T4236] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 91.636710][ T4236] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 91.643983][ T4236] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 91.651160][ T4236] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 91.658297][ T4236] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 91.665501][ T4236] koneplus 0003:1E7D:2E22.0001: unknown main item tag 0x0 [ 91.690533][ T4236] koneplus 0003:1E7D:2E22.0001: hidraw0: USB HID v0.04 Device [HID 1e7d:2e22] on usb-dummy_hcd.3-1/input0 [ 91.732638][ T4236] usb 4-1: USB disconnect, device number 4 [ 92.057785][ T4553] sg_write: data in/out 28/38 bytes for SCSI command 0x5d-- guessing data in; [ 92.057785][ T4553] program syz.3.66 not setting count and/or reply_len properly [ 92.982516][ T4545] fido_id[4545]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 93.081327][ T4562] device syzkaller0 entered promiscuous mode [ 93.382969][ T4572] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 94.136567][ T4578] futex_wake_op: syz.0.76 tries to shift op by 144; fix this program [ 96.311777][ T4595] blktrace: Concurrent blktraces are not allowed on loop0 [ 97.791589][ T4607] loop1: detected capacity change from 0 to 40427 [ 97.901064][ T4612] loop0: detected capacity change from 0 to 512 [ 98.993592][ T4612] EXT4-fs (loop0): Unrecognized mount option "audit" or missing value [ 99.017014][ T4607] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 99.025503][ T4607] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 99.703356][ T4607] F2FS-fs (loop1): Found nat_bits in checkpoint [ 99.774523][ T4607] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 99.781976][ T4607] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 100.059218][ T23] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 100.319901][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 100.449012][ T23] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 100.462533][ T23] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 100.508962][ T23] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 100.549478][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 100.578899][ T23] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 100.618955][ T23] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 100.658305][ T23] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 100.707998][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.742912][ T23] usb 5-1: config 0 descriptor?? [ 100.796400][ T4629] netlink: 12 bytes leftover after parsing attributes in process `syz.3.89'. [ 100.883141][ T4624] loop0: detected capacity change from 0 to 32768 [ 100.912667][ T4624] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 100.927613][ T4624] BTRFS info (device loop0): setting nodatacow, compression disabled [ 100.936416][ T4624] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 100.952552][ T4624] BTRFS info (device loop0): trying to use backup root at mount time [ 100.962657][ T4624] BTRFS info (device loop0): allowing degraded mounts [ 100.974922][ T4624] BTRFS info (device loop0): turning on flush-on-commit [ 100.982998][ T4624] BTRFS info (device loop0): turning on async discard [ 100.995043][ T4624] BTRFS info (device loop0): turning off barriers [ 101.015071][ T4624] BTRFS info (device loop0): disabling free space tree [ 101.022549][ T4624] BTRFS info (device loop0): turning on sync discard [ 101.249751][ T4624] BTRFS error (device loop0): cannot disable free space tree [ 101.273661][ T23] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 101.305994][ T4624] BTRFS error (device loop0): open_ctree failed: -22 [ 101.313248][ T23] usb 5-1: USB disconnect, device number 3 [ 101.321896][ T4626] chnl_net:caif_netlink_parms(): no params data found [ 101.331247][ T23] usblp0: removed [ 101.401737][ T4328] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by udevd (4328) [ 101.723377][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.839122][ T23] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 102.034782][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.163640][ T4626] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.204103][ T4626] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.213503][ T4626] device bridge_slave_0 entered promiscuous mode [ 102.230701][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 102.318260][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.429415][ T23] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 102.450384][ T23] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 102.533017][ T23] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 102.554995][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 102.587789][ T23] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 102.628007][ T23] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 102.643481][ T23] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 102.653041][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.677262][ T23] usb 5-1: config 0 descriptor?? [ 102.770568][ T4626] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.770938][ T7] Bluetooth: hci5: command 0x0409 tx timeout [ 102.780272][ T4626] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.910522][ T4626] device bridge_slave_1 entered promiscuous mode [ 103.020720][ T4626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.046053][ T4626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.055670][ T23] usb 5-1: can't set config #0, error -71 [ 103.065841][ T23] usb 5-1: USB disconnect, device number 4 [ 103.234159][ T4626] team0: Port device team_slave_0 added [ 103.796232][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.851721][ T4626] team0: Port device team_slave_1 added [ 104.187548][ T4626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.216361][ T4626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.313843][ T4626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.355215][ T4626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.089072][ T3518] Bluetooth: hci5: command 0x041b tx timeout [ 105.125374][ T4626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.151313][ C1] vkms_vblank_simulate: vblank timer overrun [ 105.153298][ T4673] loop4: detected capacity change from 0 to 512 [ 105.174302][ T4626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.332026][ T4673] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 105.356057][ T4681] loop1: detected capacity change from 0 to 4096 [ 105.371367][ T4673] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.416587][ T4626] device hsr_slave_0 entered promiscuous mode [ 105.498716][ T4681] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 105.513528][ T4626] device hsr_slave_1 entered promiscuous mode [ 105.532099][ T4626] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.553797][ T4626] Cannot create hsr debugfs directory [ 105.894380][ T4699] xt_hashlimit: max too large, truncated to 1048576 [ 105.906764][ T4699] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 106.436894][ T4186] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 106.696214][ T4715] netlink: 'syz.3.106': attribute type 1 has an invalid length. [ 106.704256][ T4715] netlink: 'syz.3.106': attribute type 2 has an invalid length. [ 106.847261][ T4718] blktrace: Concurrent blktraces are not allowed on loop8 [ 107.169935][ T3518] Bluetooth: hci5: command 0x040f tx timeout [ 109.582962][ T4349] Bluetooth: hci5: command 0x0419 tx timeout [ 109.616055][ T4626] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 109.634291][ T4749] loop1: detected capacity change from 0 to 512 [ 109.894722][ T4762] blktrace: Concurrent blktraces are not allowed on loop8 [ 110.219083][ T4626] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 110.247852][ T4749] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,norecovery,,errors=continue. Quota mode: writeback. [ 110.340576][ T4749] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.417743][ T4626] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 110.468011][ T4626] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 113.303913][ T4787] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 114.822949][ T9] device hsr_slave_0 left promiscuous mode [ 114.837102][ T9] device hsr_slave_1 left promiscuous mode [ 114.861071][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.868602][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.891902][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.967270][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.081502][ T9] device bridge_slave_1 left promiscuous mode [ 115.138890][ T4229] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 115.167254][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.508607][ T9] device bridge_slave_0 left promiscuous mode [ 115.569940][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.793398][ T9] device veth1_macvtap left promiscuous mode [ 115.814708][ T9] device veth0_macvtap left promiscuous mode [ 115.834529][ T9] device veth1_vlan left promiscuous mode [ 115.844212][ T9] device veth0_vlan left promiscuous mode [ 115.883822][ T4818] ODEBUG: Out of memory. ODEBUG disabled [ 115.968741][ T4229] usb 4-1: Using ep0 maxpacket: 8 [ 115.977565][ T4826] loop1: detected capacity change from 0 to 512 [ 116.009697][ T4826] ======================================================= [ 116.009697][ T4826] WARNING: The mand mount option has been deprecated and [ 116.009697][ T4826] and is ignored by this kernel. Remove the mand [ 116.009697][ T4826] option from the mount to silence this warning. [ 116.009697][ T4826] ======================================================= [ 116.119127][ T4229] usb 4-1: config 3 has an invalid interface number: 45 but max is 0 [ 116.129121][ T4229] usb 4-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 116.137926][ T4229] usb 4-1: config 3 has no interface number 0 [ 116.145247][ T4229] usb 4-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 116.159295][ T4229] usb 4-1: config 3 interface 45 has no altsetting 0 [ 116.196178][ T4826] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.128: bad orphan inode 15 [ 116.220023][ T4826] ext4_test_bit(bit=14, block=5) = 0 [ 116.225552][ T4826] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,lazytime,journal_dev=0x0000000000000003,min_batch_time=0x000000000000004a,nobarrier,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue. Quota mode: none. [ 116.301132][ T4826] EXT4-fs error (device loop1): __ext4_new_inode:1082: comm syz.1.128: reserved inode found cleared - inode=1 [ 116.328982][ T4229] usb 4-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 116.338162][ T4229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.387127][ T4229] usb 4-1: Product: syz [ 116.401235][ T4229] usb 4-1: Manufacturer: syz [ 116.405935][ T4229] usb 4-1: SerialNumber: syz [ 116.419745][ T9] team0 (unregistering): Port device team_slave_1 removed [ 116.454411][ T9] team0 (unregistering): Port device team_slave_0 removed [ 116.487655][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.519313][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.624426][ T9] bond0 (unregistering): Released all slaves [ 116.734211][ T4626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.783223][ T4832] xt_recent: Unsupported userspace flags (000000de) [ 116.786727][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 116.798313][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 116.852196][ T4626] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.880983][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 116.956105][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 116.987475][ T4332] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.994582][ T4332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.102903][ T4229] usb 4-1: USB disconnect, device number 5 [ 117.283992][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 117.501642][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 117.551476][ T4450] udevd[4450]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 117.621331][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 117.649247][ T4332] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.656397][ T4332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.678983][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 117.687930][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 117.709493][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 117.728344][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 117.832581][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 117.959035][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 117.961164][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 117.974333][ T4626] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 117.974356][ T4626] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 117.980408][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 117.980869][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 117.981445][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 117.981847][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 118.729136][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 119.254925][ T4835] loop1: detected capacity change from 0 to 32768 [ 119.421132][ T4867] device syzkaller0 entered promiscuous mode [ 119.457935][ T4835] JBD2: Ignoring recovery information on journal [ 119.499446][ T4835] jbd2_journal_bmap: journal block not found at offset 32 on loop1-75 [ 119.509655][ T4835] JBD2: bad block at offset 32 [ 119.532221][ T4867] 0: reclassify loop, rule prio 0, protocol 800 [ 119.563161][ T4835] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 119.758188][ T26] audit: type=1800 audit(2000000007.760:2): pid=4832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.129" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 119.802933][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 119.832562][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 120.427588][ T4186] ocfs2: Unmounting device (7,1) on (node local) [ 120.467036][ T4626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.756561][ T4904] device vlan2 entered promiscuous mode [ 132.761756][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.768090][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.957347][ T4353] Bluetooth: hci8: command 0x0409 tx timeout [ 142.037248][ T4349] Bluetooth: hci8: command 0x041b tx timeout [ 144.117102][ T4353] Bluetooth: hci8: command 0x040f tx timeout [ 146.197267][ T4353] Bluetooth: hci8: command 0x0419 tx timeout [ 162.036155][ T4353] Bluetooth: hci9: command 0x0409 tx timeout [ 164.116110][ T4353] Bluetooth: hci9: command 0x041b tx timeout [ 166.195880][ T4353] Bluetooth: hci9: command 0x040f tx timeout [ 168.275767][ T4353] Bluetooth: hci9: command 0x0419 tx timeout [ 186.034907][ T4202] Bluetooth: hci0: command 0x0406 tx timeout [ 186.047191][ T4202] Bluetooth: hci1: command 0x0406 tx timeout [ 186.053563][ T4202] Bluetooth: hci2: command 0x0406 tx timeout [ 186.067698][ T4202] Bluetooth: hci3: command 0x0406 tx timeout [ 193.074451][ T4202] Bluetooth: hci10: command 0x0409 tx timeout [ 194.202169][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.208671][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.154283][ T4349] Bluetooth: hci10: command 0x041b tx timeout [ 197.234169][ T4349] Bluetooth: hci10: command 0x040f tx timeout [ 198.045140][ T4202] Bluetooth: hci11: command 0x0409 tx timeout [ 199.317277][ T4349] Bluetooth: hci10: command 0x0419 tx timeout [ 200.113986][ T4202] Bluetooth: hci11: command 0x041b tx timeout [ 223.072722][ T4349] Bluetooth: hci14: command 0x0409 tx timeout [ 226.992454][ T4349] Bluetooth: hci5: command 0x0406 tx timeout [ 253.631074][ T4349] Bluetooth: hci15: command 0x0409 tx timeout [ 255.634719][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.641321][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.710956][ T4349] Bluetooth: hci15: command 0x041b tx timeout [ 257.790815][ T4349] Bluetooth: hci15: command 0x040f tx timeout [ 258.121361][ T4349] Bluetooth: hci16: command 0x0409 tx timeout [ 259.870743][ T4349] Bluetooth: hci15: command 0x0419 tx timeout [ 260.110638][ T4349] Bluetooth: hci17: command 0x0409 tx timeout [ 260.190785][ T4349] Bluetooth: hci18: command 0x0409 tx timeout [ 260.197501][ T4349] Bluetooth: hci16: command 0x041b tx timeout [ 262.190552][ T4349] Bluetooth: hci17: command 0x041b tx timeout [ 262.270633][ T4349] Bluetooth: hci16: command 0x040f tx timeout [ 262.277473][ T4349] Bluetooth: hci18: command 0x041b tx timeout [ 262.830448][ T4202] Bluetooth: hci8: command 0x0406 tx timeout [ 264.270383][ T4202] Bluetooth: hci17: command 0x040f tx timeout [ 264.350494][ T4202] Bluetooth: hci18: command 0x040f tx timeout [ 264.356736][ T4202] Bluetooth: hci16: command 0x0419 tx timeout [ 266.350313][ T4202] Bluetooth: hci17: command 0x0419 tx timeout [ 266.430455][ T4202] Bluetooth: hci18: command 0x0419 tx timeout [ 283.149416][ T27] INFO: task kworker/u4:0:9 blocked for more than 143 seconds. [ 283.157428][ T27] Not tainted syzkaller #0 [ 283.163070][ T4349] Bluetooth: hci19: command 0x0409 tx timeout [ 283.177477][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 283.186771][ T27] task:kworker/u4:0 state:D stack:23632 pid: 9 ppid: 2 flags:0x00004000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 283.201446][ T27] Workqueue: netns cleanup_net [ 283.206273][ T27] Call Trace: [ 283.211951][ T27] [ 283.214917][ T27] __schedule+0x11c3/0x4350 [ 283.223012][ T27] ? stack_trace_snprint+0xe0/0xe0 [ 283.228145][ T27] ? stack_depot_save+0x41b/0x460 [ 283.268297][ T27] ? rcu_lock_acquire+0x30/0x30 [ 283.273346][ T27] ? __mutex_lock_common+0xdf0/0x2400 [ 283.278887][ T27] ? release_firmware_map_entry+0x190/0x190 [ 283.285073][ T27] ? __lock_acquire+0x7b50/0x7b50 [ 283.298278][ T27] ? __mutex_trylock_common+0x86/0x260 [ 283.304433][ T27] ? kthread_data+0x4b/0xc0 [ 283.308954][ T27] schedule+0x11b/0x1e0 [ 283.313464][ T4349] Bluetooth: hci9: command 0x0406 tx timeout [ 283.324856][ T27] schedule_preempt_disabled+0xf/0x20 [ 283.330544][ T27] __mutex_lock_common+0xdf5/0x2400 [ 283.335757][ T27] ? cangw_pernet_exit+0xe/0x20 [ 283.346120][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 283.351879][ T27] ? slab_free_freelist_hook+0xec/0x170 [ 283.357440][ T27] ? kfree+0xef/0x2a0 [ 283.366982][ T27] mutex_lock_nested+0x17/0x20 [ 283.372148][ T27] cangw_pernet_exit+0xe/0x20 [ 283.376834][ T27] cleanup_net+0x703/0xba0 [ 283.386817][ T27] ? ops_free_list+0x330/0x330 [ 283.391816][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 283.397718][ T27] ? _raw_spin_unlock+0x40/0x40 [ 283.410666][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 283.415899][ T27] process_one_work+0x867/0xff0 [ 283.426293][ T27] ? worker_detach_from_pool+0x240/0x240 [ 283.432176][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 283.437483][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 283.448012][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 283.453783][ T27] ? wq_worker_running+0x97/0x170 [ 283.458816][ T27] worker_thread+0xad7/0x12a0 [ 283.469040][ T27] kthread+0x42e/0x520 [ 283.473416][ T27] ? rcu_lock_release+0x20/0x20 [ 283.478277][ T27] ? kthread_blkcg+0xd0/0xd0 [ 283.488329][ T27] ret_from_fork+0x1f/0x30 [ 283.493009][ T27] [ 283.496093][ T27] INFO: task kworker/1:1:23 blocked for more than 143 seconds. [ 283.509095][ T27] Not tainted syzkaller #0 [ 283.515442][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 283.531384][ T27] task:kworker/1:1 state:D stack:22704 pid: 23 ppid: 2 flags:0x00004000 [ 283.545502][ T27] Workqueue: events_power_efficient crda_timeout_work [ 283.553553][ T27] Call Trace: [ 283.556836][ T27] [ 283.564095][ T27] __schedule+0x11c3/0x4350 [ 283.568751][ T27] ? release_firmware_map_entry+0x190/0x190 [ 283.575983][ T27] ? __lock_acquire+0x7b50/0x7b50 [ 283.585327][ T27] ? __mutex_trylock_common+0x86/0x260 [ 283.592071][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 283.597282][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 283.606839][ T27] schedule+0x11b/0x1e0 [ 283.612234][ T27] schedule_preempt_disabled+0xf/0x20 [ 283.617613][ T27] __mutex_lock_common+0xdf5/0x2400 [ 283.628263][ T27] ? crda_timeout_work+0x11/0x50 [ 283.634555][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 283.645678][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 283.653276][ T27] ? read_lock_is_recursive+0x10/0x10 [ 283.658659][ T27] ? __schedule+0x11cb/0x4350 [ 283.667982][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 283.674455][ T27] mutex_lock_nested+0x17/0x20 [ 283.683514][ T27] crda_timeout_work+0x11/0x50 [ 283.688296][ T27] process_one_work+0x867/0xff0 [ 283.694479][ T27] ? worker_detach_from_pool+0x240/0x240 [ 283.704399][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 283.710939][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 283.715986][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 283.725973][ T27] ? wq_worker_running+0x97/0x170 [ 283.733294][ T27] worker_thread+0xad7/0x12a0 [ 283.737996][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 283.748333][ T27] kthread+0x42e/0x520 [ 283.755302][ T27] ? rcu_lock_release+0x20/0x20 [ 283.764964][ T27] ? kthread_blkcg+0xd0/0xd0 [ 283.770911][ T27] ret_from_fork+0x1f/0x30 [ 283.775362][ T27] [ 283.778409][ T27] INFO: task kworker/u4:1:144 blocked for more than 143 seconds. [ 283.790650][ T27] Not tainted syzkaller #0 [ 283.795597][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 283.810371][ T27] task:kworker/u4:1 state:D stack:22096 pid: 144 ppid: 2 flags:0x00004000 [ 283.823936][ T27] Workqueue: events_unbound cfg80211_wiphy_work [ 283.831493][ T27] Call Trace: [ 283.834775][ T27] [ 283.837708][ T27] __schedule+0x11c3/0x4350 [ 283.847786][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 283.855041][ T27] ? lock_chain_count+0x20/0x20 [ 283.866084][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 283.879301][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 283.884538][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 283.895743][ T27] ? release_firmware_map_entry+0x190/0x190 [ 283.901859][ T27] ? __might_sleep+0xf0/0xf0 [ 283.906455][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 283.916807][ T27] ? kthread_data+0x4b/0xc0 [ 283.921499][ T27] schedule+0x11b/0x1e0 [ 283.925667][ T27] synchronize_rcu_expedited+0x680/0x750 [ 283.937125][ T27] ? synchronize_rcu+0x1e0/0x1e0 [ 283.942253][ T27] ? init_wait_entry+0xd0/0xd0 [ 283.947044][ T27] ? __might_sleep+0xf0/0xf0 [ 283.958230][ T27] ? rcu_is_watching+0x11/0xa0 [ 283.963846][ T27] ? trace_drv_return_void+0x7a/0x1c0 [ 283.976326][ T27] ? __sta_info_destroy_part1+0x7c1/0xd60 [ 283.982254][ T27] __sta_info_destroy+0x33/0x50 [ 283.987197][ T27] ieee80211_ibss_work+0x781/0x10f0 [ 283.997691][ T27] ? _raw_spin_unlock+0x40/0x40 [ 284.002734][ T27] ? mark_lock+0x94/0x320 [ 284.007066][ T27] ? ieee80211_ibss_rx_queued_mgmt+0x2b50/0x2b50 [ 284.018700][ T27] ? sched_core_update_cookie+0x153/0x2a0 [ 284.024604][ T27] ? skb_dequeue+0x120/0x150 [ 284.034422][ T27] ? ieee80211_iface_work+0x964/0xc50 [ 284.039991][ T27] ? ieee80211_iface_work+0xb69/0xc50 [ 284.045371][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 284.055937][ T27] cfg80211_wiphy_work+0x224/0x260 [ 284.062280][ T27] process_one_work+0x867/0xff0 [ 284.067157][ T27] ? worker_detach_from_pool+0x240/0x240 [ 284.078196][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 284.085354][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 284.095929][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 284.101656][ T27] ? wq_worker_running+0x97/0x170 [ 284.106688][ T27] worker_thread+0xad7/0x12a0 [ 284.116780][ T27] kthread+0x42e/0x520 [ 284.121283][ T27] ? rcu_lock_release+0x20/0x20 [ 284.126162][ T27] ? kthread_blkcg+0xd0/0xd0 [ 284.136168][ T27] ret_from_fork+0x1f/0x30 [ 284.140799][ T27] [ 284.143915][ T27] INFO: task kworker/1:2:3518 blocked for more than 144 seconds. [ 284.157086][ T27] Not tainted syzkaller #0 [ 284.162198][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 284.177165][ T27] task:kworker/1:2 state:D stack:23408 pid: 3518 ppid: 2 flags:0x00004000 [ 284.186691][ T27] Workqueue: ipv6_addrconf addrconf_dad_work [ 284.199645][ T27] Call Trace: [ 284.202940][ T27] [ 284.205871][ T27] __schedule+0x11c3/0x4350 [ 284.215796][ T27] ? release_firmware_map_entry+0x190/0x190 [ 284.221887][ T27] ? __lock_acquire+0x7b50/0x7b50 [ 284.226920][ T27] ? __mutex_trylock_common+0x86/0x260 [ 284.237678][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 284.243062][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 284.248273][ T27] schedule+0x11b/0x1e0 [ 284.260446][ T27] schedule_preempt_disabled+0xf/0x20 [ 284.265859][ T27] __mutex_lock_common+0xdf5/0x2400 [ 284.274451][ T27] ? addrconf_dad_work+0xc4/0x1530 [ 284.283135][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 284.288370][ T27] ? __lock_acquire+0x7b50/0x7b50 [ 284.297278][ T27] ? lock_chain_count+0x20/0x20 [ 284.305414][ T27] mutex_lock_nested+0x17/0x20 [ 284.314088][ T27] addrconf_dad_work+0xc4/0x1530 [ 284.319059][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 284.327407][ T27] ? rcu_lock_release+0x20/0x20 [ 284.335472][ T27] ? read_lock_is_recursive+0x10/0x10 [ 284.343125][ T27] ? __schedule+0x11cb/0x4350 [ 284.347816][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 284.356276][ T27] process_one_work+0x867/0xff0 [ 284.363351][ T27] ? worker_detach_from_pool+0x240/0x240 [ 284.368989][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 284.378084][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 284.385498][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 284.395352][ T27] ? wq_worker_running+0x97/0x170 [ 284.402672][ T27] worker_thread+0xad7/0x12a0 [ 284.407394][ T27] kthread+0x42e/0x520 [ 284.415915][ T27] ? rcu_lock_release+0x20/0x20 [ 284.423824][ T27] ? kthread_blkcg+0xd0/0xd0 [ 284.428546][ T27] ret_from_fork+0x1f/0x30 [ 284.436367][ T27] [ 284.441849][ T27] INFO: task dhcpcd:3851 blocked for more than 144 seconds. [ 284.452588][ T27] Not tainted syzkaller #0 [ 284.457625][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 284.468619][ T27] task:dhcpcd state:D stack:21424 pid: 3851 ppid: 3850 flags:0x00004002 [ 284.481243][ T27] Call Trace: [ 284.484540][ T27] [ 284.487589][ T27] __schedule+0x11c3/0x4350 [ 284.495433][ T27] ? __lock_acquire+0x1305/0x7b50 [ 284.503743][ T27] ? rcu_lock_acquire+0x30/0x30 [ 284.508620][ T27] ? __mutex_lock_common+0xdf0/0x2400 [ 284.517324][ T27] ? release_firmware_map_entry+0x190/0x190 [ 284.526525][ T27] ? __lock_acquire+0x7b50/0x7b50 [ 284.535417][ T27] ? __mutex_trylock_common+0x86/0x260 [ 284.543117][ T27] ? rcu_lock_release+0x20/0x20 [ 284.547985][ T27] schedule+0x11b/0x1e0 [ 284.555407][ T27] schedule_preempt_disabled+0xf/0x20 [ 284.563022][ T27] __mutex_lock_common+0xdf5/0x2400 [ 284.568336][ T27] ? rtnetlink_rcv_msg+0x7d6/0xf00 [ 284.576748][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 284.584259][ T27] ? __lock_acquire+0x7b50/0x7b50 [ 284.592651][ T27] mutex_lock_nested+0x17/0x20 [ 284.597436][ T27] rtnetlink_rcv_msg+0x7d6/0xf00 [ 284.604692][ T27] ? rtnetlink_bind+0x80/0x80 [ 284.613784][ T27] ? mark_lock+0x94/0x320 [ 284.618143][ T27] ? __lock_acquire+0x1305/0x7b50 [ 284.625707][ T27] ? verify_lock_unused+0x140/0x140 [ 284.635267][ T27] ? verify_lock_unused+0x140/0x140 [ 284.643208][ T27] ? verify_lock_unused+0x140/0x140 [ 284.648454][ T27] netlink_rcv_skb+0x1e9/0x430 [ 284.656522][ T27] ? rtnetlink_bind+0x80/0x80 [ 284.663536][ T27] ? netlink_ack+0xb10/0xb10 [ 284.668156][ T27] netlink_unicast+0x78f/0x940 [ 284.676235][ T27] netlink_sendmsg+0x8ba/0xbe0 [ 284.683290][ T27] ? netlink_getsockopt+0x570/0x570 [ 284.688506][ T27] ? aa_sock_msg_perm+0x94/0x150 [ 284.696844][ T27] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 284.704708][ T27] ? security_socket_sendmsg+0x7c/0xa0 [ 284.713444][ T27] ? netlink_getsockopt+0x570/0x570 [ 284.718666][ T27] ____sys_sendmsg+0x5be/0x8f0 [ 284.726790][ T27] ? __sys_sendmsg_sock+0x30/0x30 [ 284.735067][ T27] ? import_iovec+0x6f/0xa0 [ 284.742817][ T27] ___sys_sendmsg+0x236/0x2e0 [ 284.747517][ T27] ? __sys_sendmsg+0x290/0x290 [ 284.756430][ T27] __se_sys_sendmsg+0x1b7/0x2a0 [ 284.763498][ T27] ? __x64_sys_sendmsg+0x80/0x80 [ 284.768618][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 284.777887][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 284.785322][ T27] do_syscall_64+0x4c/0xa0 [ 284.792957][ T27] ? clear_bhb_loop+0x30/0x80 [ 284.797756][ T27] ? clear_bhb_loop+0x30/0x80 [ 284.804768][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 284.813949][ T27] RIP: 0033:0x7f29c00aa407 [ 284.818378][ T27] RSP: 002b:00007ffe6a89c9c0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 284.829091][ T27] RAX: ffffffffffffffda RBX: 00007f29c0020740 RCX: 00007f29c00aa407 [ 284.843375][ T27] RDX: 0000000000000000 RSI: 00007ffe6a8b0ba0 RDI: 0000000000000004 [ 284.854705][ T27] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 284.866513][ T27] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffe6a8c0dd0 [ 284.876724][ T27] R13: 00007f29c00206c8 R14: 0000000000000030 R15: 00007ffe6a8b0ba0 [ 284.888680][ T27] [ 284.893969][ T27] INFO: task kworker/u4:8:4294 blocked for more than 145 seconds. [ 284.905899][ T27] Not tainted syzkaller #0 [ 284.919366][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 284.928050][ T27] task:kworker/u4:8 state:D stack:25312 pid: 4294 ppid: 2 flags:0x00004000 [ 284.942547][ T27] Workqueue: events_unbound cfg80211_wiphy_work [ 284.948814][ T27] Call Trace: [ 284.954423][ T27] [ 284.957368][ T27] __schedule+0x11c3/0x4350 [ 284.967373][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 284.975154][ T27] ? lock_chain_count+0x20/0x20 [ 284.984289][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 284.991613][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 284.996852][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 285.007146][ T27] ? release_firmware_map_entry+0x190/0x190 [ 285.014277][ T27] ? __might_sleep+0xf0/0xf0 [ 285.018874][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 285.028266][ T27] ? kthread_data+0x4b/0xc0 [ 285.034020][ T27] schedule+0x11b/0x1e0 [ 285.038187][ T27] synchronize_rcu_expedited+0x680/0x750 [ 285.048113][ T27] ? synchronize_rcu+0x1e0/0x1e0 [ 285.054276][ T27] ? init_wait_entry+0xd0/0xd0 [ 285.059082][ T27] ? __might_sleep+0xf0/0xf0 [ 285.069237][ T27] ? rcu_is_watching+0x11/0xa0 [ 285.074024][ T27] ? trace_drv_return_void+0x7a/0x1c0 [ 285.088852][ T27] ? __sta_info_destroy_part1+0x7c1/0xd60 [ 285.095158][ T27] __sta_info_destroy+0x33/0x50 [ 285.105415][ T27] ieee80211_ibss_work+0x781/0x10f0 [ 285.110806][ T27] ? _raw_spin_unlock+0x40/0x40 [ 285.115689][ T27] ? mark_lock+0x94/0x320 [ 285.125318][ T27] ? ieee80211_ibss_rx_queued_mgmt+0x2b50/0x2b50 [ 285.131854][ T27] ? sched_core_update_cookie+0x153/0x2a0 [ 285.137581][ T27] ? skb_dequeue+0x120/0x150 [ 285.147524][ T27] ? ieee80211_iface_work+0x964/0xc50 [ 285.153279][ T27] ? ieee80211_iface_work+0xb69/0xc50 [ 285.158664][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 285.169214][ T27] cfg80211_wiphy_work+0x224/0x260 [ 285.174358][ T27] process_one_work+0x867/0xff0 [ 285.184648][ T27] ? worker_detach_from_pool+0x240/0x240 [ 285.193160][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 285.198474][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 285.208399][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 285.215304][ T27] ? wq_worker_running+0x97/0x170 [ 285.224639][ T27] worker_thread+0xad7/0x12a0 [ 285.229575][ T4349] Bluetooth: hci19: command 0x041b tx timeout [ 285.236834][ T27] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 285.247220][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 285.254407][ T27] kthread+0x42e/0x520 [ 285.258555][ T27] ? rcu_lock_release+0x20/0x20 [ 285.267720][ T27] ? kthread_blkcg+0xd0/0xd0 [ 285.273735][ T27] ret_from_fork+0x1f/0x30 [ 285.278207][ T27] [ 285.285705][ T27] INFO: task kworker/u4:10:4332 blocked for more than 145 seconds. [ 285.295900][ T27] Not tainted syzkaller #0 [ 285.306920][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 285.316866][ T27] task:kworker/u4:10 state:D stack:25552 pid: 4332 ppid: 2 flags:0x00004000 [ 285.330373][ T27] Workqueue: events_unbound linkwatch_event [ 285.336292][ T27] Call Trace: [ 285.342877][ T27] [ 285.345823][ T27] __schedule+0x11c3/0x4350 [ 285.352602][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 285.358601][ T27] ? lock_chain_count+0x20/0x20 [ 285.366894][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 285.375204][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 285.383652][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 285.392104][ T27] ? release_firmware_map_entry+0x190/0x190 [ 285.398019][ T27] ? queue_work_on+0x196/0x1f0 [ 285.407187][ T27] ? __might_sleep+0xf0/0xf0 [ 285.416002][ T27] ? wq_worker_last_func+0x40/0x40 [ 285.424390][ T27] ? kthread_data+0x4b/0xc0 [ 285.428917][ T27] schedule+0x11b/0x1e0 [ 285.435349][ T27] synchronize_rcu_expedited+0x5c1/0x750 [ 285.444241][ T27] ? synchronize_rcu+0x1e0/0x1e0 [ 285.451381][ T27] ? mark_lock+0x94/0x320 [ 285.455738][ T27] ? rcu_exp_sel_wait_wake+0x1d30/0x1d30 [ 285.464757][ T27] ? __local_bh_enable_ip+0x136/0x1c0 [ 285.472327][ T27] ? __might_sleep+0xf0/0xf0 [ 285.476929][ T27] ? init_wait_entry+0xd0/0xd0 [ 285.485060][ T27] dev_deactivate_many+0x5f0/0xc00 [ 285.492466][ T27] dev_deactivate+0x114/0x1b0 [ 285.497170][ T27] ? dev_reset_queue+0x130/0x130 [ 285.505404][ T27] ? lock_chain_count+0x20/0x20 [ 285.513688][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 285.518737][ T27] ? vlan_dev_get_iflink+0x17/0x70 [ 285.528813][ T27] ? rfc2863_policy+0x156/0x280 [ 285.536295][ T27] linkwatch_do_dev+0x105/0x160 [ 285.544387][ T27] __linkwatch_run_queue+0x4b1/0x7c0 [ 285.551896][ T27] ? linkwatch_run_queue+0x10/0x10 [ 285.557024][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 285.565616][ T27] linkwatch_event+0x48/0x50 [ 285.572428][ T27] process_one_work+0x867/0xff0 [ 285.577302][ T27] ? worker_detach_from_pool+0x240/0x240 [ 285.586308][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 285.593913][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 285.598954][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 285.607803][ T27] ? wq_worker_running+0x97/0x170 [ 285.615327][ T27] worker_thread+0xad7/0x12a0 [ 285.624385][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 285.634192][ T27] kthread+0x42e/0x520 [ 285.638280][ T27] ? rcu_lock_release+0x20/0x20 [ 285.646437][ T27] ? kthread_blkcg+0xd0/0xd0 [ 285.653275][ T27] ret_from_fork+0x1f/0x30 [ 285.657714][ T27] [ 285.664025][ T27] INFO: task syz-executor:4626 blocked for more than 145 seconds. [ 285.674074][ T27] Not tainted syzkaller #0 [ 285.679010][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 285.691139][ T27] task:syz-executor state:D stack:21904 pid: 4626 ppid: 1 flags:0x00004004 [ 285.704030][ T27] Call Trace: [ 285.707321][ T27] [ 285.713710][ T27] __schedule+0x11c3/0x4350 [ 285.718447][ T27] ? __lock_acquire+0x1305/0x7b50 [ 285.726799][ T27] ? rcu_lock_acquire+0x30/0x30 [ 285.735164][ T27] ? __mutex_lock_common+0xdf0/0x2400 [ 285.745694][ T27] ? release_firmware_map_entry+0x190/0x190 [ 285.753854][ T27] ? __lock_acquire+0x7b50/0x7b50 [ 285.758897][ T27] ? __mutex_trylock_common+0x86/0x260 [ 285.767704][ T27] ? rcu_lock_release+0x20/0x20 [ 285.774820][ T27] schedule+0x11b/0x1e0 [ 285.779027][ T27] schedule_preempt_disabled+0xf/0x20 [ 285.787748][ T27] __mutex_lock_common+0xdf5/0x2400 [ 285.795424][ T27] ? rtnetlink_rcv_msg+0x7d6/0xf00 [ 285.803917][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 285.811369][ T27] ? __lock_acquire+0x7b50/0x7b50 [ 285.816515][ T27] mutex_lock_nested+0x17/0x20 [ 285.824737][ T27] rtnetlink_rcv_msg+0x7d6/0xf00 [ 285.831928][ T27] ? rtnetlink_bind+0x80/0x80 [ 285.836637][ T27] ? __local_bh_enable_ip+0x136/0x1c0 [ 285.846375][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 285.855555][ T27] ? __local_bh_enable_ip+0x136/0x1c0 [ 285.864530][ T27] ? _local_bh_enable+0xa0/0xa0 [ 285.873596][ T27] ? __dev_queue_xmit+0x1b64/0x2e50 [ 285.878840][ T27] ? dev_queue_xmit+0x20/0x20 [ 285.886807][ T27] ? memcpy+0x3c/0x60 [ 285.893044][ T27] ? __copy_skb_header+0x3ba/0x4f0 [ 285.898175][ T27] netlink_rcv_skb+0x1e9/0x430 [ 285.906487][ T27] ? rtnetlink_bind+0x80/0x80 [ 285.913554][ T27] ? netlink_ack+0xb10/0xb10 [ 285.918274][ T27] netlink_unicast+0x78f/0x940 [ 285.926500][ T27] netlink_sendmsg+0x8ba/0xbe0 [ 285.933490][ T27] ? netlink_getsockopt+0x570/0x570 [ 285.938709][ T27] ? aa_sock_msg_perm+0x94/0x150 [ 285.946978][ T27] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 285.962118][ T27] ? security_socket_sendmsg+0x7c/0xa0 [ 285.967618][ T27] __sys_sendto+0x46d/0x620 [ 285.977094][ T27] ? __ia32_sys_getpeername+0x80/0x80 [ 285.984776][ T27] ? lock_chain_count+0x20/0x20 [ 285.992918][ T27] __x64_sys_sendto+0xda/0xf0 [ 285.997612][ T27] do_syscall_64+0x4c/0xa0 [ 286.004285][ T27] ? clear_bhb_loop+0x30/0x80 [ 286.008971][ T27] ? clear_bhb_loop+0x30/0x80 [ 286.017047][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 286.025272][ T27] RIP: 0033:0x7f75d890268e [ 286.033016][ T27] RSP: 002b:00007ffd656738a8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 286.043977][ T27] RAX: ffffffffffffffda RBX: 0000555569459500 RCX: 00007f75d890268e [ 286.055428][ T27] RDX: 0000000000000040 RSI: 00007f75d96f8670 RDI: 0000000000000003 [ 286.065659][ T27] RBP: 0000000000000001 R08: 00007ffd65673924 R09: 000000000000000c [ 286.078083][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 286.090267][ T27] R13: 0000000000000000 R14: 00007f75d96f8670 R15: 0000000000000000 [ 286.098272][ T27] [ 286.106622][ T27] INFO: task syz.4.125:4818 blocked for more than 146 seconds. [ 286.114392][ T27] Not tainted syzkaller #0 [ 286.124857][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.133761][ T27] task:syz.4.125 state:D stack:22640 pid: 4818 ppid: 4187 flags:0x00004006 [ 286.148433][ T27] Call Trace: [ 286.151904][ T27] [ 286.154840][ T27] __schedule+0x11c3/0x4350 [ 286.164646][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 286.170819][ T27] ? lock_chain_count+0x20/0x20 [ 286.175684][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 286.188016][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 286.193409][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 286.206595][ T27] ? release_firmware_map_entry+0x190/0x190 [ 286.213047][ T27] ? __might_sleep+0xf0/0xf0 [ 286.217646][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 286.228242][ T27] schedule+0x11b/0x1e0 [ 286.232610][ T27] synchronize_rcu_expedited+0x680/0x750 [ 286.238375][ T27] ? synchronize_rcu+0x1e0/0x1e0 [ 286.248755][ T27] ? init_wait_entry+0xd0/0xd0 [ 286.253742][ T27] ? __se_sys_sendmsg+0x1b7/0x2a0 [ 286.258771][ T27] ? do_syscall_64+0x4c/0xa0 [ 286.268855][ T27] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 286.275192][ T27] ? release_firmware_map_entry+0x190/0x190 [ 286.286535][ T27] ? __kasan_kmalloc+0xc6/0xe0 [ 286.292579][ T27] ? __kasan_kmalloc+0xaf/0xe0 [ 286.297371][ T27] ? hash_ipmark4_resize+0x954/0x1830 [ 286.308154][ T27] ? nfnetlink_rcv_msg+0xbf7/0x1180 [ 286.315222][ T27] ? netlink_rcv_skb+0x1e9/0x430 [ 286.325408][ T27] ? netlink_unicast+0x78f/0x940 [ 286.330646][ T27] ? preempt_schedule+0xbc/0xd0 [ 286.335511][ T27] synchronize_rcu+0x119/0x1e0 [ 286.345719][ T27] ? kvfree_call_rcu+0x7f0/0x7f0 [ 286.352102][ T27] ? preempt_schedule_thunk+0x16/0x18 [ 286.357586][ T27] ? __local_bh_enable_ip+0x147/0x1c0 [ 286.368483][ T27] ? _local_bh_enable+0xa0/0xa0 [ 286.373783][ T27] hash_ipmark4_resize+0x1302/0x1830 [ 286.384541][ T27] call_ad+0x437/0x9a0 [ 286.388663][ T27] ? ip_set_ad+0x9c0/0x9c0 [ 286.393393][ T27] ? __nla_parse+0x3c/0x50 [ 286.397831][ T27] ip_set_ad+0x816/0x9c0 [ 286.408720][ T27] ? ip_set_dump_done+0x1d0/0x1d0 [ 286.414737][ T27] ? nfnetlink_rcv_msg+0xbcf/0x1180 [ 286.426905][ T27] nfnetlink_rcv_msg+0xbf7/0x1180 [ 286.432387][ T27] ? nfnetlink_bind+0x280/0x280 [ 286.437288][ T27] netlink_rcv_skb+0x1e9/0x430 [ 286.447556][ T27] ? nfnetlink_bind+0x280/0x280 [ 286.452660][ T27] ? netlink_ack+0xb10/0xb10 [ 286.457278][ T27] ? bpf_lsm_capable+0x5/0x10 [ 286.467631][ T27] ? security_capable+0x85/0xb0 [ 286.472773][ T27] nfnetlink_rcv+0x2b4/0x2450 [ 286.477473][ T27] ? lock_chain_count+0x20/0x20 [ 286.487742][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 286.493938][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 286.504419][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 286.511753][ T27] ? _raw_spin_unlock+0x40/0x40 [ 286.516629][ T27] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 286.527504][ T27] ? rcu_preempt_deferred_qs_irqrestore+0x82d/0xbd0 [ 286.536106][ T27] ? sync_rcu_exp_done_unlocked+0x140/0x140 [ 286.547690][ T27] ? __copy_skb_header+0x3ba/0x4f0 [ 286.553005][ T27] ? rcu_read_unlock_special+0xf0/0x4a0 [ 286.558564][ T27] ? skb_clone+0x1f1/0x350 [ 286.568481][ T27] ? rcu_lock_release+0x5/0x20 [ 286.573450][ T27] ? __lock_acquire+0x7b50/0x7b50 [ 286.578484][ T27] ? __rcu_read_unlock+0x78/0xd0 [ 286.588819][ T27] netlink_unicast+0x78f/0x940 [ 286.596188][ T27] netlink_sendmsg+0x8ba/0xbe0 [ 286.606256][ T27] ? netlink_getsockopt+0x570/0x570 [ 286.611631][ T27] ? aa_sock_msg_perm+0x94/0x150 [ 286.616574][ T27] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 286.628322][ T27] ? security_socket_sendmsg+0x7c/0xa0 [ 286.634040][ T27] ? netlink_getsockopt+0x570/0x570 [ 286.646527][ T27] ____sys_sendmsg+0x5be/0x8f0 [ 286.651538][ T27] ? __sys_sendmsg_sock+0x30/0x30 [ 286.656580][ T27] ? import_iovec+0x6f/0xa0 [ 286.666628][ T27] ___sys_sendmsg+0x236/0x2e0 [ 286.671523][ T27] ? __sys_sendmsg+0x290/0x290 [ 286.676327][ T27] __se_sys_sendmsg+0x1b7/0x2a0 [ 286.686544][ T27] ? __x64_sys_sendmsg+0x80/0x80 [ 286.691700][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 286.697704][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 286.708421][ T27] do_syscall_64+0x4c/0xa0 [ 286.713100][ T27] ? clear_bhb_loop+0x30/0x80 [ 286.717782][ T27] ? clear_bhb_loop+0x30/0x80 [ 286.728031][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 286.735282][ T27] RIP: 0033:0x7f2bd8d44e59 [ 286.745414][ T27] RSP: 002b:00007f2bd6f9d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.755636][ T27] RAX: ffffffffffffffda RBX: 00007f2bd8fccfa0 RCX: 00007f2bd8d44e59 [ 286.769154][ T27] RDX: 00000000040c0080 RSI: 00002000000002c0 RDI: 0000000000000005 [ 286.777422][ T27] RBP: 00007f2bd8ddae6f R08: 0000000000000000 R09: 0000000000000000 [ 286.789990][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.798002][ T27] R13: 00007f2bd8fcd038 R14: 00007f2bd8fccfa0 R15: 00007ffd49a21c08 [ 286.810445][ T27] [ 286.813507][ T27] INFO: task syz.3.144:4902 blocked for more than 147 seconds. [ 286.824374][ T27] Not tainted syzkaller #0 [ 286.831545][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.844734][ T27] task:syz.3.144 state:D stack:27440 pid: 4902 ppid: 4197 flags:0x00004004 [ 286.856292][ T27] Call Trace: [ 286.864495][ T27] [ 286.867450][ T27] __schedule+0x11c3/0x4350 [ 286.874616][ T27] ? rcu_lock_acquire+0x30/0x30 [ 286.882769][ T27] ? __mutex_lock_common+0xdf0/0x2400 [ 286.888160][ T27] ? release_firmware_map_entry+0x190/0x190 [ 286.896467][ T27] ? __lock_acquire+0x7b50/0x7b50 [ 286.904729][ T27] ? __mutex_trylock_common+0x86/0x260 [ 286.916680][ T27] ? rcu_lock_release+0x20/0x20 [ 286.925091][ T27] schedule+0x11b/0x1e0 [ 286.931483][ T27] schedule_preempt_disabled+0xf/0x20 [ 286.936866][ T27] __mutex_lock_common+0xdf5/0x2400 [ 286.945464][ T27] ? synchronize_rcu_expedited+0x3a5/0x750 [ 286.954541][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 286.963009][ T27] ? __rwlock_init+0x140/0x140 [ 286.967798][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 286.976941][ T27] mutex_lock_nested+0x17/0x20 [ 286.985387][ T27] synchronize_rcu_expedited+0x3a5/0x750 [ 286.999315][ T27] ? synchronize_rcu+0x1e0/0x1e0 [ 287.004300][ T27] ? packet_release+0x94f/0xc40 [ 287.014419][ T27] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 287.020287][ T27] ? __might_sleep+0xf0/0xf0 [ 287.024892][ T27] ? __local_bh_enable_ip+0x136/0x1c0 [ 287.035635][ T27] ? __local_bh_enable_ip+0x136/0x1c0 [ 287.041212][ T27] ? _local_bh_enable+0xa0/0xa0 [ 287.046205][ T27] packet_release+0x954/0xc40 [ 287.056228][ T27] sock_close+0xbf/0x210 [ 287.061806][ T27] ? sock_mmap+0x90/0x90 [ 287.066060][ T27] __fput+0x212/0x8c0 [ 287.075653][ T27] task_work_run+0x125/0x1a0 [ 287.082080][ T27] exit_to_user_mode_loop+0x10f/0x130 [ 287.087466][ T27] exit_to_user_mode_prepare+0xee/0x180 [ 287.098368][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 287.104044][ T27] do_syscall_64+0x58/0xa0 [ 287.108461][ T27] ? clear_bhb_loop+0x30/0x80 [ 287.118481][ T27] ? clear_bhb_loop+0x30/0x80 [ 287.123353][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 287.134626][ T27] RIP: 0033:0x7fdee5d4fe59 [ 287.139305][ T27] RSP: 002b:00007ffd7c64f228 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 287.147723][ T27] RAX: 0000000000000000 RBX: 00007fdee5fd9da0 RCX: 00007fdee5d4fe59 [ 287.161324][ T27] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 287.172813][ T27] RBP: 00007fdee5fd9da0 R08: 0000000000000006 R09: 0000000000000000 [ 287.184111][ T27] R10: 00007fdee5fd9cb0 R11: 0000000000000246 R12: 000000000001de62 [ 287.196028][ T27] R13: 00007fdee5fd809c R14: 000000000001dc65 R15: 00007ffd7c64f330 [ 287.207669][ T27] [ 287.212958][ T27] [ 287.212958][ T27] Showing all locks held in the system: [ 287.224009][ T27] 4 locks held by kworker/u4:0/9: [ 287.231611][ T27] #0: ffff888016dcd938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 287.245160][ T27] #1: ffffc90000ce7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 287.257440][ T27] #2: ffffffff8d43f210 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x148/0xba0 [ 287.270333][ T27] #3: ffffffff8d44b148 (rtnl_mutex){+.+.}-{3:3}, at: cangw_pernet_exit+0xe/0x20 [ 287.283863][ T27] 3 locks held by kworker/1:1/23: [ 287.288905][ T27] #0: ffff888016c71938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 287.307719][ T27] #1: ffffc90000ddfd00 ((crda_timeout).work){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 287.318110][ T4202] Bluetooth: hci19: command 0x040f tx timeout [ 287.329460][ T27] #2: ffffffff8d44b148 (rtnl_mutex){+.+.}-{3:3}, at: crda_timeout_work+0x11/0x50 [ 287.338713][ T27] 1 lock held by khungtaskd/27: [ 287.348006][ T27] #0: ffffffff8c31ef20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 287.358666][ T27] 5 locks held by kworker/u4:1/144: [ 287.368103][ T27] #0: ffff888016c79138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 287.384551][ T27] #1: ffffc900016afd00 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 287.402283][ T27] #2: ffff88802c3b0688 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: cfg80211_wiphy_work+0x31/0x260 [ 287.419557][ T27] #3: ffff88805f204d40 (&wdev->mtx){+.+.}-{3:3}, at: ieee80211_ibss_work+0xa8/0x10f0 [ 287.434775][ T27] #4: ffff88802c3b1810 (&local->sta_mtx){+.+.}-{3:3}, at: ieee80211_ibss_work+0x572/0x10f0 [ 287.445089][ T27] 5 locks held by kworker/u4:2/154: [ 287.455825][ T27] #0: ffff888016c79138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 287.467016][ T27] #1: ffffc90001fc7d00 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 287.483879][ T27] #2: ffff88802b390688 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: cfg80211_wiphy_work+0x31/0x260 [ 287.494138][ T27] #3: ffff88805f0a4d40 (&wdev->mtx){+.+.}-{3:3}, at: ieee80211_ibss_work+0xa8/0x10f0 [ 287.508969][ T27] #4: ffff88802b391810 (&local->sta_mtx){+.+.}-{3:3}, at: ieee80211_ibss_work+0x572/0x10f0 [ 287.526262][ T27] 5 locks held by kworker/u4:3/893: [ 287.532996][ T27] #0: ffff888016c79138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 287.549402][ T27] #1: ffffc9000457fd00 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 287.565361][ T27] #2: ffff888025d78688 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: cfg80211_wiphy_work+0x31/0x260 [ 287.576653][ T27] #3: ffff88805f08cd40 (&wdev->mtx){+.+.}-{3:3}, at: ieee80211_ibss_work+0xa8/0x10f0 [ 287.590544][ T27] #4: ffff888025d79810 (&local->sta_mtx){+.+.}-{3:3}, at: ieee80211_ibss_work+0x572/0x10f0 [ 287.603911][ T27] 3 locks held by kworker/1:2/3518: [ 287.611434][ T27] #0: ffff88802b58f538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 287.625582][ T27] #1: ffffc9000e257d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 287.641705][ T27] #2: ffffffff8d44b148 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xc4/0x1530 [ 287.655595][ T27] 1 lock held by dhcpcd/3851: [ 287.662673][ T27] #0: ffffffff8d44b148 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7d6/0xf00 [ 287.675436][ T27] 2 locks held by getty/3947: [ 287.682378][ T27] #0: ffff88814ca03098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 287.695596][ T27] #1: ffffc90002cf62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x594/0x1a50 [ 287.708031][ T27] 4 locks held by kworker/0:7/4262: [ 287.716462][ T27] 5 locks held by kworker/u4:8/4294: [ 287.723960][ T27] #0: ffff888016c79138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 287.738220][ T27] #1: ffffc900032dfd00 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 287.757060][ T27] #2: ffff88802b3c8688 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: cfg80211_wiphy_work+0x31/0x260 [ 287.768760][ T27] #3: ffff88805f780d40 (&wdev->mtx){+.+.}-{3:3}, at: ieee80211_ibss_work+0xa8/0x10f0 [ 287.783886][ T27] #4: ffff88802b3c9810 (&local->sta_mtx){+.+.}-{3:3}, at: ieee80211_ibss_work+0x572/0x10f0 [ 287.794304][ T27] 4 locks held by kworker/u4:10/4332: [ 287.805031][ T27] #0: ffff888016c79138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 287.816337][ T27] #1: ffffc9000448fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 287.831961][ T27] #2: ffffffff8d44b148 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 [ 287.843216][ T27] #3: ffffffff8c3239a8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2d1/0x750 [ 287.857386][ T27] 3 locks held by kworker/1:13/4353: [ 287.866740][ T27] #0: ffff888016c71938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 287.883228][ T27] #1: ffffc9000458fd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 287.895954][ T27] #2: ffffffff8d44b148 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x82/0xa90 [ 287.908823][ T27] 1 lock held by syz-executor/4626: [ 287.916270][ T27] #0: ffffffff8d44b148 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7d6/0xf00 [ 287.929010][ T27] 1 lock held by syz.4.125/4818: [ 287.933956][ T27] #0: ffffffff966b3918 (nfnl_subsys_ipset){+.+.}-{3:3}, at: call_ad+0x284/0x9a0 [ 287.948723][ T27] 2 locks held by syz.3.144/4902: [ 287.955798][ T27] #0: ffff8880747a2c10 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x82/0x210 [ 287.971629][ T27] #1: ffffffff8c3239a8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3a5/0x750 [ 287.986436][ T27] 1 lock held by syz.3.144/4904: [ 287.995706][ T27] #0: ffffffff8d44b148 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7d6/0xf00 [ 288.007414][ T27] 1 lock held by syz.3.144/4905: [ 288.015587][ T27] #0: ffffffff8d44b148 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7d6/0xf00 [ 288.027261][ T27] 1 lock held by syz.0.145/4914: [ 288.041985][ T27] #0: ffffffff8d44b148 (rtnl_mutex){+.+.}-{3:3}, at: ip6_mroute_setsockopt+0xa61/0x1380 [ 288.054653][ T27] 1 lock held by syz-executor/4917: [ 288.063076][ T27] #0: ffffffff8d44b148 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7d6/0xf00 [ 288.074830][ T27] 1 lock held by syz-executor/4923: [ 288.083331][ T27] #0: ffffffff8d44b148 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7d6/0xf00 [ 288.096728][ T27] 1 lock held by syz-executor/4928: [ 288.106349][ T27] #0: ffffffff8d44b148 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7d6/0xf00 [ 288.118066][ T27] 1 lock held by syz-executor/4931: [ 288.126494][ T27] #0: ffffffff8d44b148 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7d6/0xf00 [ 288.138193][ T27] 1 lock held by syz-executor/4934: [ 288.146618][ T27] #0: ffffffff8d44b148 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7d6/0xf00 [ 288.158291][ T27] 1 lock held by syz-executor/4939: [ 288.166714][ T27] #0: ffffffff8d44b148 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7d6/0xf00 [ 288.178556][ T27] 1 lock held by syz-executor/4945: [ 288.187083][ T27] #0: ffffffff8d44b148 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7d6/0xf00 [ 288.198751][ T27] 1 lock held by syz-executor/4951: [ 288.208843][ T27] #0: ffffffff8d44b148 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7d6/0xf00 [ 288.225027][ T27] 1 lock held by syz-executor/4953: [ 288.230460][ T27] #0: ffffffff8d44b148 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7d6/0xf00 [ 288.245232][ T27] 1 lock held by syz-executor/4956: [ 288.250758][ T27] #0: ffffffff8d44b148 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7d6/0xf00 [ 288.265392][ T27] 1 lock held by syz-executor/4962: [ 288.270775][ T27] #0: ffffffff8d44b148 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7d6/0xf00 [ 288.285882][ T27] 1 lock held by syz-executor/4968: [ 288.291343][ T27] #0: ffffffff8d44b148 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7d6/0xf00 [ 288.306180][ T27] 1 lock held by syz-executor/4973: [ 288.313234][ T27] #0: ffffffff8d44b148 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7d6/0xf00 [ 288.328086][ T27] 1 lock held by syz-executor/4975: [ 288.334609][ T27] #0: ffffffff8d44b148 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7d6/0xf00 [ 288.349692][ T27] 1 lock held by syz-executor/4978: [ 288.354908][ T27] #0: ffffffff8d44b148 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7d6/0xf00 [ 288.368889][ T27] [ 288.372606][ T27] ============================================= [ 288.372606][ T27] [ 288.385502][ T27] NMI backtrace for cpu 1 [ 288.389849][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 288.397044][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 288.407102][ T27] Call Trace: [ 288.410381][ T27] [ 288.413481][ T27] dump_stack_lvl+0x188/0x250 [ 288.418165][ T27] ? show_regs_print_info+0x20/0x20 [ 288.423367][ T27] ? load_image+0x410/0x410 [ 288.427870][ T27] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 288.433332][ T27] ? nmi_cpu_backtrace+0x1b2/0x3d0 [ 288.438447][ T27] nmi_cpu_backtrace+0x3a2/0x3d0 [ 288.443383][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 288.449542][ T27] ? _printk+0xda/0x130 [ 288.453701][ T27] ? load_image+0x410/0x410 [ 288.458218][ T27] ? load_image+0x410/0x410 [ 288.462993][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 288.469067][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 288.475054][ T27] watchdog+0xe1b/0xe60 [ 288.479216][ T27] kthread+0x42e/0x520 [ 288.483279][ T27] ? hungtask_pm_notify+0x40/0x40 [ 288.488303][ T27] ? kthread_blkcg+0xd0/0xd0 [ 288.492892][ T27] ret_from_fork+0x1f/0x30 [ 288.497318][ T27] [ 288.500718][ T27] Sending NMI from CPU 1 to CPUs 0: [ 288.505933][ C0] NMI backtrace for cpu 0 [ 288.505942][ C0] CPU: 0 PID: 4262 Comm: kworker/0:7 Not tainted syzkaller #0 [ 288.505956][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 288.505965][ C0] Workqueue: events p9_poll_workfn [ 288.505981][ C0] RIP: 0010:__lock_acquire+0xd9f/0x7b50 [ 288.506000][ C0] Code: 00 e8 25 a4 00 00 31 db 85 c0 0f 84 54 02 00 00 48 c7 c0 80 ff 2e 96 48 c1 e8 03 49 b8 00 00 00 00 00 fc ff df 42 0f b6 04 00 <84> c0 0f 85 6b 5a 00 00 83 3d 82 14 d2 14 00 48 8b 4c 24 58 75 3d [ 288.506017][ C0] RSP: 0018:ffffc9000317f7e0 EFLAGS: 00000806 [ 288.506028][ C0] RAX: 0000000000000004 RBX: 0000000000000000 RCX: ffffffff815d8f84 [ 288.506037][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff901e9248 [ 288.506046][ C0] RBP: ffffc9000317fa10 R08: dffffc0000000000 R09: 1ffffffff203d249 [ 288.506056][ C0] R10: dffffc0000000000 R11: fffffbfff203d24a R12: ffff88802aaa0b60 [ 288.506066][ C0] R13: ffff88802aaa0000 R14: 0000000000000002 R15: ffff88802aaa0b40 [ 288.506075][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 288.506086][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 288.506096][ C0] CR2: 0000564f93953a38 CR3: 000000007e143000 CR4: 00000000003506f0 [ 288.506108][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 288.506115][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 288.506123][ C0] Call Trace: [ 288.506128][ C0] [ 288.506134][ C0] ? verify_lock_unused+0x140/0x140 [ 288.506152][ C0] ? verify_lock_unused+0x140/0x140 [ 288.506169][ C0] ? verify_lock_unused+0x140/0x140 [ 288.506187][ C0] ? dma_buf_poll+0x84f/0x990 [ 288.506202][ C0] ? __lock_acquire+0x7b50/0x7b50 [ 288.506216][ C0] ? mark_lock+0x94/0x320 [ 288.506229][ C0] lock_acquire+0x19e/0x400 [ 288.506243][ C0] ? p9_poll_workfn+0x4a0/0x5a0 [ 288.506256][ C0] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 288.506273][ C0] ? read_lock_is_recursive+0x10/0x10 [ 288.506288][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 288.506303][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 288.506318][ C0] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 288.506333][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 288.506347][ C0] _raw_spin_lock_irqsave+0xb0/0x100 [ 288.506362][ C0] ? p9_poll_workfn+0x4a0/0x5a0 [ 288.506373][ C0] ? _raw_spin_lock+0x40/0x40 [ 288.506387][ C0] ? dma_buf_poll+0x84f/0x990 [ 288.506401][ C0] ? dma_buf_llseek+0xf0/0xf0 [ 288.506415][ C0] p9_poll_workfn+0x4a0/0x5a0 [ 288.506428][ C0] process_one_work+0x867/0xff0 [ 288.506446][ C0] ? worker_detach_from_pool+0x240/0x240 [ 288.506460][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 288.506474][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 288.506488][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 288.506503][ C0] ? wq_worker_running+0x97/0x170 [ 288.506516][ C0] worker_thread+0xad7/0x12a0 [ 288.506537][ C0] kthread+0x42e/0x520 [ 288.506555][ C0] ? rcu_lock_release+0x20/0x20 [ 288.506567][ C0] ? kthread_blkcg+0xd0/0xd0 [ 288.506580][ C0] ret_from_fork+0x1f/0x30 [ 288.506597][ C0] [ 288.688991][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 288.817244][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 288.824420][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 288.834452][ T27] Call Trace: [ 288.837712][ T27] [ 288.840635][ T27] dump_stack_lvl+0x188/0x250 [ 288.845326][ T27] ? show_regs_print_info+0x20/0x20 [ 288.850526][ T27] ? load_image+0x410/0x410 [ 288.855015][ T27] panic+0x2f8/0x850 [ 288.858885][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 288.864501][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 288.868989][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 288.874521][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 288.880653][ T27] watchdog+0xe5a/0xe60 [ 288.884791][ T27] kthread+0x42e/0x520 [ 288.888839][ T27] ? hungtask_pm_notify+0x40/0x40 [ 288.893866][ T27] ? kthread_blkcg+0xd0/0xd0 [ 288.898442][ T27] ret_from_fork+0x1f/0x30 [ 288.902844][ T27] [ 288.905963][ T27] Kernel Offset: disabled [ 288.910280][ T27] Rebooting in 86400 seconds..