last executing test programs: 8m12.354258921s ago: executing program 1 (id=1716): r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) openat$fb0(0xffffff9c, 0x0, 0x109282, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) sendmsg$alg(r3, 0x0, 0x40) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) setsockopt$inet6_group_source_req(r3, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x4000040) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r7, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000002700)={0x119f, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0xf9}, {&(0x7f00000015c0)=""/4096, 0x400400}, {&(0x7f0000002a00)=""/88, 0x8}], 0x0}, 0x20) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) shmget(0x1, 0xc000, 0xa30, &(0x7f0000ff2000/0xc000)=nil) 8m6.187269806s ago: executing program 1 (id=1726): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r1, 0x7ac, &(0x7f0000000640)={0x0, 0x0, 0x9}) r2 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x1000) shmdt(r2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4040) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x2008080, &(0x7f00000000c0)={[{@quota}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) lstat(&(0x7f0000000200)='./file1\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETQUOTA(r3, 0xffffffff80000701, r4, 0x0) r5 = syz_open_dev$video(0x0, 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r5, 0xc0205647, &(0x7f00000001c0)={0xf020000, 0x1, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980913, 0x0, '\x00', @p_u8=0x0}}) 8m3.774293839s ago: executing program 1 (id=1734): r0 = open(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0xffc, 0xb95a, {0x0}, {0xee01}, 0x5, 0x2}) getgroups(0x2, &(0x7f0000000180)=[0x0, 0xee00]) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2020, &(0x7f0000000680)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100,usez_id=', @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=r3, @ANYBLOB="2c626c6b73697a653d3078303030303030303030303030313030302c616c6c6f775f6f746865722c616c6c6f775f6f746865722c64656661756c745f7065726d697373696f6e732c626c6b73697a653d3078303030303030303030303030313030302c64656661756c745f7065726d697373696f6e732c6d61785f726561643d3078303030303030303030303030303030322c616c6c6f775f6f746865722c7375626a5f747970653d2c726f6f74636f6e746578743d726f6f742c736d61636b66736861743d2d215cb32c61707072616973655f747970653d696d617369672c657569643d", @ANYRESDEC=r4, @ANYBLOB=',subj_type=\x00,fsuuid=a894a57\x00-4bI5-4f41-c1e2-f428b4f3,\x00']) io_uring_setup(0x4d8b, &(0x7f0000000380)={0x0, 0x1ed4, 0x2, 0x3ffc, 0x1e3, 0x0, r0}) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) prlimit64(r1, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) setrlimit(0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x100, 0x4, 0x1b0}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r7, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0x700}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r6, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}}) io_uring_enter(r7, 0x3517, 0x173d, 0x42, 0x0, 0x0) r10 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r10, 0x7a7, &(0x7f0000000040)=0x90000) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r11, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) fadvise64(r11, 0x0, 0x8000, 0x4) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000340)={@my=0x0, 0x2}) r12 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r12, 0x8905, &(0x7f0000000280)) 8m0.233607104s ago: executing program 1 (id=1739): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) syz_80211_inject_frame(0x0, 0x0, 0xb5) socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = syz_open_dev$sg(&(0x7f0000000a80), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2275, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x6c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x4, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}]}}]}, 0x6c}}, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_blocks={{0x48, 0x15}, {0x8001, 0x3, [{0xc8, 0x4, 0x40}, {0xc9, 0x27, 0x1}, {0xc8, 0x40, 0x7140}]}}}, 0x18) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0xcc, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xa0, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0xfff, 0x4, 0x401, 0x6}, {0x8, 0x7, 0x1008, 0x5}, {0xfffffff9, 0x43, 0x7ffd, 0x6}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0xb, 0x2, 0x42}, {0x6, 0x4, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800004, 0xa525}]}}, @TCA_U32_LINK={0x6, 0x3, 0x1}]}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x40) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000040)=""/59, 0x110000, 0x800, 0xfffffffe}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 7m56.979847012s ago: executing program 1 (id=1744): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r1, 0x7ac, &(0x7f0000000640)={0x0, 0x0, 0x9}) r2 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x1000) shmdt(r2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4040) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x2008080, &(0x7f00000000c0)={[{@quota}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) lstat(&(0x7f0000000200)='./file1\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETQUOTA(r3, 0xffffffff80000701, r4, 0x0) r5 = syz_open_dev$video(0x0, 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r5, 0xc0205647, &(0x7f00000001c0)={0xf020000, 0x1, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980913, 0x0, '\x00', @p_u8=0x0}}) 7m56.246342475s ago: executing program 1 (id=1747): syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000040)={&(0x7f00006c6000/0x400000)=nil, &(0x7f0000685000/0x4000)=nil, 0x400000, 0x0, 0x18100}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e21, 0x5, @mcast2, 0x16c2}}}, &(0x7f0000000180)=0x84) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) setresuid(0x0, 0xffffffffffffffff, 0xee00) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) setreuid(0x0, r9) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0, 0xffffffffffffff1e}], 0x1, 0x56, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f00000001c0)={r5, 0xfff}, 0x8) 7m41.003357743s ago: executing program 32 (id=1747): syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000040)={&(0x7f00006c6000/0x400000)=nil, &(0x7f0000685000/0x4000)=nil, 0x400000, 0x0, 0x18100}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e21, 0x5, @mcast2, 0x16c2}}}, &(0x7f0000000180)=0x84) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) setresuid(0x0, 0xffffffffffffffff, 0xee00) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) setreuid(0x0, r9) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0, 0xffffffffffffff1e}], 0x1, 0x56, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f00000001c0)={r5, 0xfff}, 0x8) 1m24.306414905s ago: executing program 4 (id=3341): connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_io_uring_setup(0xec8, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}) 1m24.244536982s ago: executing program 4 (id=3344): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x1, 0x0, 0x1}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x2810}, 0x2400c850) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m24.07028394s ago: executing program 4 (id=3347): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xc}, {0xfff2}, {0xfff1, 0x3d}}}, 0x24}}, 0x0) 1m23.974346165s ago: executing program 4 (id=3349): mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x182) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) move_mount(r0, &(0x7f0000000080)='./file0/file0\x00', r0, &(0x7f0000000040)='./file0/../file0\x00', 0x0) 1m23.935782035s ago: executing program 4 (id=3350): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x11) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0xffffffff80620004, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) lgetxattr(&(0x7f0000000d00)='./file0\x00', &(0x7f0000001100)=@known='system.posix_acl_access\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000004340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0xffffffffffffffda, r2}, 0x10) 1m23.588869614s ago: executing program 4 (id=3354): r0 = socket(0x40000000015, 0x5, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m23.323764186s ago: executing program 33 (id=3354): r0 = socket(0x40000000015, 0x5, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m22.521864039s ago: executing program 5 (id=3267): syz_open_dev$vbi(&(0x7f0000000440), 0x2, 0x2) socket$packet(0x11, 0x3, 0x300) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000280)={0x0, 0xec27, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) 1m12.629776866s ago: executing program 3 (id=3403): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000000)={0x0, 0x8}, 0x8) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=@newtaction={0x90, 0x30, 0x48b, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_ctinfo={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_simple={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x6f8, 0x2, 0x0, 0x6, 0x1ff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x90}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x6, 0x0, 0x39, @dev={0x12, 0x80, '\x00', 0xfe}, @mcast2={0xff, 0x3}, 0x2000, 0xba08}}) rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) chdir(&(0x7f0000000100)='./file0\x00') utimensat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) r7 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, 0x0, &(0x7f00000007c0)='{\xe0e%m\"\x92\xb5\xcb\x00\x01\x0e!5\xd8\xf2\x92\x97\x86\xf9\xa8\xe7;\xdff3\x83\xb1a\xf2j\t\x7f??,\xd9\xe28\xae\xd6>\xbaN\x1d_N\xcbdIP2$\xbc\xc9\x89\xb5\n\x90-i%\xe2\x94\fH\xf1\xed\r\b\x1c\x81>\t\xc30-\xe2\xb3\xb00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) connect$pppl2tp(r3, &(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0xffffffff, 0x2, 0x1, 0x4, {0xa, 0x6e22, 0xfffffffc, @mcast1, 0xae}}}, 0x3a) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_open_pts(0xffffffffffffffff, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) 1m11.16102169s ago: executing program 3 (id=3411): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xcc90, 0x400, 0x10003, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3513, 0x217, 0xa1, 0x0, 0x0) close(r0) 1m10.095827282s ago: executing program 3 (id=3416): mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYRESHEX]) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 1m9.942792946s ago: executing program 3 (id=3418): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001180)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="02"], 0x10) 1m7.83819052s ago: executing program 5 (id=3267): syz_open_dev$vbi(&(0x7f0000000440), 0x2, 0x2) socket$packet(0x11, 0x3, 0x300) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000280)={0x0, 0xec27, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) 59.600195118s ago: executing program 5 (id=3267): syz_open_dev$vbi(&(0x7f0000000440), 0x2, 0x2) socket$packet(0x11, 0x3, 0x300) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000280)={0x0, 0xec27, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) 53.865536243s ago: executing program 34 (id=3418): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001180)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e62bfbdcddde6985f3f1ac5d9a94cc53207899762a07282a1914452d11858e795a3ca30a101af5574f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5ed44039aab46419496362e54cfad05b4004ac71a003d7b85d07191bed4e5a8908263722d4146f7ed569985439baa355cf3d8731f5e7a237bc06d035a8d601f21746d880819f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c5b9f87d988c9fbd2b9d9b4e2d71753b1549fa734f0b2e5fcf9549804cddad721971637f9c9730a9cc384eed30345979db9c93e1c52f42cad0a4d4f9436d3f39b0ed09c395dc6e970366087a8e4daeeb1b017006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f710c490ecd085d2811a7555c53030000007f00000000bfa6478eb96b079c277e2910b7ccdc3d672ed34aa65278c549e2abb549ad954884289130bc71cee2b7de62bf48129ae1af052a2d46a6165eb0954dac7265f1f425735acf6377793946b3229e861d8ea49806b3b533345d36ecef9df700000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c000000aaae37f044bcadeb0f6846582b7653665aa336db9f0384d3c7ddf79c2e0000000000000000000000000000000000000000000000e154aa0d3e41986a668ee1e5ef93a8ceac75f44aae95e26742f895f287111f8ee86f7e3ffb63cfb0e345cf7fc63dd2b0d30977899c6f03640040af4db71f7452bfc79a05118d8bb42b63b195771e42f9942ec626bd4b5461b74324012164e8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="02"], 0x10) 46.072249994s ago: executing program 5 (id=3267): syz_open_dev$vbi(&(0x7f0000000440), 0x2, 0x2) socket$packet(0x11, 0x3, 0x300) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000280)={0x0, 0xec27, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) 38.611670468s ago: executing program 7 (id=3579): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x204000, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r3, r4, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000480)={0x28, 0x4, r4, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r4, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5}) close_range(r0, 0xffffffffffffffff, 0x0) 38.507592516s ago: executing program 7 (id=3581): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@ieee802154={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0202}}}, 0x80, 0x0, 0x0, 0x0, 0x2390}, 0x4010) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x2}], 0x10, 0x0, @void, @value}, 0x90) sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="97", 0x1}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r3, 0x8) 37.506491894s ago: executing program 7 (id=3585): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="db7cac0066baf80cb8c0090e84ef66bafc0c66ed0f221e66bad104ed660f6ab608000000b9800000c00f3235000400000f300fc79fd6d1413cc744240003310000c744240200000000c7442406000000000f0114240f01c90f01df"}], 0x30, 0x21, 0x0, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 37.26247618s ago: executing program 7 (id=3586): sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='mm_vmscan_write_folio\x00', r2, 0x0, 0x200}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 36.129866768s ago: executing program 7 (id=3591): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f00000000c0)={[{@dyn}]}) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 36.006421144s ago: executing program 7 (id=3593): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 31.322863251s ago: executing program 5 (id=3267): syz_open_dev$vbi(&(0x7f0000000440), 0x2, 0x2) socket$packet(0x11, 0x3, 0x300) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000280)={0x0, 0xec27, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) 24.391391695s ago: executing program 5 (id=3267): syz_open_dev$vbi(&(0x7f0000000440), 0x2, 0x2) socket$packet(0x11, 0x3, 0x300) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000280)={0x0, 0xec27, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) 23.464176403s ago: executing program 6 (id=3638): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @ioapic={0xf000, 0x100, 0x1ff, 0x6, 0x0, [{0x4, 0xbd, 0x5, '\x00', 0x81}, {0x3, 0x71, 0x5, '\x00', 0xc7}, {0x95, 0xc4, 0x6, '\x00', 0x68}, {0x9, 0xf9, 0x4, '\x00', 0x72}, {0x9, 0xfc, 0x10, '\x00', 0x81}, {0xd, 0x8, 0x3, '\x00', 0x8}, {0x9, 0x20, 0x10, '\x00', 0xed}, {0x0, 0x4, 0x5, '\x00', 0xa1}, {0x3, 0x2, 0x7, '\x00', 0x8}, {0x8, 0xe1, 0x7f, '\x00', 0x8}, {0x1, 0xff, 0x2, '\x00', 0x2}, {0xfa, 0x6, 0x10, '\x00', 0xca}, {0x6, 0xe, 0xc, '\x00', 0x7}, {0x3, 0x5, 0x1, '\x00', 0xf0}, {0x7, 0x7, 0xfa, '\x00', 0x9}, {0xff, 0x8, 0x5, '\x00', 0x8f}, {0x80, 0x9, 0x2, '\x00', 0x8}, {0x6, 0x7, 0x8, '\x00', 0x1}, {0x8, 0x3, 0x9, '\x00', 0x7}, {0x5, 0xd, 0xa2, '\x00', 0x3}, {0x1, 0x0, 0x8, '\x00', 0x2}, {0x2, 0x0, 0x7, '\x00', 0x10}, {0x10, 0xf7, 0x8, '\x00', 0x7f}, {0x5, 0x80, 0x8d, '\x00', 0x8}]}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22.601403249s ago: executing program 6 (id=3641): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x28e3}, 0x1c) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @local, 0x9}, 0x1c) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 22.560183318s ago: executing program 0 (id=3642): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x1, 0x7fffffff}, 0x0, 0x0) 22.458486491s ago: executing program 6 (id=3643): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffc}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MATCH_NAME={0xb, 0x1, 'socket\x00'}, @NFTA_MATCH_INFO={0x5, 0x3, "d6"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}, 0x1, 0x0, 0x0, 0x40480e0}, 0x4008014) 22.101978756s ago: executing program 6 (id=3645): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000003000/0x18000)=nil, &(0x7f00000014c0)=[@textreal={0x8, &(0x7f0000000000)="66b9390a00000f320f20e06635000040000f22e01a320f01c8bad00466edbaf80c66b89742d38d66efbafc0cb09aeeb800008ec80f01c80f3566b91a0100000f32", 0x41}], 0x1, 0x9, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x10) clock_getres(0xfffffffffffffffe, 0x0) socket(0x1d, 0x2, 0x6) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21.559976836s ago: executing program 0 (id=3650): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) 21.458784736s ago: executing program 0 (id=3651): openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, {0x40, 0x4, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x120, 0x6000, 0x0, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1) ioctl$TIOCGPTPEER(r2, 0x40140921, 0x8) 21.146504793s ago: executing program 0 (id=3652): r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @empty, 0xfffffffc}, 0x1c) listen(r0, 0x20000005) r1 = socket$inet6(0xa, 0x6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 20.986288189s ago: executing program 6 (id=3653): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0x40084146, 0x0) ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) shutdown(r1, 0x0) sendmmsg(r1, &(0x7f0000009880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044840) 20.985889563s ago: executing program 0 (id=3654): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000140)={@empty, 0x39, r1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 20.961618782s ago: executing program 6 (id=3655): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000440)=ANY=[], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$pppl2tp(r3, &(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0xffffffff, 0x2, 0x1, 0x4, {0xa, 0x6e22, 0xfffffffc, @mcast1, 0xae}}}, 0x3a) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_open_pts(0xffffffffffffffff, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) 20.071103565s ago: executing program 2 (id=3657): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000300)=0xff, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19.923985623s ago: executing program 0 (id=3658): mount(&(0x7f0000000040)=@nullb, 0x0, &(0x7f0000000180)='sysv\x00', 0x8000, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x208, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000008500000007000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/tcp6\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b04, &(0x7f0000000040)={'netdevsim0\x00', @random="0e00"}) prlimit64(0x0, 0xe, 0x0, 0x0) writev(r0, &(0x7f0000000440)=[{0x0}, {&(0x7f00000003c0)="2263f009d13e6d95f0698db4114ad74b1b9d6016c439c7eed1fb19ae40a5cedb80d32873f8e1497aa580c7f05f18b7b663242ebe3bedfe3a997637131b35139f66e63e00219a467f9ac5b35eaf477e5d845ee4e67ff68a45162b78740944f10b94deaccb7e141d1a63e685", 0x6b}], 0x2) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_PEC(r6, 0x708, 0x11) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000300)={0x1, 0x0, 0x3, 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0x0, 0xfffffffffffffeef, 0x0, &(0x7f0000000100)="65c5469400344a6020a493000000", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$inet6(0xa, 0x5, 0x0) 19.899429025s ago: executing program 35 (id=3593): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 19.379706813s ago: executing program 2 (id=3660): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @timestamp, @sack_perm, @window, @window={0x3, 0x2, 0xe}, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 18.454261627s ago: executing program 2 (id=3661): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x8, 0xd27, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 17.512147618s ago: executing program 2 (id=3662): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 17.261262506s ago: executing program 2 (id=3663): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x16, @multicast1, 0x4e24, 0x1, 'dh\x00', 0x0, 0x32bb, 0x10000071}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x2000, 0xfffffffe, 0xe, 0x12d5c}}, 0x44) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 16.247384465s ago: executing program 2 (id=3664): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x87f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x40020) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xf7ffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x40}}, 0x0) 4.520489205s ago: executing program 36 (id=3655): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000440)=ANY=[], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$pppl2tp(r3, &(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0xffffffff, 0x2, 0x1, 0x4, {0xa, 0x6e22, 0xfffffffc, @mcast1, 0xae}}}, 0x3a) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_open_pts(0xffffffffffffffff, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) 3.463711319s ago: executing program 37 (id=3658): mount(&(0x7f0000000040)=@nullb, 0x0, &(0x7f0000000180)='sysv\x00', 0x8000, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x208, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000008500000007000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/tcp6\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b04, &(0x7f0000000040)={'netdevsim0\x00', @random="0e00"}) prlimit64(0x0, 0xe, 0x0, 0x0) writev(r0, &(0x7f0000000440)=[{0x0}, {&(0x7f00000003c0)="2263f009d13e6d95f0698db4114ad74b1b9d6016c439c7eed1fb19ae40a5cedb80d32873f8e1497aa580c7f05f18b7b663242ebe3bedfe3a997637131b35139f66e63e00219a467f9ac5b35eaf477e5d845ee4e67ff68a45162b78740944f10b94deaccb7e141d1a63e685", 0x6b}], 0x2) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_PEC(r6, 0x708, 0x11) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000300)={0x1, 0x0, 0x3, 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0x0, 0xfffffffffffffeef, 0x0, &(0x7f0000000100)="65c5469400344a6020a493000000", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$inet6(0xa, 0x5, 0x0) 0s ago: executing program 38 (id=3664): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x87f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x40020) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xf7ffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x40}}, 0x0) kernel console output (not intermixed with test programs): T5872] usb 4-1: SerialNumber: syz [ 1281.179110][ T5872] usb 4-1: config 0 descriptor?? [ 1281.604044][ T5917] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1281.771081][ T5917] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 1281.791779][ T5917] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1281.807461][ T5917] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1281.820476][ T5917] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1281.831028][ T5917] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1281.841141][ T5917] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1281.854829][ T5917] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1281.866016][ T5917] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1281.889783][ T5917] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1281.925248][ T5917] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1281.933807][ T5917] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1281.950853][ T5917] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1281.961953][ T5917] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1281.971651][ T5917] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1281.989660][ T5917] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1282.000753][ T5917] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1282.026470][ T5917] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1282.036655][ T5917] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1282.047665][ T5872] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 1282.048236][ T5917] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1282.072083][ T5917] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1282.089593][ T5917] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1282.109457][ T5917] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1282.117206][ T5917] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1282.126365][ T5917] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1282.272458][ T5917] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1282.281534][ T5917] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1282.290715][ T5917] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1282.299050][ T5917] usb 1-1: Product: syz [ 1282.303365][ T5917] usb 1-1: Manufacturer: syz [ 1282.308519][ T5917] usb 1-1: SerialNumber: syz [ 1282.571168][ T5917] usb 1-1: config 0 descriptor?? [ 1282.587116][ T5917] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 1282.589753][ T5872] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 1282.605299][ T5872] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 1282.614862][ T5872] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 1282.625866][ T5872] usb 4-1: USB disconnect, device number 37 [ 1284.851978][ T5917] usb 1-1: USB disconnect, device number 18 [ 1284.893242][ T5917] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 1284.914744][T19647] block device autoloading is deprecated and will be removed. [ 1285.551044][T19650] ref_ctr_offset mismatch. inode: 0x4ef offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x7110110900006800 [ 1285.652829][T19665] lo speed is unknown, defaulting to 1000 [ 1285.665510][T19665] lo speed is unknown, defaulting to 1000 [ 1285.792081][T19667] input: syz1 as /devices/virtual/input/input45 [ 1285.820347][T15219] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1285.878594][T19665] lo speed is unknown, defaulting to 1000 [ 1285.948846][T19665] lo speed is unknown, defaulting to 1000 [ 1286.011790][T15219] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1286.191751][T15219] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1286.674817][T15219] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1286.686149][T15219] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.697741][T15219] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1286.705247][T15219] usb 1-1: invalid MIDI out EP 0 [ 1286.837899][T15219] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1287.153513][T15219] usb 1-1: USB disconnect, device number 19 [ 1287.303437][T19683] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19683 comm=syz.3.3151 [ 1287.354434][ T30] audit: type=1400 audit(1745134938.107:2640): avc: denied { read } for pid=19682 comm="syz.3.3151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1288.159813][T15219] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1288.331489][T15219] usb 4-1: Using ep0 maxpacket: 32 [ 1288.349337][T15219] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1288.388815][T15219] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 1288.405946][T15219] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1288.426598][T15219] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1288.435875][T15219] usb 4-1: config 128 has no interface number 0 [ 1288.442459][T15219] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1288.457914][T15219] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1288.468989][T15219] usb 4-1: config 128 interface 127 has no altsetting 0 [ 1288.501134][T15219] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1288.512759][T15219] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.527593][T15219] usb 4-1: Product: syz [ 1288.553497][T15219] usb 4-1: Manufacturer: syz [ 1288.563578][T15219] usb 4-1: SerialNumber: syz [ 1289.689305][T15219] usb 4-1: USB disconnect, device number 38 [ 1290.068362][T19750] syzkaller0: entered promiscuous mode [ 1290.092463][T19750] syzkaller0: entered allmulticast mode [ 1291.082177][T15219] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1291.271296][T15219] usb 1-1: Using ep0 maxpacket: 16 [ 1291.295532][T15219] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 1291.315040][T15219] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1291.318114][T19767] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3179'. [ 1291.341052][T15219] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1291.351387][T15219] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1291.362141][T15219] usb 1-1: config 0 descriptor?? [ 1291.794403][T15219] kovaplus 0003:1E7D:2D50.000E: unknown global tag 0xc [ 1291.803785][T15219] kovaplus 0003:1E7D:2D50.000E: item 0 1 1 12 parsing failed [ 1291.812528][T15219] kovaplus 0003:1E7D:2D50.000E: parse failed [ 1291.818911][T15219] kovaplus 0003:1E7D:2D50.000E: probe with driver kovaplus failed with error -22 [ 1292.043552][T15219] usb 1-1: USB disconnect, device number 20 [ 1292.267801][ T30] audit: type=1800 audit(1745134943.057:2641): pid=19772 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.3181" name="file1" dev="overlay" ino=3465 res=0 errno=0 [ 1292.292822][ T30] audit: type=1804 audit(1745134943.057:2642): pid=19772 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.3181" name="/newroot/649/bus/file1" dev="overlay" ino=3465 res=1 errno=0 [ 1293.265669][ T30] audit: type=1400 audit(1745134944.057:2643): avc: denied { accept } for pid=19794 comm="syz.4.3189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1293.289611][ T30] audit: type=1400 audit(1745134944.057:2644): avc: denied { read } for pid=19794 comm="syz.4.3189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1293.348437][T19800] netlink: 'syz.0.3191': attribute type 1 has an invalid length. [ 1293.428560][T19800] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1293.527974][T19805] bond2: (slave veth3): Enslaving as an active interface with a down link [ 1293.582143][T19800] bond2: (slave dummy0): making interface the new active one [ 1293.594160][T19800] dummy0: entered promiscuous mode [ 1293.600212][T19800] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 1296.980340][ T30] audit: type=1400 audit(1745134947.767:2645): avc: denied { bind } for pid=19867 comm="syz.0.3213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1297.095014][ T30] audit: type=1400 audit(1745134947.767:2646): avc: denied { name_bind } for pid=19867 comm="syz.0.3213" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 1297.191179][ T30] audit: type=1400 audit(1745134947.767:2647): avc: denied { node_bind } for pid=19867 comm="syz.0.3213" saddr=fe80::aa src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 1297.213353][ C0] vkms_vblank_simulate: vblank timer overrun [ 1299.432409][T19890] kexec: Could not allocate control_code_buffer [ 1300.307035][ T30] audit: type=1804 audit(1745134951.097:2648): pid=19925 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.3234" name="/newroot/260/file0" dev="tmpfs" ino=1348 res=1 errno=0 [ 1300.329559][ C0] vkms_vblank_simulate: vblank timer overrun [ 1300.347259][T19925] ref_ctr_offset mismatch. inode: 0x544 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 1300.369670][T19925] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: 0, delta: -1 [ 1300.378439][T19925] ref_ctr decrement failed for inode: 0x544 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888079d14600 [ 1300.409555][T19925] uprobe: syz.5.3234:19925 failed to unregister, leaking uprobe [ 1300.650344][ T30] audit: type=1400 audit(1745134951.447:2649): avc: denied { mounton } for pid=19931 comm="syz.4.3237" path="/proc/2436/task" dev="proc" ino=58427 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1300.772846][T19939] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3240'. [ 1300.811292][T19939] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3240'. [ 1300.971626][ T30] audit: type=1400 audit(1745134951.767:2650): avc: denied { ioctl } for pid=19945 comm="syz.4.3242" path="/647/file0/file0" dev="fuse" ino=3 ioctlcmd=0x70c9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1301.001040][T19946] sd 0:0:1:0: PR command failed: 1026 [ 1301.006573][T19946] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1301.015690][T19946] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1301.395401][ T30] audit: type=1400 audit(1745134952.187:2651): avc: denied { setopt } for pid=19958 comm="syz.2.3247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1301.417695][T19959] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1302.286876][T19982] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3255'. [ 1302.329281][T19984] lo speed is unknown, defaulting to 1000 [ 1302.338936][T19984] lo speed is unknown, defaulting to 1000 [ 1302.679797][ T5872] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1302.756751][T19984] lo speed is unknown, defaulting to 1000 [ 1302.777370][T19984] lo speed is unknown, defaulting to 1000 [ 1302.849480][ T5872] usb 1-1: Using ep0 maxpacket: 32 [ 1302.875502][ T5872] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1302.901287][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1302.932582][ T5872] usb 1-1: Product: syz [ 1302.955959][ T5872] usb 1-1: Manufacturer: syz [ 1302.976151][ T5872] usb 1-1: SerialNumber: syz [ 1302.999218][ T5872] usb 1-1: config 0 descriptor?? [ 1303.017505][ T5872] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1304.632703][ T6417] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.660000][ T5872] gspca_ov534_9: reg_r err -71 [ 1304.949572][ T5872] gspca_ov534_9: Unknown sensor 0000 [ 1304.949652][ T5872] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 1304.995132][ T6417] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1305.019974][ T5872] usb 1-1: USB disconnect, device number 21 [ 1305.699108][ T6417] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1305.772707][T20033] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1305.895932][T20038] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3274'. [ 1305.913453][T20041] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1305.931159][ T6417] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1305.938206][T20043] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3275'. [ 1305.942395][T20041] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1305.954608][T20043] netlink: zone id is out of range [ 1305.966082][T20041] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1305.967338][T20043] netlink: get zone limit has 8 unknown bytes [ 1305.980621][T20041] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1305.988193][T20041] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1305.998961][ T5824] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1306.009879][ T5824] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1306.017210][ T5824] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1306.025806][ T5824] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1306.034226][ T5824] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1306.056337][T20043] af_packet: tpacket_rcv: packet too big, clamped from 18 to 4294967272. macoff=96 [ 1306.074680][T20039] lo speed is unknown, defaulting to 1000 [ 1306.081746][T20039] lo speed is unknown, defaulting to 1000 [ 1306.110751][T20033] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1306.239629][ T6417] bridge_slave_1: left allmulticast mode [ 1306.254229][ T6417] bridge_slave_1: left promiscuous mode [ 1306.267579][ T6417] bridge0: port 2(bridge_slave_1) entered disabled state [ 1306.287119][ T6417] bridge_slave_0: left allmulticast mode [ 1306.298635][ T6417] bridge_slave_0: left promiscuous mode [ 1306.435450][ T6417] bridge0: port 1(bridge_slave_0) entered disabled state [ 1306.451983][T20033] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1306.796313][T20033] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1307.143124][T20033] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1307.481716][T20033] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1307.673997][ T6417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1307.706029][ T6417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1307.718388][ T6417] bond0 (unregistering): Released all slaves [ 1307.743663][T20039] lo speed is unknown, defaulting to 1000 [ 1308.205407][T20033] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1308.209493][ T5824] Bluetooth: hci2: command tx timeout [ 1308.226252][T12501] dummy0: left promiscuous mode [ 1308.244431][T20039] lo speed is unknown, defaulting to 1000 [ 1308.578533][T20087] kvm: emulating exchange as write [ 1308.586478][ T5917] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1308.668302][T20091] netlink: 2016 bytes leftover after parsing attributes in process `syz.0.3289'. [ 1308.681375][T20091] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3289'. [ 1308.743662][ T5917] usb 3-1: config 0 has an invalid descriptor of length 118, skipping remainder of the config [ 1308.794020][ T5917] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1308.815469][ T5917] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1308.825700][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1308.857905][ T5917] usb 3-1: config 0 descriptor?? [ 1309.001115][ T30] audit: type=1400 audit(1745134959.797:2652): avc: denied { mounton } for pid=20099 comm="syz.3.3291" path="/670/file0" dev="tmpfs" ino=3582 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1309.072410][ T5917] usb 3-1: string descriptor 0 read error: -71 [ 1309.119950][ T5917] usb 3-1: USB disconnect, device number 31 [ 1309.160265][T20039] chnl_net:caif_netlink_parms(): no params data found [ 1309.297474][ T6417] hsr_slave_0: left promiscuous mode [ 1309.317250][ T6417] hsr_slave_1: left promiscuous mode [ 1309.358903][ T6417] veth1_macvtap: left promiscuous mode [ 1309.373698][ T6417] veth0_macvtap: left promiscuous mode [ 1309.394147][ T6417] veth1_vlan: left promiscuous mode [ 1309.406623][ T6417] veth0_vlan: left promiscuous mode [ 1310.399628][ T5824] Bluetooth: hci2: command tx timeout [ 1310.493071][T20121] netlink: 2048 bytes leftover after parsing attributes in process `syz.2.3295'. [ 1310.529354][T20121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3295'. [ 1310.766170][ T6417] team0 (unregistering): Port device team_slave_1 removed [ 1310.830123][ T6417] team0 (unregistering): Port device team_slave_0 removed [ 1311.773116][T20039] bridge0: port 1(bridge_slave_0) entered blocking state [ 1311.784873][T20039] bridge0: port 1(bridge_slave_0) entered disabled state [ 1311.792595][T20039] bridge_slave_0: entered allmulticast mode [ 1311.800153][T20039] bridge_slave_0: entered promiscuous mode [ 1311.808153][T20039] bridge0: port 2(bridge_slave_1) entered blocking state [ 1311.816309][T20039] bridge0: port 2(bridge_slave_1) entered disabled state [ 1311.824169][T20039] bridge_slave_1: entered allmulticast mode [ 1311.831646][T20039] bridge_slave_1: entered promiscuous mode [ 1311.919151][ T30] audit: type=1400 audit(1745134962.707:2653): avc: denied { unlink } for pid=20140 comm="syz.2.3302" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1311.949108][T20039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1311.989209][T20039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1312.063997][T20039] team0: Port device team_slave_0 added [ 1312.082133][T20039] team0: Port device team_slave_1 added [ 1312.114180][T20039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1312.122184][T20039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1312.151241][T20039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1312.167018][T20039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1312.176699][T20039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1312.202876][T20039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1312.334415][T20039] hsr_slave_0: entered promiscuous mode [ 1312.344149][T20039] hsr_slave_1: entered promiscuous mode [ 1312.353037][T20039] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1312.783386][ T5824] Bluetooth: hci2: command tx timeout [ 1312.792451][T20039] Cannot create hsr debugfs directory [ 1313.079577][ T30] audit: type=1800 audit(1745134963.877:2654): pid=20174 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.3314" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 1314.022628][ T30] audit: type=1326 audit(1745134964.817:2655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20188 comm="syz.0.3319" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa173f8e169 code=0x0 [ 1314.578343][T20193] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3320'. [ 1314.668299][T20195] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input46 [ 1314.677182][T20039] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1314.691730][T20039] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1314.811239][T20039] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1314.821047][T20039] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1314.849672][ T5824] Bluetooth: hci2: command tx timeout [ 1314.947285][T20039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1314.974704][T20205] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3325'. [ 1314.975111][T20039] 8021q: adding VLAN 0 to HW filter on device team0 [ 1315.032519][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1315.039673][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1315.049590][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1315.056719][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1315.682810][T20039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1316.370544][ T30] audit: type=1400 audit(1745134967.167:2656): avc: denied { listen } for pid=20226 comm="syz.4.3330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1316.402958][ T30] audit: type=1400 audit(1745134967.167:2657): avc: denied { accept } for pid=20226 comm="syz.4.3330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1316.478060][T20039] veth0_vlan: entered promiscuous mode [ 1316.489733][T20039] veth1_vlan: entered promiscuous mode [ 1316.515135][T20039] veth0_macvtap: entered promiscuous mode [ 1316.523581][T20039] veth1_macvtap: entered promiscuous mode [ 1316.536255][T20039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1316.547455][T20039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1316.557568][T20039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1316.568314][T20039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1316.580861][T20039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1316.636967][T20039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1316.647704][T20039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1316.657926][T20039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1316.670364][T20039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1316.681707][T20039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1316.701347][T20039] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.710874][T20039] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.729452][T20039] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.739689][T20039] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.882016][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1316.912922][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1316.960484][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1316.973810][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1317.884412][T20268] netlink: 'syz.2.3343': attribute type 4 has an invalid length. [ 1317.899205][ T9251] lo speed is unknown, defaulting to 1000 [ 1317.905325][ T9251] s•z0: Port: 1 Link DOWN [ 1317.916739][ T5905] lo speed is unknown, defaulting to 1000 [ 1317.923459][T20268] netlink: 'syz.2.3343': attribute type 4 has an invalid length. [ 1317.936833][ T5905] lo speed is unknown, defaulting to 1000 [ 1317.947862][ T5905] s•z0: Port: 1 Link ACTIVE [ 1317.959493][ T5905] lo speed is unknown, defaulting to 1000 [ 1317.991584][T20271] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3345'. [ 1318.166597][ T30] audit: type=1326 audit(1745134968.957:2658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20282 comm="syz.3.3351" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc3add8e169 code=0x0 [ 1318.669813][ T81] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.803099][ T81] bridge0: port 4(netdevsim2) entered disabled state [ 1318.840798][ T81] netdevsim netdevsim4 netdevsim2 (unregistering): left allmulticast mode [ 1318.860771][ T81] netdevsim netdevsim4 netdevsim2 (unregistering): left promiscuous mode [ 1318.871548][ T81] bridge0: port 4(netdevsim2) entered disabled state [ 1318.901942][ T81] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1319.040858][ T81] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1319.054444][T20041] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1319.067647][T20041] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1319.075491][T20041] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1319.085635][T20041] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1319.094080][T20041] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1319.121814][ T81] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1319.147804][T20294] lo speed is unknown, defaulting to 1000 [ 1319.155045][T20294] lo speed is unknown, defaulting to 1000 [ 1319.258933][ T81] bridge_slave_1: left allmulticast mode [ 1319.265253][ T81] bridge_slave_1: left promiscuous mode [ 1319.271103][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 1319.281809][ T81] bridge_slave_0: left allmulticast mode [ 1319.287493][ T81] bridge_slave_0: left promiscuous mode [ 1319.293568][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 1319.496170][ T81] dvmrp1 (unregistering): left allmulticast mode [ 1319.862146][T20303] input: syz0 as /devices/virtual/input/input47 [ 1320.073288][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1320.095699][ T81] bond0 (unregistering): Released all slaves [ 1320.161863][ T81] bond1 (unregistering): Released all slaves [ 1320.265636][T20041] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1320.267741][T20294] lo speed is unknown, defaulting to 1000 [ 1320.272939][T15401] syz1: Port: 1 Link DOWN [ 1320.284478][T20041] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1320.298249][T20041] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1320.309486][T20041] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1320.317009][T20041] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1320.357090][ T30] audit: type=1400 audit(1745134971.147:2659): avc: denied { listen } for pid=20318 comm="syz.3.3362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1320.431592][T20319] lo speed is unknown, defaulting to 1000 [ 1320.439475][ T81] tipc: Left network mode [ 1320.440474][T20294] lo speed is unknown, defaulting to 1000 [ 1320.527239][T20319] lo speed is unknown, defaulting to 1000 [ 1321.565906][T20041] Bluetooth: hci2: command tx timeout [ 1321.615405][T20319] lo speed is unknown, defaulting to 1000 [ 1321.647390][T20319] lo speed is unknown, defaulting to 1000 [ 1322.159751][T15401] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1322.319411][T15401] usb 3-1: Using ep0 maxpacket: 8 [ 1322.332493][T15401] usb 3-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 1322.344477][T20294] chnl_net:caif_netlink_parms(): no params data found [ 1322.355620][T15401] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1322.364188][T15401] usb 3-1: Product: syz [ 1322.368357][T15401] usb 3-1: Manufacturer: syz [ 1322.374506][T15401] usb 3-1: SerialNumber: syz [ 1322.379494][T20041] Bluetooth: hci4: command tx timeout [ 1322.389904][T15401] usb 3-1: config 0 descriptor?? [ 1322.537695][ T81] hsr0: left allmulticast mode [ 1322.545058][ T81] veth1_macvtap: left promiscuous mode [ 1322.550829][ T81] veth0_macvtap: left promiscuous mode [ 1322.556346][ T81] veth1_vlan: left promiscuous mode [ 1322.562371][ T81] veth0_vlan: left promiscuous mode [ 1322.907006][ T81] team0 (unregistering): Port device team_slave_1 removed [ 1322.960663][ T81] team0 (unregistering): Port device team_slave_0 removed [ 1323.019106][ T13] smc: removing ib device syz1 [ 1323.225612][ T5917] usb 3-1: USB disconnect, device number 32 [ 1323.434078][ T9152] lo speed is unknown, defaulting to 1000 [ 1323.449449][ T9152] syz2: Port: 1 Link DOWN [ 1323.653955][T20041] Bluetooth: hci2: command tx timeout [ 1323.809933][T20294] bridge0: port 1(bridge_slave_0) entered blocking state [ 1323.817051][T20294] bridge0: port 1(bridge_slave_0) entered disabled state [ 1323.846845][T20294] bridge_slave_0: entered allmulticast mode [ 1323.886771][T20294] bridge_slave_0: entered promiscuous mode [ 1323.969313][T20294] bridge0: port 2(bridge_slave_1) entered blocking state [ 1324.009550][T20294] bridge0: port 2(bridge_slave_1) entered disabled state [ 1324.027162][T20294] bridge_slave_1: entered allmulticast mode [ 1324.080759][T20294] bridge_slave_1: entered promiscuous mode [ 1324.449490][T20041] Bluetooth: hci4: command tx timeout [ 1324.572734][T20294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1324.642865][T20294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1324.752427][T20319] chnl_net:caif_netlink_parms(): no params data found [ 1324.807494][T20294] team0: Port device team_slave_0 added [ 1324.880383][T20294] team0: Port device team_slave_1 added [ 1325.116624][T20294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1325.125608][T20294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1325.152090][T20294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1325.231220][T20294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1325.245084][T20294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1325.275469][T20294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1325.293677][T20319] bridge0: port 1(bridge_slave_0) entered blocking state [ 1325.301135][T20319] bridge0: port 1(bridge_slave_0) entered disabled state [ 1325.309009][T20319] bridge_slave_0: entered allmulticast mode [ 1325.316596][T20319] bridge_slave_0: entered promiscuous mode [ 1325.327060][T20319] bridge0: port 2(bridge_slave_1) entered blocking state [ 1325.334822][T20319] bridge0: port 2(bridge_slave_1) entered disabled state [ 1325.344571][T20319] bridge_slave_1: entered allmulticast mode [ 1325.352080][T20319] bridge_slave_1: entered promiscuous mode [ 1325.388019][ T81] IPVS: stop unused estimator thread 0... [ 1325.422653][T20319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1325.456404][T20294] hsr_slave_0: entered promiscuous mode [ 1325.472757][T20294] hsr_slave_1: entered promiscuous mode [ 1325.478833][T20294] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1325.492803][T20294] Cannot create hsr debugfs directory [ 1325.508536][T20319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1325.560322][T20319] team0: Port device team_slave_0 added [ 1325.596522][T20319] team0: Port device team_slave_1 added [ 1325.676658][ T81] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1325.696598][T20319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1325.703694][T20319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1325.729572][ C1] vkms_vblank_simulate: vblank timer overrun [ 1325.730143][T20041] Bluetooth: hci2: command tx timeout [ 1325.750090][T20319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1325.794300][T20319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1325.801468][T20319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1325.850462][T20319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1325.963244][ T81] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1325.989456][ T9152] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1326.093970][ T81] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1326.118491][T20319] hsr_slave_0: entered promiscuous mode [ 1326.125623][T20319] hsr_slave_1: entered promiscuous mode [ 1326.132184][T20319] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1326.140849][T20319] Cannot create hsr debugfs directory [ 1326.149480][ T9152] usb 4-1: Using ep0 maxpacket: 8 [ 1326.165333][ T9152] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 1326.180113][ T9152] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.188334][ T9152] usb 4-1: Product: syz [ 1326.192743][ T9152] usb 4-1: Manufacturer: syz [ 1326.197348][ T9152] usb 4-1: SerialNumber: syz [ 1326.212767][ T9152] usb 4-1: config 0 descriptor?? [ 1326.235231][ T9152] radio-usb-si4713 4-1:0.0: Si4713 development board discovered: (10C4:8244) [ 1326.279248][ T81] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1326.292611][T20417] netlink: 'syz.2.3394': attribute type 1 has an invalid length. [ 1326.360904][T20417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1326.535713][T20041] Bluetooth: hci4: command tx timeout [ 1326.651241][T20294] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1326.666400][T20294] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1326.676204][T20294] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1326.685630][ T81] bridge_slave_1: left allmulticast mode [ 1326.691577][ T81] bridge_slave_1: left promiscuous mode [ 1326.698095][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 1326.707895][ T81] bridge_slave_0: left allmulticast mode [ 1326.714104][ T81] bridge_slave_0: left promiscuous mode [ 1326.719816][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 1326.854828][ T9152] radio-usb-si4713 4-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 1326.865445][ T9152] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1326.874740][ T9152] usb 4-1: USB disconnect, device number 39 [ 1326.979476][T15401] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1327.068971][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1327.069262][ T30] audit: type=1400 audit(1745134977.857:2660): avc: denied { write } for pid=20422 comm="syz.0.3396" name="file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1327.099942][ C1] vkms_vblank_simulate: vblank timer overrun [ 1327.108234][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1327.121231][ T81] bond0 (unregistering): Released all slaves [ 1327.130520][T15401] usb 3-1: Using ep0 maxpacket: 8 [ 1327.157688][T15401] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1327.174268][T15401] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1327.183345][T20294] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1327.190578][T15401] usb 3-1: Product: syz [ 1327.194794][T15401] usb 3-1: Manufacturer: syz [ 1327.199773][T15401] usb 3-1: SerialNumber: syz [ 1327.238829][T15401] usb 3-1: config 0 descriptor?? [ 1327.328607][T20294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1327.379551][ T5905] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1327.396463][T20294] 8021q: adding VLAN 0 to HW filter on device team0 [ 1327.425897][ T5927] bridge0: port 1(bridge_slave_0) entered blocking state [ 1327.433053][ T5927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1327.465166][T15401] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1327.474568][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 1327.481688][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1327.541153][ T5905] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 1327.557855][ T5905] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1327.574113][ T5905] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1327.603693][ T5905] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1327.624041][ T5905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1327.645117][ T5905] usb 1-1: config 0 descriptor?? [ 1327.667156][ T5905] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1327.785272][T20319] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1327.809520][T20041] Bluetooth: hci2: command tx timeout [ 1327.815413][T20319] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1327.824462][ T9152] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1327.864363][T20319] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1327.891084][T15401] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1327.902957][T20319] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1327.914786][T15401] usb 3-1: USB disconnect, device number 33 [ 1327.932334][ T81] hsr_slave_0: left promiscuous mode [ 1327.937940][ T81] hsr_slave_1: left promiscuous mode [ 1327.943995][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1327.951512][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1327.959047][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1327.967049][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1327.985360][ T81] veth1_macvtap: left promiscuous mode [ 1327.991048][ T81] veth0_macvtap: left promiscuous mode [ 1327.996738][ T81] veth1_vlan: left promiscuous mode [ 1328.002974][ T81] veth0_vlan: left promiscuous mode [ 1328.009455][ T9152] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1328.021307][ T9152] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1328.032039][ T9152] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1328.044473][ T9152] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1328.054844][ T9152] usb 4-1: config 0 descriptor?? [ 1328.376036][ T81] team0 (unregistering): Port device team_slave_1 removed [ 1328.413073][ T81] team0 (unregistering): Port device team_slave_0 removed [ 1328.610211][T20041] Bluetooth: hci4: command tx timeout [ 1328.876965][T20294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1328.887916][ T9152] usb 4-1: string descriptor 0 read error: -71 [ 1328.913646][ T9152] uclogic 0003:256C:006D.000F: failed retrieving string descriptor #200: -71 [ 1328.957613][ T9152] uclogic 0003:256C:006D.000F: failed retrieving pen parameters: -71 [ 1328.973221][ T9152] uclogic 0003:256C:006D.000F: failed probing pen v2 parameters: -71 [ 1328.995069][ T9152] uclogic 0003:256C:006D.000F: failed probing parameters: -71 [ 1329.015834][ T9152] uclogic 0003:256C:006D.000F: probe with driver uclogic failed with error -71 [ 1329.047748][ T9152] usb 4-1: USB disconnect, device number 40 [ 1329.071946][T20319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1329.094846][T20319] 8021q: adding VLAN 0 to HW filter on device team0 [ 1329.119136][ T5927] bridge0: port 1(bridge_slave_0) entered blocking state [ 1329.126254][ T5927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1329.140931][ T6417] bridge0: port 2(bridge_slave_1) entered blocking state [ 1329.148035][ T6417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1329.194306][T20294] veth0_vlan: entered promiscuous mode [ 1329.217817][T20294] veth1_vlan: entered promiscuous mode [ 1329.258914][T20294] veth0_macvtap: entered promiscuous mode [ 1329.273728][T20294] veth1_macvtap: entered promiscuous mode [ 1329.294341][T20294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1329.305263][T20294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1329.317985][T20294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1329.333208][T20294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1329.345008][T20294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1329.374952][T20294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1329.385720][T20294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1329.395678][T20294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1329.407534][T20294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1329.439141][T20294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1329.494042][T20294] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1329.502816][T20294] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1329.512083][T20294] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1329.513150][T20456] netlink: 'syz.2.3402': attribute type 10 has an invalid length. [ 1329.521078][T20294] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1329.526898][T20319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1329.648872][T20462] netlink: 'syz.3.3403': attribute type 10 has an invalid length. [ 1329.730638][T20462] batman_adv: batadv0: Interface deactivated: team0 [ 1329.881142][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1329.904216][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1329.969097][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1329.997596][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1330.240225][T20319] veth0_vlan: entered promiscuous mode [ 1330.254291][T20319] veth1_vlan: entered promiscuous mode [ 1330.331012][T20319] veth0_macvtap: entered promiscuous mode [ 1330.354353][T20319] veth1_macvtap: entered promiscuous mode [ 1330.710864][T20319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1330.733781][ T5917] usb 1-1: USB disconnect, device number 22 [ 1330.746645][T20319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1330.769024][T20319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1330.782881][T20319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1330.798829][T20319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1330.810556][T20319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1330.827079][T20319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1330.922356][T20319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1330.971763][T20319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1330.985194][T20319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1330.996389][T20319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1331.020513][T20319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1331.039578][T20319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1331.051965][T20319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1331.074843][T20319] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.086373][T20319] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.095182][T20319] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.117086][T20319] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1331.527598][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1331.559598][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1331.705939][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1331.716375][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1332.504989][ T30] audit: type=1400 audit(1745134983.189:2661): avc: denied { append } for pid=20522 comm="syz.0.3421" name="event3" dev="devtmpfs" ino=1001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1334.124130][T20558] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 1334.197203][ T30] audit: type=1400 audit(1745134984.770:2662): avc: denied { watch watch_reads } for pid=20557 comm="syz.6.3433" path="/dev/urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 1334.322600][ T61] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1334.441076][T20564] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1334.599183][T20572] tipc: Failed to remove unknown binding: 66,1,1/4:95408357/95408359 [ 1334.709076][T20576] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3440'. [ 1334.911965][ T5824] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1334.923377][ T5824] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1334.933996][ T5824] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1334.944700][ T5824] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1334.964542][ T5824] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1334.993430][ T61] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1335.106469][ T61] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1335.124265][T20583] lo speed is unknown, defaulting to 1000 [ 1335.132067][T20583] lo speed is unknown, defaulting to 1000 [ 1335.189855][ T61] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1335.368443][ T61] bridge_slave_1: left allmulticast mode [ 1335.381831][ T61] bridge_slave_1: left promiscuous mode [ 1335.396545][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 1335.432928][ T61] bridge_slave_0: left allmulticast mode [ 1335.439713][ T61] bridge_slave_0: left promiscuous mode [ 1335.445436][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 1335.719274][T20602] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3447'. [ 1335.983198][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1336.003878][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1336.019735][ T61] bond0 (unregistering): Released all slaves [ 1336.042732][T20607] bridge: RTM_NEWNEIGH with invalid ether address [ 1336.050168][T20583] lo speed is unknown, defaulting to 1000 [ 1337.457660][ T5824] Bluetooth: hci4: command tx timeout [ 1337.545553][T20583] chnl_net:caif_netlink_parms(): no params data found [ 1337.787473][ T61] hsr_slave_0: left promiscuous mode [ 1337.797418][ T61] hsr_slave_1: left promiscuous mode [ 1337.808253][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1337.829452][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1337.851693][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1337.871599][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1337.897208][ T5905] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1337.912565][ T61] veth1_macvtap: left promiscuous mode [ 1337.918676][ T61] veth0_macvtap: left promiscuous mode [ 1337.924739][ T61] veth1_vlan: left promiscuous mode [ 1337.932892][ T61] veth0_vlan: left promiscuous mode [ 1338.102484][ T5905] usb 3-1: Using ep0 maxpacket: 8 [ 1338.124908][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1338.160506][ T5905] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1338.198496][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1338.246933][ T5905] usb 3-1: config 0 descriptor?? [ 1338.491442][ T5905] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1338.664054][ T61] team0 (unregistering): Port device team_slave_1 removed [ 1338.701283][ T61] team0 (unregistering): Port device team_slave_0 removed [ 1338.932458][ T5905] usb 3-1: USB disconnect, device number 34 [ 1339.127798][T20583] bridge0: port 1(bridge_slave_0) entered blocking state [ 1339.134918][T20583] bridge0: port 1(bridge_slave_0) entered disabled state [ 1339.187493][T20583] bridge_slave_0: entered allmulticast mode [ 1339.204099][T20583] bridge_slave_0: entered promiscuous mode [ 1339.226244][T20583] bridge0: port 2(bridge_slave_1) entered blocking state [ 1339.241294][T20583] bridge0: port 2(bridge_slave_1) entered disabled state [ 1339.249438][T20583] bridge_slave_1: entered allmulticast mode [ 1339.256861][T20583] bridge_slave_1: entered promiscuous mode [ 1339.344948][T20583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1339.358890][T20583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1339.408423][T20583] team0: Port device team_slave_0 added [ 1339.428996][T20583] team0: Port device team_slave_1 added [ 1339.471574][T20583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1339.478549][T20583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1339.504609][T20583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1339.516956][T20583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1339.523956][T20583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1339.553281][T20583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1339.614013][T20583] hsr_slave_0: entered promiscuous mode [ 1339.623142][T20583] hsr_slave_1: entered promiscuous mode [ 1339.631101][T20583] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1339.638732][T20583] Cannot create hsr debugfs directory [ 1339.650315][ T5824] Bluetooth: hci4: command tx timeout [ 1339.938968][ T5869] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1339.985020][T20583] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1339.994200][T20583] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1340.005272][T20583] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1340.015089][T20583] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1340.032124][T20583] bridge0: port 2(bridge_slave_1) entered blocking state [ 1340.039241][T20583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1340.085025][T20583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1340.098235][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 1340.118940][T20583] 8021q: adding VLAN 0 to HW filter on device team0 [ 1340.132743][ T5869] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 1340.141118][ T5869] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1340.153445][ T6417] bridge0: port 1(bridge_slave_0) entered blocking state [ 1340.160495][ T6417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1340.171355][ T5869] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1340.180916][ T5869] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1340.184695][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 1340.195990][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1340.205961][ T5869] usb 3-1: Manufacturer: syz [ 1340.214670][ T5869] usb 3-1: config 0 descriptor?? [ 1340.292280][ T5869] rc_core: IR keymap rc-hauppauge not found [ 1340.298301][ T5869] Registered IR keymap rc-empty [ 1340.306464][ T5869] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1340.319187][ T5869] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input48 [ 1340.369373][T20583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1340.471989][ T5869] usb 3-1: USB disconnect, device number 35 [ 1340.593501][T20583] veth0_vlan: entered promiscuous mode [ 1340.602951][T20583] veth1_vlan: entered promiscuous mode [ 1340.644052][T20583] veth0_macvtap: entered promiscuous mode [ 1340.654308][T20583] veth1_macvtap: entered promiscuous mode [ 1340.679302][T20583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1340.690394][T20583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1340.700509][T20583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1340.712094][T20583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1340.722173][T20583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1340.733129][T20583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1340.744968][T20583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1340.757113][T20583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1340.767896][T20583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1340.777922][T20583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1340.788336][T20583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1340.798285][T20583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1340.809672][T20583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1340.820785][T20583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1340.832917][T20583] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.842166][T20583] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.858284][T20583] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.867000][T20583] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.929635][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1340.941666][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1340.961470][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1340.969503][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1341.147097][ T9251] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1341.330036][ T9251] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1341.343717][ T9251] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1341.354874][ T9251] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1341.369941][ T9251] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1341.381374][ T9251] usb 1-1: config 0 descriptor?? [ 1342.515968][ T6417] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1342.694405][ T9251] uclogic 0003:256C:006D.0010: v1 frame probing failed: -71 [ 1342.704707][ T9251] uclogic 0003:256C:006D.0010: failed probing parameters: -71 [ 1342.712417][ T9251] uclogic 0003:256C:006D.0010: probe with driver uclogic failed with error -71 [ 1342.723236][ T9251] usb 1-1: USB disconnect, device number 23 [ 1343.284430][T20041] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1343.294111][T20041] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1343.303694][T20041] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1343.312085][T20041] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1343.323409][T20041] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1343.366145][T20711] lo speed is unknown, defaulting to 1000 [ 1343.377016][T20711] lo speed is unknown, defaulting to 1000 [ 1343.667392][T20717] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3481'. [ 1343.729964][T20711] lo speed is unknown, defaulting to 1000 [ 1343.915170][ T6417] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1344.902979][T20711] chnl_net:caif_netlink_parms(): no params data found [ 1345.380689][ T6417] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1345.500881][ T6417] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1345.540654][T20746] bridge5: entered promiscuous mode [ 1345.553423][T20041] Bluetooth: hci4: command tx timeout [ 1345.569869][T20746] bridge5: entered allmulticast mode [ 1345.590150][T20746] team0: Port device bridge5 added [ 1345.687710][T20711] bridge0: port 1(bridge_slave_0) entered blocking state [ 1345.700201][T20711] bridge0: port 1(bridge_slave_0) entered disabled state [ 1345.708520][T20711] bridge_slave_0: entered allmulticast mode [ 1345.717715][T20711] bridge_slave_0: entered promiscuous mode [ 1345.730193][T20711] bridge0: port 2(bridge_slave_1) entered blocking state [ 1345.739326][T20711] bridge0: port 2(bridge_slave_1) entered disabled state [ 1345.746683][T20711] bridge_slave_1: entered allmulticast mode [ 1345.754354][T20711] bridge_slave_1: entered promiscuous mode [ 1345.847835][T20711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1345.862861][T20711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1345.939712][T20711] team0: Port device team_slave_0 added [ 1345.967293][T20711] team0: Port device team_slave_1 added [ 1345.975795][ T6417] bridge_slave_1: left allmulticast mode [ 1345.985338][ T6417] bridge_slave_1: left promiscuous mode [ 1345.992002][ T6417] bridge0: port 2(bridge_slave_1) entered disabled state [ 1346.003021][ T6417] bridge_slave_0: left allmulticast mode [ 1346.008725][ T6417] bridge_slave_0: left promiscuous mode [ 1346.014843][ T6417] bridge0: port 1(bridge_slave_0) entered disabled state [ 1346.386473][ T30] audit: type=1804 audit(1745134996.182:2663): pid=20762 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.3494" name="/newroot/27/file0" dev="tmpfs" ino=185 res=1 errno=0 [ 1346.408825][ C1] vkms_vblank_simulate: vblank timer overrun [ 1346.424522][T20762] ref_ctr_offset mismatch. inode: 0xb9 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 1346.443549][T20762] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: 0, delta: -1 [ 1346.457419][T20762] ref_ctr decrement failed for inode: 0xb9 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88807f96da00 [ 1346.470501][ T6417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1346.479697][T20762] uprobe: syz.6.3494:20762 failed to unregister, leaking uprobe [ 1346.489676][ T6417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1346.500971][ T6417] bond0 (unregistering): Released all slaves [ 1346.532776][T20711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1346.540098][T20711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1346.597352][T20711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1346.635784][T20711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1346.644019][T20711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1346.670962][T20711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1346.685329][T20767] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3495'. [ 1346.792724][T20711] hsr_slave_0: entered promiscuous mode [ 1346.799064][T20711] hsr_slave_1: entered promiscuous mode [ 1346.808481][T20711] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1346.827722][T20711] Cannot create hsr debugfs directory [ 1346.934372][T20775] smc: net device bond0 applied user defined pnetid SYZ0 [ 1347.255372][ T6417] hsr_slave_0: left promiscuous mode [ 1347.261063][ T6417] hsr_slave_1: left promiscuous mode [ 1347.302630][ T6417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1347.311285][ T6417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1347.320163][ T6417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1347.328079][ T6417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1347.345450][ T6417] veth1_macvtap: left promiscuous mode [ 1347.353352][ T6417] veth0_macvtap: left promiscuous mode [ 1347.360796][ T6417] veth1_vlan: left promiscuous mode [ 1347.366127][ T6417] veth0_vlan: left promiscuous mode [ 1347.778063][T20041] Bluetooth: hci4: command tx timeout [ 1347.905939][T20787] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3502'. [ 1348.156407][ T6417] team0 (unregistering): Port device team_slave_1 removed [ 1348.523344][ T5824] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1348.536250][ T5824] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1348.544713][ T5824] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1348.554068][ T6417] team0 (unregistering): Port device team_slave_0 removed [ 1348.585014][ T5824] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1348.592847][ T5824] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1349.265572][ T5819] bridge0: port 3(syz_tun) entered disabled state [ 1349.312065][ T5819] syz_tun (unregistering): left allmulticast mode [ 1349.342194][ T5819] syz_tun (unregistering): left promiscuous mode [ 1349.360466][ T5819] bridge0: port 3(syz_tun) entered disabled state [ 1349.493819][T20799] lo speed is unknown, defaulting to 1000 [ 1349.504774][T20799] lo speed is unknown, defaulting to 1000 [ 1349.998886][T20041] Bluetooth: hci4: command tx timeout [ 1350.545692][T20799] lo speed is unknown, defaulting to 1000 [ 1350.689317][ T30] audit: type=1400 audit(1745135000.204:2664): avc: denied { setattr } for pid=20815 comm="syz.0.3512" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 [ 1350.770986][T20041] Bluetooth: hci0: command tx timeout [ 1351.251721][ T30] audit: type=1400 audit(1745135000.737:2665): avc: denied { bind } for pid=20822 comm="syz.0.3514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1351.259080][T20711] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1351.316063][T20711] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1351.355907][T20711] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1351.386425][T20711] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1351.410656][T20829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3517'. [ 1351.674442][ T30] audit: type=1400 audit(1745135001.121:2666): avc: denied { listen } for pid=20835 comm="syz.2.3519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1351.695276][ T30] audit: type=1400 audit(1745135001.139:2667): avc: denied { accept } for pid=20835 comm="syz.2.3519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1351.702484][T20799] chnl_net:caif_netlink_parms(): no params data found [ 1351.814963][T20711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1351.836945][T20799] bridge0: port 1(bridge_slave_0) entered blocking state [ 1351.845880][T20799] bridge0: port 1(bridge_slave_0) entered disabled state [ 1351.853244][T20799] bridge_slave_0: entered allmulticast mode [ 1351.860999][T20799] bridge_slave_0: entered promiscuous mode [ 1351.869223][T20799] bridge0: port 2(bridge_slave_1) entered blocking state [ 1351.876512][T20799] bridge0: port 2(bridge_slave_1) entered disabled state [ 1351.884118][T20799] bridge_slave_1: entered allmulticast mode [ 1351.891876][T20799] bridge_slave_1: entered promiscuous mode [ 1351.925641][T20799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1351.937492][T20799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1351.990359][T20711] 8021q: adding VLAN 0 to HW filter on device team0 [ 1352.020176][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1352.027302][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1352.045109][T20799] team0: Port device team_slave_0 added [ 1352.058539][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1352.065672][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1352.080143][T20799] team0: Port device team_slave_1 added [ 1352.135181][T20799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1352.142696][T20799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1352.172266][T20799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1352.186209][T20799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1352.193320][T20799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1352.219513][T20799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1352.233405][T20041] Bluetooth: hci4: command tx timeout [ 1352.261562][T20799] hsr_slave_0: entered promiscuous mode [ 1352.267839][T20799] hsr_slave_1: entered promiscuous mode [ 1352.273785][T20799] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1352.281805][T20799] Cannot create hsr debugfs directory [ 1352.900132][T20799] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1352.959249][T20799] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1352.990187][T20799] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1352.994667][ T30] audit: type=1400 audit(1745135002.355:2668): avc: denied { read } for pid=20869 comm="syz.6.3529" path="socket:[67532]" dev="sockfs" ino=67532 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1353.029509][T20799] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1353.029765][T20041] Bluetooth: hci0: command tx timeout [ 1353.067624][T20711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1353.170308][T20799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1353.185108][T20799] 8021q: adding VLAN 0 to HW filter on device team0 [ 1353.210727][ T6417] bridge0: port 1(bridge_slave_0) entered blocking state [ 1353.217837][ T6417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1353.237440][ T6417] bridge0: port 2(bridge_slave_1) entered blocking state [ 1353.244524][ T6417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1353.764713][T20711] veth0_vlan: entered promiscuous mode [ 1353.793253][T20711] veth1_vlan: entered promiscuous mode [ 1353.851911][T20711] veth0_macvtap: entered promiscuous mode [ 1353.862570][T20871] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 1353.962700][T20711] veth1_macvtap: entered promiscuous mode [ 1353.988447][T20799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1354.006087][T20711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1354.038616][T20711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1354.072051][T20711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1354.094942][T20711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1354.126593][T20711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1354.161250][T20711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1354.182043][T20711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1354.213626][T20711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1354.256491][T20711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1354.289927][T20711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1354.311013][T20711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1354.356611][T20711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1354.378191][T20711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1354.404348][T20711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1354.427046][T20711] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.436796][T20711] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.445497][T20711] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.456274][T20711] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1354.593273][T12501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1354.611614][T12501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1355.100792][ T5927] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1355.138544][ T5927] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1355.215987][T20041] Bluetooth: hci0: command tx timeout [ 1355.256870][T20799] veth0_vlan: entered promiscuous mode [ 1355.275405][T20799] veth1_vlan: entered promiscuous mode [ 1355.374550][T20799] veth0_macvtap: entered promiscuous mode [ 1355.400656][T20799] veth1_macvtap: entered promiscuous mode [ 1355.422948][T20799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1355.433854][T20799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1355.454602][T20799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1355.467495][T20799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1355.479842][T20799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1355.497360][T20799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1355.515294][T20799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1355.543059][T20799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1355.581859][T20799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1355.712631][ T30] audit: type=1400 audit(1745135004.900:2669): avc: denied { mounton } for pid=20938 comm="syz.6.3542" path="/bus" dev="ramfs" ino=67709 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 1355.713212][T20939] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1355.774492][T20799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1355.790609][T20939] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1355.798807][T20799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1355.802680][T20939] overlayfs: failed to get uuid (/file1, err=-95); falling back to uuid=null. [ 1355.829523][T20799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1355.857546][T20799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1355.867698][T20799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1355.884858][T20799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1355.895781][T20799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1355.908013][T20799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1355.919267][T20799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1355.946017][T20799] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1355.975094][T20799] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1355.996197][T20799] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1356.005208][T20799] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1356.012786][T20946] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3545'. [ 1356.067366][ T30] audit: type=1400 audit(1745135005.236:2670): avc: denied { read } for pid=20945 comm="syz.2.3545" path="socket:[67730]" dev="sockfs" ino=67730 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1356.213873][ T6417] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1356.308361][ T6417] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1356.333733][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1356.345785][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1356.364775][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1356.373386][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1356.665600][ T6417] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1356.727647][ T6417] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1356.909069][ T6417] bridge_slave_1: left allmulticast mode [ 1356.914797][ T6417] bridge_slave_1: left promiscuous mode [ 1356.921092][ T6417] bridge0: port 2(bridge_slave_1) entered disabled state [ 1356.932641][ T6417] bridge_slave_0: left allmulticast mode [ 1356.940021][ T6417] bridge_slave_0: left promiscuous mode [ 1356.945815][ T6417] bridge0: port 1(bridge_slave_0) entered disabled state [ 1357.104544][ T9152] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1357.128939][T15401] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1357.186106][ T5824] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1357.195539][ T5824] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1357.203979][ T5824] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1357.213350][ T5824] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1357.221299][ T5824] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1357.279965][ T30] audit: type=1400 audit(1745135006.275:2671): avc: denied { rename } for pid=20958 comm="syz.7.3550" name="file0" dev="tmpfs" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1357.302729][T15401] usb 7-1: Using ep0 maxpacket: 16 [ 1357.315007][ T9152] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1357.329085][ T9152] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1357.340347][ T9152] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1357.780565][T20041] Bluetooth: hci0: command tx timeout [ 1357.780716][ T9152] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1357.804460][T15401] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 1357.812507][T15401] usb 7-1: config 0 has no interface number 0 [ 1357.824113][T15401] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1357.835051][ T30] audit: type=1400 audit(1745135006.873:2672): avc: denied { map } for pid=20969 comm="syz.7.3551" path="socket:[68100]" dev="sockfs" ino=68100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1357.860726][ T9152] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1357.874631][ T9152] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1357.886064][T15401] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1357.897934][ T9152] usb 3-1: config 0 descriptor?? [ 1357.909543][T15401] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1357.924649][T15401] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1357.932921][T15401] usb 7-1: Product: syz [ 1357.937143][T15401] usb 7-1: SerialNumber: syz [ 1357.953557][T15401] usb 7-1: config 0 descriptor?? [ 1357.975655][T15401] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 1357.993680][T15401] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input49 [ 1358.095477][ T6417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1358.109728][ T6417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1358.120661][ T6417] bond0 (unregistering): Released all slaves [ 1358.163408][T20962] lo speed is unknown, defaulting to 1000 [ 1358.170821][T20962] lo speed is unknown, defaulting to 1000 [ 1358.368062][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 1358.552343][ T9152] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 1358.625874][ T9152] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1358.673926][T20962] lo speed is unknown, defaulting to 1000 [ 1358.836465][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1358.838276][ T5916] usb 7-1: USB disconnect, device number 2 [ 1358.843431][ C1] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1358.891683][ T5916] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1359.430387][T20041] Bluetooth: hci4: command tx timeout [ 1359.523259][T20962] chnl_net:caif_netlink_parms(): no params data found [ 1359.590349][ T5905] usb 3-1: USB disconnect, device number 36 [ 1359.869096][ T6417] hsr_slave_0: left promiscuous mode [ 1359.874791][ T6417] hsr_slave_1: left promiscuous mode [ 1359.880442][ T6417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1359.920861][ T6417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1359.934266][ T6417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1360.001395][ T6417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1360.047826][ T6417] veth1_macvtap: left promiscuous mode [ 1360.057216][ T6417] veth0_macvtap: left promiscuous mode [ 1360.117068][ T6417] veth1_vlan: left promiscuous mode [ 1360.165587][ T30] audit: type=1400 audit(1745135009.062:2673): avc: denied { read } for pid=21010 comm="syz.0.3562" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1360.170691][ T6417] veth0_vlan: left promiscuous mode [ 1360.351370][ T30] audit: type=1400 audit(1745135009.062:2674): avc: denied { open } for pid=21010 comm="syz.0.3562" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1360.393356][ T30] audit: type=1400 audit(1745135009.072:2675): avc: denied { ioctl } for pid=21010 comm="syz.0.3562" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1360.684607][ T30] audit: type=1800 audit(1745135009.558:2676): pid=21016 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.3563" name="/" dev="9p" ino=2 res=0 errno=0 [ 1360.949346][ T5905] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1361.541642][ T5905] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1361.560114][ T5905] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1361.583834][ T5905] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1361.593691][ T5905] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1361.608189][ T5905] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1361.630604][T20041] Bluetooth: hci4: command tx timeout [ 1361.647640][ T5905] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1361.657210][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1361.677447][ T5905] usb 1-1: Product: syz [ 1361.681807][ T5905] usb 1-1: Manufacturer: syz [ 1361.691553][ T5905] cdc_wdm 1-1:1.0: skipping garbage [ 1361.697241][ T5905] cdc_wdm 1-1:1.0: skipping garbage [ 1361.703802][ T5905] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1361.710080][ T5905] cdc_wdm 1-1:1.0: Unknown control protocol [ 1361.952357][T21018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1361.961234][T21018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1361.970458][ T5905] usb 1-1: USB disconnect, device number 24 [ 1362.054196][ T30] audit: type=1400 audit(1745135010.830:2677): avc: denied { connect } for pid=21035 comm="syz.7.3569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1362.111859][ T6417] team0 (unregistering): Port device team_slave_1 removed [ 1362.196650][ T6417] team0 (unregistering): Port device team_slave_0 removed [ 1362.288866][ T30] audit: type=1400 audit(1745135011.045:2678): avc: denied { ioctl } for pid=21043 comm="syz.7.3572" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1362.353016][ T30] audit: type=1804 audit(1745135011.111:2679): pid=21047 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.7.3573" name="/newroot/12/file0" dev="tmpfs" ino=91 res=1 errno=0 [ 1363.448985][T20962] bridge0: port 1(bridge_slave_0) entered blocking state [ 1363.460911][T20962] bridge0: port 1(bridge_slave_0) entered disabled state [ 1363.468369][T20962] bridge_slave_0: entered allmulticast mode [ 1363.504023][T21069] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1363.506678][T20962] bridge_slave_0: entered promiscuous mode [ 1363.539437][T20962] bridge0: port 2(bridge_slave_1) entered blocking state [ 1363.550266][T20962] bridge0: port 2(bridge_slave_1) entered disabled state [ 1363.559279][T20962] bridge_slave_1: entered allmulticast mode [ 1363.569592][T20962] bridge_slave_1: entered promiscuous mode [ 1363.602313][T20962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1363.614740][T20962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1363.644010][T20962] team0: Port device team_slave_0 added [ 1363.669133][T20962] team0: Port device team_slave_1 added [ 1363.712033][T20962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1363.722691][T20962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1363.749690][T20962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1363.762347][T20962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1363.769435][T20962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1363.796044][T20962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1363.861385][T20962] hsr_slave_0: entered promiscuous mode [ 1363.867237][T20041] Bluetooth: hci4: command tx timeout [ 1363.873507][T20962] hsr_slave_1: entered promiscuous mode [ 1363.880958][T20962] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1363.889305][T20962] Cannot create hsr debugfs directory [ 1364.076446][ T5927] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1364.167853][ T5927] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1364.264446][ T5927] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1364.317503][ T5927] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1364.430368][T20962] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1364.457414][T20962] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1364.486985][T20962] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1364.515225][T20962] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1364.545123][ T5927] geneve0: left allmulticast mode [ 1364.551238][ T5927] geneve0: left promiscuous mode [ 1364.556995][ T5927] bridge0: port 4(geneve0) entered disabled state [ 1364.583560][ T5927] bridge_slave_1: left allmulticast mode [ 1364.590100][ T5927] bridge_slave_1: left promiscuous mode [ 1364.598266][ T5927] bridge0: port 2(bridge_slave_1) entered disabled state [ 1364.626691][ T5927] bridge_slave_0: left allmulticast mode [ 1364.639344][ T5927] bridge_slave_0: left promiscuous mode [ 1364.651711][ T5927] bridge0: port 1(bridge_slave_0) entered disabled state [ 1364.685145][ T5927] tipc: Resetting bearer [ 1364.858197][ T5927] tipc: Disabling bearer [ 1364.922203][ T5927] dvmrp1 (unregistering): left allmulticast mode [ 1365.080026][ T5927] team0: Port device bridge1 removed [ 1365.326817][ T5927] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1365.335870][ T5927] bond_slave_0: left promiscuous mode [ 1365.344581][ T5927] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1365.353825][ T5927] bond_slave_1: left promiscuous mode [ 1365.359960][ T5927] bond0 (unregistering): Released all slaves [ 1365.370459][ T5927] bond1 (unregistering): Released all slaves [ 1365.394059][T21087] syz.6.3584: vmalloc error: size 33554432, failed to allocated page array size 65536, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1365.425807][T21087] CPU: 0 UID: 0 PID: 21087 Comm: syz.6.3584 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) [ 1365.425826][T21087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1365.425841][T21087] Call Trace: [ 1365.425847][T21087] [ 1365.425853][T21087] dump_stack_lvl+0x16c/0x1f0 [ 1365.425881][T21087] warn_alloc+0x248/0x3a0 [ 1365.425895][T21087] ? __pfx_warn_alloc+0x10/0x10 [ 1365.425911][T21087] ? __get_vm_area_node+0x1b9/0x300 [ 1365.425925][T21087] ? __get_vm_area_node+0x1e5/0x300 [ 1365.425945][T21087] __vmalloc_node_range_noprof+0x1110/0x1540 [ 1365.425966][T21087] ? xp_create_and_assign_umem+0x1b5/0xe10 [ 1365.425985][T21087] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1365.426007][T21087] __kvmalloc_node_noprof+0x2ff/0x600 [ 1365.426018][T21087] ? xp_create_and_assign_umem+0x1b5/0xe10 [ 1365.426033][T21087] ? xp_create_and_assign_umem+0x1b5/0xe10 [ 1365.426051][T21087] ? xp_create_and_assign_umem+0x1b5/0xe10 [ 1365.426065][T21087] xp_create_and_assign_umem+0x1b5/0xe10 [ 1365.426080][T21087] ? dev_get_by_index+0x17c/0x380 [ 1365.426097][T21087] xsk_bind+0x4c6/0x15d0 [ 1365.426110][T21087] ? __pfx_xsk_bind+0x10/0x10 [ 1365.426125][T21087] __sys_bind+0x211/0x260 [ 1365.426135][T21087] ? __pfx___sys_bind+0x10/0x10 [ 1365.426150][T21087] ? rcu_is_watching+0x12/0xc0 [ 1365.426166][T21087] __x64_sys_bind+0x72/0xb0 [ 1365.426175][T21087] ? lockdep_hardirqs_on+0x7c/0x110 [ 1365.426189][T21087] do_syscall_64+0xcd/0x260 [ 1365.426205][T21087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1365.426216][T21087] RIP: 0033:0x7f5726f8e169 [ 1365.426225][T21087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1365.426235][T21087] RSP: 002b:00007f5727e89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1365.426249][T21087] RAX: ffffffffffffffda RBX: 00007f57271b6160 RCX: 00007f5726f8e169 [ 1365.426255][T21087] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 1365.426261][T21087] RBP: 00007f5727010a68 R08: 0000000000000000 R09: 0000000000000000 [ 1365.426267][T21087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1365.426273][T21087] R13: 0000000000000000 R14: 00007f57271b6160 R15: 00007fff561f7cb8 [ 1365.426287][T21087] [ 1365.426310][T21087] Mem-Info: [ 1365.654849][T21087] active_anon:14877 inactive_anon:0 isolated_anon:0 [ 1365.654849][T21087] active_file:20385 inactive_file:39837 isolated_file:0 [ 1365.654849][T21087] unevictable:768 dirty:459 writeback:0 [ 1365.654849][T21087] slab_reclaimable:7731 slab_unreclaimable:114939 [ 1365.654849][T21087] mapped:30109 shmem:10065 pagetables:1024 [ 1365.654849][T21087] sec_pagetables:0 bounce:0 [ 1365.654849][T21087] kernel_misc_reclaimable:0 [ 1365.654849][T21087] free:1249121 free_pcp:4816 free_cma:0 [ 1365.703173][T21087] Node 0 active_anon:59508kB inactive_anon:0kB active_file:81488kB inactive_file:159208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120316kB dirty:1824kB writeback:0kB shmem:38724kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11152kB pagetables:4096kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1365.747458][T21087] Node 1 active_anon:0kB inactive_anon:0kB active_file:52kB inactive_file:140kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120kB dirty:12kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1365.788299][T21087] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1365.815651][T21087] lowmem_reserve[]: 0 2481 2483 2483 2483 [ 1365.821631][T21087] Node 0 DMA32 free:1090744kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0KB active_anon:59592kB inactive_anon:0kB active_file:81488kB inactive_file:157620kB unevictable:1536kB writepending:1820kB present:3129332kB managed:2541508kB mlocked:0kB bounce:0kB free_pcp:768kB local_pcp:124kB free_cma:0kB [ 1365.857702][T21087] lowmem_reserve[]: 0 0 1 1 1 [ 1365.867001][T21087] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB active_anon:16kB inactive_anon:0kB active_file:0kB inactive_file:1588kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:28kB free_cma:0kB [ 1365.894766][T21087] lowmem_reserve[]: 0 0 0 0 0 [ 1365.899805][T21087] Node 1 Normal free:3891968kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:52kB inactive_file:140kB unevictable:1536kB writepending:12kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:18604kB local_pcp:18604kB free_cma:0kB [ 1365.929831][T21087] lowmem_reserve[]: 0 0 0 0 0 [ 1365.934619][T21087] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1365.949846][T21087] Node 0 DMA32: 1457*4kB (UME) 556*8kB (UME) 741*16kB (UME) 344*32kB (UME) 250*64kB (UME) 91*128kB (UME) 39*256kB (UME) 21*512kB (UME) 11*1024kB (ME) 7*2048kB (UME) 240*4096kB (UM) = 1090164kB [ 1365.969798][T21087] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 1365.985604][T21087] Node 1 Normal: 18*4kB (UME) 33*8kB (UME) 55*16kB (UME) 206*32kB (UME) 82*64kB (UME) 32*128kB (UME) 12*256kB (UME) 8*512kB (UME) 5*1024kB (UME) 2*2048kB (UM) 942*4096kB (M) = 3891968kB [ 1366.004850][T21087] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1366.031781][T21087] Node 0 hugepages_total=5 hugepages_free=5 hugepages_surp=2 hugepages_size=2048kB [ 1366.053042][T21087] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1366.053387][ T30] audit: type=1400 audit(1745135014.572:2680): avc: denied { unmount } for pid=20799 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1366.063116][T21087] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1366.083555][T20041] Bluetooth: hci4: command tx timeout [ 1366.107064][T21087] 70287 total pagecache pages [ 1366.113277][T21087] 0 pages in swap cache [ 1366.117431][T21087] Free swap = 124996kB [ 1366.124108][T21087] Total swap = 124996kB [ 1366.128242][T21087] 2097051 pages RAM [ 1366.132884][T21087] 0 pages HighMem/MovableOnly [ 1366.137533][T21087] 429632 pages reserved [ 1366.141811][T21087] 0 pages cma reserved [ 1366.207869][T21097] vlan0: entered allmulticast mode [ 1366.238038][ T5927] tipc: Disabling bearer [ 1366.246995][ T5927] tipc: Left network mode [ 1366.480539][T20962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1366.560934][T20962] 8021q: adding VLAN 0 to HW filter on device team0 [ 1366.608348][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 1366.615507][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1366.647528][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1366.654694][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1366.827715][T21118] lo speed is unknown, defaulting to 1000 [ 1366.864962][T21118] lo speed is unknown, defaulting to 1000 [ 1367.282858][ T5927] hsr_slave_0: left promiscuous mode [ 1367.304567][ T5927] hsr_slave_1: left promiscuous mode [ 1367.328197][ T5927] batman_adv: batadv0: Removing interface: team0 [ 1367.354180][ T5927] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1367.372213][ T5927] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1367.392522][ T5927] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1367.411659][ T5927] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1367.463054][ T5927] veth0_macvtap: left promiscuous mode [ 1367.468932][ T5927] veth1_vlan: left promiscuous mode [ 1367.474489][ T5927] veth0_vlan: left promiscuous mode [ 1368.210471][ T5927] team0 (unregistering): Port device team_slave_1 removed [ 1368.262381][ T5927] team0 (unregistering): Port device team_slave_0 removed [ 1368.597860][T21118] lo speed is unknown, defaulting to 1000 [ 1368.635386][T20962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1369.120306][T20962] veth0_vlan: entered promiscuous mode [ 1369.148811][T20962] veth1_vlan: entered promiscuous mode [ 1369.198449][T20962] veth0_macvtap: entered promiscuous mode [ 1369.238959][T20962] veth1_macvtap: entered promiscuous mode [ 1369.293091][T20962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1369.325119][T20962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1369.345970][T20962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1369.371965][T20962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1369.393571][T20962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1369.425826][T20962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1369.466596][T20962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1369.485585][T20962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1369.519798][T20962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1369.538414][T20962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1369.559779][T20962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1369.581357][T20962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1369.605291][T20962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1369.739560][T20962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1369.757759][T20962] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1369.776355][T20962] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1369.785064][T20962] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1369.804438][T20962] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1369.930018][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1369.947706][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1370.020278][T12501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1370.044490][T12501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1370.663855][T15219] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1370.825414][T15219] usb 3-1: Using ep0 maxpacket: 32 [ 1370.846000][T15219] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1370.881545][T15219] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1370.912340][T15219] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1370.941292][T15219] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1370.968333][T15219] usb 3-1: Product: syz [ 1370.972551][T15219] usb 3-1: Manufacturer: syz [ 1370.982910][T15219] hub 3-1:4.0: USB hub found [ 1371.195920][T15219] hub 3-1:4.0: 2 ports detected [ 1372.810040][ T5824] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1372.821743][ T5824] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1372.832677][ T5824] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1372.842443][ T5824] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1372.851892][ T5824] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1372.895400][T21177] lo speed is unknown, defaulting to 1000 [ 1372.902751][T21177] lo speed is unknown, defaulting to 1000 [ 1372.931619][T15219] hub 3-1:4.0: activate --> -90 [ 1373.073250][T21177] lo speed is unknown, defaulting to 1000 [ 1373.309008][T20041] block nbd6: Receive control failed (result -32) [ 1373.327226][T21186] block nbd6: shutting down sockets [ 1373.353984][T21177] chnl_net:caif_netlink_parms(): no params data found [ 1373.363647][T15401] usb 3-1: USB disconnect, device number 37 [ 1373.462461][T21177] bridge0: port 1(bridge_slave_0) entered blocking state [ 1373.470688][T21177] bridge0: port 1(bridge_slave_0) entered disabled state [ 1373.478311][T21177] bridge_slave_0: entered allmulticast mode [ 1373.485853][T21177] bridge_slave_0: entered promiscuous mode [ 1373.494640][T21177] bridge0: port 2(bridge_slave_1) entered blocking state [ 1373.502266][T21177] bridge0: port 2(bridge_slave_1) entered disabled state [ 1373.509468][T21177] bridge_slave_1: entered allmulticast mode [ 1373.516102][T21177] bridge_slave_1: entered promiscuous mode [ 1373.545125][T21177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1373.562525][T21177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1373.617241][T21177] team0: Port device team_slave_0 added [ 1373.626304][T21177] team0: Port device team_slave_1 added [ 1373.661696][T21177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1373.670016][T21177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1373.702581][T21177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1373.718187][T21177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1373.725192][T21177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1373.751524][T21177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1373.793461][T21177] hsr_slave_0: entered promiscuous mode [ 1373.799605][T21177] hsr_slave_1: entered promiscuous mode [ 1373.805516][T21177] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1373.813279][T21177] Cannot create hsr debugfs directory [ 1373.922455][T21204] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input51 [ 1373.988715][T21207] tipc: Failed to remove unknown binding: 66,1,1/4:4157942345/4157942347 [ 1374.001951][T21207] tipc: Failed to remove unknown binding: 66,1,1/4:4157942345/4157942347 [ 1374.012531][T21177] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1374.014240][T21207] tipc: Failed to remove unknown binding: 66,1,1/4:4157942345/4157942347 [ 1374.122451][T21177] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1374.198257][T21177] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1374.283188][T21177] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1374.488542][T21177] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1374.533564][T21177] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1374.545436][T21177] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1374.556162][T21177] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1374.663882][T21177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1374.682183][T21177] 8021q: adding VLAN 0 to HW filter on device team0 [ 1374.695442][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 1374.702556][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1374.730614][T21128] bridge0: port 2(bridge_slave_1) entered blocking state [ 1374.737761][T21128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1374.892193][T21177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1375.028236][T21177] veth0_vlan: entered promiscuous mode [ 1375.037840][T21177] veth1_vlan: entered promiscuous mode [ 1375.057642][T20041] Bluetooth: hci4: command tx timeout [ 1375.069207][T21177] veth0_macvtap: entered promiscuous mode [ 1375.076976][T21177] veth1_macvtap: entered promiscuous mode [ 1375.092581][T21177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1375.103516][T21177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1375.114364][ T5905] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1375.122026][T21177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1375.132581][T21177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1375.142404][T21177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1375.153585][T21177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1375.164087][T21177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1375.174734][T21177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1375.185566][T21177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1375.198132][T21177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1375.208809][T21177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1375.219419][T21177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1375.231992][T21177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1375.243064][T21177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1375.253728][T21177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1375.263648][T21177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1375.274539][T21177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1375.285665][T21177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1375.296739][T21177] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1375.305849][T21177] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1375.314654][T21177] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1375.323624][T21177] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1375.325430][ T5905] usb 1-1: Using ep0 maxpacket: 8 [ 1375.347476][ T5905] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1375.365748][ T5905] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1375.376345][ T5905] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1375.390502][ T5905] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1375.407373][ T5905] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1375.417546][ T5905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1375.476494][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1375.495632][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1375.518178][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1375.526131][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1375.546573][ T30] audit: type=1400 audit(1745135023.458:2681): avc: denied { read write } for pid=21235 comm="syz.6.3629" name="file0" dev="fuse" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1375.601639][ T30] audit: type=1400 audit(1745135023.458:2682): avc: denied { open } for pid=21235 comm="syz.6.3629" path="/64/file0/file0" dev="fuse" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1375.651001][ T5905] usb 1-1: GET_CAPABILITIES returned 0 [ 1375.657861][ T5905] usbtmc 1-1:16.0: can't read capabilities [ 1375.876052][T15219] usb 1-1: USB disconnect, device number 25 [ 1376.703936][T15219] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1376.868349][T15219] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1376.885169][T15219] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1376.909308][T15219] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1376.932499][T15219] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1376.946550][T15219] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1376.966317][T15219] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1376.988491][T15219] usb 1-1: config 0 descriptor?? [ 1377.502829][T15219] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 1377.518294][T15219] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1378.099115][T21261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1378.107898][T21261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1378.462980][T15401] usb 1-1: USB disconnect, device number 26 [ 1378.796483][T21268] kvm: pic: non byte read [ 1378.801826][T21268] kvm: pic: level sensitive irq not supported [ 1378.801908][T21268] kvm: pic: non byte read [ 1379.297844][T21268] kvm: pic: level sensitive irq not supported [ 1379.297905][T21268] kvm: pic: non byte read [ 1379.309252][T21268] kvm: pic: level sensitive irq not supported [ 1379.309311][T21268] kvm: pic: non byte read [ 1379.330666][ T5824] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1379.341740][ T5824] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1379.351864][ T5824] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1379.360459][ T5824] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1379.366438][ T30] audit: type=1804 audit(1745135027.022:2683): pid=21274 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.3639" name="file0" dev="ramfs" ino=71751 res=1 errno=0 [ 1379.367892][ T5824] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1379.435402][T21271] lo speed is unknown, defaulting to 1000 [ 1379.446996][T21271] lo speed is unknown, defaulting to 1000 [ 1379.940502][T21271] lo speed is unknown, defaulting to 1000 [ 1380.340577][ T30] audit: type=1326 audit(1745135027.939:2684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21299 comm="syz.2.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa67b78e169 code=0x7ffc0000 [ 1380.448395][ T30] audit: type=1326 audit(1745135027.939:2685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21299 comm="syz.2.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa67b78e169 code=0x7ffc0000 [ 1380.505554][T21271] chnl_net:caif_netlink_parms(): no params data found [ 1380.513717][ T30] audit: type=1326 audit(1745135027.939:2686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21299 comm="syz.2.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7fa67b78e169 code=0x7ffc0000 [ 1380.579050][ T30] audit: type=1326 audit(1745135027.939:2687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21299 comm="syz.2.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa67b78e169 code=0x7ffc0000 [ 1380.614477][ T30] audit: type=1326 audit(1745135027.939:2688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21299 comm="syz.2.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa67b78e169 code=0x7ffc0000 [ 1380.645555][ T30] audit: type=1400 audit(1745135028.144:2689): avc: denied { mounton } for pid=21305 comm="syz.0.3650" path="/744/file0" dev="tmpfs" ino=3976 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1380.728150][T21271] bridge0: port 1(bridge_slave_0) entered blocking state [ 1380.739037][T21271] bridge0: port 1(bridge_slave_0) entered disabled state [ 1380.753420][ T30] audit: type=1400 audit(1745135028.163:2690): avc: denied { setattr } for pid=21305 comm="syz.0.3650" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1380.780957][T21271] bridge_slave_0: entered allmulticast mode [ 1380.788223][T21271] bridge_slave_0: entered promiscuous mode [ 1380.796127][T21271] bridge0: port 2(bridge_slave_1) entered blocking state [ 1380.809938][T21271] bridge0: port 2(bridge_slave_1) entered disabled state [ 1380.817059][T21271] bridge_slave_1: entered allmulticast mode [ 1380.826236][T21271] bridge_slave_1: entered promiscuous mode [ 1380.863673][T21271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1380.928459][T21271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1380.950250][ T30] audit: type=1400 audit(1745135028.509:2691): avc: denied { read } for pid=21315 comm="syz.0.3652" laddr=::1 lport=20000 faddr=::1 fport=55132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1380.954052][T21315] dccp_close: ABORT with 32 bytes unread [ 1381.002327][T21271] team0: Port device team_slave_0 added [ 1381.010297][T21271] team0: Port device team_slave_1 added [ 1381.052216][ T30] audit: type=1400 audit(1745135028.603:2692): avc: denied { shutdown } for pid=21317 comm="syz.6.3653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1381.083645][T21271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1381.090702][T21271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1381.121621][T21271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1381.134785][T21271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1381.141850][T21271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1381.168177][T21271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1381.241474][T21271] hsr_slave_0: entered promiscuous mode [ 1381.248575][T21271] hsr_slave_1: entered promiscuous mode [ 1381.260442][T21271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1381.267996][T21271] Cannot create hsr debugfs directory [ 1381.665481][ T5824] Bluetooth: hci4: command tx timeout [ 1382.559898][T20041] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1382.569930][T20041] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1382.582855][T20041] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1382.591337][T20041] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1382.598840][T20041] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1383.867183][ T5824] Bluetooth: hci4: command tx timeout [ 1384.810207][ T5824] Bluetooth: hci5: command tx timeout [ 1386.090484][ T5824] Bluetooth: hci4: command tx timeout [ 1387.031099][ T5824] Bluetooth: hci5: command tx timeout [ 1388.313901][ T5824] Bluetooth: hci4: command tx timeout [ 1389.262509][ T5824] Bluetooth: hci5: command tx timeout [ 1391.489146][ T5824] Bluetooth: hci5: command tx timeout [ 1397.667866][T20041] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1397.677927][T20041] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1397.685797][T20041] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1397.694936][T20041] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1397.703050][T20041] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1398.750438][T20041] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1398.759543][T20041] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1398.767627][T20041] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1398.777204][T20041] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1398.785626][T20041] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1399.859970][T20041] Bluetooth: hci0: command tx timeout [ 1400.982449][T20041] Bluetooth: hci6: command tx timeout [ 1402.115480][T20041] Bluetooth: hci0: command tx timeout [ 1402.255761][ T5824] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1402.263772][ T5824] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1402.273754][ T5824] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1402.281511][ T5824] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1402.289368][ T5824] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1403.195309][T20041] Bluetooth: hci6: command tx timeout [ 1404.319041][T20041] Bluetooth: hci0: command tx timeout [ 1404.478232][T20041] Bluetooth: hci7: command tx timeout [ 1405.418908][T20041] Bluetooth: hci6: command tx timeout [ 1406.530718][T20041] Bluetooth: hci0: command tx timeout [ 1406.701917][T20041] Bluetooth: hci7: command tx timeout [ 1407.642512][T20041] Bluetooth: hci6: command tx timeout [ 1408.925410][T20041] Bluetooth: hci7: command tx timeout [ 1411.160114][ T5824] Bluetooth: hci7: command tx timeout [ 1444.086395][T20041] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1444.096388][T20041] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1444.105598][T20041] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1444.113895][T20041] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1444.122366][T20041] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1446.302132][T20041] Bluetooth: hci8: command tx timeout [ 1446.741734][ T5824] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1446.751805][ T5824] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1446.760499][ T5824] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1446.768961][ T5824] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1446.776529][ T5824] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1448.523540][T20041] Bluetooth: hci8: command tx timeout [ 1448.951188][T20041] Bluetooth: hci9: command tx timeout [ 1450.747205][T20041] Bluetooth: hci8: command tx timeout [ 1451.174868][T20041] Bluetooth: hci9: command tx timeout [ 1452.970709][T20041] Bluetooth: hci8: command tx timeout [ 1453.056570][T20041] Bluetooth: hci2: command 0x0406 tx timeout [ 1453.398350][ T5824] Bluetooth: hci9: command tx timeout [ 1455.632811][ T5824] Bluetooth: hci9: command tx timeout [ 1462.266691][T20041] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1462.275604][T20041] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1462.283767][T20041] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1462.291966][T20041] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1462.299552][T20041] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1463.269632][T20041] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1463.278407][T20041] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1463.288601][T20041] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1463.296829][T20041] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1463.304383][T20041] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1464.516631][T20041] Bluetooth: hci10: command tx timeout [ 1465.542956][T20041] Bluetooth: hci11: command tx timeout [ 1466.751166][T20041] Bluetooth: hci10: command tx timeout [ 1466.776334][ T5824] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1466.786517][ T5824] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1466.796427][ T5824] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1466.804531][ T5824] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1466.812712][ T5824] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1467.777396][T20041] Bluetooth: hci11: command tx timeout [ 1468.963880][T20041] Bluetooth: hci10: command tx timeout [ 1469.049421][T20041] Bluetooth: hci12: command tx timeout [ 1469.991459][T20041] Bluetooth: hci11: command tx timeout [ 1471.187560][T20041] Bluetooth: hci10: command tx timeout [ 1471.273128][T20041] Bluetooth: hci12: command tx timeout [ 1472.214034][T20041] Bluetooth: hci11: command tx timeout [ 1473.496782][T20041] Bluetooth: hci12: command tx timeout [ 1475.720387][T20041] Bluetooth: hci12: command tx timeout [ 1509.316769][ T5824] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1509.326677][ T5824] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1509.334828][ T5824] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1509.344696][ T5824] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1509.353381][ T5824] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1511.369189][T21398] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1511.379553][T21398] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1511.388687][T21398] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1511.396771][T21398] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1511.404312][T21398] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1511.555297][T21398] Bluetooth: hci13: command tx timeout [ 1513.265773][T21398] Bluetooth: hci5: command 0x0406 tx timeout [ 1513.265865][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 1513.607888][ T5824] Bluetooth: hci14: command tx timeout [ 1513.789806][ T5824] Bluetooth: hci13: command tx timeout [ 1515.843460][ T5824] Bluetooth: hci14: command tx timeout [ 1516.013298][ T5824] Bluetooth: hci13: command tx timeout [ 1518.055636][ T5824] Bluetooth: hci14: command tx timeout [ 1518.226231][ T5824] Bluetooth: hci13: command tx timeout [ 1520.279284][ T5824] Bluetooth: hci14: command tx timeout [ 1526.889691][T20041] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1526.899576][T20041] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1526.909421][T20041] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1526.917567][T20041] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1526.927343][T20041] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1527.892773][T21398] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1527.901053][T21398] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1527.910971][T21398] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1527.918983][T21398] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1527.927456][T21398] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1529.098666][T21398] Bluetooth: hci15: command tx timeout [ 1529.686581][T21398] Bluetooth: hci0: command 0x0406 tx timeout [ 1529.694775][ T5836] Bluetooth: hci6: command 0x0406 tx timeout [ 1530.114195][ T5824] Bluetooth: hci16: command tx timeout [ 1531.311850][ T5824] Bluetooth: hci15: command tx timeout [ 1531.400611][T20041] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 1531.409020][T20041] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 1531.417318][T20041] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 1531.426574][T20041] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 1531.434182][T20041] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 1532.337944][T20041] Bluetooth: hci16: command tx timeout [ 1533.546015][ T5824] Bluetooth: hci15: command tx timeout [ 1533.622226][ T5824] Bluetooth: hci17: command tx timeout [ 1534.561582][ T5824] Bluetooth: hci16: command tx timeout [ 1535.164639][ T5824] Bluetooth: hci7: command 0x0406 tx timeout [ 1535.759014][T20041] Bluetooth: hci15: command tx timeout [ 1535.855225][T20041] Bluetooth: hci17: command tx timeout [ 1536.795796][T20041] Bluetooth: hci16: command tx timeout [ 1538.067964][T20041] Bluetooth: hci17: command tx timeout [ 1540.291676][T20041] Bluetooth: hci17: command tx timeout [ 1543.884017][ T31] INFO: task kdevtmpfs:26 blocked for more than 143 seconds. [ 1543.891467][ T31] Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 [ 1543.899178][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1543.907868][ T31] task:kdevtmpfs state:D stack:25432 pid:26 tgid:26 ppid:2 task_flags:0x208140 flags:0x00004000 [ 1543.919773][ T31] Call Trace: [ 1543.923030][ T31] [ 1543.925944][ T31] __schedule+0x116f/0x5de0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1543.930447][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 1543.935373][ T31] ? __pfx___schedule+0x10/0x10 [ 1543.937631][ T30] audit: type=1400 audit(1745135180.961:2693): avc: denied { write } for pid=5807 comm="syz-executor" path="pipe:[4614]" dev="pipefs" ino=4614 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1543.940497][ T31] ? find_held_lock+0x2b/0x80 [ 1543.968698][ T31] ? schedule+0x2d7/0x3a0 [ 1543.977654][ T31] schedule+0xe7/0x3a0 [ 1543.981833][ T31] schedule_timeout+0x257/0x290 [ 1544.000107][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1544.005540][ T31] ? mark_held_locks+0x49/0x80 [ 1544.010301][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1544.015527][ T31] __wait_for_common+0x2fc/0x4e0 [ 1544.020467][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1544.025903][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 1544.031366][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1544.036582][ T31] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 1544.044842][ T31] ? check_flush_dependency.part.0+0x114/0x340 [ 1544.051000][ T31] __flush_workqueue+0x3e2/0x1230 [ 1544.056086][ T31] ? rcu_is_watching+0x12/0xc0 [ 1544.060847][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 1544.066396][ T31] ? __mutex_lock+0x1ca/0xb90 [ 1544.071078][ T31] md_alloc+0x30/0x1080 [ 1544.075222][ T31] md_probe+0x6e/0xd0 [ 1544.079997][ T31] ? __pfx_md_probe+0x10/0x10 [ 1544.084648][ T31] blk_probe_dev+0x116/0x1a0 [ 1544.090200][ T31] blk_request_module+0x16/0xb0 [ 1544.095051][ T31] blkdev_get_no_open+0x7a/0xe0 [ 1544.099993][ T31] bdev_statx+0x98/0x5c0 [ 1544.104235][ T31] vfs_getattr_nosec+0x38d/0x430 [ 1544.109296][ T31] ? __pfx_shmem_getattr+0x10/0x10 [ 1544.114400][ T31] vfs_getattr+0x4a/0x60 [ 1544.118643][ T31] handle_remove+0x12e/0x6f0 [ 1544.123288][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1544.128480][ T31] ? __pfx_handle_remove+0x10/0x10 [ 1544.133626][ T31] ? trace_sched_exit_tp+0xde/0x130 [ 1544.138805][ T31] ? __schedule+0x1186/0x5de0 [ 1544.143529][ T31] ? __lock_acquire+0xaa4/0x1ba0 [ 1544.148444][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 1544.153694][ T31] ? find_held_lock+0x2b/0x80 [ 1544.158375][ T31] ? devtmpfs_work_loop+0xe1/0x900 [ 1544.163558][ T31] devtmpfs_work_loop+0x350/0x900 [ 1544.168582][ T31] ? __pfx_devtmpfs_work_loop+0x10/0x10 [ 1544.174154][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1544.179938][ T31] ? try_to_wake_up+0x157/0x1680 [ 1544.186001][ T31] ? rcu_is_watching+0x12/0xc0 [ 1544.190772][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1544.196623][ T31] ? __pfx_devtmpfsd+0x10/0x10 [ 1544.201365][ T31] devtmpfsd+0x4c/0x50 [ 1544.206350][ T31] kthread+0x3c2/0x780 [ 1544.210416][ T31] ? __pfx_kthread+0x10/0x10 [ 1544.214983][ T31] ? __pfx_kthread+0x10/0x10 [ 1544.219670][ T31] ? __pfx_kthread+0x10/0x10 [ 1544.224245][ T31] ? __pfx_kthread+0x10/0x10 [ 1544.230942][ T31] ? rcu_is_watching+0x12/0xc0 [ 1544.235716][ T31] ? __pfx_kthread+0x10/0x10 [ 1544.240375][ T31] ret_from_fork+0x45/0x80 [ 1544.244770][ T31] ? __pfx_kthread+0x10/0x10 [ 1544.249377][ T31] ret_from_fork_asm+0x1a/0x30 [ 1544.254143][ T31] [ 1544.257230][ T31] INFO: task kworker/0:5:5916 blocked for more than 143 seconds. [ 1544.264976][ T31] Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 [ 1544.272697][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1544.281399][ T31] task:kworker/0:5 state:D stack:18392 pid:5916 tgid:5916 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1544.293396][ T31] Workqueue: events switchdev_deferred_process_work [ 1544.300720][ T31] Call Trace: [ 1544.303991][ T31] [ 1544.306896][ T31] __schedule+0x116f/0x5de0 [ 1544.311402][ T31] ? __pfx_htab_lru_map_delete_elem+0x10/0x10 [ 1544.317459][ T31] ? __lock_acquire+0xa91/0x1ba0 [ 1544.322527][ T31] ? __pfx___schedule+0x10/0x10 [ 1544.327390][ T31] ? find_held_lock+0x2b/0x80 [ 1544.332063][ T31] ? schedule+0x2d7/0x3a0 [ 1544.336389][ T31] schedule+0xe7/0x3a0 [ 1544.340433][ T31] schedule_preempt_disabled+0x13/0x30 [ 1544.345921][ T31] __mutex_lock+0x6c7/0xb90 [ 1544.350403][ T31] ? switchdev_deferred_process_work+0xe/0x20 [ 1544.356490][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1544.361513][ T31] ? debug_object_deactivate+0x1ec/0x3a0 [ 1544.367197][ T31] ? switchdev_deferred_process_work+0xe/0x20 [ 1544.373239][ T31] ? rtnl_lock+0x9/0x20 [ 1544.377397][ T31] switchdev_deferred_process_work+0xe/0x20 [ 1544.383281][ T31] process_one_work+0x9cc/0x1b70 [ 1544.388338][ T31] ? __pfx_process_one_work+0x10/0x10 [ 1544.393701][ T31] ? assign_work+0x1a0/0x250 [ 1544.398298][ T31] worker_thread+0x6c8/0xf10 [ 1544.402883][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1544.408743][ T31] kthread+0x3c2/0x780 [ 1544.412812][ T31] ? __pfx_kthread+0x10/0x10 [ 1544.417371][ T31] ? __pfx_kthread+0x10/0x10 [ 1544.421983][ T31] ? __pfx_kthread+0x10/0x10 [ 1544.426559][ T31] ? __pfx_kthread+0x10/0x10 [ 1544.431194][ T31] ? rcu_is_watching+0x12/0xc0 [ 1544.435935][ T31] ? __pfx_kthread+0x10/0x10 [ 1544.440518][ T31] ret_from_fork+0x45/0x80 [ 1544.444911][ T31] ? __pfx_kthread+0x10/0x10 [ 1544.449470][ T31] ret_from_fork_asm+0x1a/0x30 [ 1544.454320][ T31] [ 1544.457336][ T31] INFO: task kworker/u8:8:5927 blocked for more than 143 seconds. [ 1544.465179][ T31] Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 [ 1544.472830][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1544.481469][ T31] task:kworker/u8:8 state:D stack:20824 pid:5927 tgid:5927 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1544.493507][ T31] Workqueue: netns cleanup_net [ 1544.498262][ T31] Call Trace: [ 1544.501513][ T31] [ 1544.504690][ T31] __schedule+0x116f/0x5de0 [ 1544.509263][ T31] ? mark_held_locks+0x49/0x80 [ 1544.514879][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 1544.519827][ T31] ? __pfx___schedule+0x10/0x10 [ 1544.524662][ T31] ? find_held_lock+0x2b/0x80 [ 1544.529344][ T31] ? schedule+0x2d7/0x3a0 [ 1544.533651][ T31] schedule+0xe7/0x3a0 [ 1544.537790][ T31] schedule_preempt_disabled+0x13/0x30 [ 1544.543240][ T31] __mutex_lock+0x6c7/0xb90 [ 1544.547746][ T31] ? netdev_run_todo+0xe33/0x1320 [ 1544.552784][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1544.557910][ T31] ? __pfx_process_timeout+0x10/0x10 [ 1544.563206][ T31] ? rcu_barrier+0x341/0x6e0 [ 1544.567974][ T31] ? netdev_run_todo+0xe33/0x1320 [ 1544.573014][ T31] ? rtnl_lock+0x9/0x20 [ 1544.577169][ T31] netdev_run_todo+0xe33/0x1320 [ 1544.582153][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 1544.587450][ T31] ? unregister_netdevice_queue+0x22e/0x3f0 [ 1544.593387][ T31] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1544.599629][ T31] ? batadv_meshif_destroy_vlan+0xdf/0x160 [ 1544.605506][ T31] default_device_exit_batch+0x858/0xaf0 [ 1544.611289][ T31] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1544.617439][ T31] ? __pfx___might_resched+0x10/0x10 [ 1544.623662][ T31] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1544.629831][ T31] ops_exit_list+0x128/0x180 [ 1544.634499][ T31] cleanup_net+0x5c1/0xb30 [ 1544.638911][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 1544.643951][ T31] ? rcu_is_watching+0x12/0xc0 [ 1544.648709][ T31] process_one_work+0x9cc/0x1b70 [ 1544.653677][ T31] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 1544.659820][ T31] ? __pfx_process_one_work+0x10/0x10 [ 1544.665230][ T31] ? assign_work+0x1a0/0x250 [ 1544.669795][ T31] worker_thread+0x6c8/0xf10 [ 1544.674376][ T31] ? __kthread_parkme+0x19e/0x250 [ 1544.679405][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1544.684492][ T31] kthread+0x3c2/0x780 [ 1544.688688][ T31] ? __pfx_kthread+0x10/0x10 [ 1544.693266][ T31] ? __pfx_kthread+0x10/0x10 [ 1544.697872][ T31] ? __pfx_kthread+0x10/0x10 [ 1544.702452][ T31] ? __pfx_kthread+0x10/0x10 [ 1544.707106][ T31] ? rcu_is_watching+0x12/0xc0 [ 1544.711875][ T31] ? __pfx_kthread+0x10/0x10 [ 1544.716438][ T31] ret_from_fork+0x45/0x80 [ 1544.720876][ T31] ? __pfx_kthread+0x10/0x10 [ 1544.725453][ T31] ret_from_fork_asm+0x1a/0x30 [ 1544.730266][ T31] [ 1544.734012][ T31] INFO: task kworker/0:0:9251 blocked for more than 144 seconds. [ 1544.745719][ T31] Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 [ 1544.753394][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1544.762064][ T31] task:kworker/0:0 state:D stack:21688 pid:9251 tgid:9251 ppid:2 task_flags:0x4288060 flags:0x00004000 [ 1544.774119][ T31] Workqueue: md_misc mddev_delayed_delete [ 1544.779817][ T31] Call Trace: [ 1544.783157][ T31] [ 1544.786067][ T31] __schedule+0x116f/0x5de0 [ 1544.790555][ T31] ? __lock_acquire+0xa91/0x1ba0 [ 1544.795540][ T31] ? __pfx___schedule+0x10/0x10 [ 1544.800370][ T31] ? find_held_lock+0x2b/0x80 [ 1544.805047][ T31] ? schedule+0x2d7/0x3a0 [ 1544.809364][ T31] schedule+0xe7/0x3a0 [ 1544.813421][ T31] schedule_timeout+0x257/0x290 [ 1544.818309][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1544.823662][ T31] ? mark_held_locks+0x49/0x80 [ 1544.828442][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1544.833617][ T31] __wait_for_common+0x2fc/0x4e0 [ 1544.838589][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1544.844474][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 1544.849959][ T31] ? devtmpfs_submit_req+0x94/0x100 [ 1544.855143][ T31] devtmpfs_submit_req+0xa8/0x100 [ 1544.860417][ T31] devtmpfs_delete_node+0xf6/0x160 [ 1544.865572][ T31] ? __pfx_devtmpfs_delete_node+0x10/0x10 [ 1544.871307][ T31] ? __call_rcu_common.constprop.0+0x3e5/0x9f0 [ 1544.877459][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1544.882770][ T31] ? kernfs_put+0x4e/0x60 [ 1544.887107][ T31] ? sysfs_remove_group+0xc6/0x180 [ 1544.892224][ T31] device_del+0x734/0x9f0 [ 1544.896536][ T31] ? __pfx_device_del+0x10/0x10 [ 1544.901430][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1544.906625][ T31] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1544.911882][ T31] del_gendisk+0x486/0xc40 [ 1544.916298][ T31] ? __pfx_del_gendisk+0x10/0x10 [ 1544.921310][ T31] ? kernfs_put.part.0+0x18b/0x630 [ 1544.926406][ T31] md_kobj_release+0xb2/0x100 [ 1544.931068][ T31] kobject_put+0x1e4/0x5a0 [ 1544.935521][ T31] process_one_work+0x9cc/0x1b70 [ 1544.940446][ T31] ? __pfx_disk_events_workfn+0x10/0x10 [ 1544.946041][ T31] ? __pfx_process_one_work+0x10/0x10 [ 1544.952139][ T31] ? assign_work+0x1a0/0x250 [ 1544.956771][ T31] worker_thread+0x6c8/0xf10 [ 1544.961340][ T31] ? __kthread_parkme+0x19e/0x250 [ 1544.966412][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1544.971501][ T31] kthread+0x3c2/0x780 [ 1544.975772][ T31] ? __pfx_kthread+0x10/0x10 [ 1544.980352][ T31] ? __pfx_kthread+0x10/0x10 [ 1544.985025][ T31] ? __pfx_kthread+0x10/0x10 [ 1544.989603][ T31] ? __pfx_kthread+0x10/0x10 [ 1544.994163][ T31] ? rcu_is_watching+0x12/0xc0 [ 1544.998935][ T31] ? __pfx_kthread+0x10/0x10 [ 1545.003501][ T31] ret_from_fork+0x45/0x80 [ 1545.007993][ T31] ? __pfx_kthread+0x10/0x10 [ 1545.012570][ T31] ret_from_fork_asm+0x1a/0x30 [ 1545.017549][ T31] [ 1545.020575][ T31] INFO: task kworker/u8:7:12501 blocked for more than 144 seconds. [ 1545.028532][ T31] Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 [ 1545.036129][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1545.044784][ T31] task:kworker/u8:7 state:D stack:22280 pid:12501 tgid:12501 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1545.056861][ T31] Workqueue: events_unbound linkwatch_event [ 1545.063479][ T31] Call Trace: [ 1545.066756][ T31] [ 1545.069675][ T31] __schedule+0x116f/0x5de0 [ 1545.074245][ T31] ? __pfx_debug_object_activate+0x10/0x10 [ 1545.080037][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 1545.084984][ T31] ? __pfx___schedule+0x10/0x10 [ 1545.089824][ T31] ? find_held_lock+0x2b/0x80 [ 1545.094718][ T31] ? schedule+0x2d7/0x3a0 [ 1545.099057][ T31] schedule+0xe7/0x3a0 [ 1545.103138][ T31] schedule_preempt_disabled+0x13/0x30 [ 1545.108592][ T31] __mutex_lock+0x6c7/0xb90 [ 1545.113171][ T31] ? linkwatch_event+0x51/0xc0 [ 1545.117936][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1545.122939][ T31] ? __lock_acquire+0xaa4/0x1ba0 [ 1545.127878][ T31] ? debug_object_deactivate+0x1ec/0x3a0 [ 1545.133492][ T31] ? linkwatch_event+0x51/0xc0 [ 1545.138304][ T31] ? rtnl_lock+0x9/0x20 [ 1545.142432][ T31] linkwatch_event+0x51/0xc0 [ 1545.147028][ T31] ? __pfx_linkwatch_event+0x10/0x10 [ 1545.152301][ T31] ? rcu_is_watching+0x12/0xc0 [ 1545.157136][ T31] process_one_work+0x9cc/0x1b70 [ 1545.162070][ T31] ? __pfx_batadv_nc_worker+0x10/0x10 [ 1545.167546][ T31] ? __pfx_process_one_work+0x10/0x10 [ 1545.173452][ T31] ? assign_work+0x1a0/0x250 [ 1545.178138][ T31] worker_thread+0x6c8/0xf10 [ 1545.182739][ T31] ? __kthread_parkme+0x19e/0x250 [ 1545.187770][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1545.192917][ T31] kthread+0x3c2/0x780 [ 1545.196972][ T31] ? __pfx_kthread+0x10/0x10 [ 1545.201590][ T31] ? __pfx_kthread+0x10/0x10 [ 1545.206152][ T31] ? __pfx_kthread+0x10/0x10 [ 1545.210930][ T31] ? __pfx_kthread+0x10/0x10 [ 1545.215508][ T31] ? rcu_is_watching+0x12/0xc0 [ 1545.220347][ T31] ? __pfx_kthread+0x10/0x10 [ 1545.224926][ T31] ret_from_fork+0x45/0x80 [ 1545.229313][ T31] ? __pfx_kthread+0x10/0x10 [ 1545.233889][ T31] ret_from_fork_asm+0x1a/0x30 [ 1545.238637][ T31] [ 1545.241748][ T31] INFO: task syz-executor:20799 blocked for more than 144 seconds. [ 1545.249620][ T31] Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 [ 1545.257344][ T31] Blocked by coredump. [ 1545.261912][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1545.270604][ T31] task:syz-executor state:D stack:23768 pid:20799 tgid:20799 ppid:1 task_flags:0x40054c flags:0x00004006 [ 1545.283038][ T31] Call Trace: [ 1545.286358][ T31] [ 1545.289269][ T31] __schedule+0x116f/0x5de0 [ 1545.293747][ T31] ? stack_depot_save_flags+0x28/0xa50 [ 1545.299246][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 1545.304177][ T31] ? __pfx___schedule+0x10/0x10 [ 1545.309059][ T31] ? find_held_lock+0x2b/0x80 [ 1545.313722][ T31] ? schedule+0x2d7/0x3a0 [ 1545.318074][ T31] schedule+0xe7/0x3a0 [ 1545.322142][ T31] schedule_preempt_disabled+0x13/0x30 [ 1545.327720][ T31] __mutex_lock+0x6c7/0xb90 [ 1545.332203][ T31] ? tun_chr_close+0x38/0x230 [ 1545.336856][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1545.344217][ T31] ? locks_remove_file+0x39e/0x5b0 [ 1545.349489][ T31] ? __pfx_locks_remove_file+0x10/0x10 [ 1545.354997][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 1545.360101][ T31] ? tun_chr_close+0x38/0x230 [ 1545.364751][ T31] ? rtnl_lock+0x9/0x20 [ 1545.368875][ T31] tun_chr_close+0x38/0x230 [ 1545.373422][ T31] __fput+0x3ff/0xb70 [ 1545.377394][ T31] task_work_run+0x14d/0x240 [ 1545.381998][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1545.387085][ T31] do_exit+0xafb/0x2c30 [ 1545.392001][ T31] ? __pfx_do_exit+0x10/0x10 [ 1545.396585][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 1545.401591][ T31] ? find_held_lock+0x2b/0x80 [ 1545.406267][ T31] do_group_exit+0xd3/0x2a0 [ 1545.410744][ T31] get_signal+0x2673/0x26d0 [ 1545.415282][ T31] ? kmem_cache_free+0x2d4/0x4d0 [ 1545.420192][ T31] ? find_held_lock+0x2b/0x80 [ 1545.424898][ T31] ? do_sys_openat2+0x1b0/0x1d0 [ 1545.429752][ T31] ? __pfx_get_signal+0x10/0x10 [ 1545.434674][ T31] ? do_sys_openat2+0x157/0x1d0 [ 1545.439530][ T31] arch_do_signal_or_restart+0x8f/0x7d0 [ 1545.445181][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1545.451318][ T31] ? __pfx___x64_sys_umount+0x10/0x10 [ 1545.456764][ T31] syscall_exit_to_user_mode+0x150/0x2a0 [ 1545.462395][ T31] do_syscall_64+0xda/0x260 [ 1545.466911][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1545.472792][ T31] RIP: 0033:0x7efde3b8da61 [ 1545.477266][ T31] RSP: 002b:00007ffeda9aa100 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 1545.485932][ T31] RAX: fffffffffffffffc RBX: 00007efde3c10854 RCX: 00007efde3b8da61 [ 1545.493936][ T31] RDX: 0000000000090800 RSI: 00007ffeda9ab310 RDI: 00000000ffffff9c [ 1545.502477][ T31] RBP: 00007ffeda9ab310 R08: 0000000000000000 R09: 0000000000000000 [ 1545.510562][ T31] R10: 0000000000000000 R11: 0000000000000287 R12: 00007ffeda9ab310 [ 1545.518506][ T31] R13: 00007efde3c10854 R14: 000000000014cf21 R15: 00007ffeda9ad4d0 [ 1545.526597][ T31] [ 1545.529618][ T31] INFO: task syz-executor:21271 blocked for more than 144 seconds. [ 1545.537587][ T31] Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 [ 1545.545252][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1545.553923][ T31] task:syz-executor state:D stack:24032 pid:21271 tgid:21271 ppid:1 task_flags:0x400140 flags:0x00004004 [ 1545.565944][ T31] Call Trace: [ 1545.569200][ T31] [ 1545.572106][ T31] __schedule+0x116f/0x5de0 [ 1545.576636][ T31] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1545.582514][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 1545.587507][ T31] ? __pfx___schedule+0x10/0x10 [ 1545.592342][ T31] ? find_held_lock+0x2b/0x80 [ 1545.597160][ T31] ? schedule+0x2d7/0x3a0 [ 1545.601653][ T31] schedule+0xe7/0x3a0 [ 1545.605957][ T31] schedule_timeout+0x257/0x290 [ 1545.611346][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1545.616769][ T31] ? mark_held_locks+0x49/0x80 [ 1545.621539][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1545.626772][ T31] __wait_for_common+0x2fc/0x4e0 [ 1545.631698][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1545.637103][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 1545.642557][ T31] ? devtmpfs_submit_req+0x94/0x100 [ 1545.647825][ T31] devtmpfs_submit_req+0xa8/0x100 [ 1545.652858][ T31] devtmpfs_create_node+0x18a/0x230 [ 1545.658067][ T31] ? __pfx_devtmpfs_create_node+0x10/0x10 [ 1545.663929][ T31] ? up_write+0x1b2/0x520 [ 1545.668266][ T31] ? kernfs_create_link+0x1bd/0x240 [ 1545.673517][ T31] ? kernfs_put+0x35/0x60 [ 1545.677826][ T31] ? sysfs_do_create_link_sd+0xbb/0x140 [ 1545.683509][ T31] device_add+0x10bd/0x1a70 [ 1545.688000][ T31] ? __pfx_device_add+0x10/0x10 [ 1545.692914][ T31] ? kfree+0x252/0x4d0 [ 1545.696980][ T31] ? kstrdup+0xb5/0x100 [ 1545.701158][ T31] device_create_groups_vargs+0x1f8/0x270 [ 1545.706872][ T31] device_create+0xed/0x130 [ 1545.711356][ T31] ? __pfx_device_create+0x10/0x10 [ 1545.716502][ T31] ? find_held_lock+0x2b/0x80 [ 1545.721723][ T31] ? tap_get_minor+0x1b3/0x360 [ 1545.726530][ T31] macvtap_device_event+0x301/0x3e0 [ 1545.731717][ T31] ? __pfx_macvtap_device_event+0x10/0x10 [ 1545.737489][ T31] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1545.743362][ T31] ? ipmr_device_event+0x1bc/0x230 [ 1545.748472][ T31] ? bond_netdev_event+0xe7/0xd30 [ 1545.753473][ T31] notifier_call_chain+0xb9/0x410 [ 1545.758529][ T31] ? __pfx_macvtap_device_event+0x10/0x10 [ 1545.764232][ T31] call_netdevice_notifiers_info+0xbe/0x140 [ 1545.770277][ T31] register_netdevice+0x182e/0x2270 [ 1545.775490][ T31] ? __pfx_register_netdevice+0x10/0x10 [ 1545.781132][ T31] macvlan_common_newlink+0x10e7/0x1a20 [ 1545.786724][ T31] ? __pfx_macvlan_common_newlink+0x10/0x10 [ 1545.792625][ T31] ? lockdep_rtnl_is_held+0x26/0x40 [ 1545.798170][ T31] ? netdev_is_rx_handler_busy+0x83/0x160 [ 1545.803886][ T31] macvtap_newlink+0x17a/0x240 [ 1545.808794][ T31] ? __pfx_macvtap_newlink+0x10/0x10 [ 1545.814076][ T31] rtnl_newlink+0xc42/0x2000 [ 1545.818702][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 1545.823705][ T31] ? find_held_lock+0x2b/0x80 [ 1545.828913][ T31] ? avc_has_perm_noaudit+0x117/0x3b0 [ 1545.834346][ T31] ? avc_has_perm_noaudit+0x149/0x3b0 [ 1545.839718][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 1545.844775][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 1545.849775][ T31] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1545.854968][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 1545.859990][ T31] rtnetlink_rcv_msg+0x95b/0xe90 [ 1545.864961][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1545.870396][ T31] ? __pfx_avc_has_perm+0x10/0x10 [ 1545.875477][ T31] netlink_rcv_skb+0x16a/0x440 [ 1545.880241][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1545.885741][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1545.891018][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 1545.896307][ T31] netlink_unicast+0x53a/0x7f0 [ 1545.901050][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1545.906414][ T31] netlink_sendmsg+0x8d1/0xdd0 [ 1545.911174][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1545.916632][ T31] __sys_sendto+0x495/0x510 [ 1545.921113][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1545.926215][ T31] ? __pfx_fput_close_sync+0x10/0x10 [ 1545.931500][ T31] __x64_sys_sendto+0xe0/0x1c0 [ 1545.937112][ T31] ? do_syscall_64+0x91/0x260 [ 1545.941801][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1545.947070][ T31] do_syscall_64+0xcd/0x260 [ 1545.951571][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1545.957453][ T31] RIP: 0033:0x7fee3f58fffc [ 1545.961869][ T31] RSP: 002b:00007ffddf6a9b00 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1545.970316][ T31] RAX: ffffffffffffffda RBX: 00007fee402e4620 RCX: 00007fee3f58fffc [ 1545.978266][ T31] RDX: 0000000000000044 RSI: 00007fee402e4670 RDI: 0000000000000003 [ 1545.986241][ T31] RBP: 0000000000000000 R08: 00007ffddf6a9b54 R09: 000000000000000c [ 1545.994246][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1546.002312][ T31] R13: 0000000000000000 R14: 00007fee402e4670 R15: 0000000000000000 [ 1546.010276][ T31] [ 1546.013333][ T31] INFO: task syz.6.3655:21320 blocked for more than 145 seconds. [ 1546.021037][ T31] Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 [ 1546.028679][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1546.037448][ T31] task:syz.6.3655 state:D stack:24440 pid:21320 tgid:21320 ppid:20294 task_flags:0x400040 flags:0x00000004 [ 1546.049885][ T31] Call Trace: [ 1546.053164][ T31] [ 1546.056124][ T31] __schedule+0x116f/0x5de0 [ 1546.060617][ T31] ? __pfx___schedule+0x10/0x10 [ 1546.065493][ T31] ? find_held_lock+0x2b/0x80 [ 1546.070162][ T31] ? schedule+0x2d7/0x3a0 [ 1546.074480][ T31] schedule+0xe7/0x3a0 [ 1546.078620][ T31] schedule_preempt_disabled+0x13/0x30 [ 1546.084072][ T31] __mutex_lock+0x6c7/0xb90 [ 1546.088614][ T31] ? ipv6_sock_mc_close+0xdb/0x120 [ 1546.093715][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1546.098777][ T31] ? down_write+0x14d/0x200 [ 1546.103261][ T31] ? ipv6_sock_mc_close+0xdb/0x120 [ 1546.108377][ T31] ipv6_sock_mc_close+0xdb/0x120 [ 1546.113287][ T31] inet6_release+0x3f/0x70 [ 1546.117684][ T31] __sock_release+0xb0/0x270 [ 1546.122307][ T31] ? __pfx_sock_close+0x10/0x10 [ 1546.127133][ T31] sock_close+0x1c/0x30 [ 1546.131286][ T31] __fput+0x3ff/0xb70 [ 1546.135245][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1546.140507][ T31] task_work_run+0x14d/0x240 [ 1546.145094][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1546.150396][ T31] ? __pfx___do_sys_close_range+0x10/0x10 [ 1546.156808][ T31] syscall_exit_to_user_mode+0x27b/0x2a0 [ 1546.162518][ T31] do_syscall_64+0xda/0x260 [ 1546.167006][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1546.172896][ T31] RIP: 0033:0x7f5726f8e169 [ 1546.177286][ T31] RSP: 002b:00007fff561f7e18 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1546.185735][ T31] RAX: 0000000000000000 RBX: 00007f57271b7ba0 RCX: 00007f5726f8e169 [ 1546.193725][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1546.201687][ T31] RBP: 00007f57271b7ba0 R08: 0000000000000590 R09: 0000001d561f810f [ 1546.209695][ T31] R10: 00007f57271b7ac0 R11: 0000000000000246 R12: 000000000015097d [ 1546.217704][ T31] R13: 00007f57271b6240 R14: ffffffffffffffff R15: 00007fff561f7f30 [ 1546.225749][ T31] [ 1546.228766][ T31] INFO: task syz.0.3658:21338 blocked for more than 145 seconds. [ 1546.236489][ T31] Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 [ 1546.244105][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1546.252790][ T31] task:syz.0.3658 state:D stack:27992 pid:21338 tgid:21333 ppid:5827 task_flags:0x400140 flags:0x00000004 [ 1546.265522][ T31] Call Trace: [ 1546.269047][ T31] [ 1546.271980][ T31] __schedule+0x116f/0x5de0 [ 1546.276488][ T31] ? __pfx___schedule+0x10/0x10 [ 1546.281402][ T31] ? find_held_lock+0x2b/0x80 [ 1546.286078][ T31] ? schedule+0x2d7/0x3a0 [ 1546.290471][ T31] schedule+0xe7/0x3a0 [ 1546.294540][ T31] schedule_preempt_disabled+0x13/0x30 [ 1546.300017][ T31] __mutex_lock+0x6c7/0xb90 [ 1546.304513][ T31] ? wext_handle_ioctl+0x20b/0x2a0 [ 1546.309603][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1546.314667][ T31] ? dev_load+0x8e/0x240 [ 1546.318886][ T31] ? wext_handle_ioctl+0x20b/0x2a0 [ 1546.323999][ T31] ? rtnl_lock+0x9/0x20 [ 1546.328128][ T31] wext_handle_ioctl+0x20b/0x2a0 [ 1546.333121][ T31] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 1546.338576][ T31] ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450 [ 1546.345079][ T31] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1546.351916][ T31] sock_ioctl+0x3a1/0x6b0 [ 1546.356271][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 1546.361101][ T31] ? hook_file_ioctl_common+0x145/0x410 [ 1546.366644][ T31] ? selinux_file_ioctl+0x180/0x270 [ 1546.371820][ T31] ? selinux_file_ioctl+0xb4/0x270 [ 1546.377654][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 1546.382511][ T31] __x64_sys_ioctl+0x190/0x200 [ 1546.387386][ T31] do_syscall_64+0xcd/0x260 [ 1546.391880][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1546.397836][ T31] RIP: 0033:0x7fa173f8e169 [ 1546.402243][ T31] RSP: 002b:00007fa171dd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1546.410680][ T31] RAX: ffffffffffffffda RBX: 00007fa1741b6160 RCX: 00007fa173f8e169 [ 1546.418689][ T31] RDX: 0000200000000040 RSI: 0000000000008b04 RDI: 0000000000000008 [ 1546.426636][ T31] RBP: 00007fa174010a68 R08: 0000000000000000 R09: 0000000000000000 [ 1546.434609][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1546.442603][ T31] R13: 0000000000000000 R14: 00007fa1741b6160 R15: 00007ffd51032e58 [ 1546.452725][ T31] [ 1546.455794][ T31] INFO: task syz-executor:21340 blocked for more than 145 seconds. [ 1546.463765][ T31] Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 [ 1546.471517][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1546.480209][ T31] task:syz-executor state:D stack:26856 pid:21340 tgid:21340 ppid:1 task_flags:0x400140 flags:0x00000004 [ 1546.492936][ T31] Call Trace: [ 1546.496216][ T31] [ 1546.499133][ T31] __schedule+0x116f/0x5de0 [ 1546.503737][ T31] ? find_held_lock+0x2b/0x80 [ 1546.508395][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 1546.513310][ T31] ? __pfx___schedule+0x10/0x10 [ 1546.518208][ T31] ? find_held_lock+0x2b/0x80 [ 1546.522864][ T31] ? schedule+0x2d7/0x3a0 [ 1546.527204][ T31] schedule+0xe7/0x3a0 [ 1546.531266][ T31] schedule_preempt_disabled+0x13/0x30 [ 1546.536833][ T31] __mutex_lock+0x6c7/0xb90 [ 1546.541331][ T31] ? inet_rtm_newaddr+0x30c/0x1540 [ 1546.547505][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1546.552539][ T31] ? find_held_lock+0x2b/0x80 [ 1546.557267][ T31] ? __nla_parse+0x40/0x60 [ 1546.561752][ T31] ? inet_rtm_newaddr+0x30c/0x1540 [ 1546.566844][ T31] inet_rtm_newaddr+0x30c/0x1540 [ 1546.571776][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 1546.576690][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1546.582087][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1546.587445][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1546.592891][ T31] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 1546.598595][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1546.604007][ T31] rtnetlink_rcv_msg+0x95b/0xe90 [ 1546.608939][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1546.614466][ T31] ? __pfx_avc_has_perm+0x10/0x10 [ 1546.619490][ T31] netlink_rcv_skb+0x16a/0x440 [ 1546.624429][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1546.629887][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1546.635223][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 1546.640523][ T31] netlink_unicast+0x53a/0x7f0 [ 1546.645316][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1546.650593][ T31] netlink_sendmsg+0x8d1/0xdd0 [ 1546.655370][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1546.660645][ T31] __sys_sendto+0x495/0x510 [ 1546.665171][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1546.670193][ T31] ? count_memcg_events_mm.constprop.0+0x138/0x340 [ 1546.676743][ T31] __x64_sys_sendto+0xe0/0x1c0 [ 1546.681500][ T31] ? do_syscall_64+0x91/0x260 [ 1546.686185][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1546.691359][ T31] do_syscall_64+0xcd/0x260 [ 1546.695879][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1546.701791][ T31] RIP: 0033:0x7f891718fffc [ 1546.707313][ T31] RSP: 002b:00007ffff5cf70e0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1546.715850][ T31] RAX: ffffffffffffffda RBX: 00007f8917ee4620 RCX: 00007f891718fffc [ 1546.723846][ T31] RDX: 0000000000000028 RSI: 00007f8917ee4670 RDI: 0000000000000003 [ 1546.731808][ T31] RBP: 0000000000000000 R08: 00007ffff5cf7134 R09: 000000000000000c [ 1546.739781][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1546.747740][ T31] R13: 0000000000000000 R14: 00007f8917ee4670 R15: 0000000000000000 [ 1546.755712][ T31] [ 1546.758717][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1546.767725][ T31] INFO: task syz.2.3664:21357 blocked for more than 146 seconds. [ 1546.775452][ T31] Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 [ 1546.783075][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1546.791810][ T31] task:syz.2.3664 state:D stack:27560 pid:21357 tgid:21356 ppid:5818 task_flags:0x400040 flags:0x00000004 [ 1546.803760][ T31] Call Trace: [ 1546.807026][ T31] [ 1546.809936][ T31] __schedule+0x116f/0x5de0 [ 1546.815304][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 1546.820255][ T31] ? __pfx___schedule+0x10/0x10 [ 1546.825144][ T31] ? find_held_lock+0x2b/0x80 [ 1546.829823][ T31] ? schedule+0x2d7/0x3a0 [ 1546.834145][ T31] schedule+0xe7/0x3a0 [ 1546.838231][ T31] schedule_preempt_disabled+0x13/0x30 [ 1546.843674][ T31] __mutex_lock+0x6c7/0xb90 [ 1546.848234][ T31] ? __tun_chr_ioctl+0x255/0x4740 [ 1546.853280][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1546.858340][ T31] ? find_held_lock+0x2b/0x80 [ 1546.863030][ T31] ? __tun_chr_ioctl+0x255/0x4740 [ 1546.868079][ T31] ? rtnl_lock+0x9/0x20 [ 1546.872224][ T31] __tun_chr_ioctl+0x255/0x4740 [ 1546.877114][ T31] ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450 [ 1546.883619][ T31] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1546.888915][ T31] ? hook_file_ioctl_common+0x145/0x410 [ 1546.894457][ T31] ? selinux_file_ioctl+0x180/0x270 [ 1546.899655][ T31] ? selinux_file_ioctl+0xb4/0x270 [ 1546.904747][ T31] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1546.909905][ T31] __x64_sys_ioctl+0x190/0x200 [ 1546.914667][ T31] do_syscall_64+0xcd/0x260 [ 1546.919174][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1546.925637][ T31] RIP: 0033:0x7fa67b78e169 [ 1546.930043][ T31] RSP: 002b:00007fa67c64e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1546.938461][ T31] RAX: ffffffffffffffda RBX: 00007fa67b9b5fa0 RCX: 00007fa67b78e169 [ 1546.946437][ T31] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000003 [ 1546.954398][ T31] RBP: 00007fa67b810a68 R08: 0000000000000000 R09: 0000000000000000 [ 1546.962350][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1546.970635][ T31] R13: 0000000000000000 R14: 00007fa67b9b5fa0 R15: 00007ffc9a660678 [ 1546.978668][ T31] [ 1546.981679][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1546.990719][ T31] INFO: task syz.2.3664:21358 blocked for more than 146 seconds. [ 1546.998451][ T31] Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 [ 1547.006109][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1547.014759][ T31] task:syz.2.3664 state:D stack:28408 pid:21358 tgid:21356 ppid:5818 task_flags:0x400140 flags:0x00000004 [ 1547.026680][ T31] Call Trace: [ 1547.029987][ T31] [ 1547.033447][ T31] __schedule+0x116f/0x5de0 [ 1547.038043][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 1547.042974][ T31] ? __pfx___schedule+0x10/0x10 [ 1547.047808][ T31] ? find_held_lock+0x2b/0x80 [ 1547.052488][ T31] ? schedule+0x2d7/0x3a0 [ 1547.056793][ T31] schedule+0xe7/0x3a0 [ 1547.060870][ T31] schedule_preempt_disabled+0x13/0x30 [ 1547.066323][ T31] __mutex_lock+0x6c7/0xb90 [ 1547.070821][ T31] ? rtnetlink_rcv_msg+0x371/0xe90 [ 1547.075909][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1547.080955][ T31] ? find_held_lock+0x2b/0x80 [ 1547.085641][ T31] ? rtnetlink_rcv_msg+0x371/0xe90 [ 1547.090739][ T31] rtnetlink_rcv_msg+0x371/0xe90 [ 1547.095691][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1547.101138][ T31] netlink_rcv_skb+0x16a/0x440 [ 1547.105900][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1547.111345][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1547.116625][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 1547.121886][ T31] netlink_unicast+0x53a/0x7f0 [ 1547.126656][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1547.131938][ T31] netlink_sendmsg+0x8d1/0xdd0 [ 1547.136723][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1547.142544][ T31] ____sys_sendmsg+0xa95/0xc70 [ 1547.147329][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 1547.152777][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1547.158053][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1547.163837][ T31] ___sys_sendmsg+0x134/0x1d0 [ 1547.168506][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1547.173695][ T31] __sys_sendmsg+0x16d/0x220 [ 1547.178282][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 1547.183366][ T31] ? __x64_sys_futex+0x1e0/0x4c0 [ 1547.188570][ T31] ? rcu_is_watching+0x12/0xc0 [ 1547.193329][ T31] do_syscall_64+0xcd/0x260 [ 1547.197841][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1547.203721][ T31] RIP: 0033:0x7fa67b78e169 [ 1547.208111][ T31] RSP: 002b:00007fa67c62d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1547.216513][ T31] RAX: ffffffffffffffda RBX: 00007fa67b9b6080 RCX: 00007fa67b78e169 [ 1547.224470][ T31] RDX: 0000000000040020 RSI: 00002000000012c0 RDI: 0000000000000005 [ 1547.232430][ T31] RBP: 00007fa67b810a68 R08: 0000000000000000 R09: 0000000000000000 [ 1547.240378][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1547.248345][ T31] R13: 0000000000000000 R14: 00007fa67b9b6080 R15: 00007ffc9a660678 [ 1547.257168][ T31] [ 1547.260180][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1547.269192][ T31] INFO: task syz.2.3664:21361 blocked for more than 146 seconds. [ 1547.276931][ T31] Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 [ 1547.284541][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1547.293181][ T31] task:syz.2.3664 state:D stack:28488 pid:21361 tgid:21356 ppid:5818 task_flags:0x400140 flags:0x00000004 [ 1547.305150][ T31] Call Trace: [ 1547.308416][ T31] [ 1547.311323][ T31] __schedule+0x116f/0x5de0 [ 1547.315839][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 1547.320770][ T31] ? __pfx___schedule+0x10/0x10 [ 1547.325605][ T31] ? find_held_lock+0x2b/0x80 [ 1547.330300][ T31] ? schedule+0x2d7/0x3a0 [ 1547.334637][ T31] schedule+0xe7/0x3a0 [ 1547.338725][ T31] schedule_preempt_disabled+0x13/0x30 [ 1547.344184][ T31] __mutex_lock+0x6c7/0xb90 [ 1547.348695][ T31] ? rtnetlink_rcv_msg+0x371/0xe90 [ 1547.353785][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1547.358824][ T31] ? find_held_lock+0x2b/0x80 [ 1547.364021][ T31] ? rtnetlink_rcv_msg+0x371/0xe90 [ 1547.369171][ T31] rtnetlink_rcv_msg+0x371/0xe90 [ 1547.374116][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1547.379603][ T31] netlink_rcv_skb+0x16a/0x440 [ 1547.384450][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1547.389896][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1547.395274][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 1547.400551][ T31] netlink_unicast+0x53a/0x7f0 [ 1547.405310][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1547.410574][ T31] netlink_sendmsg+0x8d1/0xdd0 [ 1547.415333][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1547.420599][ T31] ____sys_sendmsg+0xa95/0xc70 [ 1547.425365][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 1547.430798][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1547.436086][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1547.441872][ T31] ___sys_sendmsg+0x134/0x1d0 [ 1547.446560][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1547.451769][ T31] __sys_sendmsg+0x16d/0x220 [ 1547.456380][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 1547.461481][ T31] ? __x64_sys_futex+0x1e0/0x4c0 [ 1547.466430][ T31] ? rcu_is_watching+0x12/0xc0 [ 1547.471752][ T31] do_syscall_64+0xcd/0x260 [ 1547.476274][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1547.482147][ T31] RIP: 0033:0x7fa67b78e169 [ 1547.486566][ T31] RSP: 002b:00007fa67c60c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1547.494966][ T31] RAX: ffffffffffffffda RBX: 00007fa67b9b6160 RCX: 00007fa67b78e169 [ 1547.502931][ T31] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000004 [ 1547.510908][ T31] RBP: 00007fa67b810a68 R08: 0000000000000000 R09: 0000000000000000 [ 1547.518894][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1547.526856][ T31] R13: 0000000000000000 R14: 00007fa67b9b6160 R15: 00007ffc9a660678 [ 1547.534820][ T31] [ 1547.537812][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 1547.546832][ T31] [ 1547.546832][ T31] Showing all locks held in the system: [ 1547.554561][ T31] 2 locks held by kdevtmpfs/26: [ 1547.559393][ T31] #0: ffff88801c6d8950 (&type->i_mutex_dir_key/1){+.+.}-{4:4}, at: __kern_path_locked+0x132/0x2a0 [ 1547.570391][ T31] #1: ffffffff8eef4368 (major_names_lock){+.+.}-{4:4}, at: blk_probe_dev+0x25/0x1a0 [ 1547.580446][ T31] 1 lock held by khungtaskd/31: [ 1547.585318][ T31] #0: ffffffff8e3bf5c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1547.595163][ T31] 3 locks held by kworker/u8:3/52: [ 1547.600246][ T31] #0: ffff88814ce55148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1547.611289][ T31] #1: ffffc90000be7d18 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1547.624340][ T31] #2: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x12/0x30 [ 1547.633838][ T31] 2 locks held by getty/5583: [ 1547.638501][ T31] #0: ffff88814d1430a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1547.648362][ T31] #1: ffffc9000330b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 1547.658492][ T31] 3 locks held by kworker/1:4/5869: [ 1547.663657][ T31] #0: ffff88801b479d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1547.675485][ T31] #1: ffffc9000436fd18 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1547.685951][ T31] #2: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x83/0x1170 [ 1547.697109][ T31] 3 locks held by kworker/0:5/5916: [ 1547.702320][ T31] #0: ffff88801b478d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1547.712792][ T31] #1: ffffc900044afd18 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1547.723156][ T31] #2: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 1547.733509][ T31] 4 locks held by kworker/u8:8/5927: [ 1547.738773][ T31] #0: ffff88801c2f3948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1547.749104][ T31] #1: ffffc9000443fd18 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1547.759009][ T31] #2: ffffffff90114fd0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xc9/0xb30 [ 1547.768313][ T31] #3: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: netdev_run_todo+0xe33/0x1320 [ 1547.777619][ T31] 2 locks held by kworker/0:0/9251: [ 1547.782783][ T31] #0: ffff888022ed6548 ((wq_completion)md_misc){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1547.793292][ T31] #1: ffffc9001e24fd18 ((work_completion)(&mddev->del_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1547.805403][ T31] 4 locks held by kworker/u8:2/12500: [ 1547.810819][ T31] #0: ffff8880b8439dd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 1547.820848][ T31] #1: ffff8880b8523c48 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x2c1/0x8e0 [ 1547.832451][ T31] #2: ffff88805daf0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x99/0x550 [ 1547.842486][ T31] #3: ffffffff9ad7a108 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x14c/0x4c0 [ 1547.852855][ T31] 3 locks held by kworker/u8:7/12501: [ 1547.858199][ T31] #0: ffff88801b481148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1547.869529][ T31] #1: ffffc9002045fd18 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1547.879907][ T31] #2: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 1547.888983][ T31] 1 lock held by syz-executor/20799: [ 1547.894284][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 1547.903342][ T31] 2 locks held by syz-executor/21271: [ 1547.909277][ T31] #0: ffffffff90868640 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 1547.918900][ T31] #1: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x600/0x2000 [ 1547.927974][ T31] 2 locks held by syz.6.3655/21320: [ 1547.933149][ T31] #0: ffff88807830ac08 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 1547.943676][ T31] #1: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: ipv6_sock_mc_close+0xdb/0x120 [ 1547.953135][ T31] 1 lock held by syz.0.3658/21338: [ 1547.958242][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: wext_handle_ioctl+0x20b/0x2a0 [ 1547.967690][ T31] 1 lock held by syz-executor/21340: [ 1547.972965][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 1547.982404][ T31] 1 lock held by syz.2.3664/21357: [ 1547.987499][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x255/0x4740 [ 1547.996870][ T31] 1 lock held by syz.2.3664/21358: [ 1548.001967][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x371/0xe90 [ 1548.011391][ T31] 1 lock held by syz.2.3664/21361: [ 1548.017235][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x371/0xe90 [ 1548.026657][ T31] 1 lock held by syz-executor/21366: [ 1548.031993][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 1548.041393][ T31] 1 lock held by syz-executor/21369: [ 1548.046671][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 1548.056087][ T31] 1 lock held by syz-executor/21372: [ 1548.061343][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 1548.070734][ T31] 1 lock held by syz-executor/21376: [ 1548.076414][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 1548.085851][ T31] 1 lock held by syz-executor/21379: [ 1548.091114][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 1548.100566][ T31] 1 lock held by syz-executor/21385: [ 1548.105831][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 1548.115224][ T31] 1 lock held by syz-executor/21388: [ 1548.120519][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 1548.130742][ T31] 1 lock held by syz-executor/21391: [ 1548.136018][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 1548.145466][ T31] 1 lock held by syz-executor/21396: [ 1548.150741][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 1548.160188][ T31] 1 lock held by syz-executor/21400: [ 1548.165453][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 1548.174841][ T31] 1 lock held by syz-executor/21406: [ 1548.180095][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 1548.189512][ T31] 1 lock held by syz-executor/21409: [ 1548.194789][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 1548.204204][ T31] 1 lock held by syz-executor/21412: [ 1548.209465][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 1548.218857][ T31] [ 1548.221165][ T31] ============================================= [ 1548.221165][ T31] [ 1548.229617][ T31] NMI backtrace for cpu 0 [ 1548.229626][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) [ 1548.229640][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1548.229646][ T31] Call Trace: [ 1548.229649][ T31] [ 1548.229654][ T31] dump_stack_lvl+0x116/0x1f0 [ 1548.229671][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1548.229683][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1548.229695][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1548.229708][ T31] watchdog+0xf70/0x12c0 [ 1548.229721][ T31] ? __pfx_watchdog+0x10/0x10 [ 1548.229731][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1548.229746][ T31] ? __kthread_parkme+0x19e/0x250 [ 1548.229763][ T31] ? __pfx_watchdog+0x10/0x10 [ 1548.229773][ T31] kthread+0x3c2/0x780 [ 1548.229784][ T31] ? __pfx_kthread+0x10/0x10 [ 1548.229793][ T31] ? __pfx_kthread+0x10/0x10 [ 1548.229803][ T31] ? __pfx_kthread+0x10/0x10 [ 1548.229812][ T31] ? __pfx_kthread+0x10/0x10 [ 1548.229822][ T31] ? rcu_is_watching+0x12/0xc0 [ 1548.229835][ T31] ? __pfx_kthread+0x10/0x10 [ 1548.229845][ T31] ret_from_fork+0x45/0x80 [ 1548.229856][ T31] ? __pfx_kthread+0x10/0x10 [ 1548.229866][ T31] ret_from_fork_asm+0x1a/0x30 [ 1548.229887][ T31] [ 1548.229891][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1548.362387][ C1] NMI backtrace for cpu 1 [ 1548.362401][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) [ 1548.362418][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1548.362426][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1548.362446][ C1] Code: 35 5d 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 4a 17 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1548.362459][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c6 [ 1548.362470][ C1] RAX: 000000000788e597 RBX: 0000000000000001 RCX: ffffffff8b72a419 [ 1548.362478][ C1] RDX: 0000000000000000 RSI: ffffffff8dbef846 RDI: ffffffff8bf46540 [ 1548.362486][ C1] RBP: ffffed1003b5a488 R08: 0000000000000001 R09: ffffed10170a65bd [ 1548.362495][ C1] R10: ffff8880b8532deb R11: 0000000000000000 R12: 0000000000000001 [ 1548.362503][ C1] R13: ffff88801dad2440 R14: ffffffff90864910 R15: 0000000000000000 [ 1548.362511][ C1] FS: 0000000000000000(0000) GS:ffff888124ab2000(0000) knlGS:0000000000000000 [ 1548.362525][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1548.362533][ C1] CR2: 00007f85478e7d60 CR3: 000000000e180000 CR4: 00000000003526f0 [ 1548.362541][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1548.362549][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1548.362557][ C1] Call Trace: [ 1548.362561][ C1] [ 1548.362566][ C1] default_idle+0x13/0x20 [ 1548.362584][ C1] default_idle_call+0x6d/0xb0 [ 1548.362601][ C1] do_idle+0x391/0x510 [ 1548.362620][ C1] ? __pfx_do_idle+0x10/0x10 [ 1548.362636][ C1] ? trace_sched_exit_tp+0x31/0x130 [ 1548.362656][ C1] cpu_startup_entry+0x4f/0x60 [ 1548.362677][ C1] start_secondary+0x21d/0x2b0 [ 1548.362691][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1548.362705][ C1] common_startup_64+0x13e/0x148 [ 1548.362725][ C1] [ 1548.363411][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1548.363427][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) [ 1548.363446][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1548.363454][ T31] Call Trace: [ 1548.363460][ T31] [ 1548.363466][ T31] dump_stack_lvl+0x3d/0x1f0 [ 1548.363489][ T31] panic+0x71c/0x800 [ 1548.363504][ T31] ? __pfx_panic+0x10/0x10 [ 1548.363518][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1548.363538][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1548.363553][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1548.363571][ T31] ? watchdog+0xdda/0x12c0 [ 1548.363587][ T31] ? watchdog+0xdcd/0x12c0 [ 1548.363606][ T31] watchdog+0xdeb/0x12c0 [ 1548.363625][ T31] ? __pfx_watchdog+0x10/0x10 [ 1548.363640][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1548.363660][ T31] ? __kthread_parkme+0x19e/0x250 [ 1548.363683][ T31] ? __pfx_watchdog+0x10/0x10 [ 1548.363698][ T31] kthread+0x3c2/0x780 [ 1548.363713][ T31] ? __pfx_kthread+0x10/0x10 [ 1548.363727][ T31] ? __pfx_kthread+0x10/0x10 [ 1548.363741][ T31] ? __pfx_kthread+0x10/0x10 [ 1548.363755][ T31] ? __pfx_kthread+0x10/0x10 [ 1548.363769][ T31] ? rcu_is_watching+0x12/0xc0 [ 1548.363788][ T31] ? __pfx_kthread+0x10/0x10 [ 1548.363803][ T31] ret_from_fork+0x45/0x80 [ 1548.363819][ T31] ? __pfx_kthread+0x10/0x10 [ 1548.363834][ T31] ret_from_fork_asm+0x1a/0x30 [ 1548.363865][ T31] [ 1548.695059][ T31] Kernel Offset: disabled [ 1548.699358][ T31] Rebooting in 86400 seconds..