last executing test programs: 37.763576878s ago: executing program 2 (id=585): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0x400, 0x70bd2d, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x8}}, [@TCA_RATE={0xffffffffffffff94, 0x5, {0x67, 0x1}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x103982, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/vmstat\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x20000023896) 35.937022111s ago: executing program 2 (id=587): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0xfffffffe, 0x1000006, 0x9, 0x5ba, 0xffffffde}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1802000000000000000000000000000000000000000000009500000000000000080000000000000040bc4789aa14b77f4b0c9282a7bae9942c485ebac9cee6888b3e49b872ba833c41eefcd79155efbc6cd2f49ed7e0080cec952c6dcff792ec23840713"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f0000003780)=""/4096}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x34}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r4 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) getsockopt$bt_hci(r4, 0x84, 0x7f, &(0x7f0000000080)=""/4041, &(0x7f0000000000)=0xfc9) fchdir(r3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0x50}}, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = inotify_init1(0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000140)) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40305839, &(0x7f0000000240)=0x28084) 34.686354076s ago: executing program 2 (id=590): socket$kcm(0x1e, 0x5, 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="2e00000010008188e6b62aa73772cc9f1ba1f8483b0000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000a80)={0x0, {}, 0x0, {}, 0x6, 0x9, 0x1, 0x0, "18f71b8d2543ad397ba1110c6b91a6dda19fa9c24e96b20995402b25f2421da255c09b2c694ce21812d498b09c0a7bc0cf354448bedf3a3b47955836a39332ea", "3ea067edf28f185e77c1bd2177111055ee41992a9d021b3f4bad31b8301f4f22", [0x8000000000000000, 0x6]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r8 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r8, 0x10c, 0x2, &(0x7f0000000040)=0x2, 0x4) r9 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r9, 0x40045612, &(0x7f0000000000)=0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=0x1, @ANYBLOB="0000000000000000000001000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x15, &(0x7f0000000b40)=ANY=[@ANYRES16=r6, @ANYRES16=r4, @ANYBLOB="0000004000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f84977ffffffb703000008000000b7040000010010008500000082000000180100002020692500000000002020207b1af8ff00000000bfa1008edbe3a40007010000f8ffffffb702000008000000b7030000710c0000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$DRM_IOCTL_MODE_GETENCODER(r6, 0xc01464a6, &(0x7f0000000180)={r7}) 32.06115942s ago: executing program 2 (id=598): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x1) r5 = getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) msync(&(0x7f000093c000/0x2000)=nil, 0x2000, 0x3) r8 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002ff7120c40915001cb00102030109022400010004100009047e100226d5180809050602ff07000000090582020800000000"], 0x0) syz_usb_control_io(r8, &(0x7f0000000880)={0x2c, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0003f4000000f403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r8, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000e00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$printer(r8, &(0x7f00000000c0)={0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x8000) sendmsg$802154_dgram(r0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000300)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@fallback=r2, 0xf, 0x1, 0x81, &(0x7f0000000180)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) socket$l2tp6(0xa, 0x2, 0x73) 31.112212447s ago: executing program 4 (id=599): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0xfffffffe, 0x1000006, 0x9, 0x5ba, 0xffffffde}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1802000000000000000000000000000000000000000000009500000000000000080000000000000040bc4789aa14b77f4b0c9282a7bae9942c485ebac9cee6888b3e49b872ba833c41eefcd79155efbc6cd2f49ed7e0080cec952c6dcff792ec23840713"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f0000003780)=""/4096}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x34}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r4 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) getsockopt$bt_hci(r4, 0x84, 0x7f, &(0x7f0000000080)=""/4041, &(0x7f0000000000)=0xfc9) fchdir(r3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0x50}}, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = inotify_init1(0x0) fcntl$getownex(r5, 0x10, &(0x7f0000000140)) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40305839, &(0x7f0000000240)=0x28084) 30.486375428s ago: executing program 4 (id=601): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$UI_ABS_SETUP(r2, 0x541b, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x4000000400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r4, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$GIO_UNIMAP(r6, 0x4b4d, &(0x7f0000000000)={0x0, 0x0}) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = getpgrp(r7) write$P9_RGETLOCK(r6, &(0x7f0000000040)={0x24, 0x37, 0x1, {0x2, 0x2, 0x4, r8, 0x6, 'stack\x00'}}, 0x42) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$KDSETKEYCODE(r5, 0x4b4d, &(0x7f0000000080)={0x0, 0x4}) 26.6194711s ago: executing program 2 (id=610): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0x400, 0x70bd2d, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x8}}, [@TCA_RATE={0xffffffffffffff94, 0x5, {0x67, 0x1}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x1068) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x103982, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/vmstat\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x20000023896) 26.238199077s ago: executing program 4 (id=611): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="6112a8000000000061138c0000000000bf2000000000000015000000081400002d0301000000000095000000000000006916600000000000bf67000000000000260300000fff0710670600000f000000170300000ee60020bf050000000000001d360000000000006507f9ff01000000070700004c000000cc75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000000500000000000000950000000000000032ff7f5be95e09b67754bb12feffffff8ecf264e0f84f9f17d3c51e3c7bdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703d6c4f6f3be5b369289aa6812b8e007e733b9a4f16d0abbd5ad9381806ef08513e3d3778a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad5b803306b17cf4ef3f1d45f65727546e7c955ccefa1f6ab689fde4de4e63edf10271a5144ddc8da3aa5b0ab733a1b901627b562ed04ae76002d4519af619e3a2a4d69e0dee5eb106774a8f3e6916dfec88b5634ef79b02d2ca8ff54c158f0200000000eafb735fd552bdc206004aeb0743eb2dc819c75c8ac86d8a297dff0445a13d006723888fb126a163f16fb2ad9bc1162ba7cbebe174cecac4d03723f1c932b3faffffffffffffff5fc998e13b670e373e3e5897f7ad2e99e0e67a993716dbf580469f0f53acbb40b401e3738270b315d362ed834f2a0700000096649a462e7ee4bcf8b07a101c879730beb4000000000000000000000000000000bc00f674629709e7e78f4ddc3d1bc3ebf0bd9d42ca019dd5d022cf7468659fbe2562671cd47840a7afaab43176e65ec1118d46d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab04871bc47287cd313f3bea788ea2bcdc340ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd0d0d703f3767ce603c9d4867b63d20a268bb9f15a0a6e66ce4660fbee91629ab028acfc1d9260e9659a0f6a5480a55c22fe3ae5f562d0ae520c38d2bab6528000000596fb73a96b33c81cdbbd421a27f7f1db054cc7a0a4d372849c99a98822103b9851d924b85b1ca4b21b187db00000000000000066dead3b9670a7604a5ddd0fd2e4fb8a5749a8a8ad78454ba1eebeff1b528da294247d294d2487babb176fdfafeb3d492a325671e6b91afb41f87feda4ce2f468a3758750c0b8f151d4d8574bbbe027687a0e12311cdf3384a26ee3f6f2424ba1e5be98ef1f8f2db9a4991e234f9f447e1730ceaf54cf25c0e3ad7cbb0de06d55db89d154c9d3fcd01c551b0ef58034c252629aefbfd5305845b9a8763b264e8f0bcd0f606fe92e511f122325ebc5fef1b68f2e2ec7bebe423d4baae0e27845d0eb8b8a4f97f83424221e94a5c4623feb8496ccdbc55b27773bf1b3e6a91a20e0c27fc80262647f88d8d1123d199b2c7729bb7700e887ea963f00004a1d0851dbfb9308d16cadcc7b477c9a9586571182526898735552a203c4797228533b1a73ab44aa115136353964648abcc4adbe765556643842290a92eafea0ec2c000000000000000000000000000000e1f3518dc3fc2bbefe043804ac1b6b1c8b7e3afed045a3a808700bca61a39d5bfa83877803013e2d145e642253632f3a283c6eee0e22cb69fe7f94786220c31e9b2a82a9856e947bace74923e4740bf1c17cb41ef19161c3d417655517c28bd08dee32d77a40b834ba7a12223354e9321b8300f7d5d63fa0e8f074adc176285a8f41609ce040cec99943792f5443ca5292447b0f0f240743c4b2b8142ce0b43d4d1731ce11533f61ef241c83557f5aae58a848b5ccce86b8b0fb21fe369c90f06e2d9680003df72f3f0060e6c3415cc1026d342003bece09fbfd062efdd9b48377335903f3b4e87386915e3ac429a4db646da1cc6e29ad8650f4da326cbfdce12c8d5deba32549d6aefe422e0d665d62325c737fe76ec1f3c3670ed96f86738a2cf1c59b5f9b84ffd068f7b4509f53617910a41b811a3f7cd6251f8100008133af11a4db2d00c0ad86ce9f40f3e06b41b45f72b1598a12abddf58ac778bff2f1e49306a1d2f80b2a7d7a28f3997ee60793c62ffee96535e47adac9f367395cf26056a4b76d646f7682f21beafcdb7a9c07acfd145487426f1a009327b8ec6e695e6a7ddcc2c9151cc9c4efa413fa1e521b398151247104bc47748199441cf298e925ef2e3374f4ec0193b38a355c35ee44962fceb3f418510742c93a442f857733b74b6d9197cd62784d7f2afa6a4bc5cae18e33435665250241a7ffd96fc0790000009c17c570096bb75de737107e029b18ec0e61ab3761366452a1c6e3e3c912170f874555aaefc9644cffa768eb2b47c6b040698746df86026730db64859c46cdfb775b86214cfd1932d5ad87c56ea4f38bca780000000000000000000000003bf179c894590cb06b546082451bb735e7152afd5340683663e8effbfb49855ec98703a1e141ab7510fc0e3b081e72d25bfa4e52bedadd11e152bb1dcfcfe942b97b813cf4cdd8626ecfb630425db071c1bfdb03fee96f80b1a96f9427e17edfdc902749ccbab746e26a3a46527b3a32c49dab9608ab1dca3982590c1e78ff5c87d10eef5c3707974981c01c00000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) close(0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 25.291733629s ago: executing program 2 (id=613): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x189a02) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time}], 0x38) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x400000, 0x0) io_setup(0x6, &(0x7f0000001380)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) syz_open_procfs(r2, &(0x7f0000000080)='fd/4\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x80}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r5, &(0x7f0000000500)="a4", 0xffe0, 0x4c, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r6, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}], 0x3c) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x17f, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) 18.955899929s ago: executing program 3 (id=621): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r0, 0xd5c3) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000300)="3afe34121b", 0x5}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) sendmmsg(r2, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x62040200) r4 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) recvmsg(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0) 18.737679322s ago: executing program 4 (id=622): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0xd5c3) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000300)="3afe34121b", 0x5}], 0x1) fstat(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x62040200) r3 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) 15.634013856s ago: executing program 1 (id=624): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0x400, 0x70bd2d, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x8}}, [@TCA_RATE={0xffffffffffffff94, 0x5, {0x67, 0x1}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x1068) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x103982, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/vmstat\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x20000023896) 13.506216939s ago: executing program 1 (id=626): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x189a02) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time}], 0x38) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x400000, 0x0) io_setup(0x6, &(0x7f0000001380)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) syz_open_procfs(r2, &(0x7f0000000080)='fd/4\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, &(0x7f0000000040), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r6, &(0x7f0000000500)="a4", 0xffe0, 0x4c, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r7 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r7, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}], 0x3c) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x17f, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) 11.864396923s ago: executing program 3 (id=628): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) socket$qrtr(0x2a, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r4, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) r6 = socket$tipc(0x1e, 0x7, 0x0) bind$tipc(r6, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x4, 0x1}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018"], 0x0, 0x5a, 0x0, 0x0, 0x2000000, 0x0, @void, @value}, 0x20) kexec_load(0x0, 0x2, &(0x7f0000000900)=[{0x0, 0x0, 0x0, 0x3e0000}, {0x0, 0x0, 0x0, 0x8000}], 0x0) 11.863994136s ago: executing program 4 (id=629): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0xd5c3) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000300)="3afe34121b", 0x5}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) fstat(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x62040200) r3 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) 10.218053156s ago: executing program 0 (id=630): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) r1 = openat$ttyS3(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xd) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 9.460538266s ago: executing program 1 (id=631): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000015"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket(0x10, 0x803, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r3) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r3) sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000140)={0x14, r4, 0x926fdb2c68a18847, 0x0, 0x0, {0x13}}, 0x14}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000d80)={'wpan1\x00'}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f00000005c0)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r6, @ANYBLOB="01000000000000000000150000001c002b80050002000000000008000100000000000500020000000000080003", @ANYRESHEX=r1, @ANYRES64=r3], 0xac}}, 0x20008004) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)={0x64, r8, 0x5eae78d9c54e9d3f, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_KEY={0x48, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5bae9c544ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x64}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'wp512\x00'}, 0x58) r10 = syz_init_net_socket$ax25(0x3, 0x3, 0xce) ioctl$sock_ax25_SIOCDELRT(r10, 0x890c, &(0x7f0000000180)={@default, @null, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r11 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r11, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)}], 0x1, 0x0) r12 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r12, 0x107, 0x12, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x6c6d}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440), 0x56}}], 0x2, 0x2004000) 9.366309617s ago: executing program 3 (id=632): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f00000017c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f00)={0x84, &(0x7f0000000b00)={0x20, 0x17, 0x3, "3e35c5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001640)={0x84, &(0x7f0000001180)={0x20, 0x0, 0x2, 'eH'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, &(0x7f00000002c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0x1a, r4, 0xc, &(0x7f0000000000)) io_uring_enter(r1, 0x2def, 0x4000, 0x0, 0x0, 0x0) 8.324639615s ago: executing program 0 (id=633): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x480402, 0x146) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x83000000) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x7) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x338, 0xffffffff, 0x98, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'rose0\x00', 'wg2\x00'}, 0xa00, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'snmp_trap\x00'}}]}, @REJECT={0x28}}, {{@ip={@remote, @dev, 0x0, 0x0, 'batadv_slave_0\x00', 'rose0\x00'}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@socket1={{0x28}}, @common=@addrtype={{0x30}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB="2c726f6f746d6f64651d30cf9153303030303030303030303030303030303130303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r5 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) name_to_handle_at(r5, &(0x7f0000000040)='./file0\x00', &(0x7f0000001300)=ANY=[], 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000540)=ANY=[], &(0x7f0000000640)=""/228, 0x84, 0xe4, 0x4, 0x0, 0x0, @void, @value}, 0x28) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000000), 0xd7, 0x0) r8 = syz_open_dev$dmmidi(&(0x7f0000000000), 0x764, 0x41) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r8, 0x40045731, &(0x7f00000008c0)=0x58d9) mmap$usbfs(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x0, 0x13, r7, 0x0) munmap(&(0x7f0000ff6000/0x3000)=nil, 0x3000) 7.120563621s ago: executing program 0 (id=634): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x189a02) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time}], 0x38) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x400000, 0x0) io_setup(0x6, &(0x7f0000001380)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) syz_open_procfs(r2, &(0x7f0000000080)='fd/4\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f0000000040), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r5, &(0x7f0000000500)="a4", 0xffe0, 0x4c, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r6, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}], 0x3c) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x17f, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) 7.119717098s ago: executing program 1 (id=635): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x189a02) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time}], 0x38) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x400000, 0x0) io_setup(0x6, &(0x7f0000001380)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) syz_open_procfs(r2, &(0x7f0000000080)='fd/4\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x80}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r5, &(0x7f0000000500)="a4", 0xffe0, 0x4c, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r6, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}], 0x3c) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x17f, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) 5.364396797s ago: executing program 3 (id=636): syz_open_dev$tty1(0xc, 0x4, 0x1) openat$selinux_avc_cache_threshold(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan1\x00'}) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f000001ab40)={0x1c, 0x0, 0xb23fc06c409ab55d, 0x0, 0x0, {}, [@NLBL_MGMT_A_FAMILY={0x6}]}, 0x1c}}, 0x0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f000001ab00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f000001aac0)={&(0x7f000001aa80)={0x2c, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xfffffffffffffffe}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x80) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) syz_create_resource$binfmt(&(0x7f00000015c0)='./file0\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f00000001c0)={0x2020}, 0x2020) execve(&(0x7f0000000300)='./file0\x00', &(0x7f00000032c0)={[&(0x7f0000000340)='^-%-\\xc$})\'!&}*', &(0x7f0000000440)='syz0']}, &(0x7f0000001100)={[&(0x7f00000010c0)='$!\x80\"\xc4\xc6\x87\xde>d\xc3$\xcf\xb0\xc7\x1cAYf\'\xe9\tD\x04\xd5\x17+c\xc4\xe1\xae7\xcb\xe8]Vs\xc1!\xda\x0e\xe4C\x8c^\xd8']}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000580)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f00000000c0), r3, 0x0, 0x3, 0x1}}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0xffffffff, 0x4) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0xa, 0x95, &(0x7f00000003c0)=""/149, 0x0, 0x4a, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) memfd_create(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) io_setup(0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYBLOB="043e320d021b"], 0x35) r5 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) connect$inet(r5, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1}, {0x0, 0x4}}}, 0x24}}, 0x0) 4.682063903s ago: executing program 4 (id=637): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10) listen(0xffffffffffffffff, 0xd5c3) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)="3afe34121b", 0x5}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) sendmmsg(r1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x62040200) r3 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0) 4.653566965s ago: executing program 3 (id=638): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x4000000400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r3, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$GIO_UNIMAP(r5, 0x4b4d, &(0x7f0000000000)={0x0, 0x0}) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = getpgrp(r6) write$P9_RGETLOCK(r5, &(0x7f0000000040)={0x24, 0x37, 0x1, {0x2, 0x2, 0x4, r7, 0x6, 'stack\x00'}}, 0x42) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$KDSETKEYCODE(r4, 0x4b4d, &(0x7f0000000080)={0x0, 0x4}) 3.800438957s ago: executing program 0 (id=639): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r1, &(0x7f0000000040), 0x0}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES64=r0], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x30, 0x0, 0xfc, 0x3ee7}, {0x20, 0x0, 0xfa, 0xff7ff038}, {0x6, 0x4}]}, 0x10) sendmmsg$unix(r3, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)="83b540a9", 0xb583}], 0x1}}], 0x1, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x15, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x20}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x1, 0x0, 'queue1\x00', 0x2}) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r7, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)={[{0x2d, 'freezer'}, {0x2d, 'cpu'}, {0x2b, 'net_cls'}, {0x2d, 'cpuset'}, {0x2d, 'rdma'}, {0x2b, 'memory'}]}, 0x2d) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x9]}}], 0x1c) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000180)=[r6, r3, r2]}, 0x3) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f00000002c0)={0x80, 0x6, 0xfffffffe, 0x0, 0x0, 0x1}) 1.760896789s ago: executing program 3 (id=640): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x189a02) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time}], 0x38) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x400000, 0x0) io_setup(0x6, &(0x7f0000001380)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) syz_open_procfs(r2, &(0x7f0000000080)='fd/4\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, &(0x7f0000000040), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r6, &(0x7f0000000500)="a4", 0xffe0, 0x4c, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r7 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r7, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}], 0x3c) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x17f, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) 1.652734297s ago: executing program 0 (id=641): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) pipe(&(0x7f0000000300)) close(0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 1.12268518s ago: executing program 1 (id=642): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r4, &(0x7f0000002300)={0x50, 0x0, r5, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r4, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r4, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r6}, 0x10) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r7, r4, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r8, 0x0) 74.127562ms ago: executing program 1 (id=643): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000019080)={0x10, 0xa, &(0x7f0000019240)=ANY=[@ANYBLOB="18060000005a240c300000", @ANYRESOCT=r2, @ANYBLOB="addfc7bcabdc05bcf35042ec46f0c89598a7bb1986739540857d54b4c9726156039f1a124a2bb36eaf85d378a44080c284adf7e98c27119be03f5a91b329bffa17a4ec3acf643ab18ffe84801b49cab3fd8cccdd5149dd0a6b2b891dc0a730eaf15a9611eb4e62b303746ed530134d4524be3f4dde2db4daf9e81289afdb859b0482916ebb3bc06c1333d6fec84805f9790903fc168d6419656f718cc8e15a08df5fb72755e8b3f858b9dd721e52261b0c2fe41d3b5cb5e988"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) ioperm(0x0, 0x20, 0x10001) syz_emit_ethernet(0x5a, &(0x7f0000000300)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x24, 0x12, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x2c}, 0x2}, {@multicast1, 0x7fff}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x4}, {@private=0xa010102, 0x7}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) lgetxattr(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbbf6e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) close(r5) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xc}, 0x1c) 0s ago: executing program 0 (id=644): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'geneve1\x00', &(0x7f0000000000)=@ethtool_ts_info}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe05000000000000000000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r5, &(0x7f0000002300)={0x50, 0x0, r6, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r5, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r5, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r7}, 0x10) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r8, r5, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r9, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r10 = socket$inet(0xa, 0x801, 0x84) connect$inet(r10, 0x0, 0x0) kernel console output (not intermixed with test programs): red blocking state [ 267.764323][ T6748] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.771674][ T6748] bridge_slave_1: entered allmulticast mode [ 267.786386][ T6748] bridge_slave_1: entered promiscuous mode [ 267.805830][ T5235] Bluetooth: hci1: command tx timeout [ 267.923291][ T6748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.061273][ T6748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.147589][ T5235] Bluetooth: hci3: Malformed LE Event: 0x0d [ 268.194051][ T6814] chnl_net:caif_netlink_parms(): no params data found [ 268.253196][ T6748] team0: Port device team_slave_0 added [ 268.264721][ T6748] team0: Port device team_slave_1 added [ 269.863212][ T11] bridge_slave_1: left allmulticast mode [ 269.873861][ T11] bridge_slave_1: left promiscuous mode [ 269.885520][ T5235] Bluetooth: hci1: command tx timeout [ 269.895288][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.935530][ T11] bridge_slave_0: left allmulticast mode [ 269.941323][ T11] bridge_slave_0: left promiscuous mode [ 269.948948][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.985305][ T5235] Bluetooth: hci1: command tx timeout [ 272.703262][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 272.723748][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 272.748519][ T11] bond0 (unregistering): Released all slaves [ 273.535449][ T6814] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.542573][ T6814] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.572440][ T6814] bridge_slave_0: entered allmulticast mode [ 273.625722][ T6814] bridge_slave_0: entered promiscuous mode [ 273.646095][ T6814] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.653336][ T6814] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.661518][ T6814] bridge_slave_1: entered allmulticast mode [ 273.671315][ T6814] bridge_slave_1: entered promiscuous mode [ 273.679418][ T6748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.703594][ T6748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.729874][ T6748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.747000][ T6748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.753982][ T6748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.780454][ T6748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.884177][ T6891] netlink: 'syz.3.367': attribute type 10 has an invalid length. [ 273.914222][ T6891] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 273.942107][ T6891] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 273.974096][ T6891] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 274.214596][ T6915] No such timeout policy "syz0" [ 275.389439][ T6919] FAULT_INJECTION: forcing a failure. [ 275.389439][ T6919] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.457670][ T6814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.473671][ T6919] CPU: 0 UID: 0 PID: 6919 Comm: syz.4.375 Not tainted 6.12.0-rc1-syzkaller-00125-g0c559323bbaa #0 [ 275.484314][ T6919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 275.494400][ T6919] Call Trace: [ 275.497698][ T6919] [ 275.500643][ T6919] dump_stack_lvl+0x16c/0x1f0 [ 275.505372][ T6919] should_fail_ex+0x497/0x5b0 [ 275.510104][ T6919] _copy_from_iter+0x2a1/0x1540 [ 275.515023][ T6919] ? __pfx__copy_from_iter+0x10/0x10 [ 275.520370][ T6919] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 275.526401][ T6919] ? tun_build_skb.constprop.0+0x1b8/0x1120 [ 275.532339][ T6919] ? __pfx_lock_release+0x10/0x10 [ 275.537395][ T6919] ? trace_lock_acquire+0x14a/0x1d0 [ 275.542631][ T6919] ? __pfx_lock_release+0x10/0x10 [ 275.547687][ T6919] copy_page_from_iter+0xa5/0x120 [ 275.552743][ T6919] tun_build_skb.constprop.0+0x294/0x1120 [ 275.558506][ T6919] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 275.564697][ T6919] ? __pfx___lock_acquire+0x10/0x10 [ 275.569933][ T6919] ? __pfx_mark_lock+0x10/0x10 [ 275.574713][ T6919] ? __pfx_mark_lock+0x10/0x10 [ 275.579494][ T6919] ? __lock_acquire+0xbdd/0x3ce0 [ 275.584436][ T6919] tun_get_user+0x872/0x3d80 [ 275.589039][ T6919] ? find_held_lock+0x2d/0x110 [ 275.593809][ T6919] ? __pfx_tun_get_user+0x10/0x10 [ 275.598846][ T6919] ? find_held_lock+0x2d/0x110 [ 275.603619][ T6919] ? __pfx_lock_release+0x10/0x10 [ 275.608662][ T6919] tun_chr_write_iter+0xdc/0x210 [ 275.613605][ T6919] vfs_write+0x6b5/0x1140 [ 275.617951][ T6919] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 275.623504][ T6919] ? trace_lock_acquire+0x14a/0x1d0 [ 275.628707][ T6919] ? __pfx_vfs_write+0x10/0x10 [ 275.633482][ T6919] ? __fget_files+0x40/0x3f0 [ 275.638093][ T6919] ksys_write+0x12f/0x260 [ 275.642430][ T6919] ? __pfx_ksys_write+0x10/0x10 [ 275.647297][ T6919] do_syscall_64+0xcd/0x250 [ 275.651809][ T6919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.657707][ T6919] RIP: 0033:0x7f0e97d7cadf [ 275.662120][ T6919] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 275.681734][ T6919] RSP: 002b:00007f0e98b34000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 275.690154][ T6919] RAX: ffffffffffffffda RBX: 00007f0e97f35f80 RCX: 00007f0e97d7cadf [ 275.698125][ T6919] RDX: 000000000000004a RSI: 0000000020000080 RDI: 00000000000000c8 [ 275.706120][ T6919] RBP: 00007f0e98b34090 R08: 0000000000000000 R09: 0000000000000000 [ 275.714093][ T6919] R10: 000000000000004a R11: 0000000000000293 R12: 0000000000000001 [ 275.722247][ T6919] R13: 0000000000000000 R14: 00007f0e97f35f80 R15: 00007ffe88620648 [ 275.730229][ T6919] [ 275.733338][ C0] vkms_vblank_simulate: vblank timer overrun [ 275.859129][ T6748] hsr_slave_0: entered promiscuous mode [ 275.982060][ T6748] hsr_slave_1: entered promiscuous mode [ 276.009497][ T6748] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.057923][ T6748] Cannot create hsr debugfs directory [ 276.560142][ T6927] netlink: 'syz.1.378': attribute type 1 has an invalid length. [ 276.575840][ T6927] netlink: 224 bytes leftover after parsing attributes in process `syz.1.378'. [ 276.584874][ T6814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.654338][ T6932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.380'. [ 276.669914][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 276.669932][ T29] audit: type=1400 audit(1728089389.600:339): avc: denied { bind } for pid=6934 comm="syz.4.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 276.700409][ T29] audit: type=1400 audit(1728089389.630:340): avc: denied { listen } for pid=6934 comm="syz.4.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 276.722230][ T29] audit: type=1400 audit(1728089389.630:341): avc: denied { write } for pid=6931 comm="syz.3.380" path="socket:[16394]" dev="sockfs" ino=16394 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 276.748834][ T29] audit: type=1400 audit(1728089389.640:342): avc: denied { mount } for pid=6931 comm="syz.3.380" name="/" dev="autofs" ino=16395 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 276.771363][ T29] audit: type=1400 audit(1728089389.660:343): avc: denied { mounton } for pid=6931 comm="syz.3.380" path="/99/file1/file0" dev="autofs" ino=16396 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 276.807223][ T11] hsr_slave_0: left promiscuous mode [ 276.813236][ T11] hsr_slave_1: left promiscuous mode [ 276.819438][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.827693][ T29] audit: type=1400 audit(1728089389.750:344): avc: denied { unmount } for pid=5219 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 276.848966][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.859362][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.867268][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.891377][ T11] veth1_macvtap: left promiscuous mode [ 276.897183][ T11] veth0_macvtap: left promiscuous mode [ 276.902801][ T11] veth1_vlan: left promiscuous mode [ 276.908420][ T11] veth0_vlan: left promiscuous mode [ 278.265239][ T5273] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 278.308438][ T11] team0 (unregistering): Port device team_slave_1 removed [ 278.351528][ T11] team0 (unregistering): Port device team_slave_0 removed [ 278.429652][ T5273] usb 5-1: too many configurations: 151, using maximum allowed: 8 [ 278.461234][ T5273] usb 5-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 278.470474][ T5273] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 278.479156][ T5273] usb 5-1: Product: syz [ 278.483363][ T5273] usb 5-1: Manufacturer: syz [ 278.488250][ T5273] usb 5-1: SerialNumber: syz [ 278.501571][ T5273] usb 5-1: config 0 descriptor?? [ 278.510032][ T5273] ims_pcu 5-1:0.0: Zero length descriptor [ 278.516165][ T5273] ims_pcu 5-1:0.0: probe with driver ims_pcu failed with error -22 [ 278.764782][ T6946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.788652][ T6946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.800940][ T9] usb 5-1: USB disconnect, device number 20 [ 278.863086][ T6814] team0: Port device team_slave_0 added [ 278.933096][ T6814] team0: Port device team_slave_1 added [ 278.955440][ T29] audit: type=1400 audit(1728089391.880:345): avc: denied { create } for pid=6950 comm="syz.1.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 278.982410][ T29] audit: type=1400 audit(1728089391.880:346): avc: denied { write } for pid=6950 comm="syz.1.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 279.046845][ T29] audit: type=1400 audit(1728089391.980:347): avc: denied { module_load } for pid=6952 comm="syz.3.387" path="/103/bus" dev="tmpfs" ino=580 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 279.094432][ T6814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.102575][ T6814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.128862][ T6814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.169801][ T6814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.182013][ T6814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.272008][ T6814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.464004][ T6814] hsr_slave_0: entered promiscuous mode [ 279.517516][ T6814] hsr_slave_1: entered promiscuous mode [ 279.537737][ T6814] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 279.557729][ T6814] Cannot create hsr debugfs directory [ 280.696440][ T5235] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 280.705653][ T5235] Bluetooth: hci3: Injecting HCI hardware error event [ 280.715161][ T5235] Bluetooth: hci3: hardware error 0x00 [ 281.130058][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.244026][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 281.364931][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.385751][ T9] usb 2-1: device descriptor read/64, error -71 [ 281.734167][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.159589][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 282.280552][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.298433][ T9] usb 2-1: device descriptor read/64, error -71 [ 282.333247][ T29] audit: type=1400 audit(1728089395.260:348): avc: denied { ioctl } for pid=6987 comm="syz.3.396" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 282.405549][ T9] usb usb2-port1: attempt power cycle [ 282.446894][ T11] bridge_slave_1: left allmulticast mode [ 282.452583][ T11] bridge_slave_1: left promiscuous mode [ 282.465600][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.480795][ T11] bridge_slave_0: left allmulticast mode [ 282.493497][ T11] bridge_slave_0: left promiscuous mode [ 282.506962][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.755399][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 283.198646][ T5235] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 283.399428][ T29] audit: type=1400 audit(1728089395.960:349): avc: denied { create } for pid=6995 comm="syz.4.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 283.418991][ T5275] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 283.442216][ T29] audit: type=1400 audit(1728089395.960:350): avc: denied { bind } for pid=6995 comm="syz.4.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 283.575771][ T5275] usb 5-1: Using ep0 maxpacket: 16 [ 283.586704][ T5275] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x24, changing to 0x4 [ 283.620044][ T9] usb 2-1: device descriptor read/8, error -71 [ 284.316196][ T5275] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 284.801811][ T5275] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 284.816306][ T5275] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.825284][ T5275] usb 5-1: Product: syz [ 284.829532][ T5275] usb 5-1: Manufacturer: syz [ 284.834168][ T5275] usb 5-1: SerialNumber: syz [ 284.842857][ T5275] usb 5-1: config 0 descriptor?? [ 284.866824][ T5275] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 284.885572][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.909968][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.929556][ T11] bond0 (unregistering): Released all slaves [ 284.943901][ T11] bond1 (unregistering): Released all slaves [ 285.414246][ T11] hsr_slave_0: left promiscuous mode [ 285.421822][ T11] hsr_slave_1: left promiscuous mode [ 285.428504][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.435655][ T9] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 285.442383][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.452476][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.465237][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.476380][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 285.489260][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 285.494349][ T11] veth1_macvtap: left promiscuous mode [ 285.503180][ T11] veth0_macvtap: left promiscuous mode [ 285.503617][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 285.508962][ T11] veth1_vlan: left promiscuous mode [ 285.523651][ T11] veth0_vlan: left promiscuous mode [ 285.535014][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 285.556389][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.564746][ T9] usb 2-1: Product: syz [ 285.575521][ T9] usb 2-1: Manufacturer: syz [ 285.581966][ T9] usb 2-1: SerialNumber: syz [ 285.654325][ T29] audit: type=1400 audit(1728089398.580:351): avc: denied { unmount } for pid=5219 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 285.808437][ T9] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 25 if 0 alt 127 proto 2 vid 0x0525 pid 0xA4A8 [ 285.841960][ T9] usb 2-1: USB disconnect, device number 25 [ 285.868560][ T9] usblp0: removed [ 285.894086][ T52] usb 5-1: Failed to submit usb control message: -110 [ 285.901595][ T52] usb 5-1: unable to send the bmi data to the device: -110 [ 285.916611][ T52] usb 5-1: unable to get target info from device [ 285.923180][ T52] usb 5-1: could not get target info (-110) [ 285.931419][ T52] usb 5-1: could not probe fw (-110) [ 286.321232][ T9] usb 5-1: USB disconnect, device number 21 [ 288.276114][ T29] audit: type=1400 audit(1728089401.190:352): avc: denied { ioctl } for pid=7028 comm="syz.3.409" path="socket:[16766]" dev="sockfs" ino=16766 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 288.865781][ T29] audit: type=1400 audit(1728089401.790:353): avc: denied { read write } for pid=7047 comm="syz.1.415" name="nullb0" dev="devtmpfs" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 288.978437][ T29] audit: type=1400 audit(1728089401.790:354): avc: denied { open } for pid=7047 comm="syz.1.415" path="/dev/nullb0" dev="devtmpfs" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 289.005480][ T29] audit: type=1400 audit(1728089401.790:355): avc: denied { map } for pid=7047 comm="syz.1.415" path="/dev/nullb0" dev="devtmpfs" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 289.038776][ T29] audit: type=1400 audit(1728089401.940:356): avc: denied { search } for pid=4658 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 289.610953][ T29] audit: type=1400 audit(1728089402.540:357): avc: denied { create } for pid=7047 comm="syz.1.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 290.826806][ T11] team0 (unregistering): Port device team_slave_1 removed [ 291.084695][ T11] team0 (unregistering): Port device team_slave_0 removed [ 291.300470][ T5304] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 291.344826][ T29] audit: type=1400 audit(1728089404.270:358): avc: denied { setopt } for pid=7073 comm="syz.3.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 291.447449][ T5304] usb 5-1: device descriptor read/64, error -71 [ 291.474672][ T29] audit: type=1400 audit(1728089404.390:359): avc: denied { ioctl } for pid=7073 comm="syz.3.419" path="socket:[17631]" dev="sockfs" ino=17631 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 291.695210][ T5304] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 291.850137][ T5304] usb 5-1: device descriptor read/64, error -71 [ 291.929513][ T6814] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 291.954723][ T6814] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 291.978100][ T5304] usb usb5-port1: attempt power cycle [ 291.984743][ T6814] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 292.018847][ T6814] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 292.046313][ T6748] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 292.075952][ T6748] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 292.103095][ T6748] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 292.177572][ T6748] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 292.301701][ T6814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.334651][ T5304] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 292.341812][ T6814] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.355514][ T3048] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.362682][ T3048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.401645][ T5304] usb 5-1: device descriptor read/8, error -71 [ 292.411690][ T3048] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.418879][ T3048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.441803][ T6748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.509998][ T6748] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.556996][ T1103] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.564195][ T1103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.634628][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.641908][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.376113][ T5304] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 293.435873][ T5304] usb 5-1: device descriptor read/8, error -71 [ 293.574105][ T5304] usb usb5-port1: unable to enumerate USB device [ 293.644705][ T6814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.737838][ T6748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.816666][ T6814] veth0_vlan: entered promiscuous mode [ 293.865726][ T6814] veth1_vlan: entered promiscuous mode [ 293.909848][ T6748] veth0_vlan: entered promiscuous mode [ 293.926176][ T29] audit: type=1400 audit(1728089406.850:360): avc: denied { bind } for pid=7101 comm="syz.3.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 294.036921][ T29] audit: type=1400 audit(1728089406.890:361): avc: denied { accept } for pid=7101 comm="syz.3.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 294.178160][ T29] audit: type=1400 audit(1728089406.890:362): avc: denied { write } for pid=7101 comm="syz.3.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 295.042075][ T6814] veth0_macvtap: entered promiscuous mode [ 295.058569][ T29] audit: type=1400 audit(1728089406.890:363): avc: denied { read } for pid=7101 comm="syz.3.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 295.249335][ T6814] veth1_macvtap: entered promiscuous mode [ 295.290342][ T6748] veth1_vlan: entered promiscuous mode [ 295.357601][ T6814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.395773][ T6814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.467592][ T6814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.500867][ T6814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.513383][ T6814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.527665][ T6814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.671225][ T6814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.830284][ T6748] veth0_macvtap: entered promiscuous mode [ 296.105330][ T5274] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 296.378820][ T6814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.390811][ T6814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.414615][ T6814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.425380][ T5274] usb 5-1: device descriptor read/64, error -71 [ 296.445798][ T6814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.456004][ T6814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.466725][ T6814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.481015][ T6814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.493788][ T6814] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.503632][ T6814] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.512484][ T6814] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.521396][ T6814] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.569762][ T6748] veth1_macvtap: entered promiscuous mode [ 296.665666][ T5274] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 296.689930][ T6748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.712998][ T6748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.723470][ T6748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.740557][ T6748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.751769][ T6748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.762624][ T6748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.772612][ T6748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.783307][ T6748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.794602][ T6748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.805760][ T6748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.816398][ T6748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.826445][ T6748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.836952][ T6748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.846828][ T6748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.857346][ T6748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.867233][ T6748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.877749][ T6748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.888975][ T6748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.899190][ T6748] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.908460][ T6748] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.917714][ T6748] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.926745][ T6748] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.954189][ T5274] usb 5-1: device descriptor read/64, error -71 [ 297.018828][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.026881][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.028288][ T6248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.085681][ T7133] netlink: 'syz.3.432': attribute type 10 has an invalid length. [ 297.093541][ T7133] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 297.106584][ T7133] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 297.119071][ T7133] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 297.172226][ T7135] overlayfs: missing 'lowerdir' [ 297.937870][ T6248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.004659][ T5274] usb usb5-port1: attempt power cycle [ 298.359064][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.371224][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.617738][ T5274] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 298.636514][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.644408][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.096162][ T5236] Bluetooth: hci4: command 0x0406 tx timeout [ 299.394467][ T5274] usb 5-1: device descriptor read/8, error -71 [ 300.413904][ T29] audit: type=1400 audit(1728089413.340:364): avc: denied { connect } for pid=7156 comm="syz.3.438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 301.324093][ T7170] fuse: Bad value for 'group_id' [ 301.329355][ T7170] fuse: Bad value for 'group_id' [ 301.881397][ T5275] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 301.991918][ T7180] exFAT-fs (nullb0): invalid boot record signature [ 301.998795][ T7180] exFAT-fs (nullb0): failed to read boot sector [ 302.005142][ T7180] exFAT-fs (nullb0): failed to recognize exfat type [ 302.096425][ T5275] usb 1-1: device descriptor read/64, error -71 [ 303.223934][ T5275] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 307.804949][ T7226] netlink: 'syz.3.453': attribute type 1 has an invalid length. [ 307.955561][ T29] audit: type=1400 audit(1728089420.880:365): avc: denied { connect } for pid=7207 comm="syz.0.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 308.108531][ T7208] netlink: 60 bytes leftover after parsing attributes in process `syz.0.450'. [ 308.108981][ T7226] netlink: 224 bytes leftover after parsing attributes in process `syz.3.453'. [ 308.737686][ T29] audit: type=1400 audit(1728089421.670:366): avc: denied { append } for pid=7230 comm="syz.2.455" name="nullb0" dev="devtmpfs" ino=680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 308.852982][ T7234] netlink: 16 bytes leftover after parsing attributes in process `syz.1.456'. [ 310.162556][ T7251] netlink: 'syz.2.460': attribute type 10 has an invalid length. [ 310.170605][ T7251] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 310.183199][ T7251] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 310.194626][ T7251] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 310.958413][ T29] audit: type=1400 audit(1728089423.890:367): avc: denied { setopt } for pid=7240 comm="syz.3.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 310.969736][ T5236] Bluetooth: hci1: command 0x0405 tx timeout [ 311.834388][ T29] audit: type=1400 audit(1728089424.760:368): avc: denied { listen } for pid=7240 comm="syz.3.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 311.853871][ C1] vkms_vblank_simulate: vblank timer overrun [ 312.475247][ T5536] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 312.718487][ T5536] usb 5-1: Using ep0 maxpacket: 8 [ 312.738111][ T5536] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 312.755741][ T5536] usb 5-1: config 179 has no interface number 0 [ 312.758593][ T7269] netlink: 'syz.0.465': attribute type 10 has an invalid length. [ 312.774615][ T5536] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 312.796567][ T5536] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 312.841226][ T5536] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 312.874091][ T5536] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 312.889155][ T7269] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 312.889186][ T7269] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 312.889365][ T7269] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 313.082070][ T5536] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 313.125148][ T5536] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.201035][ T5536] usb 5-1: can't set config #179, error -71 [ 313.229441][ T5536] usb 5-1: USB disconnect, device number 30 [ 313.394556][ T7279] netlink: 'syz.3.467': attribute type 1 has an invalid length. [ 313.402584][ T7279] netlink: 224 bytes leftover after parsing attributes in process `syz.3.467'. [ 314.214542][ T7291] netlink: 'syz.4.471': attribute type 1 has an invalid length. [ 314.222682][ T7291] netlink: 224 bytes leftover after parsing attributes in process `syz.4.471'. [ 314.812925][ T29] audit: type=1400 audit(1728089427.740:369): avc: denied { execute } for pid=7282 comm="syz.3.469" path=2F6D656D66643A01FDAE2E2BA68CB63F32193994532C7C783F55655BBDE1210333BC2723FF179B25F35B64202097F5479741C2D8F05571E62BA56C940BB607175CFB0421E4C4B1A21CFF433B94510DB67D9CEC430BCFEBE49A52E52C8203202864656C6574656429 dev="hugetlbfs" ino=17280 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 317.453805][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.540488][ T29] audit: type=1400 audit(1728089430.460:370): avc: denied { name_bind } for pid=7305 comm="syz.1.475" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 317.788155][ T7325] netlink: 'syz.4.479': attribute type 1 has an invalid length. [ 317.796172][ T7325] netlink: 224 bytes leftover after parsing attributes in process `syz.4.479'. [ 319.465308][ T5273] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 320.305163][ T5273] usb 1-1: device descriptor read/64, error -71 [ 320.545184][ T5273] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 320.545813][ T7353] netlink: 116 bytes leftover after parsing attributes in process `syz.1.487'. [ 320.684542][ T29] audit: type=1400 audit(1728089433.610:371): avc: denied { connect } for pid=7348 comm="syz.1.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 320.705654][ T5273] usb 1-1: device descriptor read/64, error -71 [ 320.720664][ T29] audit: type=1400 audit(1728089433.630:372): avc: denied { write } for pid=7348 comm="syz.1.487" laddr=172.20.20.170 lport=1 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 320.830972][ T5273] usb usb1-port1: attempt power cycle [ 321.945909][ T5304] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 322.029618][ T29] audit: type=1326 audit(1728089434.960:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm="syz.0.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530a57dff9 code=0x7ffc0000 [ 322.107981][ T29] audit: type=1326 audit(1728089435.040:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm="syz.0.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f530a57dff9 code=0x7ffc0000 [ 322.131161][ C0] vkms_vblank_simulate: vblank timer overrun [ 322.151374][ T5304] usb 3-1: device descriptor read/64, error -71 [ 322.163020][ T29] audit: type=1326 audit(1728089435.040:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm="syz.0.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530a57dff9 code=0x7ffc0000 [ 322.193799][ T29] audit: type=1326 audit(1728089435.050:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm="syz.0.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530a57dff9 code=0x7ffc0000 [ 322.217223][ C0] vkms_vblank_simulate: vblank timer overrun [ 322.395328][ T29] audit: type=1326 audit(1728089435.070:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm="syz.0.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f530a57dff9 code=0x7ffc0000 [ 322.418556][ C0] vkms_vblank_simulate: vblank timer overrun [ 323.168296][ T5304] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 323.214697][ T29] audit: type=1326 audit(1728089435.070:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm="syz.0.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530a57dff9 code=0x7ffc0000 [ 323.910602][ T5304] usb 3-1: device descriptor read/64, error -71 [ 324.424228][ T29] audit: type=1326 audit(1728089435.070:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm="syz.0.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530a57dff9 code=0x7ffc0000 [ 324.447473][ C0] vkms_vblank_simulate: vblank timer overrun [ 324.464944][ T29] audit: type=1326 audit(1728089435.070:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7378 comm="syz.0.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f530a57dff9 code=0x7ffc0000 [ 324.512547][ T5304] usb usb3-port1: attempt power cycle [ 325.162342][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 325.174025][ T5236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 325.192919][ T5236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 325.273410][ T7411] fuse: Unknown parameter '00000000000000000000' [ 325.396661][ T5236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 325.410442][ T5236] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 325.419942][ T5236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 325.516834][ T7401] netlink: 'syz.4.500': attribute type 10 has an invalid length. [ 325.524680][ T7401] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 325.537315][ T7401] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 325.547922][ T7401] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 325.718280][ T7412] netlink: 'syz.1.501': attribute type 10 has an invalid length. [ 325.822405][ T7412] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 325.852873][ T7412] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 325.875172][ T5304] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 325.939672][ T5304] usb 3-1: device descriptor read/8, error -71 [ 325.996712][ T7412] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 326.143338][ T1103] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.768283][ T5235] Bluetooth: hci5: Malformed LE Event: 0x0d [ 326.908523][ T1103] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.004321][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 327.004342][ T29] audit: type=1400 audit(1728089439.930:412): avc: denied { write } for pid=7431 comm="syz.0.506" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 327.107560][ T1103] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.334131][ T1103] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.117142][ T7437] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 328.140684][ T5235] Bluetooth: hci0: command tx timeout [ 328.341984][ T7440] netlink: 4 bytes leftover after parsing attributes in process `syz.0.506'. [ 329.184231][ T29] audit: type=1400 audit(1728089442.080:413): avc: denied { getopt } for pid=7431 comm="syz.0.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 329.321207][ T7406] chnl_net:caif_netlink_parms(): no params data found [ 329.594347][ T7461] fuse: Unknown parameter '00000000000000000000' [ 330.270193][ T5235] Bluetooth: hci0: command tx timeout [ 331.371517][ T1103] bridge_slave_1: left allmulticast mode [ 331.377286][ T1103] bridge_slave_1: left promiscuous mode [ 331.384819][ T5235] Bluetooth: hci5: Malformed LE Event: 0x0d [ 331.394834][ T1103] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.947944][ T1103] bridge_slave_0: left allmulticast mode [ 331.953653][ T1103] bridge_slave_0: left promiscuous mode [ 331.986893][ T1103] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.999585][ T29] audit: type=1400 audit(1728089444.930:414): avc: denied { mounton } for pid=7482 comm="syz.0.518" path="/proc/75/cgroup" dev="proc" ino=19549 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 332.285456][ T5235] Bluetooth: hci0: command tx timeout [ 334.191211][ T7501] fuse: Unknown parameter '00000000000000000000' [ 334.856352][ T5235] Bluetooth: hci0: command tx timeout [ 336.164529][ T1103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.176481][ T1103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 336.185305][ T5223] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 336.203878][ T1103] bond0 (unregistering): Released all slaves [ 336.250193][ T7487] netlink: 'syz.0.519': attribute type 10 has an invalid length. [ 336.258043][ T7487] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 336.270422][ T7487] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 336.280919][ T7487] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 336.411389][ T7510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.524'. [ 336.420623][ T5223] usb 3-1: device descriptor read/64, error -71 [ 336.445787][ T7510] openvswitch: netlink: Flow key attr not present in new flow. [ 336.618721][ T7406] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.647912][ T7406] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.666779][ T7406] bridge_slave_0: entered allmulticast mode [ 336.696842][ T7406] bridge_slave_0: entered promiscuous mode [ 336.726264][ T5223] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 336.751445][ T1103] hsr_slave_0: left promiscuous mode [ 336.757467][ T1103] hsr_slave_1: left promiscuous mode [ 336.763134][ T29] audit: type=1400 audit(1728089449.690:415): avc: denied { watch watch_reads } for pid=7509 comm="syz.0.524" path="/21" dev="tmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 336.805868][ T1103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.816203][ T1103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.847718][ T29] audit: type=1400 audit(1728089449.760:416): avc: denied { getopt } for pid=7509 comm="syz.0.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 336.875295][ T5223] usb 3-1: device descriptor read/64, error -71 [ 336.901278][ T1103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.915316][ T1103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.975219][ T1103] veth1_macvtap: left promiscuous mode [ 336.984290][ T1103] veth0_macvtap: left promiscuous mode [ 336.990236][ T5223] usb usb3-port1: attempt power cycle [ 337.009791][ T1103] veth1_vlan: left promiscuous mode [ 337.033588][ T1103] veth0_vlan: left promiscuous mode [ 337.065189][ T1615] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 337.250170][ T1615] usb 1-1: config index 0 descriptor too short (expected 24347, got 27) [ 337.260973][ T1615] usb 1-1: config 0 has too many interfaces: 220, using maximum allowed: 32 [ 337.270278][ T1615] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 220 [ 337.289059][ T1615] usb 1-1: config 0 has no interface number 0 [ 337.299542][ T1615] usb 1-1: config 0 interface 1 has no altsetting 0 [ 337.318762][ T1615] usb 1-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.5e [ 337.333468][ T1615] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.341788][ T1615] usb 1-1: Product: syz [ 337.355699][ T5223] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 337.361198][ T1615] usb 1-1: Manufacturer: syz [ 337.368356][ T1615] usb 1-1: SerialNumber: syz [ 337.384966][ T1615] usb 1-1: config 0 descriptor?? [ 337.442339][ T5223] usb 3-1: device descriptor read/8, error -71 [ 337.735187][ T5223] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 337.786801][ T5223] usb 3-1: device descriptor read/8, error -71 [ 337.915537][ T5223] usb usb3-port1: unable to enumerate USB device [ 338.316490][ T1103] team0 (unregistering): Port device team_slave_1 removed [ 338.455139][ T7517] fuse: Unknown parameter '00000000000000000000' [ 339.273734][ T1103] team0 (unregistering): Port device team_slave_0 removed [ 339.627226][ T7523] netlink: 'syz.2.526': attribute type 29 has an invalid length. [ 339.651770][ T7523] binder: 7518:7523 ioctl 4018620d 0 returned -22 [ 339.693527][ T29] audit: type=1400 audit(1728089452.560:417): avc: denied { write } for pid=7518 comm="syz.2.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 340.152149][ T29] audit: type=1400 audit(1728089452.560:418): avc: denied { nlmsg_write } for pid=7518 comm="syz.2.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 340.241928][ T1615] msi2500 1-1:0.1: Registered as swradio16 [ 340.250873][ T1615] msi2500 1-1:0.1: SDR API is still slightly experimental and functionality changes may follow [ 340.300891][ T1615] msi2500 1-1:0.142: Registered as swradio17 [ 340.309408][ T1615] msi2500 1-1:0.142: SDR API is still slightly experimental and functionality changes may follow [ 340.347636][ T1615] usb 1-1: USB disconnect, device number 28 [ 340.563119][ T29] audit: type=1400 audit(1728089453.490:419): avc: denied { write } for pid=7526 comm="syz.0.527" path="socket:[19313]" dev="sockfs" ino=19313 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 340.940295][ T7406] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.958643][ T7406] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.974978][ T7406] bridge_slave_1: entered allmulticast mode [ 340.982392][ T7406] bridge_slave_1: entered promiscuous mode [ 341.095886][ T7406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.203258][ T7406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.409593][ T7406] team0: Port device team_slave_0 added [ 341.475714][ T7406] team0: Port device team_slave_1 added [ 341.608592][ T5236] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 341.627260][ T5236] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 341.637343][ T5236] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 341.747509][ T7406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.754475][ T7406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.805471][ T5236] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 341.845265][ T7406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.939302][ T5236] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 341.956649][ T5236] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 341.979812][ T5224] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 342.015610][ T7406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.025150][ T7406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.051257][ T7406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.075755][ T5224] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 342.102946][ T5224] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 342.165226][ T5235] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 342.190260][ T7406] hsr_slave_0: entered promiscuous mode [ 342.201388][ T7406] hsr_slave_1: entered promiscuous mode [ 342.221285][ T5235] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 342.229287][ T5235] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 342.509201][ T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.810677][ T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.127319][ T5235] Bluetooth: hci2: command tx timeout [ 344.223978][ T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.287059][ T5235] Bluetooth: hci6: command tx timeout [ 344.808376][ T7564] fuse: Unknown parameter '0x0000000000000009' [ 345.407537][ T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.209511][ T5235] Bluetooth: hci2: command tx timeout [ 346.369653][ T5235] Bluetooth: hci6: command tx timeout [ 346.757176][ T52] bridge_slave_1: left allmulticast mode [ 346.762970][ T52] bridge_slave_1: left promiscuous mode [ 346.769785][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.780034][ T52] bridge_slave_0: left allmulticast mode [ 346.788647][ T52] bridge_slave_0: left promiscuous mode [ 346.794323][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.960072][ T1615] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 347.095250][ T1615] usb 1-1: device descriptor read/64, error -71 [ 347.200743][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.214035][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 347.224985][ T52] bond0 (unregistering): Released all slaves [ 347.342028][ T1615] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 347.371839][ T7536] chnl_net:caif_netlink_parms(): no params data found [ 347.387096][ T7540] chnl_net:caif_netlink_parms(): no params data found [ 347.505200][ T1615] usb 1-1: device descriptor read/64, error -71 [ 347.610928][ T7406] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 347.615498][ T1615] usb usb1-port1: attempt power cycle [ 347.665354][ T7406] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 347.674827][ T7536] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.684406][ T7536] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.691877][ T7536] bridge_slave_0: entered allmulticast mode [ 347.710126][ T7536] bridge_slave_0: entered promiscuous mode [ 347.754808][ T7406] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 347.804613][ T52] hsr_slave_0: left promiscuous mode [ 347.814902][ T52] hsr_slave_1: left promiscuous mode [ 347.829870][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.841263][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.854753][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.871817][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.913696][ T52] veth1_macvtap: left promiscuous mode [ 347.919480][ T52] veth0_macvtap: left promiscuous mode [ 347.933503][ T52] veth1_vlan: left promiscuous mode [ 347.938953][ T52] veth0_vlan: left promiscuous mode [ 347.956009][ T1615] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 347.995194][ T1615] usb 1-1: device descriptor read/8, error -71 [ 348.245683][ T1615] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 348.278112][ T1615] usb 1-1: device descriptor read/8, error -71 [ 348.289551][ T5235] Bluetooth: hci2: command tx timeout [ 348.299544][ T7583] random: crng reseeded on system resumption [ 348.300754][ T29] audit: type=1400 audit(1728089461.230:420): avc: denied { ioctl } for pid=7582 comm="syz.2.539" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 348.354522][ T29] audit: type=1400 audit(1728089461.230:421): avc: denied { append } for pid=7582 comm="syz.2.539" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 348.378575][ T29] audit: type=1400 audit(1728089461.230:422): avc: denied { open } for pid=7582 comm="syz.2.539" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 348.401673][ T1615] usb usb1-port1: unable to enumerate USB device [ 348.401811][ C0] vkms_vblank_simulate: vblank timer overrun [ 348.456738][ T5235] Bluetooth: hci6: command tx timeout [ 348.898664][ T52] team0 (unregistering): Port device team_slave_1 removed [ 349.649284][ T52] team0 (unregistering): Port device team_slave_0 removed [ 349.833710][ T29] audit: type=1400 audit(1728089462.750:423): avc: denied { watch watch_reads } for pid=7593 comm="syz.0.543" path="/sys/power/pm_trace_dev_match" dev="sysfs" ino=1381 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=file permissive=1 [ 350.433265][ T5235] Bluetooth: hci2: command tx timeout [ 350.525282][ T5235] Bluetooth: hci6: command tx timeout [ 351.141753][ T7536] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.152619][ T7536] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.159944][ T7536] bridge_slave_1: entered allmulticast mode [ 351.173432][ T7536] bridge_slave_1: entered promiscuous mode [ 351.181226][ T7540] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.190167][ T7540] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.197498][ T7540] bridge_slave_0: entered allmulticast mode [ 351.204201][ T7540] bridge_slave_0: entered promiscuous mode [ 351.212598][ T7406] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 351.223189][ T7604] netlink: 24 bytes leftover after parsing attributes in process `syz.0.545'. [ 351.319026][ T7540] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.326950][ T7540] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.343666][ T7540] bridge_slave_1: entered allmulticast mode [ 351.350957][ T7540] bridge_slave_1: entered promiscuous mode [ 351.388692][ T7536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.490377][ T7540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.533168][ T7536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.546811][ T7540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.556535][ T29] audit: type=1400 audit(1728089464.470:424): avc: denied { write } for pid=7612 comm="syz.2.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 351.595272][ T29] audit: type=1400 audit(1728089464.510:425): avc: denied { connect } for pid=7612 comm="syz.2.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 351.641394][ T7613] tipc: Started in network mode [ 351.650944][ T7613] tipc: Node identity 7, cluster identity 4711 [ 351.657207][ T7613] tipc: Node number set to 7 [ 351.669225][ T7536] team0: Port device team_slave_0 added [ 351.687877][ T7536] team0: Port device team_slave_1 added [ 351.742003][ T7540] team0: Port device team_slave_0 added [ 351.775820][ T7536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.783698][ T7536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.811928][ T7536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.826049][ T7540] team0: Port device team_slave_1 added [ 351.833376][ T7536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.840648][ T7536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.868612][ T7536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.067057][ T7540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.108808][ T7540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.866376][ T7540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.838567][ T29] audit: type=1400 audit(1728089466.170:426): avc: denied { read } for pid=7626 comm="syz.2.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 353.960751][ T7540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.048198][ T7540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.074288][ T7540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.108355][ T7536] hsr_slave_0: entered promiscuous mode [ 354.127025][ T7536] hsr_slave_1: entered promiscuous mode [ 354.133570][ T7536] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 354.155124][ T7536] Cannot create hsr debugfs directory [ 354.221157][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.601461][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.820858][ T7540] hsr_slave_0: entered promiscuous mode [ 354.829494][ T7540] hsr_slave_1: entered promiscuous mode [ 354.994292][ T7540] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 355.014939][ T7540] Cannot create hsr debugfs directory [ 355.388890][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.487213][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.615453][ T25] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 355.627427][ T7406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.732547][ T7406] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.762162][ T952] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.769285][ T952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.805177][ T52] bridge_slave_1: left allmulticast mode [ 355.815665][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 355.823325][ T52] bridge_slave_1: left promiscuous mode [ 355.834404][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.843971][ T25] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 355.856897][ T25] usb 1-1: config 0 has no interface number 0 [ 355.863585][ T25] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 355.877432][ T52] bridge_slave_0: left allmulticast mode [ 355.883075][ T52] bridge_slave_0: left promiscuous mode [ 355.894477][ T25] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 355.905421][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.914739][ T25] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 355.925306][ T25] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 355.934149][ T25] usb 1-1: Product: syz [ 355.940485][ T25] usb 1-1: SerialNumber: syz [ 355.953854][ T25] usb 1-1: config 0 descriptor?? [ 355.967285][ T25] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 355.980742][ T25] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input7 [ 356.024424][ T29] audit: type=1400 audit(1728089468.950:427): avc: denied { ioctl } for pid=4661 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2436 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 356.426713][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 356.426993][ T5223] usb 1-1: USB disconnect, device number 33 [ 356.433983][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 356.479156][ T5223] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 356.705855][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.728912][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 356.745320][ T52] bond0 (unregistering): Released all slaves [ 356.806063][ T1605] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.813207][ T1605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.030462][ T7665] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.039287][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.078967][ T7667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.212598][ T29] audit: type=1400 audit(1728089470.110:428): avc: denied { bind } for pid=7666 comm="syz.0.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 357.269250][ T29] audit: type=1400 audit(1728089470.110:429): avc: denied { ioctl } for pid=7666 comm="syz.0.562" path="socket:[20270]" dev="sockfs" ino=20270 ioctlcmd=0x891a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 357.427510][ T52] hsr_slave_0: left promiscuous mode [ 357.500042][ T29] audit: type=1400 audit(1728089470.110:430): avc: denied { shutdown } for pid=7666 comm="syz.0.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 357.562668][ T52] hsr_slave_1: left promiscuous mode [ 357.602329][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.687155][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.872352][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.892549][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.938191][ T52] veth1_macvtap: left promiscuous mode [ 357.948922][ T52] veth0_macvtap: left promiscuous mode [ 357.958830][ T52] veth1_vlan: left promiscuous mode [ 357.964213][ T52] veth0_vlan: left promiscuous mode [ 357.997386][ T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.428611][ T7676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.437795][ T7676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.446674][ T7676] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.645251][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.654093][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.004261][ T5235] Bluetooth: hci1: command 0x0405 tx timeout [ 359.009012][ T7673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.020057][ T7673] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.731622][ T52] team0 (unregistering): Port device team_slave_1 removed [ 359.787287][ T52] team0 (unregistering): Port device team_slave_0 removed [ 360.365425][ T5235] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 360.376811][ T5235] Bluetooth: hci5: Injecting HCI hardware error event [ 360.396270][ T5236] Bluetooth: hci5: hardware error 0x00 [ 360.512864][ T7406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.951315][ T7406] veth0_vlan: entered promiscuous mode [ 361.020938][ T7406] veth1_vlan: entered promiscuous mode [ 361.095171][ T7689] netlink: 'syz.0.566': attribute type 1 has an invalid length. [ 361.102956][ T7689] netlink: 224 bytes leftover after parsing attributes in process `syz.0.566'. [ 361.335985][ T5536] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 361.389861][ T7406] veth0_macvtap: entered promiscuous mode [ 361.509118][ T7406] veth1_macvtap: entered promiscuous mode [ 361.535175][ T5536] usb 3-1: Using ep0 maxpacket: 8 [ 361.548243][ T5536] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 361.562187][ T5536] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.583875][ T5536] usb 3-1: config 0 descriptor?? [ 361.631818][ T7406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.652750][ T7406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.662874][ T7406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.673630][ T7406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.685489][ T7406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.693671][ T7540] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 361.716255][ T7540] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 361.729680][ T7406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.745315][ T7406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.757611][ T7406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.768976][ T7406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.780852][ T7406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.792444][ T7540] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 361.818055][ T7406] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.828968][ T5235] Bluetooth: hci5: Malformed LE Event: 0x0d [ 361.845161][ T7406] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.853933][ T7406] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.863032][ T7406] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.880248][ T7540] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 362.087344][ T7536] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 362.106779][ T7536] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 362.154079][ T7536] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 362.188171][ T7536] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 362.461912][ T45] net_ratelimit: 6 callbacks suppressed [ 362.461932][ T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.527451][ T5236] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 362.548816][ T7701] netlink: 'syz.0.569': attribute type 1 has an invalid length. [ 362.557385][ T7701] netlink: 224 bytes leftover after parsing attributes in process `syz.0.569'. [ 362.875815][ T7540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.925500][ T6248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.945425][ T6248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.954655][ T7540] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.969283][ T6248] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.976457][ T6248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.008877][ T7536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.041783][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.049087][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.091888][ T7540] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 363.102712][ T7540] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 363.296894][ T6248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.304801][ T6248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.386571][ T7710] fuse: Unknown parameter 'grou00000000000000000000' [ 363.478846][ T7536] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.831042][ T7567] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.838235][ T7567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.956409][ T1605] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.963589][ T1605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.055969][ T5275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.093190][ T7540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.149376][ T7536] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 364.159992][ T7536] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 364.178016][ T7540] veth0_vlan: entered promiscuous mode [ 364.191163][ T7540] veth1_vlan: entered promiscuous mode [ 364.573300][ T7540] veth0_macvtap: entered promiscuous mode [ 364.608228][ T5274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.965241][ T7540] veth1_macvtap: entered promiscuous mode [ 365.081480][ T7540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.097333][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.135965][ T5536] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 365.136152][ T7540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.146325][ T5536] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 365.169447][ T5536] asix 3-1:0.0: probe with driver asix failed with error -71 [ 365.171826][ T7540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.185130][ T5536] usb 3-1: USB disconnect, device number 43 [ 365.196398][ T7540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.207530][ T7540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.220201][ T7540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.270076][ T7540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.303830][ T7536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.547612][ T7540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.559783][ T7540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.570781][ T7540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.595267][ T7540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.631032][ T5274] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 365.696090][ T7540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.706766][ T7540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.830085][ T7540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.045631][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.085342][ T5274] usb 1-1: device descriptor read/64, error -71 [ 366.325265][ T5274] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 366.374017][ T5536] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.473599][ T7540] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.489173][ T7540] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.498005][ T7540] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.507183][ T7540] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.842063][ T5274] usb 1-1: device descriptor read/64, error -71 [ 366.862534][ T3048] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.889724][ T3048] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.209239][ T29] audit: type=1400 audit(1728089479.930:431): avc: denied { bind } for pid=7743 comm="syz.2.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 367.626033][ T5536] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.655179][ T5274] usb usb1-port1: attempt power cycle [ 367.666719][ T5223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.712729][ T7567] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.720795][ T7567] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.036419][ T7761] fuse: Unknown parameter 'grou00000000000000000000' [ 368.569195][ T7536] veth0_vlan: entered promiscuous mode [ 368.582087][ T7536] veth1_vlan: entered promiscuous mode [ 368.610801][ T7536] veth0_macvtap: entered promiscuous mode [ 368.691127][ T5536] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.733964][ T7536] veth1_macvtap: entered promiscuous mode [ 368.756475][ T5274] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 368.775799][ T5274] usb 1-1: device descriptor read/8, error -71 [ 368.818832][ T7536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.838461][ T7536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.852649][ T7536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.869681][ T7536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.055995][ T7536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.092275][ T7770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.100799][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.879594][ T7536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.891504][ T7536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.902329][ T7536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.012931][ T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.095267][ T7536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.581811][ T5274] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 370.775869][ T5274] usb 1-1: device descriptor read/8, error -71 [ 371.167889][ T5536] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.202831][ T7536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.213935][ T7536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.232972][ T5274] usb usb1-port1: unable to enumerate USB device [ 371.385469][ T5223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.403191][ T5223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.446019][ T5223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.465513][ T7536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.479269][ T7536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.500913][ T7536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.864279][ T7536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.891273][ T7536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.903026][ T7536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.536707][ T7536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.823004][ T7536] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.832287][ T7536] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.841355][ T7536] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.850224][ T7536] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.538978][ T7796] fuse: Unknown parameter '00000000000000000000' [ 373.667826][ T5275] net_ratelimit: 2 callbacks suppressed [ 373.667849][ T5275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.720020][ T5274] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 373.867741][ T5274] usb 1-1: device descriptor read/64, error -71 [ 374.220239][ T7567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.228836][ T7567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.239342][ T7567] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.253027][ T7802] netlink: 'syz.1.589': attribute type 10 has an invalid length. [ 374.265134][ T7567] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.278333][ T7802] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 374.295172][ T5274] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 374.324128][ T7802] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 374.365757][ T7802] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 374.411373][ T7805] netlink: 'syz.2.590': attribute type 10 has an invalid length. [ 374.444366][ T7805] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 374.461551][ T5274] usb 1-1: device descriptor read/64, error -71 [ 374.515759][ T7805] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 374.586558][ T5274] usb usb1-port1: attempt power cycle [ 374.636518][ T7805] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 374.673806][ T5236] Bluetooth: hci2: Malformed LE Event: 0x0d [ 374.685756][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.939706][ T5273] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.979188][ T5274] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 375.205188][ T5274] usb 1-1: device not accepting address 40, error -71 [ 375.677490][ T7828] fuse: Unknown parameter 'group_i00000000000000000000' [ 375.727456][ T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.518076][ T5274] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 377.291625][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.351716][ T5274] usb 1-1: device descriptor read/8, error -71 [ 377.651534][ T5274] usb usb1-port1: unable to enumerate USB device [ 378.047181][ T5223] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 378.095289][ T7845] netlink: 80 bytes leftover after parsing attributes in process `syz.3.600'. [ 378.256511][ T5223] usb 3-1: Using ep0 maxpacket: 32 [ 378.269587][ T5223] usb 3-1: config 0 has an invalid interface number: 126 but max is 0 [ 378.321855][ T5223] usb 3-1: config 0 has no interface number 0 [ 378.543667][ T5274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.616114][ T29] audit: type=1400 audit(1728089491.550:432): avc: denied { listen } for pid=7843 comm="syz.3.600" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 378.651061][ T5223] usb 3-1: config 0 interface 126 altsetting 16 endpoint 0x6 has invalid maxpacket 2047, setting to 1024 [ 378.662561][ T5223] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1024 [ 378.678085][ T5223] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 378.688235][ T5223] usb 3-1: config 0 interface 126 has no altsetting 0 [ 378.697492][ T5223] usb 3-1: New USB device found, idVendor=09c4, idProduct=0015, bcdDevice=b0.1c [ 378.830509][ T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.850852][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.864167][ T7845] sctp: failed to load transform for md5: -2 [ 378.973200][ T5223] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.048228][ T5223] usb 3-1: Product: syz [ 379.052454][ T5223] usb 3-1: Manufacturer: syz [ 379.071877][ T5223] usb 3-1: SerialNumber: syz [ 379.152166][ T5223] usb 3-1: config 0 descriptor?? [ 379.158654][ T7844] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 379.167418][ T7844] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 379.886572][ T5275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.987024][ T7861] netlink: 'syz.1.602': attribute type 1 has an invalid length. [ 379.994710][ T7861] netlink: 224 bytes leftover after parsing attributes in process `syz.1.602'. [ 380.565683][ T7844] sctp: [Deprecated]: syz.2.598 (pid 7844) Use of int in max_burst socket option. [ 380.565683][ T7844] Use struct sctp_assoc_value instead [ 380.828823][ T7876] netlink: 116 bytes leftover after parsing attributes in process `syz.0.605'. [ 380.969804][ T5275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.979465][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.115109][ T7884] fuse: Unknown parameter 'group_i00000000000000000000' [ 381.833393][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.372831][ T5275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.169066][ T5223] usb 3-1: USB disconnect, device number 44 [ 383.418568][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.850398][ T7910] fuse: Unknown parameter '00000000000000000000' [ 385.062815][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.071146][ T5223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.128616][ T7908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.137824][ T7908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.146481][ T7908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.155370][ T7908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.163640][ T7908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.172299][ T7908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.365138][ T29] audit: type=1400 audit(1728089497.100:433): avc: denied { create } for pid=7906 comm="syz.1.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 385.385505][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.183954][ T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.193513][ T5275] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 386.815603][ T5304] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 387.126493][ T5275] usb 3-1: device descriptor read/64, error -71 [ 387.155381][ T5304] usb 2-1: Using ep0 maxpacket: 8 [ 387.198551][ T5304] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 387.246587][ T5304] usb 2-1: config 179 has no interface number 0 [ 387.254459][ T5304] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 387.267894][ T5304] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 387.285231][ T5304] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 387.792384][ T5304] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 387.806315][ T5304] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 387.816208][ T5304] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.817103][ T5236] Bluetooth: hci1: command 0x0405 tx timeout [ 388.665193][ T5304] usb 2-1: can't set config #179, error -71 [ 388.672636][ T5304] usb 2-1: USB disconnect, device number 26 [ 388.766525][ T5275] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 388.992235][ T25] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 389.250081][ T25] usb 1-1: config 0 has an invalid interface number: 208 but max is 0 [ 389.265189][ T25] usb 1-1: config 0 has no interface number 0 [ 389.273029][ T25] usb 1-1: too many endpoints for config 0 interface 208 altsetting 167: 211, using maximum allowed: 30 [ 389.720260][ T25] usb 1-1: config 0 interface 208 altsetting 167 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.784768][ T25] usb 1-1: config 0 interface 208 altsetting 167 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.821767][ T25] usb 1-1: config 0 interface 208 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 211 [ 390.934205][ T45] net_ratelimit: 4 callbacks suppressed [ 390.934230][ T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.955205][ T25] usb 1-1: config 0 interface 208 has no altsetting 0 [ 390.962116][ T25] usb 1-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 390.971960][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.500397][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.568918][ T5235] Bluetooth: hci6: command 0x0406 tx timeout [ 391.930042][ T25] usb 1-1: config 0 descriptor?? [ 391.943810][ T25] usb 1-1: can't set config #0, error -71 [ 391.960300][ T25] usb 1-1: USB disconnect, device number 42 [ 391.978755][ T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.103914][ T5304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.074870][ T5536] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.858270][ T7902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.817490][ T5223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.895126][ T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.904018][ T5224] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 395.938135][ T5224] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 395.945984][ T5224] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 395.953510][ T5224] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 395.962601][ T5224] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 395.970266][ T5224] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 396.025149][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 396.165122][ T9] usb 2-1: device descriptor read/64, error -71 [ 396.435133][ T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 396.655132][ T9] usb 2-1: device descriptor read/64, error -71 [ 396.800092][ T9] usb usb2-port1: attempt power cycle [ 396.804090][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.053514][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.278855][ T7961] chnl_net:caif_netlink_parms(): no params data found [ 397.744669][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.048672][ T5236] Bluetooth: hci3: command tx timeout [ 398.055679][ T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 398.906033][ T9] usb 2-1: device descriptor read/8, error -71 [ 399.283953][ T7989] netlink: 116 bytes leftover after parsing attributes in process `syz.1.631'. [ 399.503293][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.765183][ T5275] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 400.138284][ T5236] Bluetooth: hci3: command tx timeout [ 400.203518][ T7961] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.216938][ T7961] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.235292][ T5275] usb 4-1: Using ep0 maxpacket: 16 [ 400.271618][ T5275] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 400.283308][ T7961] bridge_slave_0: entered allmulticast mode [ 400.345488][ T7961] bridge_slave_0: entered promiscuous mode [ 400.424123][ T5275] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 400.448608][ T5275] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 400.467088][ T7961] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.471982][ T5275] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 400.474523][ T7961] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.512394][ T5275] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.579835][ T8001] fuse: Unknown parameter 'rootmode0ϑS0000000000000000100000' [ 400.612159][ T8001] binder: 7998:8001 ioctl 4018620d 0 returned -22 [ 401.236235][ T7961] bridge_slave_1: entered allmulticast mode [ 401.243375][ T7961] bridge_slave_1: entered promiscuous mode [ 401.294002][ T5275] usb 4-1: Product: syz [ 401.298332][ T5275] usb 4-1: Manufacturer: syz [ 401.303048][ T5275] usb 4-1: SerialNumber: syz [ 401.565876][ T7961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.731406][ T7961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.839773][ T5275] usb 4-1: 0:2 : does not exist [ 401.910508][ T7961] team0: Port device team_slave_0 added [ 402.035445][ T7961] team0: Port device team_slave_1 added [ 402.125663][ T5223] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 402.133622][ T9] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 402.167521][ T52] bridge_slave_1: left allmulticast mode [ 402.187983][ T52] bridge_slave_1: left promiscuous mode [ 402.206459][ T5236] Bluetooth: hci3: command tx timeout [ 402.207607][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.265190][ T5223] usb 1-1: device descriptor read/64, error -71 [ 402.274239][ T52] bridge_slave_0: left allmulticast mode [ 402.281275][ T9] usb 2-1: device descriptor read/64, error -71 [ 402.333522][ T52] bridge_slave_0: left promiscuous mode [ 402.360145][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.505180][ T5223] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 402.535840][ T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 402.669405][ T5223] usb 1-1: device descriptor read/64, error -71 [ 402.675805][ T9] usb 2-1: device descriptor read/64, error -71 [ 402.793940][ T5223] usb usb1-port1: attempt power cycle [ 402.809520][ T9] usb usb2-port1: attempt power cycle [ 403.151439][ T5223] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 403.165731][ T9] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 403.207972][ T9] usb 2-1: device descriptor read/8, error -71 [ 403.214276][ T5223] usb 1-1: device descriptor read/8, error -71 [ 403.412770][ T5236] Bluetooth: hci0: Malformed LE Event: 0x0d [ 403.455245][ T9] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 403.501276][ T5223] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 403.510828][ T9] usb 2-1: device descriptor read/8, error -71 [ 403.601368][ T5223] usb 1-1: device descriptor read/8, error -71 [ 403.665431][ T9] usb usb2-port1: unable to enumerate USB device [ 403.769499][ T5223] usb usb1-port1: unable to enumerate USB device [ 403.869977][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.930442][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 404.038445][ T52] bond0 (unregistering): Released all slaves [ 404.141954][ T7961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.188947][ T7961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.285417][ T5236] Bluetooth: hci3: command tx timeout [ 404.292627][ T7961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.666794][ T7961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.698270][ T7961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.118039][ T7961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.745593][ T52] tipc: Left network mode [ 407.139756][ T8034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.253190][ T5275] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 407.340175][ T8034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.360711][ T7961] hsr_slave_0: entered promiscuous mode [ 407.380662][ T7961] hsr_slave_1: entered promiscuous mode [ 407.388515][ T7961] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 407.399502][ T7961] Cannot create hsr debugfs directory [ 407.694604][ T8038] fuse: Unknown parameter 'group_id00000000000000000000' [ 408.458700][ T52] hsr_slave_0: left promiscuous mode [ 408.822077][ T52] hsr_slave_1: left promiscuous mode [ 408.833454][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.850801][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.864771][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.877935][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 409.887487][ T52] veth1_macvtap: left promiscuous mode [ 409.893160][ T52] veth0_macvtap: left promiscuous mode [ 409.899059][ T52] veth1_vlan: left promiscuous mode [ 409.904709][ T52] veth0_vlan: left promiscuous mode [ 410.047107][ T8045] fuse: Unknown parameter 'fd0x0000000000000009' [ 411.925027][ C1] sched: DL replenish lagged too much [ 413.199971][ T52] team0 (unregistering): Port device team_slave_1 removed [ 413.318555][ T52] team0 (unregistering): Port device team_slave_0 removed [ 414.575567][ T5224] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 414.589117][ T5224] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 414.605469][ T5224] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 414.613445][ T5224] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 414.621253][ T5224] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 414.629414][ T5224] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 416.685543][ T5224] Bluetooth: hci1: command tx timeout [ 420.625567][ T5224] Bluetooth: hci1: command tx timeout [ 421.098383][ T5274] usb 4-1: USB disconnect, device number 26 [ 422.685192][ T5236] Bluetooth: hci1: command tx timeout [ 424.775538][ T5236] Bluetooth: hci1: command tx timeout [ 428.759420][ T5224] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 428.816009][ T5224] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 428.831586][ T5224] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 428.841647][ T5224] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 428.849718][ T5224] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 428.858677][ T5224] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 428.973730][ T5236] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 428.991323][ T5236] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 429.003960][ T5236] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 429.014899][ T5236] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 429.022683][ T5236] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 429.032228][ T5236] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 429.132268][ T5235] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 429.147388][ T5235] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 429.172015][ T8058] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 429.180526][ T8058] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 429.188317][ T8058] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 429.197514][ T8058] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 430.925217][ T8058] Bluetooth: hci0: command tx timeout [ 431.245549][ T5236] Bluetooth: hci4: command tx timeout [ 431.253429][ T8058] Bluetooth: hci5: command tx timeout [ 433.005239][ T8058] Bluetooth: hci0: command tx timeout [ 433.325477][ T5236] Bluetooth: hci4: command tx timeout [ 433.332220][ T8058] Bluetooth: hci5: command tx timeout [ 435.085137][ T8058] Bluetooth: hci0: command tx timeout [ 435.405344][ T8058] Bluetooth: hci5: command tx timeout [ 435.410846][ T8058] Bluetooth: hci4: command tx timeout [ 437.165301][ T8058] Bluetooth: hci0: command tx timeout [ 437.485461][ T5236] Bluetooth: hci5: command tx timeout [ 437.490947][ T8058] Bluetooth: hci4: command tx timeout [ 440.325946][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 455.912251][ T5236] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 455.923826][ T5236] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 455.935915][ T5236] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 455.943945][ T5236] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 455.951934][ T5236] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 455.961258][ T5236] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 456.194607][ T8060] chnl_net:caif_netlink_parms(): no params data found [ 456.327850][ T8060] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.345707][ T8060] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.352983][ T8060] bridge_slave_0: entered allmulticast mode [ 456.367542][ T8060] bridge_slave_0: entered promiscuous mode [ 456.383030][ T8060] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.391493][ T8060] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.406337][ T8060] bridge_slave_1: entered allmulticast mode [ 456.414813][ T8060] bridge_slave_1: entered promiscuous mode [ 456.479547][ T8060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.501597][ T8060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.571338][ T8060] team0: Port device team_slave_0 added [ 456.583878][ T8060] team0: Port device team_slave_1 added [ 456.652515][ T8060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.664273][ T8060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.701988][ T8060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.721035][ T8060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.734160][ T8060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.771116][ T8060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.874267][ T8060] hsr_slave_0: entered promiscuous mode [ 456.894948][ T8060] hsr_slave_1: entered promiscuous mode [ 456.902712][ T8060] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 456.919165][ T8060] Cannot create hsr debugfs directory [ 458.045296][ T5236] Bluetooth: hci2: command tx timeout [ 460.125413][ T8058] Bluetooth: hci2: command tx timeout [ 462.206330][ T5236] Bluetooth: hci2: command tx timeout [ 464.285449][ T5236] Bluetooth: hci2: command tx timeout [ 476.482177][ T8058] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 476.493568][ T8058] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 476.502507][ T8058] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 476.512244][ T8058] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 476.524251][ T8058] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 476.532019][ T8058] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 476.803784][ T8070] chnl_net:caif_netlink_parms(): no params data found [ 477.022370][ T8070] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.036899][ T8070] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.044551][ T8070] bridge_slave_0: entered allmulticast mode [ 477.060280][ T8070] bridge_slave_0: entered promiscuous mode [ 477.074489][ T8070] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.085350][ T8070] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.092605][ T8070] bridge_slave_1: entered allmulticast mode [ 477.107566][ T8070] bridge_slave_1: entered promiscuous mode [ 477.204791][ T8070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.228220][ T8070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.343397][ T8070] team0: Port device team_slave_0 added [ 477.361982][ T8070] team0: Port device team_slave_1 added [ 477.462929][ T8070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.477132][ T8070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.515166][ T8070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.539634][ T8070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.558164][ T8070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.594586][ T8070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.755533][ T8070] hsr_slave_0: entered promiscuous mode [ 477.774904][ T8070] hsr_slave_1: entered promiscuous mode [ 477.791285][ T8070] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 477.802027][ T8070] Cannot create hsr debugfs directory [ 478.605231][ T8058] Bluetooth: hci6: command tx timeout [ 480.685328][ T8058] Bluetooth: hci6: command tx timeout [ 482.076605][ T5236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 482.095217][ T5236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 482.107323][ T5236] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 482.115470][ T5236] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 482.125229][ T5236] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 482.132647][ T5236] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 482.401229][ T8079] chnl_net:caif_netlink_parms(): no params data found [ 482.618574][ T8079] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.635159][ T8079] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.642442][ T8079] bridge_slave_0: entered allmulticast mode [ 482.662215][ T8079] bridge_slave_0: entered promiscuous mode [ 482.677662][ T8079] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.684782][ T8079] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.705458][ T8079] bridge_slave_1: entered allmulticast mode [ 482.719751][ T8079] bridge_slave_1: entered promiscuous mode [ 482.775475][ T8058] Bluetooth: hci6: command tx timeout [ 482.810607][ T8079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 482.831468][ T8079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.922740][ T8079] team0: Port device team_slave_0 added [ 482.944482][ T8079] team0: Port device team_slave_1 added [ 483.033186][ T8079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.049840][ T8079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.085076][ T8079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 483.111184][ T8079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 483.125008][ T8079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.161351][ T8079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.296002][ T8079] hsr_slave_0: entered promiscuous mode [ 483.323983][ T8079] hsr_slave_1: entered promiscuous mode [ 483.347598][ T8079] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 483.364036][ T8079] Cannot create hsr debugfs directory [ 484.205202][ T8058] Bluetooth: hci1: command tx timeout [ 484.308112][ T5236] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 484.320656][ T5236] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 484.329297][ T5236] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 484.338444][ T5236] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 484.356889][ T5236] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 484.366873][ T5236] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 484.757497][ T8058] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 484.772979][ T8058] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 484.781494][ T8058] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 484.789587][ T8058] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 484.797711][ T8058] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 484.812724][ T8058] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 484.845228][ T8058] Bluetooth: hci6: command tx timeout [ 485.169293][ T8094] chnl_net:caif_netlink_parms(): no params data found [ 485.424212][ T8094] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.439166][ T8094] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.454428][ T8094] bridge_slave_0: entered allmulticast mode [ 485.468319][ T8094] bridge_slave_0: entered promiscuous mode [ 485.486727][ T8094] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.493941][ T8094] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.512316][ T8094] bridge_slave_1: entered allmulticast mode [ 485.525572][ T8094] bridge_slave_1: entered promiscuous mode [ 485.625876][ T8094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.648475][ T8094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.782887][ T8094] team0: Port device team_slave_0 added [ 485.798707][ T8094] team0: Port device team_slave_1 added [ 485.917701][ T8094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.924694][ T8094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.964280][ T8094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 486.016474][ T8094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 486.023464][ T8094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.070135][ T8094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.222876][ T8094] hsr_slave_0: entered promiscuous mode [ 486.252537][ T8094] hsr_slave_1: entered promiscuous mode [ 486.284270][ T8094] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 486.292312][ T8058] Bluetooth: hci1: command tx timeout [ 486.305068][ T8094] Cannot create hsr debugfs directory [ 486.445941][ T8058] Bluetooth: hci7: command tx timeout [ 486.845286][ T8058] Bluetooth: hci8: command tx timeout [ 488.365225][ T8058] Bluetooth: hci1: command tx timeout [ 488.525482][ T8058] Bluetooth: hci7: command tx timeout [ 488.925433][ T8058] Bluetooth: hci8: command tx timeout [ 490.445267][ T5236] Bluetooth: hci1: command tx timeout [ 490.605454][ T5236] Bluetooth: hci7: command tx timeout [ 491.005272][ T5236] Bluetooth: hci8: command tx timeout [ 492.694869][ T5236] Bluetooth: hci7: command tx timeout [ 493.085405][ T5236] Bluetooth: hci8: command tx timeout [ 501.730709][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 518.144813][ T4613] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 518.176807][ T4613] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 518.195931][ T4613] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 518.239849][ T4613] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 518.270972][ T4613] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 518.290764][ T4613] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 518.765754][ T8109] chnl_net:caif_netlink_parms(): no params data found [ 518.937982][ T8109] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.955061][ T8109] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.962367][ T8109] bridge_slave_0: entered allmulticast mode [ 518.984375][ T8109] bridge_slave_0: entered promiscuous mode [ 518.997470][ T8109] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.004608][ T8109] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.045380][ T8109] bridge_slave_1: entered allmulticast mode [ 519.066756][ T8109] bridge_slave_1: entered promiscuous mode [ 519.135780][ T8109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 519.161365][ T8109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.174043][ T4613] Bluetooth: hci3: command 0x0406 tx timeout [ 519.284281][ T8109] team0: Port device team_slave_0 added [ 519.305545][ T8109] team0: Port device team_slave_1 added [ 519.399151][ T8109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 519.415168][ T8109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.457702][ T8109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 519.494346][ T8109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 519.508567][ T8109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.545644][ T8109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 519.662484][ T8109] hsr_slave_0: entered promiscuous mode [ 519.680994][ T8109] hsr_slave_1: entered promiscuous mode [ 519.701391][ T8109] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 519.715008][ T8109] Cannot create hsr debugfs directory [ 520.445218][ T5236] Bluetooth: hci9: command tx timeout [ 522.525281][ T5236] Bluetooth: hci9: command tx timeout [ 524.605349][ T5236] Bluetooth: hci9: command tx timeout [ 526.685223][ T5236] Bluetooth: hci9: command tx timeout [ 536.884593][ T4613] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 536.896585][ T4613] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 536.905340][ T4613] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 536.915024][ T4613] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 536.922736][ T4613] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 536.931803][ T4613] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 537.246830][ T8118] chnl_net:caif_netlink_parms(): no params data found [ 537.499636][ T8118] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.515226][ T8118] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.535187][ T8118] bridge_slave_0: entered allmulticast mode [ 537.548490][ T8118] bridge_slave_0: entered promiscuous mode [ 537.567836][ T8118] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.585029][ T8118] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.592338][ T8118] bridge_slave_1: entered allmulticast mode [ 537.615618][ T8118] bridge_slave_1: entered promiscuous mode [ 537.703255][ T8118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 537.742630][ T8118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 537.867379][ T8118] team0: Port device team_slave_0 added [ 537.888649][ T8118] team0: Port device team_slave_1 added [ 538.010266][ T8118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 538.024985][ T8118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 538.080614][ T8118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 538.105858][ T8118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 538.112848][ T8118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 538.153988][ T8118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 538.273160][ T8118] hsr_slave_0: entered promiscuous mode [ 538.318430][ T8118] hsr_slave_1: entered promiscuous mode [ 538.350237][ T8118] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 538.365003][ T8118] Cannot create hsr debugfs directory [ 539.005270][ T4613] Bluetooth: hci10: command tx timeout [ 541.085324][ T4613] Bluetooth: hci10: command tx timeout [ 542.692381][ T5236] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 542.702243][ T5236] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 542.711464][ T5236] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 542.720121][ T5236] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 542.728034][ T5236] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 542.735528][ T5236] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 543.083158][ T8127] chnl_net:caif_netlink_parms(): no params data found [ 543.165343][ T4613] Bluetooth: hci10: command tx timeout [ 543.266608][ T8127] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.273735][ T8127] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.295476][ T8127] bridge_slave_0: entered allmulticast mode [ 543.309128][ T8127] bridge_slave_0: entered promiscuous mode [ 543.330230][ T8127] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.345056][ T8127] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.352353][ T8127] bridge_slave_1: entered allmulticast mode [ 543.376127][ T8127] bridge_slave_1: entered promiscuous mode [ 543.472807][ T8127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 543.499492][ T8127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 543.608817][ T8127] team0: Port device team_slave_0 added [ 543.628110][ T8127] team0: Port device team_slave_1 added [ 543.710115][ T8127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 543.725586][ T8127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 543.770459][ T8127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.795337][ T8127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 543.802328][ T8127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 543.844433][ T8127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 543.995529][ T8127] hsr_slave_0: entered promiscuous mode [ 544.016479][ T8127] hsr_slave_1: entered promiscuous mode [ 544.030726][ T8127] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 544.055171][ T8127] Cannot create hsr debugfs directory [ 544.835459][ T5236] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 544.846146][ T8058] Bluetooth: hci11: command tx timeout [ 544.855392][ T5236] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 544.865256][ T5236] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 544.873545][ T5236] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 544.886626][ T5236] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 544.895331][ T5236] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 544.953353][ T4613] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 544.962869][ T4613] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 544.973095][ T4613] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 544.982648][ T4613] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 544.990916][ T4613] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 544.998489][ T4613] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 545.245286][ T4613] Bluetooth: hci10: command tx timeout [ 545.344567][ T8139] chnl_net:caif_netlink_parms(): no params data found [ 545.530318][ T8139] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.555162][ T8139] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.562586][ T8139] bridge_slave_0: entered allmulticast mode [ 545.587198][ T8139] bridge_slave_0: entered promiscuous mode [ 545.595742][ T8139] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.602871][ T8139] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.630950][ T8139] bridge_slave_1: entered allmulticast mode [ 545.647480][ T8139] bridge_slave_1: entered promiscuous mode [ 545.750874][ T8139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 545.780287][ T8139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 545.862694][ T8139] team0: Port device team_slave_0 added [ 545.888717][ T8139] team0: Port device team_slave_1 added [ 545.979039][ T8139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 545.995559][ T8139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 546.041667][ T8139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 546.087900][ T8139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 546.094895][ T8139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 546.144752][ T8139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 546.292775][ T8139] hsr_slave_0: entered promiscuous mode [ 546.321673][ T8139] hsr_slave_1: entered promiscuous mode [ 546.356642][ T8139] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 546.364256][ T8139] Cannot create hsr debugfs directory [ 546.925440][ T4613] Bluetooth: hci12: command tx timeout [ 546.932081][ T4613] Bluetooth: hci11: command tx timeout [ 547.085548][ T4613] Bluetooth: hci13: command tx timeout [ 549.005421][ T5236] Bluetooth: hci12: command tx timeout [ 549.012279][ T4613] Bluetooth: hci11: command tx timeout [ 549.165637][ T4613] Bluetooth: hci13: command tx timeout [ 551.085301][ T5236] Bluetooth: hci12: command tx timeout [ 551.092180][ T4613] Bluetooth: hci11: command tx timeout [ 551.245447][ T4613] Bluetooth: hci13: command tx timeout [ 553.165476][ T4613] Bluetooth: hci12: command tx timeout [ 553.325491][ T4613] Bluetooth: hci13: command tx timeout [ 555.025180][ T4613] Bluetooth: hci5: command 0x0406 tx timeout [ 555.031259][ T4613] Bluetooth: hci0: command 0x0406 tx timeout [ 555.055046][ T4613] Bluetooth: hci4: command 0x0406 tx timeout [ 563.166979][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 579.063364][ T8147] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 579.076621][ T8147] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 579.085438][ T8147] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 579.093509][ T8147] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 579.102581][ T8147] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 579.110275][ T8147] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 579.479193][ T8149] chnl_net:caif_netlink_parms(): no params data found [ 579.739786][ T8149] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.755273][ T8149] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.762633][ T8149] bridge_slave_0: entered allmulticast mode [ 579.788256][ T8149] bridge_slave_0: entered promiscuous mode [ 579.808296][ T8149] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.825268][ T8149] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.832634][ T8149] bridge_slave_1: entered allmulticast mode [ 579.855999][ T8149] bridge_slave_1: entered promiscuous mode [ 580.016883][ T8149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 580.039968][ T8149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 580.204416][ T8149] team0: Port device team_slave_0 added [ 580.228419][ T8149] team0: Port device team_slave_1 added [ 580.367739][ T8149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 580.374807][ T8149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 580.442609][ T8149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 580.470398][ T8149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 580.485250][ T8149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 580.535216][ T8149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 580.608339][ T8058] Bluetooth: hci2: command 0x0406 tx timeout [ 580.767962][ T8149] hsr_slave_0: entered promiscuous mode [ 580.806368][ T8149] hsr_slave_1: entered promiscuous mode [ 580.813977][ T8149] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 580.835172][ T8149] Cannot create hsr debugfs directory [ 581.165611][ T5236] Bluetooth: hci14: command tx timeout [ 583.245426][ T5236] Bluetooth: hci14: command tx timeout [ 585.325357][ T5236] Bluetooth: hci14: command tx timeout [ 586.855018][ T30] INFO: task kworker/u8:3:52 blocked for more than 143 seconds. [ 586.862809][ T30] Not tainted 6.12.0-rc1-syzkaller-00125-g0c559323bbaa #0 [ 586.885578][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 586.894304][ T30] task:kworker/u8:3 state:D stack:24048 pid:52 tgid:52 ppid:2 flags:0x00004000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 586.924547][ T30] Workqueue: netns cleanup_net [ 586.937822][ T30] Call Trace: [ 586.941161][ T30] [ 586.944140][ T30] __schedule+0xef5/0x5750 [ 586.970400][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 587.045049][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 587.050337][ T30] ? __pfx___schedule+0x10/0x10 [ 587.122753][ T30] ? schedule+0x298/0x350 [ 587.155122][ T30] ? __pfx_lock_release+0x10/0x10 [ 587.160218][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 587.205089][ T30] ? lock_acquire+0x2f/0xb0 [ 587.209666][ T30] ? schedule+0x1fd/0x350 [ 587.244998][ T30] schedule+0xe7/0x350 [ 587.249144][ T30] schedule_preempt_disabled+0x13/0x30 [ 587.254637][ T30] __mutex_lock+0x5b8/0x9c0 [ 587.305005][ T30] ? wg_destruct+0x22/0x3d0 [ 587.309597][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 587.345056][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 587.350943][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 587.375031][ T30] ? __pfx_wg_destruct+0x10/0x10 [ 587.380052][ T30] ? wg_destruct+0x22/0x3d0 [ 587.384589][ T30] wg_destruct+0x22/0x3d0 [ 587.405278][ T5236] Bluetooth: hci14: command tx timeout [ 587.425069][ T30] ? __pfx_wg_destruct+0x10/0x10 [ 587.434992][ T30] netdev_run_todo+0x760/0x12d0 [ 587.439919][ T30] ? __pfx_netdev_run_todo+0x10/0x10 [ 587.465200][ T30] ? unregister_netdevice_queue+0x22f/0x3f0 [ 587.471182][ T30] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 587.505074][ T30] ? batadv_softif_destroy_vlan+0xdf/0x160 [ 587.511051][ T30] default_device_exit_batch+0x866/0xae0 [ 587.534446][ T30] ? __pfx_default_device_exit_batch+0x10/0x10 [ 587.553135][ T30] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 587.559111][ T30] ? __pfx___might_resched+0x10/0x10 [ 587.564452][ T30] ? __pfx_cfg802154_pernet_exit+0x10/0x10 [ 587.585072][ T30] ? __pfx_default_device_exit_batch+0x10/0x10 [ 587.591304][ T30] ops_exit_list+0x128/0x180 [ 587.604976][ T30] cleanup_net+0x5b7/0xb40 [ 587.609460][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 587.614431][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 587.635127][ T30] ? process_one_work+0x921/0x1ba0 [ 587.645238][ T30] ? lock_acquire+0x2f/0xb0 [ 587.654982][ T30] ? process_one_work+0x921/0x1ba0 [ 587.660154][ T30] process_one_work+0x9c5/0x1ba0 [ 587.675517][ T30] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 587.681227][ T30] ? __pfx_process_one_work+0x10/0x10 [ 587.695019][ T30] ? assign_work+0x1a0/0x250 [ 587.699683][ T30] worker_thread+0x6c8/0xf00 [ 587.704319][ T30] ? __pfx_worker_thread+0x10/0x10 [ 587.735265][ T30] kthread+0x2c1/0x3a0 [ 587.745042][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 587.750315][ T30] ? __pfx_kthread+0x10/0x10 [ 587.765065][ T30] ret_from_fork+0x45/0x80 [ 587.769549][ T30] ? __pfx_kthread+0x10/0x10 [ 587.774178][ T30] ret_from_fork_asm+0x1a/0x30 [ 587.795650][ T30] [ 587.798822][ T30] INFO: task kworker/u8:6:1103 blocked for more than 144 seconds. [ 587.815093][ T30] Not tainted 6.12.0-rc1-syzkaller-00125-g0c559323bbaa #0 [ 587.822776][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 587.855158][ T30] task:kworker/u8:6 state:D stack:24608 pid:1103 tgid:1103 ppid:2 flags:0x00004000 [ 587.875036][ T30] Workqueue: events_unbound linkwatch_event [ 587.881003][ T30] Call Trace: [ 587.884304][ T30] [ 587.897817][ T30] __schedule+0xef5/0x5750 [ 587.902309][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 587.925170][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 587.932224][ T30] ? __pfx___schedule+0x10/0x10 [ 587.945056][ T30] ? schedule+0x298/0x350 [ 587.949463][ T30] ? __pfx_lock_release+0x10/0x10 [ 587.954513][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 587.975385][ T30] ? lock_acquire+0x2f/0xb0 [ 587.979953][ T30] ? schedule+0x1fd/0x350 [ 587.984321][ T30] schedule+0xe7/0x350 [ 588.005132][ T30] schedule_preempt_disabled+0x13/0x30 [ 588.010664][ T30] __mutex_lock+0x5b8/0x9c0 [ 588.025083][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 588.032295][ T30] ? linkwatch_event+0x51/0xc0 [ 588.053613][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 588.067443][ T30] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 588.073140][ T30] ? rcu_is_watching+0x12/0xc0 [ 588.084981][ T30] ? linkwatch_event+0x51/0xc0 [ 588.089803][ T30] ? rtnl_lock+0x9/0x20 [ 588.093987][ T30] linkwatch_event+0x51/0xc0 [ 588.115224][ T30] ? __pfx_linkwatch_event+0x10/0x10 [ 588.120609][ T30] ? rcu_is_watching+0x12/0xc0 [ 588.134036][ T30] process_one_work+0x9c5/0x1ba0 [ 588.145134][ T30] ? __pfx_batadv_iv_send_outstanding_bat_ogm_packet+0x10/0x10 [ 588.152763][ T30] ? __pfx_process_one_work+0x10/0x10 [ 588.175177][ T30] ? assign_work+0x1a0/0x250 [ 588.179861][ T30] worker_thread+0x6c8/0xf00 [ 588.184505][ T30] ? __kthread_parkme+0x148/0x220 [ 588.205310][ T30] ? __pfx_worker_thread+0x10/0x10 [ 588.210496][ T30] kthread+0x2c1/0x3a0 [ 588.214607][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 588.235251][ T30] ? __pfx_kthread+0x10/0x10 [ 588.239938][ T30] ret_from_fork+0x45/0x80 [ 588.244387][ T30] ? __pfx_kthread+0x10/0x10 [ 588.265143][ T30] ret_from_fork_asm+0x1a/0x30 [ 588.270004][ T30] [ 588.275168][ T30] INFO: task syz.3.640:8029 blocked for more than 144 seconds. [ 588.282751][ T30] Not tainted 6.12.0-rc1-syzkaller-00125-g0c559323bbaa #0 [ 588.315107][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 588.324037][ T30] task:syz.3.640 state:D stack:25824 pid:8029 tgid:8029 ppid:7406 flags:0x00004006 [ 588.354706][ T30] Call Trace: [ 588.358231][ T30] [ 588.361196][ T30] __schedule+0xef5/0x5750 [ 588.375207][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 588.380494][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 588.403024][ T30] ? __pfx___schedule+0x10/0x10 [ 588.408190][ T30] ? schedule+0x298/0x350 [ 588.412564][ T30] ? __pfx_lock_release+0x10/0x10 [ 588.435132][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 588.442296][ T30] ? lock_acquire+0x2f/0xb0 [ 588.455037][ T30] ? schedule+0x1fd/0x350 [ 588.459439][ T30] schedule+0xe7/0x350 [ 588.463550][ T30] schedule_preempt_disabled+0x13/0x30 [ 588.479546][ T30] __mutex_lock+0x5b8/0x9c0 [ 588.484204][ T30] ? wake_up_q+0x9e/0x140 [ 588.505086][ T30] ? do_raw_spin_unlock+0x172/0x230 [ 588.510367][ T30] ? netdev_run_todo+0xdfc/0x12d0 [ 588.524979][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 588.530073][ T30] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 588.543647][ T30] ? rcu_barrier+0x344/0x700 [ 588.555225][ T30] ? netdev_run_todo+0xdfc/0x12d0 [ 588.560338][ T30] ? rtnl_lock+0x9/0x20 [ 588.564526][ T30] netdev_run_todo+0xdfc/0x12d0 [ 588.585179][ T30] ? __pfx_netdev_run_todo+0x10/0x10 [ 588.590549][ T30] ? kvfree+0x47/0x50 [ 588.594572][ T30] ? __pfx_netdev_state_change+0x10/0x10 [ 588.615690][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 588.620874][ T30] tun_chr_close+0xea/0x230 [ 588.635018][ T30] __fput+0x3f6/0xb60 [ 588.639073][ T30] task_work_run+0x14e/0x250 [ 588.643698][ T30] ? __pfx_task_work_run+0x10/0x10 [ 588.665131][ T30] do_exit+0xadd/0x2d70 [ 588.669372][ T30] ? get_signal+0x8f2/0x2770 [ 588.673999][ T30] ? __pfx_do_exit+0x10/0x10 [ 588.694967][ T30] ? do_raw_spin_lock+0x12d/0x2c0 [ 588.700065][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 588.714994][ T30] do_group_exit+0xd3/0x2a0 [ 588.742946][ T30] get_signal+0x25fb/0x2770 [ 588.748819][ T30] ? hrtimer_nanosleep+0x176/0x370 [ 588.753989][ T30] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 588.784280][ T30] ? __pfx_get_signal+0x10/0x10 [ 588.789484][ T30] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 588.794732][ T30] arch_do_signal_or_restart+0x90/0x7e0 [ 588.815641][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 588.821884][ T30] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 588.845452][ T30] syscall_exit_to_user_mode+0x150/0x2a0 [ 588.853296][ T30] do_syscall_64+0xda/0x250 [ 588.862418][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.874963][ T30] RIP: 0033:0x7f7cff9b00e5 [ 588.879427][ T30] RSP: 002b:00007ffd2e771640 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 588.905195][ T30] RAX: 0000000000000000 RBX: 00007f7cffb35f80 RCX: 00007f7cff9b00e5 [ 588.913232][ T30] RDX: 00007ffd2e771680 RSI: 0000000000000000 RDI: 0000000000000000 [ 588.935799][ T30] RBP: 00007f7cffb37a80 R08: 0000000000000000 R09: 00007f7d007f1080 [ 588.943842][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000642d5 [ 588.975097][ T30] R13: 00007ffd2e7717b0 R14: 0000000000000bea R15: ffffffffffffffff [ 588.983156][ T30] [ 588.995106][ T30] [ 588.995106][ T30] Showing all locks held in the system: [ 589.002878][ T30] 1 lock held by khungtaskd/30: [ 589.025124][ T30] #0: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x7f/0x390 [ 589.045441][ T30] 3 locks held by kworker/1:1/45: [ 589.050524][ T30] 4 locks held by kworker/u8:3/52: [ 589.065049][ T30] #0: ffff88801beeb148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 589.085124][ T30] #1: ffffc90000bd7d80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 589.105045][ T30] #2: ffffffff8fecb190 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xbb/0xb40 [ 589.114474][ T30] #3: ffffffff8fee0b28 (rtnl_mutex){+.+.}-{3:3}, at: wg_destruct+0x22/0x3d0 [ 589.142054][ T30] 3 locks held by kworker/u8:6/1103: [ 589.155588][ T30] #0: ffff88801b089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 589.175001][ T30] #1: ffffc90004247d80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 589.205072][ T30] #2: ffffffff8fee0b28 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0x51/0xc0 [ 589.214251][ T30] 2 locks held by getty/4975: [ 589.224964][ T30] #0: ffff888032da20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 589.234803][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfba/0x1480 [ 589.273071][ T30] 3 locks held by kworker/0:5/5274: [ 589.278542][ T30] #0: ffff88801b080948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 589.305122][ T30] #1: ffffc90004137d80 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 589.323429][ T30] #2: ffffffff8fee0b28 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 589.345160][ T30] 3 locks held by kworker/1:5/5275: [ 589.350419][ T30] 7 locks held by kworker/1:6/5536: [ 589.373315][ T30] 3 locks held by kworker/u8:13/7567: [ 589.379684][ T30] #0: ffff88814c1cb948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 589.405368][ T30] #1: ffffc900040c7d80 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 589.433767][ T30] #2: ffffffff8fee0b28 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcf/0x14d0 [ 589.455189][ T30] 7 locks held by syz-executor/7961: [ 589.460530][ T30] #0: ffff88802e2bc420 (sb_writers#9){.+.+}-{0:0}, at: ksys_write+0x12f/0x260 [ 589.495153][ T30] #1: ffff888079f49c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x27b/0x500 [ 589.514971][ T30] #2: ffff888026e57d28 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x29e/0x500 [ 589.534974][ T30] #3: ffffffff8f47a4e8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd2/0x4b0 [ 589.562154][ T30] #4: ffff888074f270e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa4/0x610 [ 589.585194][ T30] #5: ffff888069b31250 (&devlink->lock_key#10){+.+.}-{3:3}, at: nsim_drv_remove+0x4a/0x1d0 [ 589.604967][ T30] #6: ffffffff8fee0b28 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x6f/0x6b0 [ 589.613947][ T30] 1 lock held by syz.3.640/8029: [ 589.635166][ T30] #0: ffffffff8fee0b28 (rtnl_mutex){+.+.}-{3:3}, at: netdev_run_todo+0xdfc/0x12d0 [ 589.644591][ T30] 1 lock held by syz-executor/8052: [ 589.665200][ T30] #0: ffffffff8fee0b28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 589.684964][ T30] 1 lock held by syz-executor/8054: [ 589.690249][ T30] #0: ffffffff8fee0b28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 589.715583][ T30] 1 lock held by syz-executor/8055: [ 589.720835][ T30] #0: ffffffff8fee0b28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 589.745167][ T30] 4 locks held by syz-executor/8060: [ 589.750615][ T30] #0: ffff88802e2bc420 (sb_writers#9){.+.+}-{0:0}, at: ksys_write+0x12f/0x260 [ 589.772452][ T30] #1: ffff8880789e9088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x27b/0x500 [ 589.793540][ T30] #2: ffff888026e57d28 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x29e/0x500 [ 589.812100][ T30] #3: ffffffff8f47a4e8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd2/0x4b0 [ 589.835652][ T30] 4 locks held by syz-executor/8070: [ 589.840995][ T30] #0: ffff88802e2bc420 (sb_writers#9){.+.+}-{0:0}, at: ksys_write+0x12f/0x260 [ 589.865162][ T30] #1: ffff888030e52c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x27b/0x500 [ 589.891986][ T30] #2: ffff888026e57d28 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x29e/0x500 [ 589.915343][ T30] #3: ffffffff8f47a4e8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd2/0x4b0 [ 589.934971][ T30] 4 locks held by syz-executor/8079: [ 589.940304][ T30] #0: ffff88802e2bc420 (sb_writers#9){.+.+}-{0:0}, at: ksys_write+0x12f/0x260 [ 589.965322][ T30] #1: ffff88802821bc88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x27b/0x500 [ 589.985058][ T30] #2: ffff888026e57d28 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x29e/0x500 [ 590.005025][ T30] #3: ffffffff8f47a4e8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd2/0x4b0 [ 590.025037][ T30] 1 lock held by syz-executor/8089: [ 590.030281][ T30] #0: ffffffff8fee0b28 (rtnl_mutex){+.+.}-{3:3}, at: __rtnl_newlink+0x65a/0x1920 [ 590.055825][ T30] 4 locks held by syz-executor/8094: [ 590.061167][ T30] #0: ffff88802e2bc420 (sb_writers#9){.+.+}-{0:0}, at: ksys_write+0x12f/0x260 [ 590.084961][ T30] #1: ffff888028f1f488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x27b/0x500 [ 590.104990][ T30] #2: ffff888026e57d28 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x29e/0x500 [ 590.125422][ T30] #3: ffffffff8f47a4e8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd2/0x4b0 [ 590.145002][ T30] 4 locks held by syz-executor/8109: [ 590.150341][ T30] #0: ffff88802e2bc420 (sb_writers#9){.+.+}-{0:0}, at: ksys_write+0x12f/0x260 [ 590.175604][ T30] #1: ffff888079dc5088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x27b/0x500 [ 590.204484][ T30] #2: ffff888026e57d28 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x29e/0x500 [ 590.224647][ T30] #3: ffffffff8f47a4e8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd2/0x4b0 [ 590.244971][ T30] 4 locks held by syz-executor/8118: [ 590.250305][ T30] #0: ffff88802e2bc420 (sb_writers#9){.+.+}-{0:0}, at: ksys_write+0x12f/0x260 [ 590.275158][ T30] #1: ffff88806c763888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x27b/0x500 [ 590.294968][ T30] #2: ffff888026e57d28 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x29e/0x500 [ 590.314996][ T30] #3: ffffffff8f47a4e8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd2/0x4b0 [ 590.334995][ T30] 4 locks held by syz-executor/8127: [ 590.340350][ T30] #0: ffff88802e2bc420 (sb_writers#9){.+.+}-{0:0}, at: ksys_write+0x12f/0x260 [ 590.365330][ T30] #1: ffff888029a85888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x27b/0x500 [ 590.384971][ T30] #2: ffff888026e57d28 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x29e/0x500 [ 590.404965][ T30] #3: ffffffff8f47a4e8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd2/0x4b0 [ 590.431890][ T30] 2 locks held by syz-executor/8137: [ 590.437493][ T30] #0: ffffffff8fecb190 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x292/0x6b0 [ 590.465125][ T30] #1: ffffffff8fee0b28 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x1b/0x70 [ 590.485033][ T30] 4 locks held by syz-executor/8139: [ 590.492218][ T30] #0: ffff88802e2bc420 (sb_writers#9){.+.+}-{0:0}, at: ksys_write+0x12f/0x260 [ 590.515584][ T30] #1: ffff8880600fa488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x27b/0x500 [ 590.535090][ T30] #2: ffff888026e57d28 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x29e/0x500 [ 590.555124][ T30] #3: ffffffff8f47a4e8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd2/0x4b0 [ 590.575069][ T30] 4 locks held by syz-executor/8149: [ 590.580403][ T30] #0: ffff88802e2bc420 (sb_writers#9){.+.+}-{0:0}, at: ksys_write+0x12f/0x260 [ 590.604713][ T30] #1: ffff88803eaba088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x27b/0x500 [ 590.622159][ T30] #2: ffff888026e57d28 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x29e/0x500 [ 590.634953][ T30] #3: ffffffff8f47a4e8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd2/0x4b0 [ 590.662716][ T30] [ 590.665334][ T30] ============================================= [ 590.665334][ T30] [ 590.673776][ T30] NMI backtrace for cpu 0 [ 590.678119][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00125-g0c559323bbaa #0 [ 590.688641][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 590.698716][ T30] Call Trace: [ 590.702012][ T30] [ 590.704956][ T30] dump_stack_lvl+0x116/0x1f0 [ 590.709676][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 590.714640][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 590.720662][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 590.726675][ T30] watchdog+0xf0c/0x1240 [ 590.730949][ T30] ? __pfx_watchdog+0x10/0x10 [ 590.735648][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 590.740878][ T30] ? __kthread_parkme+0x148/0x220 [ 590.745935][ T30] ? __pfx_watchdog+0x10/0x10 [ 590.750636][ T30] kthread+0x2c1/0x3a0 [ 590.754726][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 590.759952][ T30] ? __pfx_kthread+0x10/0x10 [ 590.764587][ T30] ret_from_fork+0x45/0x80 [ 590.769028][ T30] ? __pfx_kthread+0x10/0x10 [ 590.773648][ T30] ret_from_fork_asm+0x1a/0x30 [ 590.778461][ T30] [ 590.782776][ T30] Sending NMI from CPU 0 to CPUs 1: [ 590.788766][ C1] NMI backtrace for cpu 1 [ 590.788793][ C1] CPU: 1 UID: 0 PID: 5536 Comm: kworker/1:6 Not tainted 6.12.0-rc1-syzkaller-00125-g0c559323bbaa #0 [ 590.788824][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 590.788841][ C1] Workqueue: events nsim_dev_trap_report_work [ 590.788877][ C1] RIP: 0010:filter_irq_stacks+0x24/0x90 [ 590.788912][ C1] Code: 90 90 90 90 90 90 f3 0f 1e fa 85 f6 74 61 53 31 c0 48 bb 00 00 00 00 00 fc ff df 48 83 ec 10 48 89 fa 48 c1 ea 03 80 3c 1a 00 <75> 4a 48 8b 17 48 81 fa 30 02 40 8b 72 16 48 81 fa 70 16 40 8b 73 [ 590.788936][ C1] RSP: 0018:ffffc90000a18208 EFLAGS: 00000246 [ 590.788956][ C1] RAX: 0000000000000016 RBX: dffffc0000000000 RCX: 0000000000000001 [ 590.788973][ C1] RDX: 1ffff92000143067 RSI: 000000000000001d RDI: ffffc90000a18338 [ 590.788990][ C1] RBP: 0000000000000001 R08: ffffffff90eafde2 R09: ffffffff90ef578e [ 590.789008][ C1] R10: ffffc90000a18158 R11: 0000000000000052 R12: 0000000000000000 [ 590.789024][ C1] R13: ffffc90000a18288 R14: ffff88801b041dc0 R15: 0000000000000000 [ 590.789046][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 590.789071][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 590.789089][ C1] CR2: 0000000000000000 CR3: 000000000df7c000 CR4: 00000000003526f0 [ 590.789106][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 590.789122][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 590.789138][ C1] Call Trace: [ 590.789145][ C1] [ 590.789154][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 590.789183][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 590.789224][ C1] ? nmi_handle+0x1a9/0x5c0 [ 590.789251][ C1] ? filter_irq_stacks+0x24/0x90 [ 590.789282][ C1] ? default_do_nmi+0x6a/0x160 [ 590.789322][ C1] ? exc_nmi+0x170/0x1e0 [ 590.789343][ C1] ? end_repeat_nmi+0xf/0x53 [ 590.789380][ C1] ? filter_irq_stacks+0x24/0x90 [ 590.789412][ C1] ? filter_irq_stacks+0x24/0x90 [ 590.789444][ C1] ? filter_irq_stacks+0x24/0x90 [ 590.789475][ C1] [ 590.789483][ C1] [ 590.789490][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 590.789522][ C1] ? __pfx_mark_lock+0x10/0x10 [ 590.789545][ C1] stack_depot_save_flags+0x28/0x8f0 [ 590.789590][ C1] kasan_save_stack+0x42/0x60 [ 590.789617][ C1] ? kasan_save_stack+0x33/0x60 [ 590.789643][ C1] ? kasan_save_track+0x14/0x30 [ 590.789669][ C1] ? kasan_save_free_info+0x3b/0x60 [ 590.789707][ C1] ? __kasan_slab_free+0x51/0x70 [ 590.789734][ C1] ? kfree+0x14f/0x4b0 [ 590.789757][ C1] ? skb_free_head+0x108/0x1d0 [ 590.789793][ C1] ? skb_release_data+0x560/0x730 [ 590.789832][ C1] ? consume_skb+0xbf/0x100 [ 590.789856][ C1] ? nft_synproxy_do_eval+0xa51/0xd60 [ 590.789889][ C1] ? nft_do_chain+0x2e6/0x18f0 [ 590.789919][ C1] ? nft_do_chain_inet+0x18b/0x350 [ 590.789947][ C1] ? nf_hook_slow+0xbb/0x200 [ 590.789985][ C1] ? nf_hook.constprop.0+0x42e/0x750 [ 590.790025][ C1] ? ip_local_deliver+0x169/0x1f0 [ 590.790069][ C1] ? ip_rcv+0x2c3/0x5d0 [ 590.790106][ C1] ? __netif_receive_skb_one_core+0x199/0x1e0 [ 590.790141][ C1] ? __netif_receive_skb+0x1d/0x160 [ 590.790173][ C1] ? process_backlog+0x443/0x15f0 [ 590.790206][ C1] ? __napi_poll.constprop.0+0xb7/0x550 [ 590.790240][ C1] ? net_rx_action+0xa92/0x1010 [ 590.790273][ C1] ? handle_softirqs+0x213/0x8f0 [ 590.790302][ C1] ? do_softirq+0xb2/0xf0 [ 590.790330][ C1] ? __local_bh_enable_ip+0x100/0x120 [ 590.790360][ C1] ? nsim_dev_trap_report_work+0x870/0xc80 [ 590.790393][ C1] ? process_one_work+0x9c5/0x1ba0 [ 590.790417][ C1] ? worker_thread+0x6c8/0xf00 [ 590.790441][ C1] ? kthread+0x2c1/0x3a0 [ 590.790470][ C1] ? ret_from_fork+0x45/0x80 [ 590.790494][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 590.790543][ C1] kasan_save_track+0x14/0x30 [ 590.790570][ C1] kasan_save_free_info+0x3b/0x60 [ 590.790608][ C1] __kasan_slab_free+0x51/0x70 [ 590.790637][ C1] kfree+0x14f/0x4b0 [ 590.790660][ C1] ? skb_free_head+0x108/0x1d0 [ 590.790696][ C1] skb_free_head+0x108/0x1d0 [ 590.790730][ C1] skb_release_data+0x560/0x730 [ 590.790770][ C1] ? dst_release+0x88/0x1e0 [ 590.790801][ C1] consume_skb+0xbf/0x100 [ 590.790826][ C1] nft_synproxy_do_eval+0xa51/0xd60 [ 590.790859][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 590.790891][ C1] ? mark_lock+0xb5/0xc60 [ 590.790914][ C1] ? mark_lock+0xb5/0xc60 [ 590.790937][ C1] ? mark_lock+0xb5/0xc60 [ 590.790961][ C1] ? __pfx_nft_synproxy_eval+0x10/0x10 [ 590.790993][ C1] nft_do_chain+0x2e6/0x18f0 [ 590.791023][ C1] ? mark_lock+0xb5/0xc60 [ 590.791052][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 590.791082][ C1] ? ipt_do_table+0xd4c/0x1aa0 [ 590.791115][ C1] ? __local_bh_enable_ip+0xa4/0x120 [ 590.791145][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 590.791186][ C1] nft_do_chain_inet+0x18b/0x350 [ 590.791213][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 590.791243][ C1] ? __pfx_ipt_do_table+0x10/0x10 [ 590.791273][ C1] ? nf_nat_ipv4_local_in+0x181/0x720 [ 590.791313][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 590.791340][ C1] nf_hook_slow+0xbb/0x200 [ 590.791380][ C1] nf_hook.constprop.0+0x42e/0x750 [ 590.791417][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 590.791459][ C1] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 590.791497][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 590.791537][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 590.791582][ C1] ip_local_deliver+0x169/0x1f0 [ 590.791620][ C1] ? __pfx_ip_local_deliver+0x10/0x10 [ 590.791660][ C1] ip_rcv+0x2c3/0x5d0 [ 590.791697][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 590.791734][ C1] __netif_receive_skb_one_core+0x199/0x1e0 [ 590.791769][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 590.791805][ C1] ? trace_lock_acquire+0x14a/0x1d0 [ 590.791838][ C1] ? process_backlog+0x3f1/0x15f0 [ 590.791873][ C1] ? process_backlog+0x3f1/0x15f0 [ 590.791904][ C1] __netif_receive_skb+0x1d/0x160 [ 590.791937][ C1] process_backlog+0x443/0x15f0 [ 590.791973][ C1] __napi_poll.constprop.0+0xb7/0x550 [ 590.792009][ C1] net_rx_action+0xa92/0x1010 [ 590.792050][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 590.792083][ C1] ? __pfx_mark_lock+0x10/0x10 [ 590.792106][ C1] ? sched_balance_domains+0x285/0xec0 [ 590.792142][ C1] ? mark_held_locks+0x9f/0xe0 [ 590.792168][ C1] handle_softirqs+0x213/0x8f0 [ 590.792200][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 590.792231][ C1] ? irqtime_account_irq+0x18d/0x2e0 [ 590.792261][ C1] ? nsim_dev_trap_report_work+0x870/0xc80 [ 590.792295][ C1] do_softirq+0xb2/0xf0 [ 590.792323][ C1] [ 590.792331][ C1] [ 590.792339][ C1] __local_bh_enable_ip+0x100/0x120 [ 590.792370][ C1] nsim_dev_trap_report_work+0x870/0xc80 [ 590.792411][ C1] process_one_work+0x9c5/0x1ba0 [ 590.792440][ C1] ? __pfx_nsim_dev_hwstats_traffic_work+0x10/0x10 [ 590.792472][ C1] ? __pfx_process_one_work+0x10/0x10 [ 590.792501][ C1] ? assign_work+0x1a0/0x250 [ 590.792541][ C1] worker_thread+0x6c8/0xf00 [ 590.792570][ C1] ? __kthread_parkme+0x148/0x220 [ 590.792604][ C1] ? __pfx_worker_thread+0x10/0x10 [ 590.792629][ C1] kthread+0x2c1/0x3a0 [ 590.792659][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 590.792687][ C1] ? __pfx_kthread+0x10/0x10 [ 590.792718][ C1] ret_from_fork+0x45/0x80 [ 590.792741][ C1] ? __pfx_kthread+0x10/0x10 [ 590.792773][ C1] ret_from_fork_asm+0x1a/0x30 [ 590.792816][ C1] [ 591.526029][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 591.532930][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00125-g0c559323bbaa #0 [ 591.543458][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 591.553534][ T30] Call Trace: [ 591.556827][ T30] [ 591.559783][ T30] dump_stack_lvl+0x3d/0x1f0 [ 591.564407][ T30] panic+0x71d/0x800 [ 591.568335][ T30] ? __pfx_panic+0x10/0x10 [ 591.572782][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 591.578185][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 591.584200][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 591.589596][ T30] ? watchdog+0xd76/0x1240 [ 591.594034][ T30] ? watchdog+0xd69/0x1240 [ 591.598477][ T30] watchdog+0xd87/0x1240 [ 591.602744][ T30] ? __pfx_watchdog+0x10/0x10 [ 591.607440][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 591.612669][ T30] ? __kthread_parkme+0x148/0x220 [ 591.617721][ T30] ? __pfx_watchdog+0x10/0x10 [ 591.622429][ T30] kthread+0x2c1/0x3a0 [ 591.626523][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 591.631743][ T30] ? __pfx_kthread+0x10/0x10 [ 591.636364][ T30] ret_from_fork+0x45/0x80 [ 591.640801][ T30] ? __pfx_kthread+0x10/0x10 [ 591.645419][ T30] ret_from_fork_asm+0x1a/0x30 [ 591.650229][ T30] [ 591.653505][ T30] Kernel Offset: disabled [ 591.657850][ T30] Rebooting in 86400 seconds..