last executing test programs: 13.449308435s ago: executing program 4 (id=5): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) sigaltstack(&(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x2, 0x5, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r6 = semget$private(0x0, 0x6, 0x0) semtimedop(r6, &(0x7f0000000340)=[{0x0, 0x1}], 0x1, 0x0) semtimedop(r6, &(0x7f00000001c0)=[{0x3, 0x74, 0x1800}], 0x1, 0x0) semtimedop(r6, &(0x7f0000000080)=[{}], 0x1, 0x0) semctl$IPC_RMID(r6, 0x0, 0x0) 13.207783883s ago: executing program 0 (id=1): socket$inet6_sctp(0xa, 0x1, 0x84) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = accept4(r0, &(0x7f00000000c0)=@in={0x2, 0x0, @loopback}, 0x0, 0x80000) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="b80000002100000228bd7000fddbdf25e90f1467060000070800000014000100fc00000000000000000000000000000814000100fe8000000000000000000000000000bb14000200fc01000000000000000000000000000114000200ff020000000000000000000000000001080010000004000014000100fe8000000000000000000000000000aa08000f00e30d00001400010000000000000000000000000000000001140011007465616d5f736c6176655f3100000000"], 0xb8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000140)=@data_frame={@a_msdu=@type00={{}, {}, @device_b}, @random="d2e19a5c24a934"}, 0x1f) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0xfffc, @remote}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="80000000ffffffffffff9d860802110000005050505050"], 0x3c) syz_open_procfs(0x0, &(0x7f0000000100)='net/vlan/config\x00') socket$inet6(0xa, 0x0, 0xff) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r3) read$char_usb(r4, &(0x7f0000000600)=""/128, 0x80) 12.457209656s ago: executing program 4 (id=6): creat(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000200), 0x129082, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, 0x0) write$binfmt_elf32(r3, 0x0, 0x4cd) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, 0x0) write$dsp(r3, &(0x7f0000000240)="755a5398d512d39077459e67ee110daaf0413bc3deef85b89f2141d512b2c14020e625b0d98e6f09000000ac3c22dbfdebb1ab51524cf9df6f80884a8ab6c1165db5a2034aff8a1bce0b5e3928d4aa605c76fe83be50a4b0ba64896d0020fe6d7b0100000058b323da6238f784a6243e9e97f0f00fee7a3dffffffffffffffffa944c98d62397cf8", 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000080)=0x40000017) ppoll(&(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000200)=[{&(0x7f0000000080)="580000001400192340834b00000d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c10000000010000000000", 0x58}], 0x1) 10.936907365s ago: executing program 4 (id=7): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000012006bab9a3fe3d86e17aa0a046b87561d0048007ea60864160af36504001a0038001d001931a0e29ee517d340609c06000084c9f4c4938037e70e4509c5bba388f50b93ea3c42bccdd6e26fe54adb62c76133d660bf7e2e66795891c751523826a5ae57ecef7e41f99c5aee81e022a5df575aa45c1750b3b7e70eebfa1ec6e108fc429735ec", 0x50}], 0x100000000000012c, 0x0, 0x0, 0x1f00c00e}, 0x4006) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x59b2b28985ebfc2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000640)={0x3, &(0x7f0000000280)=[{0x6}, {0x4, 0x8, 0x81, 0x70b1}, {0x2, 0xa, 0x38, 0x8}]}) write$ppp(r1, &(0x7f00000005c0)="16e127415586e2eb0c66b4b689572be987e1d2ca06c6dd42c6815d4c845d9d576fb107e2adeab279b06aabb366f449aa32e2f23b6c2179e8c0fa6ad4259c53729a9f56d037f1098c576bc786713ca521597e9981f0a737184b3e672e7e88c4", 0x5f) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x100000}, 0xfffffffffffffe5e) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0xf, &(0x7f0000000e80)=ANY=[@ANYBLOB="38070000000000000000000069e6a480080d48ed6dd6fd653b9db9f9f62ebef7c4041eb6e56b0ef80e6fcb1ff131000000000000000000000000b7d67847d78cedd7656cebb537d2134ad417ea1c999a0a929b09c009cbd399aad9e54981eff09c748170fcb8d71db96d1bf43c92d3f0649b730541851d35bd138737f160f5d3feb8b081bbe17ddb799e4585e4e8eb4fb7fd690be79f790712477319d2fd2fb55e204c1f3e5fb90e6cdeb956fe0cab213219d1db6d6e4c7efa5a75503e29467f3df2572ac20c1f08b05aa85385582894587df91167e69f0180b725051ade954f789c9b9e8a643c839abc3c52732ad36c8634e60f20b10001ced0ae0f173bb9ee8379b1391fd9b6a89e22bbf373cbd0035862e6dadc36ef1d90bc214d2d2498dce246eb39ef00", @ANYRESOCT=r1, @ANYBLOB="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"/266], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet(0x2, 0x0, 0x84) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa78, r2}, 0x38) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0, r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=0x0, @ANYBLOB="90f9497192e29a112f6885baca0e32e85c755e19ad858aad07b949f35283c6c790dad078c3f82da3465ed60000004e07eb876b7779a1795b2ca24d0bbd360502011d2ea371b483445e39d0d41466e04f863681c7885099"], 0x1c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000008580100000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c01038040000080080003400000000234000280300002"], 0x1ec}}, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x3a) bind$alg(r10, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0d000ffffffffffff080211000001"], 0x398}}, 0x0) 10.92218078s ago: executing program 2 (id=3): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='freezer.state\x00', 0x26e1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r1, 0x1, 0x2b, &(0x7f0000000180)=0x67c5512d, 0x4) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05030500d3fc030000004788031c09", 0xf, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) close(r0) syz_open_dev$usbfs(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) close(0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x1, 0x83, &(0x7f0000000380)=ANY=[@ANYBLOB="12010102020000082505a1a4400001020301090271000201fd0f050904000001020d00000a24060001bd9f7f255105240009000d240f0109000000ffff01008006241abd00200c241b0010010000a50800ff04240201090581"], &(0x7f00000004c0)={0xa, &(0x7f0000000100)={0xa}, 0x8b, &(0x7f0000000140)={0x5, 0xf, 0x8b, 0x5, [@ptm_cap={0x3}, @wireless={0xb}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "e7cfc71c8a9c6f0b9380561a11c5d093"}, @generic={0x61, 0x10, 0x4, "d3d247045130d044c81f568823df6b1624309b0db5cba454041eb893e4f1f9037a237221e1ec4dc0c3285412ce40f1537af2ddf9c739d032e196c433196c5319a15a5717e40784966f81e6e4c1b1e6dce480be89cef34f60e62d045b4a86"}, @ptm_cap={0x3}]}, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 10.718177804s ago: executing program 3 (id=4): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_START_POLL(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {0x2}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 10.2035025s ago: executing program 1 (id=2): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x0, &(0x7f00002d5000/0x2000)=nil) clock_adjtime(0x0, &(0x7f00000004c0)={0xff, 0xff64cd1d00000000, 0x8, 0x0, 0x0, 0xfffffffffffffff7}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) 10.085565812s ago: executing program 3 (id=8): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) sigaltstack(&(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x2, 0x5, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r6 = semget$private(0x0, 0x6, 0x0) semtimedop(r6, &(0x7f0000000340)=[{0x0, 0x1}], 0x1, 0x0) semtimedop(r6, &(0x7f00000001c0)=[{0x3, 0x74, 0x1800}], 0x1, 0x0) semtimedop(r6, &(0x7f0000000080)=[{}], 0x1, 0x0) semctl$IPC_RMID(r6, 0x0, 0x0) 9.687662626s ago: executing program 4 (id=9): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x90) r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = socket$kcm(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="25003300d000000008021100000108021100000050505050505000000302"], 0x44}}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r6, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x1}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040801}, 0x8805) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x3c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x20, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x4, 0x4, 0x6c, 0x3, 0x78, 0x5, 0x16, 0x16, 0x7e, 0x6c, 0xc, 0x5, 0x48, 0x1b, 0x30, 0x3, 0x12, 0x3, 0x1, 0x30]}]}]}]}, 0x3c}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = socket$igmp(0x2, 0x3, 0x2) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffdc8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r10}, 0x10) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r11, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$l2tp6(0xa, 0x2, 0x73) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x7c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffeb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r12, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580) setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f00000002c0)={0x0, 0x4, 0xff, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r13 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r13, 0x65, 0x8, 0x0, 0x4) 8.917119678s ago: executing program 1 (id=10): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000780)='/sys/power/pm_freeze_timeout', 0x42, 0x0) sendfile(r4, r4, 0x0, 0xa) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}}, 0x0) 8.403170089s ago: executing program 0 (id=11): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@ifindex, r1, 0x5, 0x0, 0x0, @link_id}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{r2}, &(0x7f0000000680), &(0x7f00000006c0)='%+9llu \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="48003300d0000000ffffffffffff08021100000150505050505000000f"], 0x64}}, 0x0) r6 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5500000018007f03c0fe15b282a380930a50000248a8430b916d0200390009002300ff6c0200000015000500fc01ffdd070b566881b38432009b3100b125ca997b5fdf13090200fb572fbc100800000400240200e2", 0x55}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendmsg$inet(r8, &(0x7f0000003740)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000001000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 7.675406354s ago: executing program 1 (id=12): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0xb4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xcb2}]}]}]}}]}, 0xb4}}, 0x0) 7.66155891s ago: executing program 3 (id=13): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000080)=0xd, 0x4) sendto$inet(r0, &(0x7f0000000200)="f8d316d6d863cfbeb1ab91c03635c12eab5cc3503ef8e8c3dcf9c85888c54016797a23d4605c5d117dd33044cc1348a8ff", 0x31, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @mss, @sack_perm, @timestamp, @mss, @timestamp, @sack_perm], 0x7) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a06", 0x60, 0x0, 0x0, 0x0) 7.456096492s ago: executing program 2 (id=14): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, 0x0, &(0x7f0000000100)) 7.320464944s ago: executing program 3 (id=15): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000200)=@req3={0x8000, 0x3, 0x8000, 0x3}, 0x1c) r1 = dup(r0) r2 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) mmap$usbmon(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13, r2, 0x0) syz_clone3(&(0x7f0000000600)={0x1100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x18000, 0x0, 0x12, r1, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000280), 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r3 = getpgid(0x0) kcmp(r3, r3, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) syz_usb_connect(0x3, 0x3d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x9e, 0x64, 0x1f, 0x40, 0x1164, 0x2edc, 0x62de, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8, 0x0, 0x0, 0x2a, 0x1, 0x77, 0x0, [@uac_control={{}, [@feature_unit={0x7, 0x24, 0x6, 0x3, 0x4, 0x0, [], 0xf}, @selector_unit={0x9, 0x24, 0x5, 0x0, 0x0, "e9e01f98"}]}]}}]}}]}}, 0x0) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r4, 0x5761, &(0x7f0000000300)={0x1, 0x0, [{0x8, 0x0, 0x0, [0x0, 0x0, 0x800, 0x0, 0x0, 0x4, 0x0, 0x3]}]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="30ff0400", @ANYRES16, @ANYBLOB="010000000000000000000100000014000700ff010000000000000000000000000001050002000a000000"], 0x30}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) r6 = fsopen(&(0x7f0000000280)='nfsd\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r9, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}}, 0x0) write$nci(0xffffffffffffffff, &(0x7f0000000900)=ANY=[@ANYBLOB="4005012f"], 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000009c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x5e20, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000480)}}], 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 7.133550668s ago: executing program 2 (id=16): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) sigaltstack(&(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x2, 0x5, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r6 = semget$private(0x0, 0x6, 0x0) semtimedop(r6, &(0x7f0000000340)=[{0x0, 0x1}], 0x1, 0x0) semtimedop(r6, &(0x7f00000001c0)=[{0x3, 0x74, 0x1800}], 0x1, 0x0) semtimedop(r6, &(0x7f0000000080)=[{}], 0x1, 0x0) semctl$IPC_RMID(r6, 0x0, 0x0) 0s ago: executing program 2 (id=17): write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x58) getsockopt$rose(0xffffffffffffffff, 0x104, 0x6, 0x0, 0x0) dup(0xffffffffffffffff) syz_open_procfs(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x6) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000380)={0x0, 0x0, 0x103ff}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.190' (ED25519) to the list of known hosts. [ 73.969396][ T29] audit: type=1400 audit(1720124281.092:87): avc: denied { mounton } for pid=5071 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 73.978546][ T5071] cgroup: Unknown subsys name 'net' [ 73.992240][ T29] audit: type=1400 audit(1720124281.092:88): avc: denied { mount } for pid=5071 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 74.023244][ T29] audit: type=1400 audit(1720124281.142:89): avc: denied { unmount } for pid=5071 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 74.206266][ T5071] cgroup: Unknown subsys name 'rlimit' [ 74.359091][ T29] audit: type=1400 audit(1720124281.472:90): avc: denied { setattr } for pid=5071 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 74.406484][ T29] audit: type=1400 audit(1720124281.482:91): avc: denied { create } for pid=5071 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 74.441116][ T29] audit: type=1400 audit(1720124281.482:92): avc: denied { write } for pid=5071 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 74.468973][ T29] audit: type=1400 audit(1720124281.482:93): avc: denied { read } for pid=5071 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 74.473909][ T5072] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 74.489817][ T29] audit: type=1400 audit(1720124281.502:94): avc: denied { mounton } for pid=5071 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 74.522957][ T29] audit: type=1400 audit(1720124281.502:95): avc: denied { mount } for pid=5071 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 74.546329][ T29] audit: type=1400 audit(1720124281.542:96): avc: denied { read } for pid=4749 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 75.885115][ T5071] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.207064][ T5091] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.219854][ T5091] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.228253][ T5091] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.238248][ T5091] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.251063][ T5095] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.260534][ T5095] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.270288][ T5095] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.272921][ T5097] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.278863][ T5095] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.292814][ T5095] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.296697][ T5097] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.302422][ T5095] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.310024][ T5099] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.314658][ T5095] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.329670][ T5101] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.338830][ T5101] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.347351][ T5101] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.350657][ T5100] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.356083][ T5101] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 78.361827][ T5095] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.370623][ T5101] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.382551][ T5100] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.383846][ T5101] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.390497][ T5099] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.402068][ T5101] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.404767][ T5100] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.412067][ T5101] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.418387][ T5100] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.426616][ T5101] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.457386][ T5100] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.015235][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 79.015254][ T29] audit: type=1400 audit(1720124286.132:112): avc: denied { module_request } for pid=5082 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 79.161022][ T5082] chnl_net:caif_netlink_parms(): no params data found [ 79.295180][ T5083] chnl_net:caif_netlink_parms(): no params data found [ 79.404741][ T5081] chnl_net:caif_netlink_parms(): no params data found [ 79.435874][ T5082] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.443613][ T5082] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.451185][ T5082] bridge_slave_0: entered allmulticast mode [ 79.458592][ T5082] bridge_slave_0: entered promiscuous mode [ 79.512447][ T5082] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.520001][ T5082] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.527502][ T5082] bridge_slave_1: entered allmulticast mode [ 79.534702][ T5082] bridge_slave_1: entered promiscuous mode [ 79.542316][ T5087] chnl_net:caif_netlink_parms(): no params data found [ 79.718542][ T5082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.730388][ T5082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.740344][ T5080] chnl_net:caif_netlink_parms(): no params data found [ 79.763390][ T5083] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.770956][ T5083] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.778588][ T5083] bridge_slave_0: entered allmulticast mode [ 79.785918][ T5083] bridge_slave_0: entered promiscuous mode [ 79.874423][ T5083] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.882090][ T5083] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.889578][ T5083] bridge_slave_1: entered allmulticast mode [ 79.897481][ T5083] bridge_slave_1: entered promiscuous mode [ 79.911418][ T5082] team0: Port device team_slave_0 added [ 79.920190][ T5082] team0: Port device team_slave_1 added [ 80.022552][ T5081] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.030031][ T5081] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.037580][ T5081] bridge_slave_0: entered allmulticast mode [ 80.044618][ T5081] bridge_slave_0: entered promiscuous mode [ 80.088045][ T5087] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.095229][ T5087] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.104553][ T5087] bridge_slave_0: entered allmulticast mode [ 80.113578][ T5087] bridge_slave_0: entered promiscuous mode [ 80.123006][ T5081] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.130452][ T5081] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.137688][ T5081] bridge_slave_1: entered allmulticast mode [ 80.144716][ T5081] bridge_slave_1: entered promiscuous mode [ 80.159029][ T5083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.172874][ T5083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.183407][ T5082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.193637][ T5082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.219857][ T5082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.243529][ T5087] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.250942][ T5087] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.258646][ T5087] bridge_slave_1: entered allmulticast mode [ 80.266415][ T5087] bridge_slave_1: entered promiscuous mode [ 80.314873][ T5082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.322433][ T5082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.349940][ T5082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.382218][ T5080] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.389482][ T5080] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.397513][ T5080] bridge_slave_0: entered allmulticast mode [ 80.404544][ T5080] bridge_slave_0: entered promiscuous mode [ 80.453531][ T5080] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.461418][ T5080] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.468837][ T5080] bridge_slave_1: entered allmulticast mode [ 80.476594][ T4479] Bluetooth: hci4: command tx timeout [ 80.476855][ T53] Bluetooth: hci2: command tx timeout [ 80.482456][ T4479] Bluetooth: hci3: command tx timeout [ 80.489283][ T5080] bridge_slave_1: entered promiscuous mode [ 80.516549][ T5087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.528620][ T5087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.539953][ T5081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.555830][ T5100] Bluetooth: hci1: command tx timeout [ 80.561685][ T4479] Bluetooth: hci0: command tx timeout [ 80.578076][ T5083] team0: Port device team_slave_0 added [ 80.615242][ T5081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.642880][ T5083] team0: Port device team_slave_1 added [ 80.666739][ T5080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.680395][ T5080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.738861][ T5082] hsr_slave_0: entered promiscuous mode [ 80.746034][ T5082] hsr_slave_1: entered promiscuous mode [ 80.773780][ T5083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.781397][ T5083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.807698][ T5083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.836543][ T5087] team0: Port device team_slave_0 added [ 80.847493][ T5081] team0: Port device team_slave_0 added [ 80.855694][ T5083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.862654][ T5083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.888742][ T5083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.914909][ T5087] team0: Port device team_slave_1 added [ 80.939017][ T5081] team0: Port device team_slave_1 added [ 80.969549][ T5080] team0: Port device team_slave_0 added [ 80.979897][ T5080] team0: Port device team_slave_1 added [ 81.092325][ T5081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.099827][ T5081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.126404][ T5081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.141123][ T5081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.149336][ T5081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.176350][ T5081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.204973][ T5087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.212077][ T5087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.238364][ T5087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.314059][ T5080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.321493][ T5080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.347642][ T5080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.359587][ T5087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.367537][ T5087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.394069][ T5087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.417679][ T5083] hsr_slave_0: entered promiscuous mode [ 81.424458][ T5083] hsr_slave_1: entered promiscuous mode [ 81.431257][ T5083] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.439585][ T5083] Cannot create hsr debugfs directory [ 81.464487][ T5080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.471720][ T5080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.498295][ T5080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.557298][ T5081] hsr_slave_0: entered promiscuous mode [ 81.563811][ T5081] hsr_slave_1: entered promiscuous mode [ 81.570949][ T5081] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.578842][ T5081] Cannot create hsr debugfs directory [ 81.770235][ T5087] hsr_slave_0: entered promiscuous mode [ 81.780572][ T5087] hsr_slave_1: entered promiscuous mode [ 81.787109][ T5087] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.794659][ T5087] Cannot create hsr debugfs directory [ 81.866536][ T5080] hsr_slave_0: entered promiscuous mode [ 81.872979][ T5080] hsr_slave_1: entered promiscuous mode [ 81.883008][ T5080] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.890708][ T5080] Cannot create hsr debugfs directory [ 82.422045][ T5082] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.478629][ T5082] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.514396][ T5082] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.555765][ T5100] Bluetooth: hci3: command tx timeout [ 82.556015][ T53] Bluetooth: hci4: command tx timeout [ 82.561372][ T4479] Bluetooth: hci2: command tx timeout [ 82.573009][ T5082] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.635602][ T4479] Bluetooth: hci0: command tx timeout [ 82.638845][ T53] Bluetooth: hci1: command tx timeout [ 82.703907][ T5083] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.763067][ T5083] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.807797][ T5083] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.862484][ T5083] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.975752][ T5081] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.986988][ T5081] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.016329][ T5081] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.053240][ T5082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.062946][ T5081] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.163388][ T5080] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.177791][ T5080] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.213136][ T5080] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.228493][ T5082] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.248077][ T5080] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.308540][ T5139] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.316004][ T5139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.329801][ T5139] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.336954][ T5139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.483391][ T5087] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.503113][ T5083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.529400][ T5087] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.543315][ T5087] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.573717][ T5087] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.608032][ T5083] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.624090][ T5082] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.711877][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.719584][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.732507][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.739768][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.762984][ T29] audit: type=1400 audit(1720124290.882:113): avc: denied { sys_module } for pid=5082 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 83.908716][ T5081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.026440][ T5081] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.058938][ T5083] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.081999][ T5080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.102522][ T5082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.174857][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.182111][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.216090][ T5080] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.229692][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.236960][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.333792][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.340964][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.413778][ T5087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.442392][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.449687][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.603946][ T5087] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.636095][ T53] Bluetooth: hci4: command tx timeout [ 84.636833][ T5100] Bluetooth: hci3: command tx timeout [ 84.647067][ T4479] Bluetooth: hci2: command tx timeout [ 84.656724][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.663846][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.683834][ T5083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.699795][ T5081] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.715732][ T4479] Bluetooth: hci1: command tx timeout [ 84.728251][ T4479] Bluetooth: hci0: command tx timeout [ 84.774911][ T5080] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.790891][ T5140] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.798135][ T5140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.943798][ T5087] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.033811][ T5083] veth0_vlan: entered promiscuous mode [ 85.092623][ T5082] veth0_vlan: entered promiscuous mode [ 85.144204][ T5082] veth1_vlan: entered promiscuous mode [ 85.164038][ T5083] veth1_vlan: entered promiscuous mode [ 85.334122][ T5081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.354997][ T5080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.416498][ T5082] veth0_macvtap: entered promiscuous mode [ 85.476751][ T5082] veth1_macvtap: entered promiscuous mode [ 85.489841][ T5087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.510470][ T5083] veth0_macvtap: entered promiscuous mode [ 85.580551][ T5082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.589443][ T5083] veth1_macvtap: entered promiscuous mode [ 85.627951][ T5082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.649399][ T5081] veth0_vlan: entered promiscuous mode [ 85.684794][ T5080] veth0_vlan: entered promiscuous mode [ 85.698754][ T5082] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.709632][ T5082] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.718911][ T5082] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.728819][ T5082] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.747101][ T5083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.760899][ T5083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.772516][ T5083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.797461][ T5081] veth1_vlan: entered promiscuous mode [ 85.820934][ T5083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.832127][ T5083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.844239][ T5083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.854793][ T5080] veth1_vlan: entered promiscuous mode [ 85.933155][ T5083] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.944921][ T5083] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.955547][ T5083] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.964268][ T5083] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.044233][ T5087] veth0_vlan: entered promiscuous mode [ 86.056222][ T5081] veth0_macvtap: entered promiscuous mode [ 86.139059][ T5081] veth1_macvtap: entered promiscuous mode [ 86.192038][ T4090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.212560][ T4090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.225175][ T5087] veth1_vlan: entered promiscuous mode [ 86.254880][ T5081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.266038][ T5081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.276586][ T5081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.287052][ T5081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.299742][ T5081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.308225][ T5080] veth0_macvtap: entered promiscuous mode [ 86.328325][ T5080] veth1_macvtap: entered promiscuous mode [ 86.341054][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.355855][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.369481][ T5081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.380808][ T5081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.391248][ T5081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.402139][ T5081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.417533][ T5081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.480590][ T5081] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.491291][ T5081] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.500556][ T5081] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.509325][ T5081] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.528217][ T4090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.546076][ T4090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.563948][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.576571][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.586499][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.596992][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.609257][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.628837][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.641285][ T5080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.689249][ T29] audit: type=1400 audit(1720124293.812:114): avc: denied { mounton } for pid=5082 comm="syz-executor" path="/root/syzkaller.AZ0SAB/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 86.694396][ T5087] veth0_macvtap: entered promiscuous mode [ 86.721761][ T4479] Bluetooth: hci4: command tx timeout [ 86.727536][ T4479] Bluetooth: hci2: command tx timeout [ 86.732978][ T4479] Bluetooth: hci3: command tx timeout [ 86.743123][ T29] audit: type=1400 audit(1720124293.852:115): avc: denied { mount } for pid=5082 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 86.767166][ T29] audit: type=1400 audit(1720124293.852:116): avc: denied { mounton } for pid=5082 comm="syz-executor" path="/root/syzkaller.AZ0SAB/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 86.795601][ T5100] Bluetooth: hci0: command tx timeout [ 86.800008][ T4479] Bluetooth: hci1: command tx timeout [ 86.807110][ T29] audit: type=1400 audit(1720124293.852:117): avc: denied { mount } for pid=5082 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 86.830815][ T29] audit: type=1400 audit(1720124293.902:118): avc: denied { unmount } for pid=5082 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 86.852076][ T29] audit: type=1400 audit(1720124293.932:119): avc: denied { mounton } for pid=5082 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2323 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 86.857315][ T4090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.875183][ T29] audit: type=1400 audit(1720124293.962:120): avc: denied { mount } for pid=5082 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 86.889410][ T4090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.922060][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.934694][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.952139][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.964792][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.975579][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.986272][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.998773][ T5080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.054338][ T5080] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.077318][ T5080] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.095665][ T5080] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.104450][ T5080] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.129342][ T29] audit: type=1400 audit(1720124294.242:121): avc: denied { read write } for pid=5082 comm="syz-executor" name="loop4" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 87.172529][ T29] audit: type=1400 audit(1720124294.242:122): avc: denied { open } for pid=5082 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 87.188902][ T5087] veth1_macvtap: entered promiscuous mode [ 87.224192][ T29] audit: type=1400 audit(1720124294.242:123): avc: denied { ioctl } for pid=5082 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 87.281490][ T25] cfg80211: failed to load regulatory.db [ 87.535325][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.552471][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.556067][ T5175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.573451][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.599242][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.618877][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.636706][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.657050][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.672460][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.698630][ T5087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.737656][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.749087][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.781835][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.798208][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.828053][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.859785][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.881511][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.892877][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.903109][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.913814][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.927872][ T5087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.969329][ T5087] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.980762][ T5087] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.994865][ T5087] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.006154][ T5087] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.055950][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.120937][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.142104][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.246754][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 88.297903][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.468546][ T8] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 88.512558][ T8] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 88.527685][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.535237][ T8] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 88.553510][ T8] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 88.845751][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.883848][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 88.972918][ T8] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 89.223328][ T8] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 89.248461][ T8] usb 1-1: Product: syz [ 89.259033][ T8] usb 1-1: Manufacturer: syz [ 89.278293][ T8] usb 1-1: SerialNumber: syz [ 89.359124][ T4090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.402722][ T8] usb 1-1: config 0 descriptor?? [ 89.417889][ T4090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.454027][ T8] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 89.578263][ T8] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 89.725827][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.733684][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.899628][ T8] usb 1-1: USB disconnect, device number 2 [ 89.951921][ T8] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 90.015979][ T5192] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7'. [ 90.086077][ T2834] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.111815][ T2834] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.123628][ T5192] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7'. [ 90.345206][ T5174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.486693][ T5138] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 91.522540][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 91.648951][ T5138] usb 3-1: No LPM exit latency info found, disabling LPM. [ 91.692463][ T5138] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.729654][ T5138] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 91.786129][ T5138] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.832107][ T5138] usb 3-1: string descriptor 0 read error: -22 [ 91.861002][ T5138] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 91.890905][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 91.890925][ T29] audit: type=1400 audit(1720124299.005:159): avc: denied { ioctl } for pid=5217 comm="syz.4.9" path="socket:[6739]" dev="sockfs" ino=6739 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 91.893224][ T5138] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.034540][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 92.216961][ T5138] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 92.294049][ T5224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10'. [ 92.303303][ T5224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10'. [ 92.851356][ T5138] cdc_ncm 3-1:1.0: bind() failure [ 92.928877][ T29] audit: type=1400 audit(1720124300.037:160): avc: denied { create } for pid=5225 comm="syz.0.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 92.979596][ T5138] usb 3-1: USB disconnect, device number 2 [ 92.992191][ T5219] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.010090][ T29] audit: type=1400 audit(1720124300.086:161): avc: denied { write } for pid=5225 comm="syz.0.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 93.030782][ T5219] Cannot find set identified by id 0 to match [ 93.077007][ T29] audit: type=1400 audit(1720124300.126:162): avc: denied { setopt } for pid=5217 comm="syz.4.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 93.116230][ T29] audit: type=1400 audit(1720124300.215:163): avc: denied { name_bind } for pid=5230 comm="syz.3.13" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 93.145299][ T29] audit: type=1400 audit(1720124300.225:164): avc: denied { node_bind } for pid=5230 comm="syz.3.13" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 93.233177][ T5219] pimreg: entered allmulticast mode [ 93.258122][ T29] audit: type=1400 audit(1720124300.295:165): avc: denied { create } for pid=5217 comm="syz.4.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 93.293618][ C1] hrtimer: interrupt took 7887495 ns [ 93.320861][ T29] audit: type=1400 audit(1720124300.364:166): avc: denied { setopt } for pid=5217 comm="syz.4.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 93.348804][ T29] audit: type=1400 audit(1720124300.453:167): avc: denied { shutdown } for pid=5233 comm="syz.2.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 93.404418][ T29] audit: type=1400 audit(1720124300.483:168): avc: denied { getopt } for pid=5233 comm="syz.2.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 98.194043][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 98.194064][ T29] audit: type=1326 audit(1720124305.198:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5235 comm="syz.3.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f72033757db code=0x7ffc0000 [ 98.235073][ T29] audit: type=1326 audit(1720124305.198:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5235 comm="syz.3.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f72033757db code=0x7ffc0000 [ 100.549042][ T29] audit: type=1326 audit(1720124305.278:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5235 comm="syz.3.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f72033757db code=0x7ffc0000 [ 104.422013][ T25] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 118.336552][ T5100] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 118.512717][ T5100] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 118.605309][ T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 118.663775][ T53] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 118.723453][ T53] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 118.803938][ T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 118.811165][ T53] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 118.954492][ T53] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 119.005240][ T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 119.012460][ T53] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 119.125895][ T53] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 119.175809][ T5101] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 119.256106][ T29] audit: type=1400 audit(1720124326.132:190): avc: denied { mounton } for pid=5250 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 119.765001][ T5101] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 119.841214][ T4479] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 119.930044][ T4479] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 119.957609][ T5101] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 119.971005][ T5101] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 119.980202][ T53] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 120.011335][ T53] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 120.018562][ T53] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 120.037433][ T53] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 120.046784][ T53] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 120.090557][ T5101] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 120.130564][ T53] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 120.268115][ T5101] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 120.288097][ T5101] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 120.299899][ T5101] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 120.309869][ T5101] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 120.318692][ T5101] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 120.327120][ T5101] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 127.849239][ T4479] Bluetooth: hci5: command tx timeout [ 127.855317][ T4479] Bluetooth: hci6: command tx timeout [ 128.047969][ T4479] Bluetooth: hci7: command tx timeout [ 128.053783][ T4479] Bluetooth: hci8: command tx timeout [ 128.060420][ T4479] Bluetooth: hci9: command tx timeout [ 159.587050][ T5101] Bluetooth: hci9: command tx timeout [ 159.592526][ T5101] Bluetooth: hci8: command tx timeout [ 159.598194][ T5101] Bluetooth: hci7: command tx timeout [ 159.603607][ T5101] Bluetooth: hci6: command tx timeout [ 159.609817][ T5101] Bluetooth: hci5: command tx timeout [ 159.750694][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 159.757702][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.032564][ T4479] Bluetooth: hci5: command tx timeout [ 194.038026][ T4479] Bluetooth: hci6: command tx timeout [ 194.043815][ T4479] Bluetooth: hci7: command tx timeout [ 194.050121][ T4479] Bluetooth: hci8: command tx timeout [ 194.055542][ T4479] Bluetooth: hci9: command tx timeout [ 214.606725][ T5101] Bluetooth: hci9: command tx timeout [ 214.612178][ T5101] Bluetooth: hci8: command tx timeout [ 214.617600][ T5101] Bluetooth: hci7: command tx timeout [ 214.623021][ T5101] Bluetooth: hci6: command tx timeout [ 214.628438][ T5101] Bluetooth: hci5: command tx timeout [ 214.931267][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 214.946013][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 300.028885][ T30] INFO: task kworker/0:0:8 blocked for more than 140 seconds. [ 300.036452][ T30] Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0 [ 300.168674][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 300.248747][ T30] task:kworker/0:0 state:D stack:24592 pid:8 tgid:8 ppid:2 flags:0x00004000 [ 300.328751][ T30] Workqueue: events __sched_core_put [ 300.334129][ T30] Call Trace: [ 300.337427][ T30] [ 300.398819][ T30] __schedule+0xf15/0x5d00 [ 300.403316][ T30] ? __pfx_mark_lock+0x10/0x10 [ 300.408114][ T30] ? __pfx___schedule+0x10/0x10 [ 300.518371][ T30] ? schedule+0x298/0x350 [ 300.568980][ T30] ? __pfx_lock_release+0x10/0x10 [ 300.574093][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 300.648816][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 300.654090][ T30] schedule+0xe7/0x350 [ 300.658180][ T30] schedule_preempt_disabled+0x13/0x30 [ 300.738825][ T30] __mutex_lock+0x5b8/0x9c0 [ 300.743393][ T30] ? static_key_disable_cpuslocked+0x10b/0x1c0 [ 300.838957][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 300.844051][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 300.908923][ T30] ? static_key_disable_cpuslocked+0x10b/0x1c0 [ 300.915149][ T30] static_key_disable_cpuslocked+0x10b/0x1c0 [ 300.998988][ T30] static_key_disable+0x1a/0x20 [ 301.003924][ T30] __sched_core_put+0x38/0x50 [ 301.008631][ T30] process_one_work+0x9c5/0x1b40 [ 301.069023][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 301.074121][ T30] ? __pfx_process_one_work+0x10/0x10 [ 301.158944][ T30] ? assign_work+0x1a0/0x250 [ 301.163609][ T30] worker_thread+0x6c8/0xf30 [ 301.168224][ T30] ? __pfx_worker_thread+0x10/0x10 [ 301.239021][ T30] kthread+0x2c1/0x3a0 [ 301.243160][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 301.248381][ T30] ? __pfx_kthread+0x10/0x10 [ 301.339112][ T30] ret_from_fork+0x45/0x80 [ 301.343609][ T30] ? __pfx_kthread+0x10/0x10 [ 301.348226][ T30] ret_from_fork_asm+0x1a/0x30 [ 301.452422][ T30] [ 301.455515][ T30] INFO: task kworker/u8:4:61 blocked for more than 141 seconds. [ 301.511970][ T30] Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0 [ 301.559178][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 301.567893][ T30] task:kworker/u8:4 state:D stack:23200 pid:61 tgid:61 ppid:2 flags:0x00004000 [ 301.649168][ T30] Workqueue: ipv6_addrconf addrconf_dad_work [ 301.655226][ T30] Call Trace: [ 301.658514][ T30] [ 301.689178][ T30] __schedule+0xf15/0x5d00 [ 301.693658][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 301.698886][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 301.729147][ T30] ? __pfx___schedule+0x10/0x10 [ 301.734060][ T30] ? schedule+0x298/0x350 [ 301.738407][ T30] ? __pfx_lock_release+0x10/0x10 [ 301.759180][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 301.763897][ T30] ? __mutex_trylock_common+0x78/0x250 [ 301.776914][ T30] schedule+0xe7/0x350 [ 301.781163][ T30] schedule_preempt_disabled+0x13/0x30 [ 301.786650][ T30] __mutex_lock+0x5b8/0x9c0 [ 301.791324][ T30] ? addrconf_dad_work+0xcf/0x1500 [ 301.796458][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 301.801636][ T30] ? addrconf_dad_work+0xcf/0x1500 [ 301.806765][ T30] ? rtnl_lock+0x9/0x20 [ 301.811052][ T30] addrconf_dad_work+0xcf/0x1500 [ 301.818967][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 301.824187][ T30] ? __pfx_addrconf_dad_work+0x10/0x10 [ 301.829795][ T30] process_one_work+0x9c5/0x1b40 [ 301.834760][ T30] ? __pfx_batadv_nc_worker+0x10/0x10 [ 301.840339][ T19] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { P25 } 5408 jiffies s: 1505 root: 0x0/T [ 301.852262][ T30] ? __pfx_process_one_work+0x10/0x10 [ 301.857662][ T30] ? assign_work+0x1a0/0x250 [ 301.862451][ T19] rcu: blocking rcu_node structures (internal RCU debug): [ 301.869697][ T30] worker_thread+0x6c8/0xf30 [ 301.874309][ T30] ? __kthread_parkme+0x148/0x220 [ 301.879666][ T30] ? __pfx_worker_thread+0x10/0x10 [ 301.884820][ T30] kthread+0x2c1/0x3a0 [ 301.888912][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 301.894295][ T30] ? __pfx_kthread+0x10/0x10 [ 301.898911][ T30] ret_from_fork+0x45/0x80 [ 301.903510][ T30] ? __pfx_kthread+0x10/0x10 [ 301.908125][ T30] ret_from_fork_asm+0x1a/0x30 [ 301.913082][ T30] [ 301.920668][ T30] INFO: task syz-executor:5081 blocked for more than 142 seconds. [ 301.928505][ T30] Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0 [ 301.936458][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 301.945275][ T30] task:syz-executor state:D stack:24000 pid:5081 tgid:5081 ppid:1 flags:0x00004006 [ 301.955664][ T30] Call Trace: [ 301.958956][ T30] [ 301.962060][ T30] __schedule+0xf15/0x5d00 [ 301.966503][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 301.971931][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 301.977164][ T30] ? __pfx___schedule+0x10/0x10 [ 301.982188][ T30] ? schedule+0x298/0x350 [ 301.986537][ T30] ? __pfx_lock_release+0x10/0x10 [ 302.002959][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 302.007690][ T30] ? __mutex_trylock_common+0x78/0x250 [ 302.030324][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 302.036662][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 302.059587][ T30] schedule+0xe7/0x350 [ 302.063715][ T30] schedule_preempt_disabled+0x13/0x30 [ 302.079213][ T30] __mutex_lock+0x5b8/0x9c0 [ 302.083768][ T30] ? hci_conn_hash_flush+0xc4/0x260 [ 302.088999][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 302.100012][ T30] ? hci_dev_close_sync+0x339/0x1100 [ 302.105360][ T30] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 302.111519][ T30] ? hci_conn_hash_flush+0xc4/0x260 [ 302.116752][ T30] hci_conn_hash_flush+0xc4/0x260 [ 302.123330][ T30] hci_dev_close_sync+0x591/0x1100 [ 302.128475][ T30] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 302.135506][ T30] ? up_write+0x1b2/0x520 [ 302.140140][ T30] ? rcu_is_watching+0x12/0xc0 [ 302.144927][ T30] hci_dev_do_close+0x2e/0x90 [ 302.149783][ T30] hci_unregister_dev+0x1e3/0x5f0 [ 302.154835][ T30] ? __pfx_vhci_release+0x10/0x10 [ 302.159992][ T30] vhci_release+0x7f/0x100 [ 302.164429][ T30] __fput+0x408/0xbb0 [ 302.168429][ T30] task_work_run+0x14e/0x250 [ 302.173153][ T30] ? __pfx_task_work_run+0x10/0x10 [ 302.178280][ T30] ? switch_task_namespaces+0xe0/0x110 [ 302.183867][ T30] do_exit+0xa9b/0x2ba0 [ 302.188059][ T30] ? get_signal+0x8f2/0x2710 [ 302.192793][ T30] ? __pfx_do_exit+0x10/0x10 [ 302.197408][ T30] ? do_raw_spin_lock+0x12d/0x2c0 [ 302.202540][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 302.207932][ T30] do_group_exit+0xd3/0x2a0 [ 302.212586][ T30] get_signal+0x2616/0x2710 [ 302.217120][ T30] ? __pfx_get_signal+0x10/0x10 [ 302.222198][ T30] ? __pfx_vfs_read+0x10/0x10 [ 302.230677][ T30] arch_do_signal_or_restart+0x90/0x7e0 [ 302.236289][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 302.242989][ T30] ? ksys_read+0x1ab/0x260 [ 302.247527][ T30] ? __pfx_ksys_read+0x10/0x10 [ 302.252459][ T30] syscall_exit_to_user_mode+0x14a/0x2a0 [ 302.258127][ T30] do_syscall_64+0xda/0x250 [ 302.262792][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.268718][ T30] RIP: 0033:0x7f3fde5746bc [ 302.273444][ T30] RSP: 002b:00007ffcd7277c30 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 302.284328][ T30] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 00007f3fde5746bc [ 302.307138][ T30] RDX: 0000000000000028 RSI: 00007ffcd7277d30 RDI: 00000000000000f9 [ 302.319574][ T30] RBP: 00007ffcd7277cbc R08: 0000000000000000 R09: 0079746972756365 [ 302.343519][ T30] R10: 00007f3fde6d17e0 R11: 0000000000000246 R12: 000000000000005b [ 302.351726][ T30] R13: 0000000000019754 R14: 0000000000019754 R15: 0000000000000000 [ 302.359916][ T30] [ 302.362954][ T30] INFO: task syz-executor:5080 blocked for more than 142 seconds. [ 302.370921][ T30] Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0 [ 302.378560][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 302.387395][ T30] task:syz-executor state:D stack:23024 pid:5080 tgid:5080 ppid:1 flags:0x00004006 [ 302.397876][ T30] Call Trace: [ 302.401362][ T30] [ 302.404307][ T30] __schedule+0xf15/0x5d00 [ 302.408746][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 302.414167][ T30] ? __pfx___schedule+0x10/0x10 [ 302.419036][ T30] ? schedule+0x298/0x350 [ 302.423551][ T30] ? __pfx_lock_release+0x10/0x10 [ 302.428603][ T30] ? mark_held_locks+0x9f/0xe0 [ 302.435155][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 302.442431][ T30] ? prepare_to_wait_event+0x94/0x690 [ 302.447838][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 302.453296][ T30] schedule+0xe7/0x350 [ 302.457385][ T30] exp_funnel_lock+0x344/0x3b0 [ 302.462352][ T30] ? __pfx_exp_funnel_lock+0x10/0x10 [ 302.467657][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 302.473863][ T30] ? __pfx___might_resched+0x10/0x10 [ 302.479170][ T30] synchronize_rcu_expedited+0x290/0x450 [ 302.485154][ T30] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 302.491416][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 302.496466][ T30] hci_chan_del+0x11d/0x230 [ 302.501087][ T30] l2cap_conn_del+0x432/0x740 [ 302.505795][ T30] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 302.511367][ T30] l2cap_disconn_cfm+0x96/0xd0 [ 302.516161][ T30] hci_conn_hash_flush+0x114/0x260 [ 302.521410][ T30] hci_dev_close_sync+0x591/0x1100 [ 302.526550][ T30] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 302.533781][ T30] ? up_write+0x1b2/0x520 [ 302.538134][ T30] ? rcu_is_watching+0x12/0xc0 [ 302.544262][ T30] hci_dev_do_close+0x2e/0x90 [ 302.548970][ T30] hci_unregister_dev+0x1e3/0x5f0 [ 302.554133][ T30] ? __pfx_vhci_release+0x10/0x10 [ 302.559176][ T30] vhci_release+0x7f/0x100 [ 302.563997][ T30] __fput+0x408/0xbb0 [ 302.568006][ T30] task_work_run+0x14e/0x250 [ 302.572725][ T30] ? __pfx_task_work_run+0x10/0x10 [ 302.577858][ T30] ? switch_task_namespaces+0xe0/0x110 [ 302.583597][ T30] do_exit+0xa9b/0x2ba0 [ 302.587781][ T30] ? get_signal+0x8f2/0x2710 [ 302.592541][ T30] ? __pfx_do_exit+0x10/0x10 [ 302.597169][ T30] ? do_raw_spin_lock+0x12d/0x2c0 [ 302.602350][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 302.607747][ T30] do_group_exit+0xd3/0x2a0 [ 302.612381][ T30] get_signal+0x2616/0x2710 [ 302.616914][ T30] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 302.622516][ T30] ? __pfx_get_signal+0x10/0x10 [ 302.627388][ T30] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 302.632718][ T30] arch_do_signal_or_restart+0x90/0x7e0 [ 302.640001][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 302.646204][ T30] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 302.654584][ T30] syscall_exit_to_user_mode+0x14a/0x2a0 [ 302.660398][ T30] do_syscall_64+0xda/0x250 [ 302.664932][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.679471][ T30] RIP: 0033:0x7f72033a7bc5 [ 302.683916][ T30] RSP: 002b:00007ffe5c46d9f0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 302.709544][ T30] RAX: 0000000000000000 RBX: 000000000000000c RCX: 00007f72033a7bc5 [ 302.717565][ T30] RDX: 00007ffe5c46da30 RSI: 0000000000000000 RDI: 0000000000000000 [ 302.775031][ T30] RBP: 00007ffe5c46dabc R08: 0000000000000000 R09: 00007f72040d2080 [ 302.800592][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000004d [ 302.808613][ T30] R13: 0000000000017ef6 R14: 0000000000016c3f R15: 000000000000000b [ 302.829497][ T30] [ 302.832699][ T30] INFO: task syz-executor:5087 blocked for more than 142 seconds. [ 302.851023][ T30] Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0 [ 302.858690][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 302.879709][ T30] task:syz-executor state:D stack:23888 pid:5087 tgid:5087 ppid:1 flags:0x00004006 [ 302.909548][ T30] Call Trace: [ 302.912868][ T30] [ 302.915812][ T30] __schedule+0xf15/0x5d00 [ 302.929543][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 302.934795][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 302.949480][ T30] ? __pfx___schedule+0x10/0x10 [ 302.954374][ T30] ? schedule+0x298/0x350 [ 302.958722][ T30] ? __pfx_lock_release+0x10/0x10 [ 302.979490][ T30] ? __mutex_lock+0x5b3/0x9c0 [ 302.984220][ T30] ? __mutex_trylock_common+0x78/0x250 [ 302.999441][ T30] schedule+0xe7/0x350 [ 303.003548][ T30] schedule_preempt_disabled+0x13/0x30 [ 303.009030][ T30] __mutex_lock+0x5b8/0x9c0 [ 303.029495][ T30] ? hci_conn_hash_flush+0xc4/0x260 [ 303.034751][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 303.059490][ T30] ? hci_dev_close_sync+0x339/0x1100 [ 303.064838][ T30] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 303.079528][ T30] ? hci_conn_hash_flush+0xc4/0x260 [ 303.084767][ T30] hci_conn_hash_flush+0xc4/0x260 [ 303.099567][ T30] hci_dev_close_sync+0x591/0x1100 [ 303.104738][ T30] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 303.119512][ T30] ? up_write+0x1b2/0x520 [ 303.123900][ T30] ? rcu_is_watching+0x12/0xc0 [ 303.128696][ T30] hci_dev_do_close+0x2e/0x90 [ 303.149663][ T30] hci_unregister_dev+0x1e3/0x5f0 [ 303.154751][ T30] ? __pfx_vhci_release+0x10/0x10 [ 303.169624][ T30] vhci_release+0x7f/0x100 [ 303.174098][ T30] __fput+0x408/0xbb0 [ 303.178105][ T30] task_work_run+0x14e/0x250