last executing test programs: 4m48.409533195s ago: executing program 1 (id=1509): syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x1000}}}}}}}, 0x0) 4m48.251011835s ago: executing program 1 (id=1511): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20a02, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000040)=ANY=[@ANYBLOB='M~s']) 4m47.898427652s ago: executing program 1 (id=1515): syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) syz_ublk_setup_queues(r1, 0x0, &(0x7f0000000180)={0x0, 0x9436, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_CLOCK(r1, 0x1d, &(0x7f0000000000)={0x8}, 0x0) sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x502520}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x3f8, 0x200, 0x70bd2a, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) getpid() mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/query\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/my_zoned_dev\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/my_zoned_dev/memory_backed\x00', 0x2, 0x0) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x4, 0x0, 0x0) write(r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b33, 0x0) write(0xffffffffffffffff, &(0x7f0000000240)='1\x00', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/my_zoned_dev/power\x00', 0x2, 0x0) write(r5, &(0x7f00000002c0)='1', 0x12) 4m47.560420434s ago: executing program 1 (id=1519): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x0, 0x0, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x0) 4m47.188965581s ago: executing program 1 (id=1521): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x1000}}}}}}}, 0x0) 4m47.033233526s ago: executing program 1 (id=1523): socket(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r2 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0xe7}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 4m31.292753927s ago: executing program 32 (id=1523): socket(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r2 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0xe7}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 1m57.573394053s ago: executing program 2 (id=2524): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0x5}, 0x1c) listen(r3, 0x10040) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0xca, 0x0, 0x1000}}}}}}, 0x0) 1m56.254711649s ago: executing program 2 (id=2527): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xfbf0283703c70d89, 0x4008132, 0xffffffffffffffff, 0x0) mprotect(&(0x7f00000af000/0x3000)=nil, 0x3000, 0x100000a) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='map_files\x00') getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) 1m56.082321553s ago: executing program 3 (id=2529): r0 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r0, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 1m54.300257187s ago: executing program 3 (id=2532): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_xfrm(0x10, 0x3, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 1m53.919112235s ago: executing program 2 (id=2534): syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="02c8200a0006000100010102"], 0xf) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) 1m52.542707439s ago: executing program 3 (id=2535): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 1m52.517381737s ago: executing program 2 (id=2537): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d80)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f065580be0ffff0003ba52c44277fb08061402e000030b62079f4b4d2f87e5feca6aab055013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x5a0e}, 0x2c) 1m51.943602368s ago: executing program 3 (id=2539): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0xf, 0x4, 0x8, 0x2}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r0], 0x10) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000300), 0x22242, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$USERIO_CMD_REGISTER(r1, &(0x7f00000000c0), 0x2) 1m51.880857105s ago: executing program 2 (id=2540): sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)={0x4c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x1}}, 0x4c}}, 0x800) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x68}}, 0x24008004) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400}) 1m51.528863033s ago: executing program 3 (id=2543): socket$nl_route(0x10, 0x3, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008005, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtaction={0x4c, 0x1e, 0x109, 0x70bd26, 0x25dfdc01, {}, [{0x38, 0x1, [@m_mirred={0x34, 0x5, 0x0, 0x0, {{0xb, 0x9}, {0x4, 0xe}, {0x7, 0x6, "6e901a"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x8058) 1m51.528241741s ago: executing program 2 (id=2544): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x5, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x7, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 1m49.447025824s ago: executing program 3 (id=2547): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0xce, 0x5, 0x4}]}) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) write$cgroup_type(r2, &(0x7f0000000280), 0x9) 1m36.300957091s ago: executing program 33 (id=2544): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x5, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x7, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 1m33.549866097s ago: executing program 34 (id=2547): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0xce, 0x5, 0x4}]}) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) write$cgroup_type(r2, &(0x7f0000000280), 0x9) 1m16.481800508s ago: executing program 5 (id=2612): openat2$dir(0xffffffffffffff9c, &(0x7f0000002580)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000380)={0x70100, 0x25, 0x5}, 0x18) 1m15.727904705s ago: executing program 5 (id=2614): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)}], 0x1}, 0x40840) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xb, 0x1f, 0x2, 0xbf22, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r0, 0x0, 0xa002a0}, 0x38) unshare(0x8040600) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={&(0x7f0000000080), &(0x7f0000000140)=""/184, &(0x7f0000000200), &(0x7f0000001540), 0x1, r0}, 0x38) 1m14.310415559s ago: executing program 5 (id=2617): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[], 0x18) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 1m13.51570126s ago: executing program 5 (id=2620): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000000)=[{0x0}], 0x1) 1m11.359036735s ago: executing program 5 (id=2623): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des)\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe7bd9000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x81) accept4$alg(r0, 0x0, 0x0, 0x800) bind$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000380), 0x2000, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) 1m9.420058996s ago: executing program 5 (id=2628): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 1m6.169807672s ago: executing program 4 (id=2631): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000000)=[{0x0}], 0x1) 1m5.470433592s ago: executing program 4 (id=2632): mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./sys\x00', &(0x7f0000000d00)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/block/loop0/make-it-fail\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106, 0x5}}, 0x20) 1m5.010487049s ago: executing program 4 (id=2633): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = syz_open_procfs(r0, 0x0) sendfile(r3, r4, 0x0, 0x100000003) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/mapper/control\x00', 0x2, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r5, 0x0, 0x0, 0x804, 0x0, 0x0) syz_usb_connect(0x0, 0x63, &(0x7f0000000000)=ANY=[], 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) chdir(&(0x7f0000000100)='./dev\x00') ioctl$OCFS2_IOC_UNRESVSP(r3, 0x40305829, &(0x7f0000000180)={0x1, 0x2, 0x8ad, 0xfffffffffffffff9, 0x0, 0xfffffff8}) 1m1.128865503s ago: executing program 4 (id=2638): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000700)="d80000001c0081ee4e81f782db44b904021d0802010000000500f0a1180002000000000000000e120a000f0100810401a8001600200001400300000803600cfab94dcf5c049118312d655179c0420df0f820862161c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e002c2827a3aeb44009fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4", 0xd3}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) 1m0.181540707s ago: executing program 4 (id=2639): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xf, 0x204031, 0xffffffffffffffff, 0x2d5c000) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x64) madvise(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x9) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r1, 0x0, 0xee01) 59.249343491s ago: executing program 4 (id=2642): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000880)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d0019feffe69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb46c4c0a285057e3061b9781e", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000002c80)=""/4154, 0x103a}, {&(0x7f0000000600)=""/225, 0xe1}, {&(0x7f0000000140)=""/159, 0x9f}, {&(0x7f0000000380)=""/184, 0xb8}, {&(0x7f0000000440)=""/175, 0xaf}, {&(0x7f00000002c0)=""/180, 0xb4}, {0x0}], 0x7}, 0x10102) 54.314350281s ago: executing program 35 (id=2628): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 44.053007824s ago: executing program 36 (id=2642): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000880)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d0019feffe69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb46c4c0a285057e3061b9781e", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000002c80)=""/4154, 0x103a}, {&(0x7f0000000600)=""/225, 0xe1}, {&(0x7f0000000140)=""/159, 0x9f}, {&(0x7f0000000380)=""/184, 0xb8}, {&(0x7f0000000440)=""/175, 0xaf}, {&(0x7f00000002c0)=""/180, 0xb4}, {0x0}], 0x7}, 0x10102) 23.051788509s ago: executing program 0 (id=2674): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d000100"], 0xcc}}, 0x0) 21.366500729s ago: executing program 0 (id=2675): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa2"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x3, @win={{}, 0x2, 0x0, 0x0, 0x0, 0x0}}) 20.954263854s ago: executing program 0 (id=2676): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/fcloop/ctl/add_target_port\x00', 0x80041, 0x0) write(r0, &(0x7f0000000600)='wwnn=0x3333333333333333,wwpn=0x4444444444444444,roles=32,lpwwnn=0x1111111111111111,lpwwpn=0x2222222222222222', 0x6c) 20.499763122s ago: executing program 0 (id=2677): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x7, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2) syz_genetlink_get_family_id$batadv(&(0x7f000009f580), 0xffffffffffffffff) openat2$dir(0xffffffffffffff9c, &(0x7f0000002580)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000380)={0x70100, 0x25, 0x5}, 0x18) 16.900948722s ago: executing program 0 (id=2678): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000040)=0x18, 0x4) 15.609078535s ago: executing program 0 (id=2679): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x66, 0x903, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xc, 0x7}, {0x4, 0xfff1}, {0xfff2, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 0s ago: executing program 37 (id=2679): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x66, 0x903, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xc, 0x7}, {0x4, 0xfff1}, {0xfff2, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.250' (ED25519) to the list of known hosts. [ 81.569598][ T5568] cgroup: Unknown subsys name 'net' [ 81.819025][ T5568] cgroup: Unknown subsys name 'cpuset' [ 81.864785][ T5568] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.649215][ T5568] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.862415][ T4896] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.890380][ T4896] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.891318][ T4896] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.892729][ T4896] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.894066][ T4896] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.107413][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.132997][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.143629][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.160525][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.162450][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.252520][ T5594] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.282461][ T5597] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.296757][ T5597] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.302891][ T5597] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.309469][ T5597] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.311527][ T5597] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.322906][ T5599] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.323886][ T5599] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.325112][ T5597] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.325911][ T5594] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.334846][ T4896] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.351127][ T5582] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.353788][ T5594] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.381923][ T5582] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.382719][ T5582] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.213144][ T10] cfg80211: failed to load regulatory.db [ 88.006246][ T5594] Bluetooth: hci0: command tx timeout [ 88.244313][ T5594] Bluetooth: hci1: command tx timeout [ 88.404391][ T5594] Bluetooth: hci2: command tx timeout [ 88.404879][ T5594] Bluetooth: hci4: command tx timeout [ 88.484284][ T59] Bluetooth: hci3: command tx timeout [ 88.916112][ T5590] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.917342][ T5590] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.917474][ T5590] bridge_slave_0: entered allmulticast mode [ 88.918989][ T5590] bridge_slave_0: entered promiscuous mode [ 88.922132][ T5581] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.922245][ T5581] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.922399][ T5581] bridge_slave_0: entered allmulticast mode [ 88.924068][ T5581] bridge_slave_0: entered promiscuous mode [ 88.930006][ T5587] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.930121][ T5587] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.930640][ T5587] bridge_slave_0: entered allmulticast mode [ 88.935117][ T5587] bridge_slave_0: entered promiscuous mode [ 88.980476][ T5590] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.980585][ T5590] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.980779][ T5590] bridge_slave_1: entered allmulticast mode [ 88.983107][ T5590] bridge_slave_1: entered promiscuous mode [ 88.986544][ T5581] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.986654][ T5581] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.986814][ T5581] bridge_slave_1: entered allmulticast mode [ 88.989646][ T5581] bridge_slave_1: entered promiscuous mode [ 88.990930][ T5587] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.991038][ T5587] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.991186][ T5587] bridge_slave_1: entered allmulticast mode [ 88.998704][ T5587] bridge_slave_1: entered promiscuous mode [ 89.104473][ T5591] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.104612][ T5591] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.104724][ T5591] bridge_slave_0: entered allmulticast mode [ 89.108590][ T5591] bridge_slave_0: entered promiscuous mode [ 89.174875][ T5591] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.175058][ T5591] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.175221][ T5591] bridge_slave_1: entered allmulticast mode [ 89.176940][ T5591] bridge_slave_1: entered promiscuous mode [ 89.220555][ T5590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.225001][ T5581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.239662][ T5587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.341067][ T5590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.343543][ T5581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.347360][ T5587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.372740][ T5589] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.372925][ T5589] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.373420][ T5589] bridge_slave_0: entered allmulticast mode [ 89.376817][ T5589] bridge_slave_0: entered promiscuous mode [ 89.425049][ T5591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.425852][ T5589] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.425958][ T5589] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.426103][ T5589] bridge_slave_1: entered allmulticast mode [ 89.430699][ T5589] bridge_slave_1: entered promiscuous mode [ 89.488442][ T5591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.505055][ T5590] team0: Port device team_slave_0 added [ 89.507042][ T5581] team0: Port device team_slave_0 added [ 89.509095][ T5587] team0: Port device team_slave_0 added [ 89.543138][ T5590] team0: Port device team_slave_1 added [ 89.545807][ T5581] team0: Port device team_slave_1 added [ 89.548669][ T5587] team0: Port device team_slave_1 added [ 89.572470][ T5589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.612836][ T5591] team0: Port device team_slave_0 added [ 89.616421][ T5589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.670365][ T5591] team0: Port device team_slave_1 added [ 89.671299][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.671309][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.671323][ T5590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.673427][ T5581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.673441][ T5581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.673463][ T5581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.676849][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.676862][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.676886][ T5587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.809062][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.809079][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.809102][ T5590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.810977][ T5581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.810993][ T5581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.811016][ T5581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.816580][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.816596][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.816629][ T5587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.819732][ T5589] team0: Port device team_slave_0 added [ 89.891432][ T5589] team0: Port device team_slave_1 added [ 89.892597][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.892611][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.892635][ T5591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.938363][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.938380][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.938404][ T5591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.062661][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.062700][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.062726][ T5589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.084457][ T59] Bluetooth: hci0: command tx timeout [ 90.160794][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.160811][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.160835][ T5589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.181977][ T5581] hsr_slave_0: entered promiscuous mode [ 90.187835][ T5581] hsr_slave_1: entered promiscuous mode [ 90.199692][ T5587] hsr_slave_0: entered promiscuous mode [ 90.201379][ T5587] hsr_slave_1: entered promiscuous mode [ 90.203479][ T5587] debugfs: 'hsr0' already exists in 'hsr' [ 90.206942][ T5587] Cannot create hsr debugfs directory [ 90.246375][ T5590] hsr_slave_0: entered promiscuous mode [ 90.248980][ T5590] hsr_slave_1: entered promiscuous mode [ 90.250074][ T5590] debugfs: 'hsr0' already exists in 'hsr' [ 90.250093][ T5590] Cannot create hsr debugfs directory [ 90.321656][ T5591] hsr_slave_0: entered promiscuous mode [ 90.322595][ T5591] hsr_slave_1: entered promiscuous mode [ 90.323185][ T5591] debugfs: 'hsr0' already exists in 'hsr' [ 90.323207][ T5591] Cannot create hsr debugfs directory [ 90.324336][ T59] Bluetooth: hci1: command tx timeout [ 90.494611][ T59] Bluetooth: hci4: command tx timeout [ 90.494651][ T59] Bluetooth: hci2: command tx timeout [ 90.564901][ T5594] Bluetooth: hci3: command tx timeout [ 91.155247][ T5589] hsr_slave_0: entered promiscuous mode [ 91.156118][ T5589] hsr_slave_1: entered promiscuous mode [ 91.156634][ T5589] debugfs: 'hsr0' already exists in 'hsr' [ 91.156651][ T5589] Cannot create hsr debugfs directory [ 91.957664][ T5581] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.027565][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.034072][ T5581] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.072168][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.085321][ T5581] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.109523][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.137804][ T5581] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.164417][ T5594] Bluetooth: hci0: command tx timeout [ 92.169736][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.366963][ T5590] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.399693][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.406073][ T5594] Bluetooth: hci1: command tx timeout [ 92.406073][ T5590] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.439252][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.441382][ T5590] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.463135][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.491083][ T5590] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.522439][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.564989][ T5594] Bluetooth: hci2: command tx timeout [ 92.565024][ T5594] Bluetooth: hci4: command tx timeout [ 92.640772][ T5591] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.644917][ T59] Bluetooth: hci3: command tx timeout [ 92.689507][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.692924][ T5591] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.721774][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.733763][ T5591] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.768800][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.802992][ T5591] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.827298][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.961095][ T5587] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.988531][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.002374][ T5587] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.040197][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.062920][ T5587] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.100812][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.135670][ T5587] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.158230][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.197879][ T5581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.310163][ T5589] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.351165][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.366404][ T5589] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.409772][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.429152][ T5589] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.468002][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.470003][ T5581] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.473062][ T5589] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.523403][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.587458][ T4252] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.587570][ T4252] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.693640][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.693785][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.756270][ T5590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.859909][ T5590] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.909605][ T1018] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.909713][ T1018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.951872][ T5591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.973078][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.973362][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.092106][ T5587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.105632][ T5591] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.150066][ T1018] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.150278][ T1018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.244658][ T59] Bluetooth: hci0: command tx timeout [ 94.256864][ T4252] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.256984][ T4252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.329207][ T5587] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.369748][ T5589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.387212][ T1018] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.387398][ T1018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.426734][ T1018] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.426833][ T1018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.485459][ T59] Bluetooth: hci1: command tx timeout [ 94.562991][ T5589] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.645183][ T59] Bluetooth: hci2: command tx timeout [ 94.645215][ T59] Bluetooth: hci4: command tx timeout [ 94.645785][ T1018] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.646468][ T1018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.718177][ T1018] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.719117][ T1018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.725850][ T5594] Bluetooth: hci3: command tx timeout [ 95.003892][ T5581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.591931][ T5581] veth0_vlan: entered promiscuous mode [ 95.711629][ T5590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.745293][ T5581] veth1_vlan: entered promiscuous mode [ 96.008950][ T5581] veth0_macvtap: entered promiscuous mode [ 96.050396][ T5591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.057639][ T5581] veth1_macvtap: entered promiscuous mode [ 96.256499][ T5581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.336623][ T5581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.431919][ T5587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.528323][ T5591] veth0_vlan: entered promiscuous mode [ 96.631576][ T5589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.755326][ T5591] veth1_vlan: entered promiscuous mode [ 96.872226][ T5590] veth0_vlan: entered promiscuous mode [ 96.961021][ T360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.961048][ T360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.018431][ T5590] veth1_vlan: entered promiscuous mode [ 97.035857][ T5587] veth0_vlan: entered promiscuous mode [ 97.098769][ T5591] veth0_macvtap: entered promiscuous mode [ 97.113785][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.113801][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.136672][ T5587] veth1_vlan: entered promiscuous mode [ 97.138777][ T5591] veth1_macvtap: entered promiscuous mode [ 97.142957][ T5589] veth0_vlan: entered promiscuous mode [ 97.239411][ T5589] veth1_vlan: entered promiscuous mode [ 97.272621][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.314739][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.315353][ T5590] veth0_macvtap: entered promiscuous mode [ 97.369626][ T5590] veth1_macvtap: entered promiscuous mode [ 97.421675][ T5587] veth0_macvtap: entered promiscuous mode [ 97.528855][ T5587] veth1_macvtap: entered promiscuous mode [ 97.634823][ T5589] veth0_macvtap: entered promiscuous mode [ 97.669284][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.720654][ T5777] mmap: syz.0.1 (5777) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 97.849732][ T5589] veth1_macvtap: entered promiscuous mode [ 97.874032][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.976731][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.119849][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.219619][ T4252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.219639][ T4252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.238013][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.350017][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.661964][ T4252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.661988][ T4252] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.370652][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.370672][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.374596][ T4258] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.375396][ T66] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.375923][ T66] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.376747][ T66] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.773407][ T66] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.791761][ T4252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.791782][ T4252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.870772][ T5793] ======================================================= [ 99.870772][ T5793] WARNING: The mand mount option has been deprecated and [ 99.870772][ T5793] and is ignored by this kernel. Remove the mand [ 99.870772][ T5793] option from the mount to silence this warning. [ 99.870772][ T5793] ======================================================= [ 100.047501][ T4252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.047521][ T4252] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.407244][ T42] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.531570][ T4258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.531590][ T4258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.848963][ T5800] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 101.043953][ T5800] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 101.363152][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.363173][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.458674][ T5806] fuse: Unknown parameter '0x0000000000000003' [ 101.568151][ T1018] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.584561][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.609514][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.737148][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.020663][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.414838][ T5821] Zero length message leads to an empty skb [ 103.477379][ T360] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.564647][ T56] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.862280][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.862441][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.862816][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.863123][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.098708][ T5828] tap0: tun_chr_ioctl cmd 21731 [ 104.695984][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.696745][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.696944][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.876177][ T42] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.978553][ T360] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.059630][ T5883] syzkaller0: entered promiscuous mode [ 107.059657][ T5883] syzkaller0: entered allmulticast mode [ 111.153419][ T5987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.69'. [ 113.376353][ T6056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.81'. [ 113.489143][ T6057] netlink: 28 bytes leftover after parsing attributes in process `syz.3.79'. [ 117.187647][ T6148] syzkaller0: entered promiscuous mode [ 117.187692][ T6148] syzkaller0: entered allmulticast mode [ 120.812794][ T6236] random: crng reseeded on system resumption [ 121.617811][ T6263] netlink: 'syz.3.168': attribute type 10 has an invalid length. [ 125.025921][ T6328] warning: `syz.0.196' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 125.493479][ T6347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.204'. [ 125.493503][ T6347] nbd: must specify a size in bytes for the device [ 127.258357][ T6395] netlink: 92 bytes leftover after parsing attributes in process `syz.1.218'. [ 127.431565][ T6398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.221'. [ 127.588125][ T6403] capability: warning: `syz.2.224' uses deprecated v2 capabilities in a way that may be insecure [ 127.912651][ T6413] 9p: Bad value for 'wfdno' [ 128.280075][ T6425] netlink: 92 bytes leftover after parsing attributes in process `syz.2.233'. [ 128.721587][ T6434] binder_alloc: 6433: pid 6433 spamming oneway? 1 buffers allocated for a total size of 4096 [ 128.831041][ T6440] 9p: Bad value for 'wfdno' [ 129.056616][ T6452] netlink: 92 bytes leftover after parsing attributes in process `syz.2.244'. [ 129.589665][ T6471] 9p: Bad value for 'wfdno' [ 129.872759][ T6480] netlink: 92 bytes leftover after parsing attributes in process `syz.1.259'. [ 130.750198][ T6510] netlink: 20 bytes leftover after parsing attributes in process `syz.1.274'. [ 131.311509][ T6532] fuse: Unknown parameter '0x0000000000000003' [ 132.532191][ T6543] netlink: 20 bytes leftover after parsing attributes in process `syz.1.288'. [ 133.130390][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.130480][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.310806][ T6557] Bluetooth: MGMT ver 1.23 [ 134.857385][ T6580] netlink: 20 bytes leftover after parsing attributes in process `syz.1.303'. [ 135.273736][ T6598] fuse: Unknown parameter '0x0000000000000003' [ 137.294565][ T6613] netlink: 20 bytes leftover after parsing attributes in process `syz.4.316'. [ 137.790224][ T6631] syz.3.323 uses obsolete (PF_INET,SOCK_PACKET) [ 140.955214][ T6631] syz.3.323 (6631) used greatest stack depth: 19768 bytes left [ 141.241366][ T6647] netlink: 48 bytes leftover after parsing attributes in process `syz.2.331'. [ 141.253002][ T6649] netlink: 20 bytes leftover after parsing attributes in process `syz.1.328'. [ 141.896794][ T6669] netlink: 'syz.2.339': attribute type 64 has an invalid length. [ 142.130550][ T6668] bond1 (unregistering): Released all slaves [ 142.389075][ T6662] syz.3.334 (6662) used greatest stack depth: 19744 bytes left [ 144.298338][ T6731] netlink: 12 bytes leftover after parsing attributes in process `syz.0.365'. [ 145.601134][ T6768] netlink: 12 bytes leftover after parsing attributes in process `syz.4.378'. [ 146.641338][ T6801] netlink: 12 bytes leftover after parsing attributes in process `syz.3.393'. [ 147.517243][ T6828] netlink: 12 bytes leftover after parsing attributes in process `syz.1.410'. [ 148.671611][ T6845] 9p: Bad value for 'source' [ 149.100291][ T6859] netlink: 12 bytes leftover after parsing attributes in process `syz.1.422'. [ 149.330170][ T6869] 9p: Bad value for 'source' [ 150.957831][ T6892] netlink: 12 bytes leftover after parsing attributes in process `syz.0.435'. [ 151.244389][ T6904] 9p: Bad value for 'source' [ 154.022774][ T6958] netlink: 48 bytes leftover after parsing attributes in process `syz.0.463'. [ 154.173073][ T6947] syz.4.459 (6947) used greatest stack depth: 18656 bytes left [ 154.642031][ T6982] netlink: 'syz.0.475': attribute type 10 has an invalid length. [ 154.642051][ T6982] netlink: 12 bytes leftover after parsing attributes in process `syz.0.475'. [ 155.693791][ T7016] netlink: 'syz.4.491': attribute type 10 has an invalid length. [ 155.693812][ T7016] netlink: 12 bytes leftover after parsing attributes in process `syz.4.491'. [ 155.867997][ T7020] netlink: 20 bytes leftover after parsing attributes in process `syz.2.492'. [ 157.444346][ T7045] netlink: 'syz.4.507': attribute type 10 has an invalid length. [ 157.444366][ T7045] netlink: 12 bytes leftover after parsing attributes in process `syz.4.507'. [ 157.540573][ T7051] netlink: 20 bytes leftover after parsing attributes in process `syz.3.506'. [ 157.545847][ T7051] netlink: 52 bytes leftover after parsing attributes in process `syz.3.506'. [ 157.545869][ T7051] netlink: 44 bytes leftover after parsing attributes in process `syz.3.506'. [ 158.515884][ T7080] netlink: 52 bytes leftover after parsing attributes in process `syz.3.520'. [ 158.515906][ T7080] netlink: 44 bytes leftover after parsing attributes in process `syz.3.520'. [ 158.617035][ T7082] netlink: 92 bytes leftover after parsing attributes in process `syz.1.521'. [ 158.746486][ T7086] netlink: 'syz.1.524': attribute type 10 has an invalid length. [ 158.746505][ T7086] netlink: 12 bytes leftover after parsing attributes in process `syz.1.524'. [ 159.404848][ T7105] netlink: 20 bytes leftover after parsing attributes in process `syz.1.532'. [ 159.415126][ T7105] netlink: 52 bytes leftover after parsing attributes in process `syz.1.532'. [ 160.005351][ T7125] netlink: 'syz.0.542': attribute type 10 has an invalid length. [ 162.462297][ T7188] __nla_validate_parse: 7 callbacks suppressed [ 162.462316][ T7188] netlink: 20 bytes leftover after parsing attributes in process `syz.3.571'. [ 162.474390][ T7188] netlink: 52 bytes leftover after parsing attributes in process `syz.3.571'. [ 169.570449][ T7374] netlink: 'syz.4.651': attribute type 29 has an invalid length. [ 169.589054][ T7374] netlink: 'syz.4.651': attribute type 29 has an invalid length. [ 169.589998][ T7374] netlink: 'syz.4.651': attribute type 29 has an invalid length. [ 169.630941][ T7376] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 171.201979][ T7429] netlink: 20 bytes leftover after parsing attributes in process `syz.3.677'. [ 171.215308][ T7429] netlink: 20 bytes leftover after parsing attributes in process `syz.3.677'. [ 171.909575][ T7460] netlink: 20 bytes leftover after parsing attributes in process `syz.2.691'. [ 171.910713][ T7460] netlink: 20 bytes leftover after parsing attributes in process `syz.2.691'. [ 172.221363][ T7467] netlink: 48 bytes leftover after parsing attributes in process `syz.4.694'. [ 172.609596][ T7484] netlink: 20 bytes leftover after parsing attributes in process `syz.3.702'. [ 172.914310][ T7490] netlink: 48 bytes leftover after parsing attributes in process `syz.4.707'. [ 173.099384][ T7502] netlink: 20 bytes leftover after parsing attributes in process `syz.1.713'. [ 173.101792][ T7502] netlink: 20 bytes leftover after parsing attributes in process `syz.1.713'. [ 174.184017][ T7535] netlink: 20 bytes leftover after parsing attributes in process `syz.0.726'. [ 175.487106][ T7584] binder: BINDER_SET_CONTEXT_MGR already set [ 175.487122][ T7584] binder: 7581:7584 ioctl 4018620d 200000004a80 returned -16 [ 175.796366][ T7596] fuse: Unknown parameter '0x0000000000000003' [ 176.305369][ T7608] __nla_validate_parse: 1 callbacks suppressed [ 176.305387][ T7608] netlink: 92 bytes leftover after parsing attributes in process `syz.2.759'. [ 179.443632][ T7635] netlink: 92 bytes leftover after parsing attributes in process `syz.3.771'. [ 180.414598][ T7673] netlink: 92 bytes leftover after parsing attributes in process `syz.4.787'. [ 181.030407][ T7699] netlink: 92 bytes leftover after parsing attributes in process `syz.4.800'. [ 181.309475][ T7710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.805'. [ 181.535840][ T7719] netlink: 60 bytes leftover after parsing attributes in process `syz.2.810'. [ 181.539097][ T7719] netlink: 60 bytes leftover after parsing attributes in process `syz.2.810'. [ 181.939622][ T7730] input: syz0 as /devices/virtual/input/input5 [ 185.838583][ T7841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.862'. [ 185.838608][ T7841] nbd: must specify at least one socket [ 188.701102][ T7889] netlink: 48 bytes leftover after parsing attributes in process `syz.4.879'. [ 190.973220][ T7947] random: crng reseeded on system resumption [ 191.285781][ T7956] syzkaller0: entered promiscuous mode [ 191.285805][ T7956] syzkaller0: entered allmulticast mode [ 191.369703][ T7959] netlink: 36 bytes leftover after parsing attributes in process `syz.2.910'. [ 193.087064][ T7991] netlink: 36 bytes leftover after parsing attributes in process `syz.3.924'. [ 193.547437][ T8011] netlink: 60 bytes leftover after parsing attributes in process `syz.4.935'. [ 193.590161][ T8011] netlink: 60 bytes leftover after parsing attributes in process `syz.4.935'. [ 194.901367][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.901433][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.954844][ T8127] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 207.695816][ T8278] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1043'. [ 207.705915][ T8278] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1043'. [ 208.715514][ T8297] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1047'. [ 212.164426][ T59] Bluetooth: hci2: command 0x0406 tx timeout [ 212.244310][ T59] Bluetooth: hci1: command 0x0406 tx timeout [ 212.383209][ T36] audit: type=1326 audit(1786494965.567:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8364 comm="syz.2.1077" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4f8fee0d9 code=0x7ffc0000 [ 212.404407][ T59] Bluetooth: hci0: command 0x0406 tx timeout [ 212.404715][ T59] Bluetooth: hci3: command 0x0406 tx timeout [ 212.432648][ T36] audit: type=1326 audit(1786494965.567:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8364 comm="syz.2.1077" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4f8fee0d9 code=0x7ffc0000 [ 212.463479][ T36] audit: type=1326 audit(1786494965.647:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8364 comm="syz.2.1077" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fa4f8fee0d9 code=0x7ffc0000 [ 212.463520][ T36] audit: type=1326 audit(1786494965.647:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8364 comm="syz.2.1077" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4f8fee0d9 code=0x7ffc0000 [ 212.463550][ T36] audit: type=1326 audit(1786494965.647:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8364 comm="syz.2.1077" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4f8fee0d9 code=0x7ffc0000 [ 217.972625][ T36] audit: type=1800 audit(1786494971.147:7): pid=8464 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.1117" name="memory_backed" dev="configfs" ino=17580 res=0 errno=0 [ 217.977466][ T36] audit: type=1800 audit(1786494971.167:8): pid=8464 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.1117" name="power" dev="configfs" ino=17583 res=0 errno=0 [ 218.505318][ T8464] null_blk: disk my_zoned_dev created [ 220.039725][ T8504] netlink: 'syz.1.1135': attribute type 1 has an invalid length. [ 220.039748][ T8504] netlink: 'syz.1.1135': attribute type 2 has an invalid length. [ 227.919809][ T8635] syz.3.1188 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 227.919864][ T8635] CPU: 0 UID: 0 PID: 8635 Comm: syz.3.1188 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 227.919890][ T8635] Tainted: [L]=SOFTLOCKUP [ 227.919896][ T8635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 227.919914][ T8635] Call Trace: [ 227.919921][ T8635] [ 227.919929][ T8635] dump_stack_lvl+0xe8/0x150 [ 227.919971][ T8635] dump_header+0xd3/0x4b0 [ 227.919995][ T8635] oom_kill_process+0x3ab/0x970 [ 227.920024][ T8635] out_of_memory+0x1064/0x1480 [ 227.920069][ T8635] ? __pfx_out_of_memory+0x10/0x10 [ 227.920091][ T8635] ? lockdep_hardirqs_on+0x7a/0x110 [ 227.920119][ T8635] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 227.920146][ T8635] ? _mutex_lock_killable+0x152/0x1d0 [ 227.920167][ T8635] ? try_charge_memcg+0xbb6/0x15b0 [ 227.920191][ T8635] try_charge_memcg+0xc75/0x15b0 [ 227.920227][ T8635] ? __pfx_try_charge_memcg+0x10/0x10 [ 227.920268][ T8635] ? charge_memcg+0x20/0x2b0 [ 227.920291][ T8635] charge_memcg+0x19c/0x2b0 [ 227.920313][ T8635] __mem_cgroup_charge+0x25/0x80 [ 227.920332][ T8635] do_pte_missing+0x859/0x28f0 [ 227.920363][ T8635] ? handle_mm_fault+0xe8/0x13f0 [ 227.920397][ T8635] handle_mm_fault+0xd28/0x13f0 [ 227.920434][ T8635] ? handle_mm_fault+0xe8/0x13f0 [ 227.920464][ T8635] ? __pfx_handle_mm_fault+0x10/0x10 [ 227.920491][ T8635] ? lock_vma_under_rcu+0x45a/0x500 [ 227.920539][ T8635] do_user_addr_fault+0xa4d/0x1340 [ 227.920577][ T8635] ? trace_page_fault_user+0x84/0x1e0 [ 227.920608][ T8635] exc_page_fault+0x6a/0xc0 [ 227.920635][ T8635] asm_exc_page_fault+0x26/0x30 [ 227.920654][ T8635] RIP: 0033:0x7fb7d931b284 [ 227.920677][ T8635] Code: 8d 3c 30 4c 89 de 4c 89 54 24 30 e8 66 2c 04 00 4c 8b 54 24 30 85 c0 0f 85 e1 00 00 00 48 8b 44 24 28 48 89 df 4c 89 54 24 30 <4c> 89 93 98 06 00 00 48 89 83 90 06 00 00 48 8d 83 10 03 00 00 4c [ 227.920690][ T8635] RSP: 002b:00007ffe8ac8d220 EFLAGS: 00010246 [ 227.920712][ T8635] RAX: 00007fb7d6d0e000 RBX: 00007fb7d6d2e6c0 RCX: 00007fb7d935ded7 [ 227.920725][ T8635] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007fb7d6d2e6c0 [ 227.920740][ T8635] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 227.920750][ T8635] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffe8ac8d370 [ 227.920762][ T8635] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 227.920790][ T8635] [ 227.920798][ T8635] memory: usage 0kB, limit 0kB, failcnt 38 [ 227.920809][ T8635] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 227.920822][ T8635] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 227.920838][ T8635] Memory cgroup stats for /syz3/test: [ 227.921215][ T8635] cache 0 [ 227.921224][ T8635] rss 0 [ 227.921230][ T8635] shmem 0 [ 227.921236][ T8635] mapped_file 0 [ 227.921242][ T8635] dirty 0 [ 227.921249][ T8635] writeback 0 [ 227.921255][ T8635] workingset_refault_anon 0 [ 227.921262][ T8635] workingset_refault_file 0 [ 227.921269][ T8635] swap 0 [ 227.921275][ T8635] swapcached 0 [ 227.921281][ T8635] pgpgin 0 [ 227.921287][ T8635] pgpgout 0 [ 227.921293][ T8635] pgfault 0 [ 227.921300][ T8635] pgmajfault 0 [ 227.921306][ T8635] inactive_anon 0 [ 227.921312][ T8635] active_anon 0 [ 227.921319][ T8635] inactive_file 0 [ 227.921325][ T8635] active_file 0 [ 227.921331][ T8635] unevictable 0 [ 227.921338][ T8635] hierarchical_memory_limit 0 [ 227.921345][ T8635] hierarchical_memsw_limit 9223372036854771712 [ 227.921353][ T8635] total_cache 0 [ 227.921359][ T8635] total_rss 0 [ 227.921365][ T8635] total_shmem 0 [ 227.921371][ T8635] total_mapped_file 0 [ 227.921378][ T8635] total_dirty 0 [ 227.921385][ T8635] total_writeback 0 [ 227.921391][ T8635] total_workingset_refault_anon 0 [ 227.921399][ T8635] total_workingset_refault_file 0 [ 227.921406][ T8635] total_swap 0 [ 227.921411][ T8635] total_swapcached 0 [ 227.921417][ T8635] total_pgpgin 0 [ 227.921423][ T8635] total_pgpgout 0 [ 227.921428][ T8635] total_pgfault 0 [ 227.921433][ T8635] total_pgmajfault 0 [ 227.921439][ T8635] total_inactive_anon 0 [ 227.921445][ T8635] total_active_anon 0 [ 227.921451][ T8635] total_inactive_file 0 [ 227.921457][ T8635] total_active_file 0 [ 227.921462][ T8635] total_unevictable 0 [ 227.921468][ T8635] anon_cost 0 [ 227.921473][ T8635] file_cost 0 [ 227.921484][ T8635] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3/test,task_memcg=/syz3/test,task=syz.3.1188,pid=8635,uid=0 [ 228.345742][ T8635] Memory cgroup out of memory: Killed process 8635 (syz.3.1188) total-vm:113036kB, anon-rss:1460kB, file-rss:31096kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 230.262396][ T8736] netlink: 'syz.1.1222': attribute type 29 has an invalid length. [ 230.263521][ T8736] netlink: 'syz.1.1222': attribute type 29 has an invalid length. [ 230.264051][ T8736] netlink: 'syz.1.1222': attribute type 29 has an invalid length. [ 230.452782][ T8742] binder: 8741:8742 ioctl c0306201 0 returned -14 [ 230.644313][ T5594] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 230.933755][ T8756] netlink: 'syz.1.1232': attribute type 11 has an invalid length. [ 231.031772][ T8760] netlink: 'syz.4.1234': attribute type 29 has an invalid length. [ 231.270932][ T8768] binder: 8767:8768 ioctl c0306201 0 returned -14 [ 231.506410][ T8763] netlink: 'syz.4.1234': attribute type 29 has an invalid length. [ 231.506812][ T8764] netlink: 'syz.4.1234': attribute type 29 has an invalid length. [ 232.485527][ T8803] netlink: 'syz.1.1252': attribute type 29 has an invalid length. [ 232.585884][ T8803] netlink: 'syz.1.1252': attribute type 29 has an invalid length. [ 232.588350][ T8805] netlink: 'syz.1.1252': attribute type 29 has an invalid length. [ 233.697296][ T8837] netlink: 'syz.1.1266': attribute type 29 has an invalid length. [ 235.442588][ T8870] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1280'. [ 235.497850][ T8874] validate_nla: 2 callbacks suppressed [ 235.497868][ T8874] netlink: 'syz.0.1279': attribute type 29 has an invalid length. [ 235.498849][ T8874] netlink: 'syz.0.1279': attribute type 29 has an invalid length. [ 235.499554][ T8874] netlink: 'syz.0.1279': attribute type 29 has an invalid length. [ 239.339970][ T8908] netlink: 'syz.2.1295': attribute type 29 has an invalid length. [ 239.340854][ T8908] netlink: 'syz.2.1295': attribute type 29 has an invalid length. [ 239.341405][ T8908] netlink: 'syz.2.1295': attribute type 29 has an invalid length. [ 246.305753][ T8935] binder: 8934:8935 ioctl c0306201 0 returned -14 [ 246.684699][ T8942] netlink: 'syz.4.1306': attribute type 29 has an invalid length. [ 246.728810][ T8942] netlink: 'syz.4.1306': attribute type 29 has an invalid length. [ 246.734525][ T8942] netlink: 'syz.4.1306': attribute type 29 has an invalid length. [ 249.499690][ T8979] binder: 8974:8979 ioctl c0306201 0 returned -14 [ 249.599982][ T8983] netlink: 'syz.0.1319': attribute type 29 has an invalid length. [ 249.602400][ T8983] netlink: 'syz.0.1319': attribute type 29 has an invalid length. [ 249.602967][ T8983] netlink: 'syz.0.1319': attribute type 29 has an invalid length. [ 251.506034][ T9015] binder: 9014:9015 ioctl c0306201 0 returned -14 [ 251.715282][ T9023] netlink: 'syz.0.1333': attribute type 29 has an invalid length. [ 251.718656][ T9023] netlink: 'syz.0.1333': attribute type 29 has an invalid length. [ 251.722048][ T9023] netlink: 'syz.0.1333': attribute type 29 has an invalid length. [ 253.468007][ T9054] binder: 9053:9054 ioctl c0306201 0 returned -14 [ 254.931742][ T9073] netlink: 'syz.1.1348': attribute type 29 has an invalid length. [ 254.939830][ T9073] netlink: 'syz.1.1348': attribute type 29 has an invalid length. [ 254.941985][ T9073] netlink: 'syz.1.1348': attribute type 29 has an invalid length. [ 255.988628][ T9089] binder: 9088:9089 ioctl c0306201 0 returned -14 [ 255.995924][ T9089] binder: 9088:9089 ioctl c0306201 0 returned -14 [ 256.040791][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.040857][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.394707][ T9123] netlink: 'syz.3.1365': attribute type 29 has an invalid length. [ 258.402176][ T9123] netlink: 'syz.3.1365': attribute type 29 has an invalid length. [ 258.403630][ T9123] netlink: 'syz.3.1365': attribute type 29 has an invalid length. [ 258.623218][ T9125] binder: 9124:9125 ioctl c0306201 0 returned -14 [ 258.627222][ T9125] binder: 9124:9125 ioctl c0306201 0 returned -14 [ 259.859022][ T9156] netlink: 'syz.0.1384': attribute type 29 has an invalid length. [ 259.861623][ T9156] netlink: 'syz.0.1384': attribute type 29 has an invalid length. [ 259.862154][ T9156] netlink: 'syz.0.1384': attribute type 29 has an invalid length. [ 260.108921][ T9159] binder: 9158:9159 ioctl c0306201 0 returned -14 [ 260.118626][ T9159] binder: 9158:9159 ioctl c0306201 0 returned -14 [ 260.274119][ T9162] binder: BINDER_SET_CONTEXT_MGR already set [ 260.274132][ T9162] binder: 9160:9162 ioctl 4018620d 200000000040 returned -16 [ 261.916419][ T9199] binder: 9198:9199 ioctl c0306201 0 returned -14 [ 262.833738][ T9205] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1401'. [ 262.915441][ T9208] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1403'. [ 263.105127][ T9211] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1403'. [ 263.105425][ T9215] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1403'. [ 263.406183][ T9230] binder: 9229:9230 ioctl c0306201 0 returned -14 [ 264.696940][ T9249] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1418'. [ 264.719602][ T9249] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1418'. [ 264.737090][ T9249] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1418'. [ 264.848677][ T9253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1420'. [ 265.056356][ T9263] binder: 9260:9263 ioctl c0306201 0 returned -14 [ 265.539522][ T9284] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1433'. [ 265.542146][ T9284] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1433'. [ 266.407812][ T9291] binder: 9289:9291 ioctl c0306201 0 returned -14 [ 268.299630][ T9335] tmpfs: Bad value for 'mpol' [ 268.842150][ T9352] binder: BINDER_SET_CONTEXT_MGR already set [ 268.842165][ T9352] binder: 9344:9352 ioctl 4018620d 200000000040 returned -16 [ 270.701946][ T9382] block nbd0: not configured, cannot reconfigure [ 270.724385][ C1] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 270.786183][ T9] IPVS: starting estimator thread 0... [ 270.894365][ T9386] IPVS: using max 9 ests per chain, 21600 per kthread [ 270.965670][ T9390] __nla_validate_parse: 2 callbacks suppressed [ 270.965689][ T9390] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1477'. [ 270.965718][ T9390] netlink: 'syz.3.1477': attribute type 7 has an invalid length. [ 270.965730][ T9390] netlink: 'syz.3.1477': attribute type 8 has an invalid length. [ 270.965742][ T9390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1477'. [ 271.081915][ T9390] gretap0: entered promiscuous mode [ 271.134927][ T9390] gretap0: left promiscuous mode [ 271.468299][ T9400] fuse: Bad value for 'fd' [ 272.337864][ T9425] fuse: Bad value for 'fd' [ 272.508485][ T9429] tipc: Started in network mode [ 272.508514][ T9429] tipc: Node identity 9ee887bdd26d, cluster identity 4711 [ 272.537342][ T9429] tipc: Enabled bearer , priority 0 [ 272.544852][ T9429] syzkaller0: MTU too low for tipc bearer [ 272.544873][ T9429] tipc: Disabling bearer [ 274.197920][ T9448] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 274.198019][ C1] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 274.198191][ T9448] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 274.198255][ C1] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 275.758035][ T36] audit: type=1800 audit(1786495028.947:9): pid=9484 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1515" name="memory_backed" dev="configfs" ino=20414 res=0 errno=0 [ 275.758083][ T36] audit: type=1800 audit(1786495028.947:10): pid=9484 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1515" name="power" dev="configfs" ino=20416 res=0 errno=0 [ 277.075789][ T36] audit: type=1800 audit(1786495030.257:11): pid=9514 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1529" name="memory_backed" dev="configfs" ino=19164 res=0 errno=0 [ 277.075842][ T36] audit: type=1800 audit(1786495030.257:12): pid=9514 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1529" name="power" dev="configfs" ino=19167 res=0 errno=0 [ 281.182413][ T9545] fuse: Bad value for 'fd' [ 281.335549][ T36] audit: type=1800 audit(1786495034.517:13): pid=9547 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1543" name="memory_backed" dev="configfs" ino=19204 res=0 errno=0 [ 281.335595][ T36] audit: type=1800 audit(1786495034.517:14): pid=9547 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1543" name="power" dev="configfs" ino=19207 res=0 errno=0 [ 292.109891][ T9569] fuse: Bad value for 'fd' [ 292.230234][ T9574] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1555'. [ 292.773540][ T5597] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 292.828864][ T5597] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 292.848839][ T5597] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 292.861953][ T5597] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 292.881445][ T5597] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 293.748065][ T9608] fuse: Bad value for 'fd' [ 294.995116][ T5597] Bluetooth: hci5: command tx timeout [ 296.366144][ T9584] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.367576][ T9584] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.368046][ T9584] bridge_slave_0: entered allmulticast mode [ 296.371995][ T9584] bridge_slave_0: entered promiscuous mode [ 296.404348][ T9584] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.404414][ T9584] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.404556][ T9584] bridge_slave_1: entered allmulticast mode [ 296.408370][ T9584] bridge_slave_1: entered promiscuous mode [ 296.580317][ T9584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.593941][ T9584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.681778][ T9584] team0: Port device team_slave_0 added [ 296.692250][ T9584] team0: Port device team_slave_1 added [ 296.758358][ T9584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.758376][ T9584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.758399][ T9584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.761365][ T9584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.761380][ T9584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.761403][ T9584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.044390][ T5597] Bluetooth: hci5: command tx timeout [ 297.558205][ T6371] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.680440][ T9584] hsr_slave_0: entered promiscuous mode [ 297.683376][ T9584] hsr_slave_1: entered promiscuous mode [ 297.699615][ T9584] debugfs: 'hsr0' already exists in 'hsr' [ 297.699654][ T9584] Cannot create hsr debugfs directory [ 298.706637][ T6371] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.132790][ T5597] Bluetooth: hci5: command tx timeout [ 301.443256][ T5597] Bluetooth: hci5: command tx timeout [ 301.661251][ T6371] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.210700][ T9766] process 'syz.0.1622' launched './file0' with NULL argv: empty string added [ 303.593454][ T6371] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.577433][ T9584] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 304.695282][ T9584] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 304.699335][ T9584] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 304.763508][ T9584] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 304.775862][ T9584] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 304.831287][ T9584] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 304.866436][ T9584] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 304.930229][ T9584] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 307.642003][ T9862] binder: BINDER_SET_CONTEXT_MGR already set [ 307.642017][ T9862] binder: 9861:9862 ioctl 4018620d 200000000040 returned -16 [ 307.959975][ T6371] bridge_slave_1: left allmulticast mode [ 307.960189][ T6371] bridge_slave_1: left promiscuous mode [ 308.007837][ T6371] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.171297][ T6371] bridge_slave_0: left allmulticast mode [ 309.171351][ T6371] bridge_slave_0: left promiscuous mode [ 309.171574][ T6371] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.224958][ T6371] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.286855][ T6371] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.343510][ T6371] bond0 (unregistering): Released all slaves [ 315.577834][ T5242] 8021q: adding VLAN 0 to HW filter on device eth1 [ 317.101122][ T9584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.273540][ T9584] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.341805][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.342045][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.430003][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.430173][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.491332][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.491374][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.643286][T10033] fuse: Bad value for 'fd' [ 319.508862][T10076] fuse: Bad value for 'fd' [ 319.671952][T10080] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1726'. [ 320.443898][T10099] netlink: 'syz.2.1734': attribute type 29 has an invalid length. [ 320.793814][ T5242] 8021q: adding VLAN 0 to HW filter on device eth2 [ 320.816533][T10101] netlink: 'syz.2.1734': attribute type 29 has an invalid length. [ 320.849490][ T9584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.771368][T10167] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1753'. [ 323.600198][ T5242] 8021q: adding VLAN 0 to HW filter on device eth3 [ 323.627602][ T9584] veth0_vlan: entered promiscuous mode [ 324.038388][ T9584] veth1_vlan: entered promiscuous mode [ 324.317169][ T9584] veth0_macvtap: entered promiscuous mode [ 324.391152][ T9584] veth1_macvtap: entered promiscuous mode [ 324.610913][ T9584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.927969][ T6371] hsr_slave_0: left promiscuous mode [ 324.967037][ T6371] hsr_slave_1: left promiscuous mode [ 324.970532][ T6371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.020269][ T6371] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.171995][ T6371] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.172021][ T6371] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.887498][ T6371] veth1_macvtap: left promiscuous mode [ 325.887858][ T6371] veth0_macvtap: left promiscuous mode [ 325.888190][ T6371] veth1_vlan: left promiscuous mode [ 325.891533][ T6371] veth0_vlan: left promiscuous mode [ 327.647449][ T6371] team0 (unregistering): Port device team_slave_1 removed [ 327.727624][ T6371] team0 (unregistering): Port device team_slave_0 removed [ 328.218967][ T9584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.236619][ T5242] 8021q: adding VLAN 0 to HW filter on device eth4 [ 328.935587][ T3293] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.274208][ T66] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.275004][ T66] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.342486][ T66] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.026925][ T1186] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.026959][ T1186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.400729][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.400750][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.625668][T10326] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1808'. [ 333.759553][ T36] audit: type=1800 audit(1786495086.937:15): pid=10329 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.1554" name="memory_backed" dev="configfs" ino=23716 res=0 errno=0 [ 333.761506][ T36] audit: type=1800 audit(1786495086.947:16): pid=10329 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.1554" name="power" dev="configfs" ino=23719 res=0 errno=0 [ 335.670704][ T36] audit: type=1800 audit(1786495088.857:17): pid=10367 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.1825" name="memory_backed" dev="configfs" ino=23742 res=0 errno=0 [ 335.705153][ T36] audit: type=1800 audit(1786495088.897:18): pid=10367 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.1825" name="power" dev="configfs" ino=23745 res=0 errno=0 [ 335.752998][T10365] syzkaller0: entered promiscuous mode [ 335.753022][T10365] syzkaller0: entered allmulticast mode [ 337.946469][ T36] audit: type=1800 audit(1786495091.107:19): pid=10402 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1838" name="memory_backed" dev="configfs" ino=23301 res=0 errno=0 [ 338.022537][ T36] audit: type=1800 audit(1786495091.207:20): pid=10402 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1838" name="power" dev="configfs" ino=23304 res=0 errno=0 [ 340.184468][ T36] audit: type=1800 audit(1786495093.367:21): pid=10454 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1854" name="memory_backed" dev="configfs" ino=23877 res=0 errno=0 [ 340.192704][ T36] audit: type=1800 audit(1786495093.377:22): pid=10454 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1854" name="power" dev="configfs" ino=23880 res=0 errno=0 [ 343.912155][ T36] audit: type=1800 audit(1786495097.097:23): pid=10511 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1869" name="memory_backed" dev="configfs" ino=23942 res=0 errno=0 [ 343.932509][T10513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1871'. [ 343.936408][ T36] audit: type=1800 audit(1786495097.127:24): pid=10511 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1869" name="power" dev="configfs" ino=23445 res=0 errno=0 [ 344.177299][T10513] bond0: Unable to set down delay as MII monitoring is disabled [ 344.325383][T10532] fuse: Unknown parameter '0xffffffffffffffff' [ 346.339927][ T36] audit: type=1800 audit(1786495099.527:25): pid=10555 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.1884" name="memory_backed" dev="configfs" ino=23521 res=0 errno=0 [ 346.341574][ T36] audit: type=1800 audit(1786495099.527:26): pid=10555 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.1884" name="power" dev="configfs" ino=23523 res=0 errno=0 [ 348.497738][ T36] audit: type=1800 audit(1786495101.687:27): pid=10601 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1895" name="memory_backed" dev="configfs" ino=24599 res=0 errno=0 [ 348.502281][ T36] audit: type=1800 audit(1786495101.687:28): pid=10601 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1895" name="power" dev="configfs" ino=24601 res=0 errno=0 [ 348.975545][T10620] fuse: Unknown parameter '0xffffffffffffffff' [ 349.882239][T10635] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 349.882345][ C1] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 349.882516][T10635] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 349.882585][ C1] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 351.367490][T10654] binder_alloc: 10653: binder_alloc_buf, no vma [ 351.410129][ T36] audit: type=1800 audit(1786495104.597:29): pid=10656 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.1909" name="power" dev="configfs" ino=24110 res=0 errno=0 [ 351.500933][ T5597] Bluetooth: unknown link type 244 [ 351.500996][ T5597] Bluetooth: hci4: connection err: -111 [ 351.901344][T10675] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 351.901488][ C1] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 351.901716][T10675] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 351.901788][ C1] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 353.541317][T10690] binder_alloc: 10689: binder_alloc_buf, no vma [ 354.200782][ T36] audit: type=1800 audit(1786495107.387:30): pid=10699 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1923" name="power" dev="configfs" ino=24710 res=0 errno=0 [ 355.240716][T10706] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 355.240821][ C1] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 355.240988][T10706] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 355.241060][ C1] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 355.809507][T10724] binder_alloc: 10723: binder_alloc_buf, no vma [ 356.233666][ T36] audit: type=1800 audit(1786495109.417:31): pid=10731 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1939" name="power" dev="configfs" ino=24768 res=0 errno=0 [ 358.178057][ T5597] Bluetooth: hci5: link tx timeout [ 358.185282][ T5597] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 360.244321][ T5594] Bluetooth: hci5: command 0x0406 tx timeout [ 366.461130][T10845] binder: BINDER_SET_CONTEXT_MGR already set [ 366.461147][T10845] binder: 10844:10845 ioctl 4018620d 200000000040 returned -16 [ 368.678805][T10897] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2004'. [ 368.678854][T10897] block nbd0: not configured, cannot reconfigure [ 370.360529][T10930] block nbd0: not configured, cannot reconfigure [ 370.956883][T10949] netlink: 'syz.0.2024': attribute type 34 has an invalid length. [ 370.956906][T10949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2024'. [ 371.058826][T10949] bond1: option lacp_strict: invalid value (64) [ 371.118819][T10949] bond1 (unregistering): Released all slaves [ 371.349137][ T36] audit: type=1800 audit(1786495124.537:32): pid=10959 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.2028" name="memory_backed" dev="configfs" ino=24570 res=0 errno=0 [ 371.374989][ T36] audit: type=1800 audit(1786495124.537:33): pid=10959 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.2028" name="power" dev="configfs" ino=24573 res=0 errno=0 [ 372.823056][T10974] syzkaller0: entered promiscuous mode [ 372.823082][T10974] syzkaller0: entered allmulticast mode [ 372.848474][T10974] tipc: Started in network mode [ 372.848507][T10974] tipc: Node identity 661472e9971d, cluster identity 4711 [ 372.911598][T10974] tipc: Enabled bearer , priority 0 [ 372.973490][T10974] tipc: Resetting bearer [ 373.247463][T10973] tipc: Resetting bearer [ 374.087430][ T36] audit: type=1800 audit(1786495127.277:34): pid=10992 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.2039" name="memory_backed" dev="configfs" ino=25265 res=0 errno=0 [ 374.115049][ T36] audit: type=1800 audit(1786495127.307:35): pid=10992 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.2039" name="power" dev="configfs" ino=25268 res=0 errno=0 [ 374.297594][T10973] tipc: Disabling bearer [ 374.827150][ T9] tipc: Node number set to 4043928297 [ 376.150708][ T36] audit: type=1800 audit(1786495129.327:36): pid=11030 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.2051" name="memory_backed" dev="configfs" ino=25694 res=0 errno=0 [ 376.151107][ T36] audit: type=1800 audit(1786495129.337:37): pid=11030 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.2051" name="power" dev="configfs" ino=25697 res=0 errno=0 [ 376.541890][T11049] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2060'. [ 377.963607][ T36] audit: type=1800 audit(1786495131.147:38): pid=11066 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.2067" name="memory_backed" dev="configfs" ino=25749 res=0 errno=0 [ 377.982747][ T36] audit: type=1800 audit(1786495131.167:39): pid=11066 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.2067" name="power" dev="configfs" ino=25754 res=0 errno=0 [ 378.894783][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.894860][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.951519][ T36] audit: type=1800 audit(1786495133.137:40): pid=11107 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.2078" name="memory_backed" dev="configfs" ino=25429 res=0 errno=0 [ 379.984664][ T36] audit: type=1800 audit(1786495133.177:41): pid=11107 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.2078" name="power" dev="configfs" ino=25432 res=0 errno=0 [ 380.668100][T11133] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2088'. [ 380.668122][T11133] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2088'. [ 381.448379][ T36] audit: type=1800 audit(1786495134.627:42): pid=11146 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.2094" name="memory_backed" dev="configfs" ino=25859 res=0 errno=0 [ 381.453880][ T36] audit: type=1800 audit(1786495134.637:43): pid=11146 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.2094" name="power" dev="configfs" ino=25862 res=0 errno=0 [ 382.832808][T11167] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2102'. [ 386.067129][T11232] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 386.068308][ C0] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 386.068496][T11232] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 386.068572][ C0] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 389.289921][T11293] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 389.290020][ C1] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 389.290187][T11293] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 389.290260][ C1] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 389.636309][T11303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2157'. [ 389.636351][T11303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2157'. [ 392.973164][T11343] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 392.973252][ C0] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 392.973410][T11343] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 392.973476][ C0] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 393.479306][T11358] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 393.479836][T11358] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 393.606986][T11360] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2179'. [ 394.437033][T11366] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2181'. [ 394.637120][T11360] 8021q: adding VLAN 0 to HW filter on device bond1 [ 394.846721][T11369] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 397.240250][T11418] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2198'. [ 397.793348][T11437] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2204'. [ 397.805636][T11437] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2204'. [ 400.753135][T11465] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2215'. [ 401.087788][T11469] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2217'. [ 401.090183][T11469] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2217'. [ 401.270744][T11475] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2220'. [ 401.673388][T11491] syz_tun: entered allmulticast mode [ 401.844379][ T5594] Bluetooth: hci4: command 0x0406 tx timeout [ 401.897870][T11495] dvmrp8: entered allmulticast mode [ 401.970174][T11488] syz_tun: left allmulticast mode [ 402.947210][T11509] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2231'. [ 403.695227][T11512] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2231'. [ 404.416398][T11528] dvmrp8: entered allmulticast mode [ 404.614029][T11542] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2244'. [ 405.114750][T11549] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2244'. [ 408.598952][T11596] fuse: Unknown parameter 'user_id00000000000000000000' [ 408.814841][ T36] audit: type=1800 audit(1786495161.997:44): pid=11603 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.2267" name="memory_backed" dev="configfs" ino=27355 res=0 errno=0 [ 408.849586][ T36] audit: type=1800 audit(1786495162.007:45): pid=11603 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.2267" name="power" dev="configfs" ino=27361 res=0 errno=0 [ 408.931736][T11608] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 408.931847][ C0] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 408.932003][T11608] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 408.932069][ C0] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 409.119778][T11617] fuse: Unknown parameter '0x0000000000000003' [ 410.059334][T11626] fuse: Bad value for 'fd' [ 411.074076][ T36] audit: type=1800 audit(1786495164.257:46): pid=11632 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.2281" name="memory_backed" dev="configfs" ino=27407 res=0 errno=0 [ 411.095895][ T36] audit: type=1800 audit(1786495164.267:47): pid=11632 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.2281" name="power" dev="configfs" ino=27410 res=0 errno=0 [ 411.373540][T11635] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2282'. [ 412.404083][T11651] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2289'. [ 412.404105][T11651] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2289'. [ 412.404130][T11651] netlink: 'syz.5.2289': attribute type 5 has an invalid length. [ 412.532302][T11655] fuse: Unknown parameter '0x0000000000000003' [ 412.602078][ T36] audit: type=1800 audit(1786495165.787:48): pid=11657 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.2293" name="memory_backed" dev="configfs" ino=26543 res=0 errno=0 [ 412.633773][ T36] audit: type=1800 audit(1786495165.817:49): pid=11657 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.2293" name="power" dev="configfs" ino=26546 res=0 errno=0 [ 412.758465][T11662] fuse: Bad value for 'fd' [ 414.558504][T11688] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2297'. [ 414.592792][T11690] fuse: Bad value for 'fd' [ 415.622940][T11716] fuse: Unknown parameter '0x0000000000000003' [ 415.670050][T11714] syzkaller0: entered promiscuous mode [ 415.670075][T11714] syzkaller0: entered allmulticast mode [ 415.807688][T11714] tipc: Enabled bearer , priority 0 [ 415.838728][T11713] tipc: Resetting bearer [ 416.085894][T11713] tipc: Disabling bearer [ 416.373596][T11744] fuse: Unknown parameter '0x0000000000000003' [ 417.964990][T11775] fuse: Unknown parameter '0x0000000000000003' [ 418.576223][T11803] fuse: Unknown parameter '0x0000000000000003' [ 420.773782][T11828] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 420.773881][ C1] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 420.774116][T11828] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 420.774289][ C1] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 421.388133][T11842] fuse: Unknown parameter '0x0000000000000003' [ 421.929576][T11866] nbd: must specify a device to reconfigure [ 424.599334][T11906] 9p: Bad value for 'wfdno' [ 425.492638][T11937] 9p: Bad value for 'wfdno' [ 427.091101][T11977] 9p: Bad value for 'wfdno' [ 428.395849][T11972] syzkaller0: entered promiscuous mode [ 428.395877][T11972] syzkaller0: entered allmulticast mode [ 430.459658][T12045] random: crng reseeded on system resumption [ 434.595059][ T6635] IPVS: starting estimator thread 0... [ 434.685283][T12106] IPVS: using max 9 ests per chain, 21600 per kthread [ 437.230862][T12154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2488'. [ 440.449402][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.449471][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.582598][T12193] 9p: Bad value for 'rfdno' [ 442.293937][T12199] 9p: Bad value for 'rfdno' [ 443.291654][ T36] audit: type=1400 audit(1786495196.427:50): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=12208 comm="syz.0.2510" src=65532 dest=20002 netif=wpan0 [ 450.697292][ T5597] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 465.097313][T12404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2566'. [ 465.097336][T12404] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2566'. [ 469.460982][ T5594] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 469.501649][ T5594] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 469.543719][ T5594] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 469.564064][ T5594] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 469.582927][ T5594] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 471.608338][T12444] vicodec vicodec.0: Removing vicodec [ 471.930037][ T5597] Bluetooth: hci1: command tx timeout [ 472.497198][ T5594] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 472.555454][ T5594] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 472.569425][ T5594] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 472.572213][ T5594] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 472.575926][ T5594] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 474.384288][ T5597] Bluetooth: hci1: command tx timeout [ 474.725519][ T5597] Bluetooth: hci6: command tx timeout [ 474.820347][T12471] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2579'. [ 476.484331][ T5597] Bluetooth: hci1: command tx timeout [ 476.814496][ T5597] Bluetooth: hci6: command tx timeout [ 478.621512][ T5597] Bluetooth: hci1: command tx timeout [ 478.907201][ T5597] Bluetooth: hci6: command tx timeout [ 479.709364][ T5597] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 480.626918][T12528] Bluetooth: MGMT ver 1.23 [ 480.973659][ T5597] Bluetooth: hci6: command tx timeout [ 494.070543][T12618] netlink: 'syz.0.2626': attribute type 29 has an invalid length. [ 497.676014][ T6371] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.800301][ T5721] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 500.995481][T12629] syzkaller0: entered promiscuous mode [ 500.995510][T12629] syzkaller0: entered allmulticast mode [ 501.234348][ T5721] usb 5-1: device descriptor read/64, error -71 [ 501.780321][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.780389][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.094334][ T5721] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 505.200435][T12666] netlink: 'syz.4.2642': attribute type 29 has an invalid length. [ 513.627272][ T5594] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 513.714500][ T5594] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 513.721095][ T5594] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 513.722475][ T5594] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 513.723730][ T5594] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 516.342067][ T5597] Bluetooth: hci3: command tx timeout [ 518.404394][ T5597] Bluetooth: hci3: command tx timeout [ 520.523991][ T5594] Bluetooth: hci3: command tx timeout [ 520.565673][ T5594] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 520.616848][ T5594] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 520.649126][ T5594] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 520.652843][ T5594] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 520.753328][ T5594] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 522.573490][ T5594] Bluetooth: hci3: command tx timeout [ 522.970322][ T5594] Bluetooth: hci4: command tx timeout [ 524.465820][ T5594] Bluetooth: hci5: command 0x0406 tx timeout [ 525.070334][ T5594] Bluetooth: hci4: command tx timeout [ 527.124479][ T5597] Bluetooth: hci4: command tx timeout [ 529.204321][ T5597] Bluetooth: hci4: command tx timeout [ 531.063151][ T5594] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 531.117219][ T5594] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 531.213498][ T5594] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 531.265329][ T5594] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 531.266057][ T5594] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 533.488993][ T5594] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 533.530770][ T5594] Bluetooth: hci7: command tx timeout [ 533.534089][ T5594] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 533.580803][ T5594] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 533.599321][ T5594] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 533.603393][ T5594] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 535.607690][ T5594] Bluetooth: hci7: command tx timeout [ 535.765246][ T5594] Bluetooth: hci8: command tx timeout [ 537.703460][ T5594] Bluetooth: hci7: command tx timeout [ 537.866741][ T5594] Bluetooth: hci8: command tx timeout [ 539.764270][ T5594] Bluetooth: hci7: command tx timeout [ 539.924243][ T5594] Bluetooth: hci8: command tx timeout [ 540.546873][T12786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2674'. [ 540.546928][T12786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2674'. [ 542.005155][ T5594] Bluetooth: hci8: command tx timeout [ 563.217013][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.217081][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 567.883873][ T5597] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 568.100054][ T5597] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 568.133901][ T5597] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 568.198517][ T5597] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 568.480771][ T5597] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 570.549723][ T5597] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 570.705239][ T5597] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 570.724847][ T5597] Bluetooth: hci9: command tx timeout [ 570.726222][T12763] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 570.727437][T12763] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 570.728263][T12763] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 572.804253][ T5594] Bluetooth: hci9: command tx timeout [ 572.884308][ T5594] Bluetooth: hci10: command tx timeout [ 574.884231][ T5594] Bluetooth: hci9: command tx timeout [ 574.964279][ T5594] Bluetooth: hci10: command tx timeout [ 576.964461][ T5594] Bluetooth: hci9: command tx timeout [ 577.054416][ T5594] Bluetooth: hci10: command tx timeout [ 579.141245][ T5594] Bluetooth: hci10: command tx timeout [ 582.838480][T12763] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 582.905575][T12763] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 582.908858][T12763] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 582.910606][T12763] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 582.912735][T12763] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 585.124522][ T5594] Bluetooth: hci11: command tx timeout [ 587.214533][ T5594] Bluetooth: hci11: command tx timeout [ 589.397449][ T5594] Bluetooth: hci11: command tx timeout [ 590.539931][T12763] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 590.574528][T12763] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 590.575862][T12763] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 590.577207][T12763] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 590.580072][T12763] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 591.444279][ T5594] Bluetooth: hci11: command tx timeout [ 592.793337][T12763] Bluetooth: hci12: command tx timeout [ 592.817627][ T5597] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 592.887182][ T5597] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 592.909592][ T5597] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 592.928877][ T5597] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 592.938216][ T5597] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 594.952125][ T5594] Bluetooth: hci12: command tx timeout [ 595.234474][ T5594] Bluetooth: hci13: command tx timeout [ 596.032002][ T5594] Bluetooth: hci1: command 0x0406 tx timeout [ 596.974252][ T5594] Bluetooth: hci12: command tx timeout [ 597.299610][ T5594] Bluetooth: hci13: command tx timeout [ 599.056792][ T5597] Bluetooth: hci12: command tx timeout [ 599.364285][ T5594] Bluetooth: hci13: command tx timeout [ 601.444267][ T5594] Bluetooth: hci13: command tx timeout [ 624.660005][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.660077][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 632.075606][ T5597] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 632.113891][ T5597] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 632.127241][ T5597] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 632.202662][ T5597] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 632.222950][ T5597] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 632.968894][ T5594] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 632.980367][ T5594] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 632.981663][ T5594] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 633.006832][ T5594] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 633.009538][ T5594] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 634.398342][ T5597] Bluetooth: hci14: command tx timeout [ 635.124277][ T5594] Bluetooth: hci15: command tx timeout [ 636.444918][ T5594] Bluetooth: hci14: command tx timeout [ 637.044320][ T5594] Bluetooth: hci3: command 0x0406 tx timeout [ 637.204364][ T5594] Bluetooth: hci15: command tx timeout [ 638.484262][ T5594] Bluetooth: hci14: command tx timeout [ 639.284261][ T5597] Bluetooth: hci15: command tx timeout [ 640.564303][ T5597] Bluetooth: hci14: command tx timeout [ 641.376203][ T5597] Bluetooth: hci15: command tx timeout [ 644.786275][ T5594] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 644.832947][ T5594] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 644.841807][ T5594] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 644.853795][ T5594] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 644.861523][ T5594] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 646.965660][ T5597] Bluetooth: hci16: command tx timeout [ 647.219378][ T5597] Bluetooth: hci4: command 0x0406 tx timeout [ 649.044301][ T5597] Bluetooth: hci16: command tx timeout [ 649.590432][T12763] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 649.611893][T12763] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 649.614284][T12763] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 649.939574][T12763] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 649.961829][T12763] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 651.131933][ T5597] Bluetooth: hci16: command tx timeout [ 652.244440][ T5597] Bluetooth: hci17: command tx timeout [ 652.381934][ T5594] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 652.411619][ T5594] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 652.424748][ T5594] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 652.429798][ T5594] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 652.430519][ T5594] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 653.204460][ T5597] Bluetooth: hci16: command tx timeout [ 654.334425][ T5597] Bluetooth: hci17: command tx timeout [ 654.644341][ T5597] Bluetooth: hci18: command tx timeout [ 656.004414][ T37] INFO: task kworker/u8:20:6026 blocked for more than 143 seconds. [ 656.004442][ T37] Tainted: G L syzkaller #0 [ 656.004453][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 656.004462][ T37] task:kworker/u8:20 state:D stack:20816 pid:6026 tgid:6026 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 656.004514][ T37] Workqueue: events_unbound linkwatch_event [ 656.004688][ T37] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 656.004726][ T37] [ 656.004798][ T37] __schedule+0x16dc/0x5500 [ 656.004981][ T37] ? __pfx___schedule+0x10/0x10 [ 656.005052][ T37] rt_mutex_schedule+0x76/0xf0 [ 656.005144][ T37] rt_mutex_slowlock_block+0x55c/0x680 [ 656.005208][ T37] rt_mutex_slowlock+0x2d4/0x780 [ 656.005232][ T37] ? rt_mutex_slowlock+0x1f2/0x780 [ 656.005255][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 656.005287][ T37] ? linkwatch_event+0xe/0x60 [ 656.005325][ T37] ? linkwatch_event+0xe/0x60 [ 656.005346][ T37] mutex_lock_nested+0x168/0x1d0 [ 656.005365][ T37] ? rcu_is_watching+0x15/0xb0 [ 656.005427][ T37] ? process_scheduled_works+0xa20/0x14e0 [ 656.005482][ T37] linkwatch_event+0xe/0x60 [ 656.005506][ T37] process_scheduled_works+0xa8e/0x14e0 [ 656.005556][ T37] ? __pfx_process_scheduled_works+0x10/0x10 [ 656.005584][ T37] ? assign_work+0x3cf/0x5d0 [ 656.005611][ T37] worker_thread+0xa47/0xfb0 [ 656.005661][ T37] kthread+0x388/0x470 [ 656.005713][ T37] ? __pfx_worker_thread+0x10/0x10 [ 656.005734][ T37] ? __pfx_kthread+0x10/0x10 [ 656.005761][ T37] ret_from_fork+0x514/0xb70 [ 656.005873][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 656.005901][ T37] ? __switch_to+0xc89/0x1420 [ 656.005977][ T37] ? __pfx_kthread+0x10/0x10 [ 656.006005][ T37] ret_from_fork_asm+0x1a/0x30 [ 656.006065][ T37] [ 656.006102][ T37] INFO: task kworker/u8:33:6366 blocked for more than 143 seconds. [ 656.006120][ T37] Tainted: G L syzkaller #0 [ 656.006131][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 656.006139][ T37] task:kworker/u8:33 state:D stack:20464 pid:6366 tgid:6366 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 656.006189][ T37] Workqueue: ipv6_addrconf addrconf_dad_work [ 656.006285][ T37] Call Trace: [ 656.006291][ T37] [ 656.006303][ T37] __schedule+0x16dc/0x5500 [ 656.006332][ T37] ? lock_acquire+0x106/0x350 [ 656.006391][ T37] ? __pfx___schedule+0x10/0x10 [ 656.006427][ T37] rt_mutex_schedule+0x76/0xf0 [ 656.006446][ T37] rt_mutex_slowlock_block+0x55c/0x680 [ 656.006482][ T37] rt_mutex_slowlock+0x2d4/0x780 [ 656.006506][ T37] ? rt_mutex_slowlock+0x1f2/0x780 [ 656.006528][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 656.006548][ T37] ? ret_from_fork+0x514/0xb70 [ 656.006595][ T37] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 656.006626][ T37] ? addrconf_dad_work+0x123/0x16e0 [ 656.006646][ T37] mutex_lock_nested+0x168/0x1d0 [ 656.006667][ T37] ? addrconf_dad_work+0x123/0x16e0 [ 656.006692][ T37] addrconf_dad_work+0x123/0x16e0 [ 656.006714][ T37] ? do_raw_spin_lock+0x12b/0x2f0 [ 656.006776][ T37] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 656.006805][ T37] ? __pfx_addrconf_dad_work+0x10/0x10 [ 656.006827][ T37] ? process_scheduled_works+0xa20/0x14e0 [ 656.006869][ T37] ? rcu_is_watching+0x15/0xb0 [ 656.006895][ T37] ? process_scheduled_works+0xa20/0x14e0 [ 656.006916][ T37] process_scheduled_works+0xa8e/0x14e0 [ 656.006966][ T37] ? __pfx_process_scheduled_works+0x10/0x10 [ 656.006994][ T37] ? assign_work+0x3cf/0x5d0 [ 656.007021][ T37] worker_thread+0xa47/0xfb0 [ 656.007070][ T37] kthread+0x388/0x470 [ 656.007097][ T37] ? __pfx_worker_thread+0x10/0x10 [ 656.007118][ T37] ? __pfx_kthread+0x10/0x10 [ 656.007146][ T37] ret_from_fork+0x514/0xb70 [ 656.007175][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 656.007202][ T37] ? __switch_to+0xc89/0x1420 [ 656.007228][ T37] ? __pfx_kthread+0x10/0x10 [ 656.007256][ T37] ret_from_fork_asm+0x1a/0x30 [ 656.007301][ T37] [ 656.007310][ T37] INFO: task kworker/u8:36:6371 blocked for more than 143 seconds. [ 656.007326][ T37] Tainted: G L syzkaller #0 [ 656.007336][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 656.007345][ T37] task:kworker/u8:36 state:D stack:20848 pid:6371 tgid:6371 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 656.007393][ T37] Workqueue: netns cleanup_net [ 656.007454][ T37] Call Trace: [ 656.007460][ T37] [ 656.007471][ T37] __schedule+0x16dc/0x5500 [ 656.007499][ T37] ? unwind_next_frame+0x8f/0x2550 [ 656.007574][ T37] ? __pfx___schedule+0x10/0x10 [ 656.007614][ T37] rt_mutex_schedule+0x76/0xf0 [ 656.007634][ T37] rt_mutex_slowlock_block+0x55c/0x680 [ 656.007670][ T37] rt_mutex_slowlock+0x2d4/0x780 [ 656.007695][ T37] ? rt_mutex_slowlock+0x1f2/0x780 [ 656.007717][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 656.007755][ T37] ? rtnl_net_dev_lock+0x257/0x2f0 [ 656.007807][ T37] ? rtnl_net_dev_lock+0x257/0x2f0 [ 656.007824][ T37] mutex_lock_nested+0x168/0x1d0 [ 656.007844][ T37] ? rtnl_net_dev_lock+0x36/0x2f0 [ 656.007871][ T37] ? rtnl_net_dev_lock+0x36/0x2f0 [ 656.007889][ T37] rtnl_net_dev_lock+0x257/0x2f0 [ 656.007912][ T37] [ 656.007912][ T37] unregister_netdevice_notifier_dev_net+0x96/0x450 [ 656.007934][ T37] ? nsim_destroy+0xbc/0x800 [ 656.008046][ T37] ? __pfx_unregister_netdevice_notifier_dev_net+0x10/0x10 [ 656.008069][ T37] ? __pfx_mntput_no_expire_slowpath+0x10/0x10 [ 656.008171][ T37] ? mntput_no_expire+0x1c/0x1c0 [ 656.008197][ T37] ? rcu_is_watching+0x15/0xb0 [ 656.008217][ T37] ? mntput_no_expire+0x1c/0x1c0 [ 656.008246][ T37] nsim_destroy+0x105/0x800 [ 656.008280][ T37] __nsim_dev_port_del+0x14e/0x200 [ 656.008305][ T37] nsim_dev_reload_destroy+0x288/0x490 [ 656.008325][ T37] ? xa_get_mark+0x67/0x7a0 [ 656.008376][ T37] nsim_dev_reload_down+0x8a/0xc0 [ 656.008399][ T37] devlink_reload+0x1c5/0x890 [ 656.008477][ T37] ? __pfx_devlink_reload+0x10/0x10 [ 656.008509][ T37] devlink_pernet_pre_exit+0x1ff/0x420 [ 656.008568][ T37] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 656.008598][ T37] ? iput+0xb84/0xf00 [ 656.008652][ T37] ops_undo_list+0x17d/0x8d0 [ 656.008679][ T37] ? __pfx_ops_undo_list+0x10/0x10 [ 656.008698][ T37] ? rt_spin_unlock+0x157/0x200 [ 656.008721][ T37] ? idr_destroy+0x21b/0x2a0 [ 656.008774][ T37] ? rt_spin_unlock+0x163/0x200 [ 656.008798][ T37] cleanup_net+0x575/0x810 [ 656.008821][ T37] ? __pfx_cleanup_net+0x10/0x10 [ 656.008847][ T37] ? rcu_is_watching+0x15/0xb0 [ 656.008879][ T37] ? process_scheduled_works+0xa20/0x14e0 [ 656.008901][ T37] process_scheduled_works+0xa8e/0x14e0 [ 656.008948][ T37] ? __pfx_process_scheduled_works+0x10/0x10 [ 656.008976][ T37] ? assign_work+0x3cf/0x5d0 [ 656.009003][ T37] worker_thread+0xa47/0xfb0 [ 656.009051][ T37] kthread+0x388/0x470 [ 656.009079][ T37] ? __pfx_worker_thread+0x10/0x10 [ 656.009100][ T37] ? __pfx_kthread+0x10/0x10 [ 656.009128][ T37] ret_from_fork+0x514/0xb70 [ 656.009167][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 656.009191][ T37] ? __switch_to+0xc89/0x1420 [ 656.009218][ T37] ? __pfx_kthread+0x10/0x10 [ 656.009246][ T37] ret_from_fork_asm+0x1a/0x30 [ 656.009290][ T37] [ 656.009312][ T37] INFO: task syz-executor:12413 blocked for more than 143 seconds. [ 656.009329][ T37] Tainted: G L syzkaller #0 [ 656.009340][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 656.009348][ T37] task:syz-executor state:D stack:20576 pid:12413 tgid:12413 ppid:1 task_flags:0x400140 flags:0x00080002 [ 656.009395][ T37] Call Trace: [ 656.009401][ T37] [ 656.009413][ T37] __schedule+0x16dc/0x5500 [ 656.009441][ T37] ? kernel_text_address+0xa5/0xe0 [ 656.009472][ T37] ? __kernel_text_address+0xd/0x30 [ 656.009519][ T37] ? __pfx___schedule+0x10/0x10 [ 656.009558][ T37] rt_mutex_schedule+0x76/0xf0 [ 656.009579][ T37] rt_mutex_slowlock_block+0x55c/0x680 [ 656.009615][ T37] rt_mutex_slowlock+0x2d4/0x780 [ 656.009639][ T37] ? rt_mutex_slowlock+0x1f2/0x780 [ 656.009662][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 656.009704][ T37] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 656.009735][ T37] ? rtnl_newlink+0x8a3/0x1bd0 [ 656.009753][ T37] mutex_lock_nested+0x168/0x1d0 [ 656.009774][ T37] ? rtnl_newlink+0x8a3/0x1bd0 [ 656.009796][ T37] rtnl_newlink+0x8a3/0x1bd0 [ 656.009829][ T37] ? __pfx_rtnl_newlink+0x10/0x10 [ 656.009849][ T37] ? __lock_acquire+0x683/0x2ce0 [ 656.009884][ T37] ? __lock_acquire+0x683/0x2ce0 [ 656.009906][ T37] ? __lock_acquire+0x683/0x2ce0 [ 656.009932][ T37] ? unwind_next_frame+0x8f/0x2550 [ 656.009960][ T37] ? is_bpf_text_address+0x26/0x2b0 [ 656.010042][ T37] ? is_bpf_text_address+0x26/0x2b0 [ 656.010069][ T37] ? __lock_acquire+0x683/0x2ce0 [ 656.010091][ T37] ? kernel_text_address+0xa5/0xe0 [ 656.010120][ T37] ? __kernel_text_address+0xd/0x30 [ 656.010148][ T37] ? unwind_get_return_address+0x4d/0x90 [ 656.010168][ T37] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 656.010246][ T37] ? arch_stack_walk+0xfb/0x150 [ 656.010302][ T37] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 656.010338][ T37] ? __pfx_rtnl_newlink+0x10/0x10 [ 656.010356][ T37] rtnetlink_rcv_msg+0x802/0xc00 [ 656.010375][ T37] ? kmem_cache_alloc_node_noprof+0x3eb/0x670 [ 656.010446][ T37] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 656.010465][ T37] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 656.010486][ T37] ? __lock_acquire+0x683/0x2ce0 [ 656.010517][ T37] netlink_rcv_skb+0x226/0x4a0 [ 656.010583][ T37] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 656.010605][ T37] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 656.010641][ T37] ? netlink_deliver_tap+0x2e/0x1b0 [ 656.010664][ T37] ? netlink_deliver_tap+0x2e/0x1b0 [ 656.010693][ T37] netlink_unicast+0x7f5/0x990 [ 656.010725][ T37] netlink_sendmsg+0x813/0xb40 [ 656.010758][ T37] ? __pfx_netlink_sendmsg+0x10/0x10 [ 656.010784][ T37] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 656.010895][ T37] ? __pfx_netlink_sendmsg+0x10/0x10 [ 656.010918][ T37] sock_sendmsg_nosec+0x13a/0x180 [ 656.010990][ T37] __sys_sendto+0x41e/0x5d0 [ 656.011017][ T37] ? __pfx___sys_sendto+0x10/0x10 [ 656.011036][ T37] ? errseq_sample+0x40/0x70 [ 656.011121][ T37] ? rcu_is_watching+0x15/0xb0 [ 656.011149][ T37] __x64_sys_sendto+0xde/0x100 [ 656.011170][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.011212][ T37] do_syscall_64+0x174/0x580 [ 656.011266][ T37] ? trace_irq_disable+0x3b/0x140 [ 656.011388][ T37] ? clear_bhb_loop+0x70/0xc0 [ 656.011412][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.011432][ T37] RIP: 0033:0x7f8f53e2e90e [ 656.011450][ T37] RSP: 002b:00007ffda037f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 656.011502][ T37] RAX: ffffffffffffffda RBX: 0000555585e3a500 RCX: 00007f8f53e2e90e [ 656.011516][ T37] RDX: 0000000000000048 RSI: 00007f8f54c24670 RDI: 0000000000000003 [ 656.011529][ T37] RBP: 0000000000000001 R08: 00007ffda037f0a4 R09: 000000000000000c [ 656.011541][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 656.011553][ T37] R13: 0000000000000000 R14: 00007f8f54c24670 R15: 0000000000000000 [ 656.011583][ T37] [ 656.011593][ T37] INFO: task syz.4.2642:12666 blocked for more than 143 seconds. [ 656.011610][ T37] Tainted: G L syzkaller #0 [ 656.011620][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 656.011629][ T37] task:syz.4.2642 state:D stack:25736 pid:12666 tgid:12664 ppid:5590 task_flags:0x400040 flags:0x00080002 [ 656.011680][ T37] Call Trace: [ 656.011686][ T37] [ 656.011698][ T37] __schedule+0x16dc/0x5500 [ 656.011726][ T37] ? __pfx_clockevents_program_event+0x10/0x10 [ 656.011800][ T37] ? irqentry_exit+0x218/0x8f0 [ 656.011840][ T37] ? irqentry_exit+0x218/0x8f0 [ 656.011871][ T37] ? trace_irq_disable+0x3b/0x140 [ 656.011901][ T37] ? __pfx___schedule+0x10/0x10 [ 656.011941][ T37] rt_mutex_schedule+0x76/0xf0 [ 656.011961][ T37] rt_mutex_slowlock_block+0x55c/0x680 [ 656.011998][ T37] rt_mutex_slowlock+0x2d4/0x780 [ 656.012022][ T37] ? rt_mutex_slowlock+0x1f2/0x780 [ 656.012044][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 656.012077][ T37] ? rtnl_dump_ifinfo+0xa74/0x14b0 [ 656.012102][ T37] ? rtnl_dump_ifinfo+0xa74/0x14b0 [ 656.012128][ T37] ? rtnl_dump_ifinfo+0xa74/0x14b0 [ 656.012146][ T37] mutex_lock_nested+0x168/0x1d0 [ 656.012171][ T37] rtnl_dump_ifinfo+0xa74/0x14b0 [ 656.012193][ T37] ? unwind_get_return_address+0x4d/0x90 [ 656.012226][ T37] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 656.012247][ T37] ? stack_trace_save+0xa9/0x100 [ 656.012275][ T37] ? __pfx_stack_trace_save+0x10/0x10 [ 656.012300][ T37] ? __lock_acquire+0x683/0x2ce0 [ 656.012322][ T37] ? stack_depot_save_flags+0x33/0x800 [ 656.012486][ T37] ? trace_kmalloc+0x2a/0xf0 [ 656.012538][ T37] ? __kmalloc_node_track_caller_noprof+0x59d/0x7c0 [ 656.012560][ T37] ? netlink_dump+0x1e7/0xee0 [ 656.012580][ T37] ? netlink_dump+0x1e7/0xee0 [ 656.012629][ T37] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 656.012651][ T37] rtnl_dumpit+0xcc/0x200 [ 656.012674][ T37] netlink_dump+0x711/0xee0 [ 656.012696][ T37] ? __netlink_lookup+0xc6/0x8b0 [ 656.012730][ T37] ? __pfx_netlink_dump+0x10/0x10 [ 656.012764][ T37] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 656.012799][ T37] __netlink_dump_start+0x589/0x7b0 [ 656.012830][ T37] rtnetlink_rcv_msg+0xa48/0xc00 [ 656.012851][ T37] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 656.012877][ T37] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 656.012896][ T37] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 656.012914][ T37] ? ref_tracker_free+0x668/0x820 [ 656.012941][ T37] ? __pfx_rtnl_dumpit+0x10/0x10 [ 656.012960][ T37] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 656.012991][ T37] netlink_rcv_skb+0x226/0x4a0 [ 656.013016][ T37] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 656.013037][ T37] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 656.013073][ T37] ? netlink_deliver_tap+0x2e/0x1b0 [ 656.013096][ T37] ? netlink_deliver_tap+0x2e/0x1b0 [ 656.013125][ T37] netlink_unicast+0x7f5/0x990 [ 656.013157][ T37] netlink_sendmsg+0x813/0xb40 [ 656.013179][ T37] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 656.013215][ T37] ? __pfx_netlink_sendmsg+0x10/0x10 [ 656.013240][ T37] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 656.013274][ T37] ? __pfx_netlink_sendmsg+0x10/0x10 [ 656.013296][ T37] sock_sendmsg_nosec+0x13a/0x180 [ 656.013328][ T37] ____sys_sendmsg+0x565/0x870 [ 656.013351][ T37] ? __might_fault+0xaf/0x130 [ 656.013416][ T37] ? __pfx_____sys_sendmsg+0x10/0x10 [ 656.013449][ T37] ? import_iovec+0x73/0xa0 [ 656.013501][ T37] ___sys_sendmsg+0x2a5/0x360 [ 656.013523][ T37] ? __lock_acquire+0x683/0x2ce0 [ 656.013546][ T37] ? __pfx____sys_sendmsg+0x10/0x10 [ 656.013573][ T37] ? futex_wait+0x2a2/0x390 [ 656.494926][T12887] Bluetooth: hci17: command tx timeout [ 656.635919][ T37] ? __fget_files+0x2a/0x420 [ 656.635950][ T37] ? __fget_files+0x3a8/0x420 [ 656.635979][ T37] __x64_sys_sendmsg+0x1b7/0x290 [ 656.636007][ T37] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 656.636047][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.636069][ T37] do_syscall_64+0x174/0x580 [ 656.636098][ T37] ? clear_bhb_loop+0x70/0xc0 [ 656.636122][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.636141][ T37] RIP: 0033:0x7f8dad70e0d9 [ 656.636158][ T37] RSP: 002b:00007f8dab966028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 656.636179][ T37] RAX: ffffffffffffffda RBX: 00007f8dad995fa0 RCX: 00007f8dad70e0d9 [ 656.636194][ T37] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 656.636206][ T37] RBP: 00007f8dad7a5024 R08: 0000000000000000 R09: 0000000000000000 [ 656.636218][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 656.636229][ T37] R13: 00007f8dad996038 R14: 00007f8dad995fa0 R15: 00007ffc8b9da3e8 [ 656.636260][ T37] [ 656.636301][ T37] [ 656.636301][ T37] Showing all locks held in the system: [ 656.636311][ T37] 3 locks held by kworker/0:0/9: [ 656.636322][ T37] 3 locks held by kworker/0:1/10: [ 656.636332][ T37] #0: ffff88813ff1b938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 656.636458][ T37] #1: ffffc900000f7c40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 656.636503][ T37] #2: ffffffff8f5ac438 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 656.636630][ T37] 4 locks held by pr/legacy/17: [ 656.636642][ T37] 4 locks held by rcuc/0/20: [ 656.636653][ T37] 4 locks held by ksoftirqd/1/30: [ 656.636664][ T37] 1 lock held by khungtaskd/37: [ 656.636674][ T37] #0: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 656.636728][ T37] 5 locks held by kworker/u8:3/56: [ 656.636739][ T37] 5 locks held by kworker/u8:4/66: [ 656.636759][ T37] 6 locks held by kworker/u8:9/1186: [ 656.636789][ T37] 1 lock held by syslogd/4929: [ 656.636799][ T37] #0: ffff888033e38798 (&si->socket.wq.wait){+.+.}-{3:3}, at: finish_wait+0xbe/0x1e0 [ 656.636882][ T37] 3 locks held by klogd/4936: [ 656.636894][ T37] 2 locks held by getty/5336: [ 656.636904][ T37] #0: ffff88803642b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 656.636998][ T37] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 656.637077][ T37] 3 locks held by kworker/u9:4/5594: [ 656.637087][ T37] #0: ffff88806366d938 ((wq_completion)hci7){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 656.637133][ T37] #1: ffffc90004d77c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 656.637179][ T37] #2: ffff888168b98f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 656.637262][ T37] 3 locks held by kworker/u9:5/5597: [ 656.637273][ T37] #0: ffff88804cf90138 ((wq_completion)hci8){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 656.637318][ T37] #1: ffffc90004da7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 656.637363][ T37] #2: ffff888152388f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 656.637416][ T37] 3 locks held by kworker/u8:20/6026: [ 656.637427][ T37] #0: ffff88813ff5c138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 656.637473][ T37] #1: ffffc90005b47c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 656.637517][ T37] #2: ffffffff8f5ac438 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 656.637566][ T37] 9 locks held by kworker/u8:23/6030: [ 656.637577][ T37] 6 locks held by kworker/u8:29/6360: [ 656.637588][ T37] 3 locks held by kworker/u8:33/6366: [ 656.637598][ T37] #0: ffff888032fc1938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 656.637643][ T37] #1: ffffc90006107c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 656.637689][ T37] #2: ffffffff8f5ac438 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x123/0x16e0 [ 656.637735][ T37] 5 locks held by kworker/u8:34/6368: [ 656.637746][ T37] 6 locks held by kworker/u8:36/6371: [ 656.637757][ T37] #0: ffff88801aea0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 656.637801][ T37] #1: ffffc90006127c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 656.637853][ T37] #2: ffffffff8f59d8a0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 656.637896][ T37] #3: ffff888060c17160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 656.637948][ T37] #4: ffff888025cc6310 (&devlink->lock_key#5){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 656.638011][ T37] #5: ffffffff8f5ac438 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 [ 656.638058][ T37] 2 locks held by syz-executor/12413: [ 656.638069][ T37] #0: ffffffff8faf6578 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 656.638117][ T37] #1: ffffffff8f5ac438 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a3/0x1bd0 [ 656.638160][ T37] 2 locks held by syz-executor/12451: [ 656.638170][ T37] #0: ffffffff8f59d8a0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4e2/0x720 [ 656.638267][ T37] #1: ffffffff8f5ac438 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x28e/0x8d0 [ 656.638311][ T37] 1 lock held by syz.5.2628/12622: [ 656.638322][ T37] #0: ffffffff8f5ac438 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 656.638441][ T37] 2 locks held by syz.4.2642/12666: [ 656.638452][ T37] #0: ffff888037334928 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 656.638499][ T37] #1: ffffffff8f5ac438 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dump_ifinfo+0xa74/0x14b0 [ 656.638542][ T37] 1 lock held by syz-executor/12687: [ 656.638552][ T37] #0: ffffffff8f5ac438 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 656.638666][ T37] 1 lock held by syz-executor/12709: [ 656.638676][ T37] #0: ffffffff8f5ac438 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 656.638728][ T37] 1 lock held by syz-executor/12744: [ 656.638738][ T37] #0: ffffffff8f5ac438 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 656.638791][ T37] 1 lock held by syz-executor/12758: [ 656.638801][ T37] #0: ffffffff8f5ac438 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 656.638860][ T37] 3 locks held by kworker/u9:1/12763: [ 656.638870][ T37] #0: ffff8880294a4138 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 656.638915][ T37] #1: ffffc900048c7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 656.638961][ T37] #2: ffff88802bfa8f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 656.639010][ T37] 1 lock held by syz.0.2679/12806: [ 656.639020][ T37] #0: ffffffff8f5ac438 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 656.639063][ T37] 2 locks held by syz.0.2679/12809: [ 656.639091][ T37] #0: ffff8880355be928 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 656.639136][ T37] #1: ffffffff8f5ac438 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 656.639183][ T37] 1 lock held by syz-executor/12813: [ 656.639193][ T37] #0: ffffffff8f5ac438 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 656.639244][ T37] 1 lock held by syz-executor/12819: [ 656.639255][ T37] #0: ffffffff8f5ac438 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 656.639307][ T37] 1 lock held by syz-executor/12824: [ 656.639316][ T37] #0: ffffffff8f5ac438 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 656.639369][ T37] 1 lock held by syz-executor/12837: [ 656.639380][ T37] #0: ffffffff8f5ac438 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 656.639431][ T37] 1 lock held by syz-executor/12845: [ 656.639441][ T37] #0: ffffffff8f5ac438 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 656.639493][ T37] 4 locks held by syz-executor/12850: [ 656.639504][ T37] 4 locks held by syz-executor/12851: [ 656.639515][ T37] 1 lock held by syz-executor/12852: [ 656.639525][ T37] #0: ffffffff8f5ac438 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 656.639577][ T37] 1 lock held by syz-executor/12857: [ 656.639587][ T37] #0: ffffffff8f5ac438 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 656.639640][ T37] 4 locks held by syz-executor/12863: [ 656.639651][ T37] 1 lock held by syz-executor/12864: [ 656.639661][ T37] #0: ffffffff8f5ac438 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 656.639714][ T37] 4 locks held by syz-executor/12870: [ 656.639724][ T37] 1 lock held by syz-executor/12871: [ 656.639734][ T37] #0: ffffffff8f5ac438 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 656.639786][ T37] 4 locks held by syz-executor/12881: [ 656.639797][ T37] 1 lock held by syz-executor/12882: [ 656.639807][ T37] #0: ffffffff8f5ac438 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x464/0x19e0 [ 656.639861][ T37] [ 656.639866][ T37] ============================================= [ 656.639866][ T37] [ 656.639880][ T37] NMI backtrace for cpu 0 [ 656.639903][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 656.639932][ T37] Tainted: [L]=SOFTLOCKUP [ 656.639939][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 656.639949][ T37] Call Trace: [ 656.639959][ T37] [ 656.639967][ T37] dump_stack_lvl+0xe8/0x150 [ 656.639994][ T37] nmi_cpu_backtrace+0x274/0x2d0 [ 656.640017][ T37] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 656.640126][ T37] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 656.640151][ T37] sys_info+0x135/0x170 [ 656.640169][ T37] watchdog+0xfd7/0x1030 [ 656.640304][ T37] ? watchdog+0x1c7/0x1030 [ 656.640336][ T37] kthread+0x388/0x470 [ 656.640362][ T37] ? __pfx_watchdog+0x10/0x10 [ 656.640386][ T37] ? __pfx_kthread+0x10/0x10 [ 656.640411][ T37] ret_from_fork+0x514/0xb70 [ 656.640441][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 656.640467][ T37] ? __switch_to+0xc89/0x1420 [ 656.640492][ T37] ? __pfx_kthread+0x10/0x10 [ 656.640518][ T37] ret_from_fork_asm+0x1a/0x30 [ 656.640560][ T37] [ 656.640573][ T37] Sending NMI from CPU 0 to CPUs 1: [ 656.640606][ C1] NMI backtrace for cpu 1 [ 656.640631][ C1] CPU: 1 UID: 0 PID: 17 Comm: pr/legacy Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 656.640681][ C1] Tainted: [L]=SOFTLOCKUP [ 656.640693][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 656.640713][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 656.640801][ C1] Code: e8 ee 1f 70 fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 4f 96 d9 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 656.640815][ C1] RSP: 0018:ffffc90000167a28 EFLAGS: 00000202 [ 656.640830][ C1] RAX: 1ffffffff33c8c00 RBX: 00000000000003fd RCX: 0000000000000000 [ 656.640841][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 656.640852][ C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 656.640863][ C1] R10: dffffc0000000000 R11: ffffffff8555a7f0 R12: dffffc0000000000 [ 656.640876][ C1] R13: 0000000000000000 R14: ffffffff99e46340 R15: 0000000000000000 [ 656.640887][ C1] FS: 0000000000000000(0000) GS:ffff888125d46000(0000) knlGS:0000000000000000 [ 656.640901][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 656.640912][ C1] CR2: 000055902d673a38 CR3: 000000002778e000 CR4: 00000000003526f0 [ 656.640929][ C1] Call Trace: [ 656.640935][ C1] [ 656.640943][ C1] wait_for_lsr+0x190/0x300 [ 656.640967][ C1] serial8250_console_write+0x113a/0x1b40 [ 656.640995][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 656.641016][ C1] ? console_flush_one_record+0xfa/0xb50 [ 656.641099][ C1] ? console_flush_one_record+0x472/0xb50 [ 656.641127][ C1] console_flush_one_record+0x642/0xb50 [ 656.641155][ C1] ? console_flush_one_record+0xfa/0xb50 [ 656.641182][ C1] ? __pfx_console_flush_one_record+0x10/0x10 [ 656.641209][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 656.641236][ C1] legacy_kthread_func+0x1b6/0x250 [ 656.641263][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 656.641288][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 656.641313][ C1] ? __kthread_parkme+0x71/0x1f0 [ 656.641340][ C1] ? __kthread_parkme+0x196/0x1f0 [ 656.641363][ C1] kthread+0x388/0x470 [ 656.641387][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 656.641411][ C1] ? __pfx_kthread+0x10/0x10 [ 656.641435][ C1] ret_from_fork+0x514/0xb70 [ 656.641459][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 656.641483][ C1] ? __switch_to+0xc89/0x1420 [ 656.641504][ C1] ? __pfx_kthread+0x10/0x10 [ 656.641528][ C1] ret_from_fork_asm+0x1a/0x30 [ 656.641565][ C1] [ 656.678873][ T37] Kernel panic - not syncing: hung_task: blocked tasks [ 656.678897][ T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 656.678923][ T37] Tainted: [L]=SOFTLOCKUP [ 656.678930][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 656.678941][ T37] Call Trace: [ 656.678949][ T37] [ 656.678957][ T37] vpanic+0x56c/0xa60 [ 656.678990][ T37] ? __pfx___schedule+0x10/0x10 [ 656.679015][ T37] ? __pfx_vpanic+0x10/0x10 [ 656.679051][ T37] panic+0xc5/0xd0 [ 656.679075][ T37] ? __pfx_panic+0x10/0x10 [ 656.679100][ T37] ? preempt_schedule_common+0x82/0xd0 [ 656.679124][ T37] ? preempt_schedule_thunk+0x16/0x40 [ 656.679152][ T37] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 656.679176][ T37] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 656.679201][ T37] watchdog+0x1030/0x1030 [ 656.679235][ T37] ? watchdog+0x1c7/0x1030 [ 656.679267][ T37] kthread+0x388/0x470 [ 656.679298][ T37] ? __pfx_watchdog+0x10/0x10 [ 656.679322][ T37] ? __pfx_kthread+0x10/0x10 [ 656.679348][ T37] ret_from_fork+0x514/0xb70 [ 656.679377][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 656.679402][ T37] ? __switch_to+0xc89/0x1420 [ 656.679427][ T37] ? __pfx_kthread+0x10/0x10 [ 656.679453][ T37] ret_from_fork_asm+0x1a/0x30 [ 656.679493][ T37] [ 656.679908][ T37] Kernel Offset: disabled