last executing test programs: 12m37.467507987s ago: executing program 3 (id=28): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000004c0)=0xc) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(0xffffffffffffffff, 0xe503, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2, 0x11}, &(0x7f0000001fee)='R\brust\xe3c*sgrVex:D0', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x1e76, 0xf728, 0x5, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002100)="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", 0x2000, &(0x7f0000001140)={&(0x7f0000000080)={0x50, 0x0, 0x3, {0x7, 0x2b, 0x400, 0x400004, 0xf, 0x7, 0x7, 0x4, 0x0, 0x0, 0x40, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12m36.456428276s ago: executing program 3 (id=30): socket$nl_route(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xe) (async) writev(r0, &(0x7f00000002c0)=[{0x0}], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) unshare(0x2040600) r3 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) copy_file_range(r3, 0x0, r3, 0x0, 0xff, 0x0) (async) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e24, @multicast2}, 0x10) shutdown(0xffffffffffffffff, 0x1) (async) sync() (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) (async) symlinkat(&(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00') (async) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) unlinkat(r4, &(0x7f0000000140)='./file1\x00', 0x0) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000b80)='./file6\x00', r4, &(0x7f0000000bc0)='./file7\x00', 0x0) (async) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f00000000c0)) openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) 12m36.279149179s ago: executing program 3 (id=31): socket$alg(0x26, 0x5, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) accept4(r2, 0x0, 0x0, 0x80000) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$unix(0x1, 0x5, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r3 = accept4(r0, 0x0, 0x0, 0x80800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000001c0)=ANY=[], 0x0, 0x26, 0x0, 0x0, 0x0, 0x10000}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r4, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r5, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x20000000000001d0, &(0x7f0000000040)=ANY=[@ANYRES32=r2], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001e40)={&(0x7f0000001e80)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000080000000400000001000084010000e004000000030000000000000000000000000000010500000020000000000000000000000300000000020000000200000000000000006100302e"], 0x0, 0x60}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r6, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, 0x0, 0x37}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='>', 0x1}], 0x1}}], 0x1, 0x0) 12m35.382867273s ago: executing program 3 (id=33): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{0x80, 0xfc}, 'port1\x00', 0x0, 0x60004, 0x0, 0xffffffff, 0x6, 0x98, 0x0, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001e00)={{0x80, 0x80}, 'port0\x00', 0x25, 0x20808, 0x7ffc, 0x1, 0x5, 0x10002, 0x9, 0x0, 0x6, 0x10}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, &(0x7f0000000300)={0x1, 0x0, [{0x1, 0x519c, 0xd, 0xfffffffd}]}) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0xb5f, 0x0, 0x2}]}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) unshare(0x40600) chroot(&(0x7f0000000100)='./file0\x00') chdir(&(0x7f00000000c0)='./file0/../file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000280)=0xa) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_open_dev$amidi(&(0x7f00000002c0), 0x5, 0x302500) 12m34.774751061s ago: executing program 3 (id=36): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x364f, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0) connect$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r8 = accept4(r7, 0x0, 0x0, 0x80800) sendmmsg$alg(r8, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf500f0ff}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 12m33.848298855s ago: executing program 3 (id=39): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x6101}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f00000000c0)=0x58, 0x5) semop(0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0xc011}, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12m32.823746563s ago: executing program 32 (id=39): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x6101}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f00000000c0)=0x58, 0x5) semop(0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0xc011}, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2m48.896057432s ago: executing program 4 (id=3109): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x5000, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="08001efb", 0x4}, {0x0}], 0x2, 0x0, 0x0, 0x60000000}, 0x4) 2m48.81444642s ago: executing program 4 (id=3111): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x200008d5) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="040100001000010400000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800050001"], 0x104}}, 0x0) 2m48.207508042s ago: executing program 4 (id=3119): openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0480, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x881) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, "4aaf41dcefb8acad", "6301be207ae86709252de108867a82e9ef5ffbf6efeead6477321c29c53b59ea", "48588489", "4e11d0f9a1600288"}, 0x38) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x101101, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000140), 0x21c804, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r4, &(0x7f0000000200)=ANY=[], 0x6) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000040)=0x805, 0x4) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x5, 0x40000000}, 0x8) connect$inet6(r3, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000f0000000401a800160008001e4009001120036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x8000) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) setsockopt$inet6_udp_int(r3, 0x11, 0xa, &(0x7f0000000080)=0x8, 0x4) 2m47.289323298s ago: executing program 4 (id=3123): socket(0x400000000010, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(0x0, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8}) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x26, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f00000008c0)={'team0\x00', 0xe761}) shmctl$SHM_UNLOCK(0x0, 0xc) r4 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/kernel/vmcoreinfo', 0x101540, 0x11b) r5 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) write$binfmt_elf64(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4602010103fcffffffffffffff03003e005666d37500010000000000004000000000000000df012000040000000000000003003800010007000200010003000000000000000300000000010100ff"], 0x509) close(r6) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2000405, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r7, 0x84, 0x65, &(0x7f0000000240)=[@in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xe0}, @in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e22, @private=0xa010100}, @in6={0xa, 0x4e21, 0x9, @local, 0x7}, @in={0x2, 0x4e23, @local}], 0x78) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x0, r8, 0x2000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_io_uring_setup(0xbdf, &(0x7f0000000000)={0x0, 0x6d0a, 0x80, 0xfffffffd, 0x40000331, 0x0, r4}, &(0x7f0000000080), &(0x7f00000001c0)) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r10, 0xc048aeca, &(0x7f0000000040)={0x7, 0x0, [{0x991, 0x0, 0x4}, {0xaa8, 0x0, 0xa}, {0x969, 0x0, 0x400}, {0xa1d, 0x0, 0x40}, {0x276}, {0x2b6, 0x1000000, 0x4}, {0x40f, 0x0, 0x421b}]}) 2m45.171006938s ago: executing program 4 (id=3127): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) copy_file_range(r1, &(0x7f0000000180)=0x4, r0, &(0x7f0000000100), 0x8, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000071101e0000ff7f0095000036fff6"], 0x0, 0xfffffffe}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/meminfo\x00', 0x0, 0x0) lseek(r6, 0x164, 0x0) connect$unix(r5, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(&(0x7f0000000080)='./file0\x00', 0x11c) fsopen(0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x18, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) 2m43.767816743s ago: executing program 4 (id=3128): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x6101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f00000000c0)=0x58, 0x5) semop(0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0xc011}, 0x800) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2m28.282336034s ago: executing program 33 (id=3128): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x6101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f00000000c0)=0x58, 0x5) semop(0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0xc011}, 0x800) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 5.39191446s ago: executing program 5 (id=4390): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c0000002e00090027bd7000000500000400000008001a80"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x84) 5.288513477s ago: executing program 5 (id=4391): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x608141) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000100)={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000001c0)={0x40, 0x13}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) 3.735581297s ago: executing program 6 (id=4397): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 3.678635537s ago: executing program 6 (id=4399): socket$caif_stream(0x25, 0x1, 0x4) socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) 3.255978776s ago: executing program 2 (id=4401): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) setregid(0xffffffffffffffff, 0x0) read$FUSE(r3, &(0x7f0000001680)={0x2020}, 0x2020) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.239574983s ago: executing program 6 (id=4402): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x271f, 0x0, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, r0, &(0x7f0000000080)=0x58, 0x40000002) 2.35692515s ago: executing program 2 (id=4407): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r1 = fsmount(r0, 0x0, 0x5) fchdir(r1) r2 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x20000008) 2.328810054s ago: executing program 5 (id=4408): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='westwood', 0x8) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@mss, @window={0x3, 0x0, 0x4}, @mss={0x2, 0x1}, @mss={0x2, 0x1}, @window, @timestamp, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) 2.217092438s ago: executing program 2 (id=4410): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket(0x14, 0x2, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x61d0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_ECHOREQ(r1, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x8010) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4011}, 0x8040) syz_genetlink_get_family_id$tipc2(0x0, r0) socket$inet6(0xa, 0x2, 0x0) 2.079037138s ago: executing program 5 (id=4411): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x5, 0xc}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xfff3, 0xfff2}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x1, 0xffe0}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010) 1.801571008s ago: executing program 2 (id=4413): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socket$kcm(0x15, 0x5, 0x0) socket$kcm(0x2b, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_get$pid(0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000001e) fcntl$notify(0xffffffffffffffff, 0x402, 0x25) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f00000000c0)="f5c89e1e", 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000}, 0x600) 1.486184635s ago: executing program 0 (id=4414): sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff), 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7d, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x3fd}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 1.429615422s ago: executing program 2 (id=4415): r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x40, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x40}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000740)={r2, 0xffffffffffffffff, 0x39, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x100000}}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000600)={0x0, 0xfffffffffffffffa, 0x24f, 0x1}) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000000e00)={0x18, 0x4, {0x6, @struct={0x8, 0x535d9a05}, 0x0, 0x8, 0x4, 0x8, 0xc03, 0x1, 0xb2, @usage=0xe, 0x7f8, 0x2, [0x1, 0xf3b4, 0x8, 0x3ff, 0x636d8f85, 0x5]}, {0x0, @struct={0x4, 0x1ff}, r5, 0xffffffffffffffff, 0xd4, 0x0, 0x6, 0x2, 0x1b, @usage=0xc, 0x9, 0xfff, [0x3, 0x10, 0x100000000, 0x5, 0x9, 0x8000000000000000]}, {0x1ff, @struct={0x1000, 0x4}, 0x0, 0x904, 0x4, 0x800, 0x0, 0x6, 0x80, @struct={0x2, 0x1}, 0x6, 0xc7f, [0x3, 0x6, 0x2, 0xffff, 0x9, 0xe933]}, {0xfffffffffffffffb, 0x8000000000000000, 0x1000}}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x50, r6, 0x1, 0x15, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x43}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfc}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc006}, 0x0) 1.349425835s ago: executing program 0 (id=4416): syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000012980)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0xfd, 0x8}]}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) 1.327876037s ago: executing program 2 (id=4417): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r2, 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) accept$unix(r2, &(0x7f00000001c0), &(0x7f00000002c0)=0x6e) r3 = socket$unix(0x1, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) acct(&(0x7f0000000180)='./file1\x00') acct(0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181c42, 0x56) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) 1.231219828s ago: executing program 1 (id=4418): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014001000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x7d) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.116003448s ago: executing program 5 (id=4419): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, 0x0, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48) 1.033820261s ago: executing program 1 (id=4420): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r1 = fsmount(r0, 0x0, 0x5) fchdir(r1) r2 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x20000008) 961.376132ms ago: executing program 6 (id=4421): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x20004000) 935.526968ms ago: executing program 1 (id=4422): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="10007d8005", @ANYRES8=0x0, @ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 851.114089ms ago: executing program 6 (id=4423): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket(0x14, 0x2, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x61d0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_ECHOREQ(r1, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x8010) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4011}, 0x8040) syz_genetlink_get_family_id$tipc2(0x0, r0) socket$inet6(0xa, 0x2, 0x0) 792.1166ms ago: executing program 5 (id=4424): unshare(0xa000400) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000001040)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r2, 0xfffffffffffffc01, 0x0) 733.166426ms ago: executing program 1 (id=4425): truncate(0x0, 0x4) socket(0xb, 0x3, 0x7) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) capset(0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x800) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x15) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045730, &(0x7f0000000080)) 615.808819ms ago: executing program 1 (id=4426): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f00000e1000/0x800000)=nil, 0x800000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x40000000) r1 = syz_pidfd_open(r0, 0x0) wait4(r0, 0x0, 0x8, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc040ff0b, &(0x7f0000000180)) 464.821377ms ago: executing program 0 (id=4427): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) 312.778059ms ago: executing program 0 (id=4428): io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/120, 0x78}], 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=r0, 0x4, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x22, 0x0, r1, 0x0, 0x0, 0x0, 0x24}) io_uring_enter(0xffffffffffffffff, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) 169.444691ms ago: executing program 0 (id=4429): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, 0x0) 135.969987ms ago: executing program 0 (id=4430): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='westwood', 0x8) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@mss, @window={0x3, 0x0, 0x4}, @mss={0x2, 0x1}, @mss={0x2, 0x1}, @window, @timestamp, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) 67.36211ms ago: executing program 1 (id=4431): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)={@cgroup=r1, r0, 0x2f, 0x203e, 0x4}, 0x20) 0s ago: executing program 6 (id=4432): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$bt_hci(r0, &(0x7f00000002c0)=ANY=[], 0xa) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) accept$alg(r1, 0x0, 0x0) close(0x4) kernel console output (not intermixed with test programs): 4312][T16102] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 654.335828][T16102] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 654.359245][T16102] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 654.742744][T16312] syzkaller0: entered promiscuous mode [ 654.757775][T16312] syzkaller0: entered allmulticast mode [ 654.821103][T16312] tipc: Enabled bearer , priority 0 [ 654.837033][T16311] tipc: Resetting bearer [ 654.960584][T16311] tipc: Disabling bearer [ 654.982609][T16102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 655.047873][T16102] 8021q: adding VLAN 0 to HW filter on device team0 [ 655.092138][ T3537] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.099337][ T3537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 655.111692][T16325] syzkaller0: entered promiscuous mode [ 655.117528][T16325] syzkaller0: entered allmulticast mode [ 655.131633][ T3607] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.138812][ T3607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 655.577542][T16102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 655.663754][T16102] veth0_vlan: entered promiscuous mode [ 655.689543][T16102] veth1_vlan: entered promiscuous mode [ 655.752224][T16102] veth0_macvtap: entered promiscuous mode [ 655.778418][T16102] veth1_macvtap: entered promiscuous mode [ 655.820844][T16102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 655.852954][T16102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 655.873941][ T3607] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.891694][ T3607] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.905605][ T3607] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.918428][ T3607] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.935499][T16364] syzkaller0: entered promiscuous mode [ 655.941126][T16364] syzkaller0: entered allmulticast mode [ 655.976651][T16364] tipc: Enabled bearer , priority 0 [ 656.019986][T16363] tipc: Resetting bearer [ 656.044438][T16363] tipc: Disabling bearer [ 656.071245][T16370] syzkaller0: entered promiscuous mode [ 656.077640][T16370] syzkaller0: entered allmulticast mode [ 656.101598][ T3607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.125265][ T3607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.150266][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.162862][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.213681][ T30] audit: type=1400 audit(1769521973.654:474): avc: denied { mounton } for pid=16102 comm="syz-executor" path="/root/syzkaller.UKEmNj/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=51602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 656.246192][ T5813] Bluetooth: hci4: command tx timeout [ 656.481496][T16384] netlink: 'syz.0.2774': attribute type 5 has an invalid length. [ 656.531349][T16386] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 656.797926][T16410] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2848'. [ 656.824566][T16402] syzkaller0: entered promiscuous mode [ 656.855128][T16402] syzkaller0: entered allmulticast mode [ 657.010302][ T6713] udevd[6713]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 657.044786][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 657.052871][ C0] lec:lec_tx_timeout: lec0 [ 657.057633][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 657.073750][ T6713] udevd[6713]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 658.850709][T16456] syzkaller0: entered promiscuous mode [ 658.860105][T16456] syzkaller0: entered allmulticast mode [ 659.170547][T16482] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2862'. [ 659.541574][ T8525] udevd[8525]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 661.029127][T16515] syzkaller0: entered promiscuous mode [ 661.034674][T16515] syzkaller0: entered allmulticast mode [ 661.060578][T16515] tipc: Started in network mode [ 661.065829][T16515] tipc: Node identity , cluster identity 4711 [ 661.072100][T16515] tipc: Failed to obtain node identity [ 661.078150][T16515] tipc: Enabling of bearer rejected, failed to enable media [ 661.087196][T16517] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 662.084779][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 662.092897][ C0] lec:lec_tx_timeout: lec0 [ 662.097654][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 662.813728][T16543] syzkaller0: entered promiscuous mode [ 662.844888][T16543] syzkaller0: entered allmulticast mode [ 663.020863][T16556] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2877'. [ 663.068073][T16562] syzkaller0: entered promiscuous mode [ 663.073618][T16562] syzkaller0: entered allmulticast mode [ 663.237402][T16573] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 663.466935][ T8525] udevd[8525]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 663.546697][T16587] syzkaller0: entered promiscuous mode [ 663.552195][T16587] syzkaller0: entered allmulticast mode [ 663.563681][T16589] syzkaller0: entered promiscuous mode [ 663.571022][T16589] syzkaller0: entered allmulticast mode [ 663.581526][T16587] tipc: Enabled bearer , priority 0 [ 663.614313][T16593] netlink: 'syz.0.2888': attribute type 39 has an invalid length. [ 663.630606][T16582] tipc: Resetting bearer [ 663.938615][T16603] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2892'. [ 664.199088][ T8525] udevd[8525]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 665.337736][T16582] tipc: Disabling bearer [ 665.512816][T16613] tipc: Enabled bearer , priority 0 [ 665.545552][T16613] syzkaller0: entered promiscuous mode [ 665.551082][T16613] syzkaller0: entered allmulticast mode [ 665.583524][T16618] syzkaller0: entered promiscuous mode [ 665.598144][T16618] syzkaller0: entered allmulticast mode [ 665.610409][T16613] tipc: Resetting bearer [ 665.629162][T16612] tipc: Resetting bearer [ 665.657414][T16612] tipc: Disabling bearer [ 665.864075][T16637] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2903'. [ 666.102626][ T8525] udevd[8525]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 666.141695][T16653] netlink: 'syz.4.2908': attribute type 39 has an invalid length. [ 666.173480][T16645] syzkaller0: entered promiscuous mode [ 666.181130][T16645] syzkaller0: entered allmulticast mode [ 666.238937][T16648] tipc: Enabled bearer , priority 0 [ 666.276995][T16661] syzkaller0: entered promiscuous mode [ 666.282509][T16661] syzkaller0: entered allmulticast mode [ 666.300761][T16642] tipc: Resetting bearer [ 667.114801][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 667.122956][ C0] lec:lec_tx_timeout: lec0 [ 667.128572][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 667.898537][T16642] tipc: Disabling bearer [ 667.933244][T16678] tipc: Enabling of bearer rejected, failed to enable media [ 668.016882][T11859] tipc: Node number set to 2767434595 [ 668.040017][T16690] syzkaller0: entered promiscuous mode [ 668.046332][T16690] syzkaller0: entered allmulticast mode [ 668.171836][T16702] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2919'. [ 668.206494][T16704] netlink: 'syz.1.2921': attribute type 39 has an invalid length. [ 668.504232][ T8525] udevd[8525]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 668.597211][T16728] tipc: Enabled bearer , priority 0 [ 668.605821][T16728] syzkaller0: entered promiscuous mode [ 668.611426][T16728] syzkaller0: entered allmulticast mode [ 668.624759][T16728] tipc: Resetting bearer [ 668.652165][T16726] tipc: Resetting bearer [ 668.679740][T16726] tipc: Disabling bearer [ 668.703688][T16733] syzkaller0: entered promiscuous mode [ 668.724912][T16733] syzkaller0: entered allmulticast mode [ 668.793601][T16735] openvswitch: netlink: Multiple metadata blocks provided [ 668.807062][T16738] syzkaller0: entered promiscuous mode [ 668.812878][T16738] syzkaller0: entered allmulticast mode [ 668.910502][T16742] netlink: 'syz.5.2935': attribute type 39 has an invalid length. [ 669.050618][T16750] tipc: Enabled bearer , priority 0 [ 669.058879][T16750] syzkaller0: entered promiscuous mode [ 669.064588][T16750] syzkaller0: entered allmulticast mode [ 669.105608][T16750] tipc: Resetting bearer [ 669.131041][T16749] tipc: Resetting bearer [ 669.172259][T16749] tipc: Disabling bearer [ 669.212239][T16758] tipc: Enabled bearer , priority 0 [ 669.277538][T16758] syzkaller0: entered promiscuous mode [ 669.283057][T16758] syzkaller0: entered allmulticast mode [ 669.299811][T16758] tipc: Resetting bearer [ 669.321539][T16757] tipc: Resetting bearer [ 669.397060][T16757] tipc: Disabling bearer [ 669.407370][T16765] openvswitch: netlink: Multiple metadata blocks provided [ 669.418164][T16767] veth0: entered promiscuous mode [ 669.435144][T16767] veth0: left promiscuous mode [ 669.601272][T16775] netlink: 'syz.0.2949': attribute type 39 has an invalid length. [ 669.827102][T16794] tipc: Enabled bearer , priority 0 [ 669.845847][T16794] syzkaller0: entered promiscuous mode [ 669.856255][T16794] syzkaller0: entered allmulticast mode [ 669.883781][T16794] tipc: Resetting bearer [ 669.909281][T16793] tipc: Resetting bearer [ 669.947724][T16802] openvswitch: netlink: Multiple metadata blocks provided [ 669.996688][T16793] tipc: Disabling bearer [ 670.034184][T16796] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 670.193099][T16814] tipc: Started in network mode [ 670.199918][T16814] tipc: Node identity 5ecd6dcd27a3, cluster identity 4711 [ 670.207972][T16814] tipc: Enabled bearer , priority 0 [ 670.225342][T16814] syzkaller0: entered promiscuous mode [ 670.239151][T16814] syzkaller0: entered allmulticast mode [ 670.263278][T16814] tipc: Resetting bearer [ 670.281294][T16811] tipc: Resetting bearer [ 670.362505][T16811] tipc: Disabling bearer [ 670.655942][T16846] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 670.677243][T16845] tipc: Enabled bearer , priority 0 [ 670.685098][T16845] syzkaller0: entered promiscuous mode [ 670.690592][T16845] syzkaller0: entered allmulticast mode [ 670.718320][T16845] tipc: Resetting bearer [ 670.729439][T16844] tipc: Resetting bearer [ 670.771481][T16844] tipc: Disabling bearer [ 670.970441][T16863] tipc: Enabled bearer , priority 0 [ 670.988057][T16863] syzkaller0: entered promiscuous mode [ 670.999955][T16863] syzkaller0: entered allmulticast mode [ 671.061622][T16861] tipc: Resetting bearer [ 671.074415][T16868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2987'. [ 671.124788][T16861] tipc: Disabling bearer [ 671.451973][T16898] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 671.497232][T16902] tipc: Enabled bearer , priority 0 [ 671.515823][T16902] syzkaller0: entered promiscuous mode [ 671.528103][T16902] syzkaller0: entered allmulticast mode [ 671.567793][T16902] tipc: Resetting bearer [ 671.618174][T16900] tipc: Resetting bearer [ 671.722152][T16900] tipc: Disabling bearer [ 672.008068][T16928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3002'. [ 672.134741][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 672.142859][ C0] lec:lec_tx_timeout: lec0 [ 672.147877][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 672.181746][ T5819] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 672.194875][ T5819] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 672.204078][ T5819] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 672.216780][ T5819] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 672.219376][T16933] tipc: Enabled bearer , priority 0 [ 672.236613][ T5819] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 672.278423][T16933] syzkaller0: entered promiscuous mode [ 672.285949][T16933] syzkaller0: entered allmulticast mode [ 672.303404][T16932] xfrm0 speed is unknown, defaulting to 1000 [ 672.339975][T16930] tipc: Resetting bearer [ 672.449813][T16930] tipc: Disabling bearer [ 672.999924][T16932] chnl_net:caif_netlink_parms(): no params data found [ 673.134003][T16932] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.141448][T16932] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.155101][T16932] bridge_slave_0: entered allmulticast mode [ 673.163419][T16932] bridge_slave_0: entered promiscuous mode [ 673.173068][T16932] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.180623][T16932] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.188284][T16932] bridge_slave_1: entered allmulticast mode [ 673.196192][T16932] bridge_slave_1: entered promiscuous mode [ 673.266331][T16932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 673.294072][T16932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 673.360184][T16932] team0: Port device team_slave_0 added [ 673.374056][T16932] team0: Port device team_slave_1 added [ 673.385705][T17002] tipc: Enabled bearer , priority 0 [ 673.413704][T17002] syzkaller0: entered promiscuous mode [ 673.430081][T17002] syzkaller0: entered allmulticast mode [ 673.462711][T17001] tipc: Resetting bearer [ 673.484356][T17001] tipc: Disabling bearer [ 673.498269][T16932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 673.506834][T16932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 673.540174][T16932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 673.561120][T16932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 673.574865][T16932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 673.611976][T16932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 673.709381][T16932] hsr_slave_0: entered promiscuous mode [ 673.717569][T16932] hsr_slave_1: entered promiscuous mode [ 673.724036][T16932] debugfs: 'hsr0' already exists in 'hsr' [ 673.730284][T16932] Cannot create hsr debugfs directory [ 673.738348][T17017] syzkaller0: entered promiscuous mode [ 673.744523][T17017] syzkaller0: entered allmulticast mode [ 674.036388][T16932] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.079290][T17035] syzkaller0: entered promiscuous mode [ 674.085011][T17035] syzkaller0: entered allmulticast mode [ 674.167915][T16932] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.326562][ T5819] Bluetooth: hci2: command tx timeout [ 674.343971][T16932] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.376656][T17048] tipc: Enabled bearer , priority 0 [ 674.396914][T17048] syzkaller0: entered promiscuous mode [ 674.407200][T17048] syzkaller0: entered allmulticast mode [ 674.476430][T16932] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.520533][T17047] tipc: Resetting bearer [ 674.566826][T17047] tipc: Disabling bearer [ 674.587704][T17058] syzkaller0: entered promiscuous mode [ 674.596766][T17058] syzkaller0: entered allmulticast mode [ 674.803325][T16932] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 674.831821][T16932] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 674.846080][T16932] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 674.858363][T16932] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 674.968689][T17086] syzkaller0: entered promiscuous mode [ 674.974501][T17086] syzkaller0: entered allmulticast mode [ 675.097673][T16932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 675.128831][T16932] 8021q: adding VLAN 0 to HW filter on device team0 [ 675.168376][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.175619][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 675.204326][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.211502][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 675.227582][T17097] tipc: Enabled bearer , priority 0 [ 675.235492][T17097] syzkaller0: entered promiscuous mode [ 675.241039][T17097] syzkaller0: entered allmulticast mode [ 675.242373][T17099] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3044'. [ 675.289322][T17090] xfrm0 speed is unknown, defaulting to 1000 [ 675.302147][T17095] tipc: Resetting bearer [ 675.369544][T17095] tipc: Disabling bearer [ 675.567053][T17108] syzkaller0: entered promiscuous mode [ 675.573479][T17108] syzkaller0: entered allmulticast mode [ 675.853954][T17122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3052'. [ 675.872442][T17125] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3053'. [ 675.960884][T16932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 676.092097][ T97] block nbd0: Possible stuck request ffff8880262b8000: control (read@0,1024B). Runtime 210 seconds [ 676.112812][ T97] block nbd0: Possible stuck request ffff8880262b8200: control (read@1024,1024B). Runtime 210 seconds [ 676.124008][ T97] block nbd0: Possible stuck request ffff8880262b8400: control (read@2048,1024B). Runtime 210 seconds [ 676.135347][ T97] block nbd0: Possible stuck request ffff8880262b8600: control (read@3072,1024B). Runtime 210 seconds [ 676.211855][T16932] veth0_vlan: entered promiscuous mode [ 676.260822][T16932] veth1_vlan: entered promiscuous mode [ 676.405364][ T5819] Bluetooth: hci2: command tx timeout [ 676.501905][T17144] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 676.536018][T16932] veth0_macvtap: entered promiscuous mode [ 676.563121][T17154] syzkaller0: entered promiscuous mode [ 676.583091][T17154] syzkaller0: entered allmulticast mode [ 676.611862][T16932] veth1_macvtap: entered promiscuous mode [ 676.656377][T17161] syzkaller0: entered promiscuous mode [ 676.661908][T17161] syzkaller0: entered allmulticast mode [ 676.757093][T16932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 676.785409][T16932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 676.813522][ T3537] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.829859][ T3537] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.861905][ T3537] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.884091][ T3537] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.061718][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 677.073608][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 677.120458][T17177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3069'. [ 677.154861][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 677.162946][ C0] lec:lec_tx_timeout: lec0 [ 677.168055][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 677.190058][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 677.199958][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 677.209157][T17182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3071'. [ 677.286694][T17182] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 677.293964][T17182] IPv6: NLM_F_CREATE should be set when creating new route [ 677.363708][T17186] syzkaller0: entered promiscuous mode [ 677.387103][T17186] syzkaller0: entered allmulticast mode [ 677.402788][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 678.489982][ T5819] Bluetooth: hci2: command tx timeout [ 678.933683][T17200] syzkaller0: entered promiscuous mode [ 678.939642][T17200] syzkaller0: entered allmulticast mode [ 678.965218][T17214] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 679.348570][T17226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3087'. [ 679.521386][ T5813] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 679.535677][ T5813] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 679.544851][ T5813] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 679.556168][ T5813] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 679.570152][ T5813] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 679.667745][T17235] xfrm0 speed is unknown, defaulting to 1000 [ 679.879846][T17255] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 680.014174][T17260] Bluetooth: MGMT ver 1.23 [ 680.101143][T17235] chnl_net:caif_netlink_parms(): no params data found [ 680.119058][T17263] syzkaller0: entered promiscuous mode [ 680.124877][T17263] syzkaller0: entered allmulticast mode [ 680.206841][T17235] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.214197][T17235] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.223471][T17235] bridge_slave_0: entered allmulticast mode [ 680.241888][T17235] bridge_slave_0: entered promiscuous mode [ 680.274679][T17235] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.284606][T17235] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.305900][T17235] bridge_slave_1: entered allmulticast mode [ 680.316411][T17235] bridge_slave_1: entered promiscuous mode [ 680.361373][T17235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 680.374302][T17235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 680.385213][T17279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3104'. [ 680.450060][T17235] team0: Port device team_slave_0 added [ 680.477743][T17235] team0: Port device team_slave_1 added [ 680.543158][T17235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 680.549446][T17284] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3106'. [ 680.566971][ T5819] Bluetooth: hci2: command tx timeout [ 680.582016][T17235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 680.608259][T17235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 680.621438][T17235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 680.629808][T17235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 680.660496][T17235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 680.742955][T17289] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 680.772327][T17235] hsr_slave_0: entered promiscuous mode [ 680.780366][T17235] hsr_slave_1: entered promiscuous mode [ 680.791842][T17235] debugfs: 'hsr0' already exists in 'hsr' [ 680.808158][T17235] Cannot create hsr debugfs directory [ 680.953304][T17295] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3111'. [ 680.979506][T17300] xfrm0 speed is unknown, defaulting to 1000 [ 681.077413][T17308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3114'. [ 681.201233][T17235] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.219567][T17235] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 681.315503][T17235] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.327035][T17235] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 681.605430][ T5819] Bluetooth: hci1: command tx timeout [ 681.844552][T17235] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.865368][T17235] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 682.004367][T17235] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.045051][ T793] kernel read not supported for file /audio1 (pid: 793 comm: kworker/0:2) [ 682.055450][T17235] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 682.079658][ T30] audit: type=1400 audit(1769521999.524:475): avc: denied { mount } for pid=17324 comm="syz.2.3120" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 682.143192][T17326] program syz.2.3120 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 682.174735][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 682.182794][ C0] lec:lec_tx_timeout: lec0 [ 682.187550][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 682.354967][ T5961] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 682.369331][T17235] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 682.391136][T17235] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 682.410207][T17235] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 682.441047][T17235] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 682.490470][T17337] team_slave_1: mtu greater than device maximum [ 682.497090][T17337] team0: Device team_slave_1 failed to change mtu [ 682.527732][ T5961] usb 1-1: Using ep0 maxpacket: 8 [ 682.543400][ T5961] usb 1-1: unable to get BOS descriptor or descriptor too short [ 682.558783][ T5961] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 682.570811][ T5961] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 682.583937][ T5961] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 682.623290][T17336] xfrm0 speed is unknown, defaulting to 1000 [ 682.802120][ T5961] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 682.956825][ T5961] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 682.979484][ T5961] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 683.083030][ T5961] usb 1-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 683.098025][T17348] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3124'. [ 683.108808][T17235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 683.246355][ T5961] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 683.263295][ T5961] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.565460][T17235] 8021q: adding VLAN 0 to HW filter on device team0 [ 683.572185][ T5961] usb 1-1: Product: syz [ 683.581977][ T5961] usb 1-1: Manufacturer: syz [ 683.586873][ T5961] usb 1-1: SerialNumber: syz [ 683.598261][ T5961] usb 1-1: config 0 descriptor?? [ 683.604015][T17328] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 683.627107][ T5961] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 683.669595][ T3537] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.676773][ T3537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 683.684892][ T5819] Bluetooth: hci1: command tx timeout [ 683.692153][ T3537] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.699274][ T3537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 683.913519][ T5961] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 683.974203][ T5801] udevd[5801]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 684.017115][T17357] FAULT_INJECTION: forcing a failure. [ 684.017115][T17357] name failslab, interval 1, probability 0, space 0, times 0 [ 684.029906][T17357] CPU: 1 UID: 0 PID: 17357 Comm: syz.0.3121 Not tainted syzkaller #0 PREEMPT(full) [ 684.029932][T17357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 684.029943][T17357] Call Trace: [ 684.029951][T17357] [ 684.029958][T17357] dump_stack_lvl+0x100/0x190 [ 684.029999][T17357] should_fail_ex.cold+0x5/0xa [ 684.030050][T17357] should_failslab+0xc2/0x120 [ 684.030078][T17357] __kmalloc_cache_noprof+0x80/0x810 [ 684.030099][T17357] ? refill_pi_state_cache+0x91/0x260 [ 684.030131][T17357] ? refill_pi_state_cache+0x91/0x260 [ 684.030153][T17357] refill_pi_state_cache+0x91/0x260 [ 684.030176][T17357] futex_lock_pi+0x177/0x7b0 [ 684.030202][T17357] ? __pfx_futex_lock_pi+0x10/0x10 [ 684.030229][T17357] ? __pfx___schedule+0x10/0x10 [ 684.030259][T17357] ? irqentry_exit+0x180/0x670 [ 684.030287][T17357] ? ksys_write+0x12a/0x250 [ 684.030312][T17357] ? __pfx_futex_wake_mark+0x10/0x10 [ 684.030340][T17357] ? find_held_lock+0x2b/0x80 [ 684.030366][T17357] ? ksys_write+0x190/0x250 [ 684.030384][T17357] ? ksys_write+0x190/0x250 [ 684.030408][T17357] do_futex+0x21f/0x350 [ 684.030429][T17357] ? __pfx_do_futex+0x10/0x10 [ 684.030455][T17357] __x64_sys_futex+0x34f/0x4d0 [ 684.030476][T17357] ? fput+0x79/0x100 [ 684.030505][T17357] ? __pfx___x64_sys_futex+0x10/0x10 [ 684.030524][T17357] ? ksys_write+0x1ac/0x250 [ 684.030543][T17357] ? __pfx_ksys_write+0x10/0x10 [ 684.030563][T17357] ? trace_irq_enable.constprop.0+0x2d/0x110 [ 684.030599][T17357] do_syscall_64+0xc9/0xf80 [ 684.030621][T17357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.030646][T17357] RIP: 0033:0x7fda84b9aeb9 [ 684.030662][T17357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 684.030680][T17357] RSP: 002b:00007fda85a84028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 684.030701][T17357] RAX: ffffffffffffffda RBX: 00007fda84e16180 RCX: 00007fda84b9aeb9 [ 684.030714][T17357] RDX: 0000000000000082 RSI: 0000000000000008 RDI: 0000200000000000 [ 684.030724][T17357] RBP: 00007fda85a84090 R08: 0000000000000000 R09: 0000000000000000 [ 684.030735][T17357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 684.030746][T17357] R13: 00007fda84e16218 R14: 00007fda84e16180 R15: 00007fff03ab3618 [ 684.030770][T17357] [ 684.281706][T17235] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 684.292411][T17235] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 684.428545][ T48] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 684.628418][ T48] usb 3-1: Using ep0 maxpacket: 8 [ 684.636294][ T48] usb 3-1: unable to get BOS descriptor or descriptor too short [ 684.650857][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 684.662442][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 684.674233][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 684.691865][T17235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 684.699931][ T48] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 684.711029][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 684.721115][ T48] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 684.737087][ T48] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 684.746700][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.755049][ T48] usb 3-1: Product: syz [ 684.759958][ T48] usb 3-1: Manufacturer: syz [ 684.764643][ T48] usb 3-1: SerialNumber: syz [ 684.781976][ T48] usb 3-1: config 0 descriptor?? [ 684.789099][T17355] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 684.804424][ T48] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 684.894520][ T48] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 684.911821][ T5802] udevd[5802]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 685.000645][T17235] veth0_vlan: entered promiscuous mode [ 685.014495][T17235] veth1_vlan: entered promiscuous mode [ 685.044395][T17235] veth0_macvtap: entered promiscuous mode [ 685.055804][T17235] veth1_macvtap: entered promiscuous mode [ 685.076653][T17235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 685.089993][T17235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 685.147899][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.156994][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.169388][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.766878][ T5819] Bluetooth: hci1: command tx timeout [ 685.950668][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.985717][ T10] usb 1-1: USB disconnect, device number 17 [ 686.309372][T17377] syzkaller0: entered promiscuous mode [ 686.316786][T17377] syzkaller0: entered allmulticast mode [ 686.446548][T17387] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 686.577065][ T2954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 686.608469][ T2954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 686.689621][ T2954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 686.707153][ T2954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 686.738203][ T30] audit: type=1400 audit(1769522004.184:476): avc: denied { mounton } for pid=17235 comm="syz-executor" path="/root/syzkaller.UR9Nwj/syz-tmp" dev="sda1" ino=2053 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 686.804301][ T30] audit: type=1400 audit(1769522004.184:477): avc: denied { mounton } for pid=17235 comm="syz-executor" path="/root/syzkaller.UR9Nwj/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 686.847817][ T30] audit: type=1400 audit(1769522004.214:478): avc: denied { mounton } for pid=17235 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 686.873253][T17393] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3084'. [ 686.885795][T17393] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 686.893058][T17393] IPv6: NLM_F_CREATE should be set when creating new route [ 686.979706][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.986350][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.037385][T10897] usb 3-1: USB disconnect, device number 28 [ 687.194760][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 687.202898][ C0] lec:lec_tx_timeout: lec0 [ 687.208556][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 687.375049][ T1213] kernel read not supported for file /cpu/0/msr (pid: 1213 comm: kworker/0:3) [ 687.585374][T17402] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3135'. [ 687.652344][T17402] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 687.781571][ T5813] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 687.796663][ T5813] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 687.816548][ T5813] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 687.826154][ T5813] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 687.833933][ T5813] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 687.844986][ T5813] Bluetooth: hci1: command tx timeout [ 687.888723][T17406] xfrm0 speed is unknown, defaulting to 1000 [ 687.944875][T11859] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 687.956582][T17416] syzkaller0: entered promiscuous mode [ 687.968725][T17416] syzkaller0: entered allmulticast mode [ 688.085526][T11859] usb 2-1: device descriptor read/64, error -71 [ 688.242186][T17406] chnl_net:caif_netlink_parms(): no params data found [ 688.305489][T17422] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 688.326573][T11859] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 688.378957][T17406] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.382335][T17429] netlink: 'syz.0.3143': attribute type 39 has an invalid length. [ 688.386373][T17406] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.386650][T17406] bridge_slave_0: entered allmulticast mode [ 688.388202][T17406] bridge_slave_0: entered promiscuous mode [ 688.417005][T17406] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.424247][T17406] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.432123][T17406] bridge_slave_1: entered allmulticast mode [ 688.440473][T17406] bridge_slave_1: entered promiscuous mode [ 688.474859][T11859] usb 2-1: device descriptor read/64, error -71 [ 688.476275][T17406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 688.493608][T17406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 688.520136][T17406] team0: Port device team_slave_0 added [ 688.531007][T17406] team0: Port device team_slave_1 added [ 688.550193][T17406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 688.557234][T17406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 688.584870][T17406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 688.597556][T17406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 688.604520][T17406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 688.605388][T11859] usb usb2-port1: attempt power cycle [ 688.640049][T17406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 688.693858][T17406] hsr_slave_0: entered promiscuous mode [ 688.711710][T17406] hsr_slave_1: entered promiscuous mode [ 688.718391][T17406] debugfs: 'hsr0' already exists in 'hsr' [ 688.724141][T17406] Cannot create hsr debugfs directory [ 688.939750][T17406] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.975411][T11859] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 689.013852][T11859] usb 2-1: device descriptor read/8, error -71 [ 689.035845][T17444] syzkaller0: entered promiscuous mode [ 689.041319][T17444] syzkaller0: entered allmulticast mode [ 689.088130][T17406] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.265670][T11859] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 689.308047][T11859] usb 2-1: device descriptor read/8, error -71 [ 689.417659][T11859] usb usb2-port1: unable to enumerate USB device [ 689.938675][T16107] Bluetooth: hci0: command tx timeout [ 690.866170][T17406] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.905863][T17464] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 690.978632][T17406] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.214388][T17406] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 691.246605][T17406] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 691.279271][T17406] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 691.309377][T17406] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 691.346212][T17483] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3160'. [ 691.401307][T17489] xfrm0 speed is unknown, defaulting to 1000 [ 691.408570][T17492] tipc: Enabling of bearer rejected, failed to enable media [ 691.738157][ T30] audit: type=1400 audit(1769522009.174:479): avc: denied { create } for pid=17516 comm="syz.1.3163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 691.792999][T17406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 691.812433][T17406] 8021q: adding VLAN 0 to HW filter on device team0 [ 691.834906][ T30] audit: type=1400 audit(1769522009.174:480): avc: denied { bind } for pid=17516 comm="syz.1.3163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 691.861648][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.868836][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 691.908395][ T30] audit: type=1400 audit(1769522009.174:481): avc: denied { setopt } for pid=17516 comm="syz.1.3163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 691.932499][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.939722][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 691.978369][ T30] audit: type=1400 audit(1769522009.174:482): avc: denied { write } for pid=17516 comm="syz.1.3163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 692.010306][T16107] Bluetooth: hci0: command tx timeout [ 692.163586][T17530] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 692.214789][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 692.222832][ C0] lec:lec_tx_timeout: lec0 [ 692.227560][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 692.687808][T17406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 692.755947][T17406] veth0_vlan: entered promiscuous mode [ 692.779433][T17558] xfrm0 speed is unknown, defaulting to 1000 [ 692.791184][T17406] veth1_vlan: entered promiscuous mode [ 692.791205][T17556] netlink: 228 bytes leftover after parsing attributes in process `syz.5.3172'. [ 692.834016][T17561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3173'. [ 692.870169][T17406] veth0_macvtap: entered promiscuous mode [ 692.903791][T17406] veth1_macvtap: entered promiscuous mode [ 692.962233][T17406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 693.041207][T17406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 693.078250][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.103145][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.185351][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.194389][ T3537] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.617443][ T2961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 693.649168][ T2961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.660128][T17592] netlink: 'syz.5.3180': attribute type 39 has an invalid length. [ 693.663170][T17588] syzkaller0: entered promiscuous mode [ 693.691579][T17588] syzkaller0: entered allmulticast mode [ 693.703919][T17589] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 694.084982][T16107] Bluetooth: hci0: command tx timeout [ 695.390261][ T3537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 695.401197][ T3537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 695.620539][T17626] syzkaller0: entered promiscuous mode [ 695.630776][T17626] syzkaller0: entered allmulticast mode [ 695.671203][T17622] netlink: 228 bytes leftover after parsing attributes in process `syz.5.3186'. [ 695.691263][T17627] xfrm0 speed is unknown, defaulting to 1000 [ 695.887598][T17637] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 696.167878][T16107] Bluetooth: hci0: command tx timeout [ 696.440785][T17653] netlink: 'syz.2.3196': attribute type 39 has an invalid length. [ 696.748117][T17661] tipc: Enabling of bearer rejected, failed to enable media [ 697.234772][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 697.242823][ C0] lec:lec_tx_timeout: lec0 [ 697.247506][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 697.425265][ T30] audit: type=1400 audit(1769522014.874:483): avc: denied { map } for pid=17696 comm="syz.2.3209" path="socket:[57110]" dev="sockfs" ino=57110 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 697.474829][ T30] audit: type=1400 audit(1769522014.874:484): avc: denied { read accept } for pid=17696 comm="syz.2.3209" path="socket:[57110]" dev="sockfs" ino=57110 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 697.590657][T17704] netlink: 'syz.5.3212': attribute type 39 has an invalid length. [ 697.684185][T17701] tipc: Enabling of bearer rejected, failed to enable media [ 698.204234][T17738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3226'. [ 698.309193][T17735] tipc: Enabling of bearer rejected, failed to enable media [ 698.787330][T17758] syz_tun: entered promiscuous mode [ 698.793252][T17758] vlan2: entered promiscuous mode [ 698.986899][T17763] syzkaller0: entered promiscuous mode [ 698.992549][T17763] syzkaller0: entered allmulticast mode [ 701.630972][ T5813] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 701.726076][ T5813] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 701.745116][ T5813] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 701.783985][ T5813] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 701.818762][ T5813] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 702.254844][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 702.262889][ C0] lec:lec_tx_timeout: lec0 [ 702.267916][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 703.027512][T17772] tipc: Enabling of bearer rejected, failed to enable media [ 703.099107][T17801] xfrm0 speed is unknown, defaulting to 1000 [ 703.276312][T17810] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 703.543022][T17822] syzkaller0: entered promiscuous mode [ 703.552655][T17822] syzkaller0: entered allmulticast mode [ 703.620813][T17826] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3250'. [ 703.878309][ T30] audit: type=1400 audit(1769522021.324:485): avc: denied { connect } for pid=17834 comm="syz.5.3255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 704.070918][T16107] Bluetooth: hci5: command tx timeout [ 704.100598][T17801] chnl_net:caif_netlink_parms(): no params data found [ 704.218142][T17844] syzkaller0: entered promiscuous mode [ 704.237064][T17844] syzkaller0: entered allmulticast mode [ 704.350393][T17848] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 704.359328][T17801] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.385441][T17801] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.398093][T17801] bridge_slave_0: entered allmulticast mode [ 704.419810][T17801] bridge_slave_0: entered promiscuous mode [ 704.458883][T17801] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.475553][T17801] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.482910][T17801] bridge_slave_1: entered allmulticast mode [ 704.516330][T17801] bridge_slave_1: entered promiscuous mode [ 704.572286][T17863] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=17863 comm=syz.0.3263 [ 704.585559][T17863] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=17863 comm=syz.0.3263 [ 704.598133][T17801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 704.625353][T17862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3264'. [ 704.649943][T17801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 704.685116][T17867] netlink: 'syz.5.3265': attribute type 39 has an invalid length. [ 704.706641][T17865] tipc: Enabled bearer , priority 0 [ 704.725456][T17801] team0: Port device team_slave_0 added [ 704.731567][T17865] syzkaller0: entered promiscuous mode [ 704.740085][T17865] syzkaller0: entered allmulticast mode [ 704.780147][T17801] team0: Port device team_slave_1 added [ 704.866056][T17801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 704.873052][T17801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 704.906859][T17801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 704.925990][T17864] tipc: Resetting bearer [ 704.950009][T17864] tipc: Disabling bearer [ 704.985167][T17801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 704.993290][T17801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 705.020188][T17801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 705.146624][T17801] hsr_slave_0: entered promiscuous mode [ 705.165820][T17801] hsr_slave_1: entered promiscuous mode [ 705.172258][T17801] debugfs: 'hsr0' already exists in 'hsr' [ 705.196991][T17801] Cannot create hsr debugfs directory [ 705.203976][T17877] xfrm0 speed is unknown, defaulting to 1000 [ 705.218811][T17880] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 705.426552][T17897] netlink: 'syz.2.3277': attribute type 39 has an invalid length. [ 705.535972][T17899] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3278'. [ 705.771760][T17907] tipc: Started in network mode [ 705.777601][T17907] tipc: Node identity ce7406b9afe, cluster identity 4711 [ 705.789230][T17907] tipc: Enabled bearer , priority 0 [ 705.812327][T17907] syzkaller0: entered promiscuous mode [ 705.818049][T17907] syzkaller0: entered allmulticast mode [ 705.825195][T17801] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 705.883918][T17801] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 705.905478][T17801] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 705.917561][T17904] tipc: Resetting bearer [ 705.944918][T17904] tipc: Disabling bearer [ 705.966200][T17801] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 705.978790][T17909] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3283'. [ 706.084917][T16107] Bluetooth: hci5: command tx timeout [ 706.148593][T17916] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 706.179480][ T97] block nbd0: Possible stuck request ffff8880262b8000: control (read@0,1024B). Runtime 240 seconds [ 706.191026][ T97] block nbd0: Possible stuck request ffff8880262b8200: control (read@1024,1024B). Runtime 240 seconds [ 706.202408][ T97] block nbd0: Possible stuck request ffff8880262b8400: control (read@2048,1024B). Runtime 240 seconds [ 706.213745][ T97] block nbd0: Possible stuck request ffff8880262b8600: control (read@3072,1024B). Runtime 240 seconds [ 706.227395][T17801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 706.250449][T17921] netlink: 'syz.0.3285': attribute type 5 has an invalid length. [ 706.265263][T17921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3285'. [ 706.266099][T17801] 8021q: adding VLAN 0 to HW filter on device team0 [ 706.318265][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.325532][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 706.351837][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.359007][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 706.394574][T17926] netlink: 'syz.0.3287': attribute type 39 has an invalid length. [ 706.486427][T17930] tipc: Enabling of bearer rejected, failed to enable media [ 706.861929][T17950] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 706.880579][T17801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 707.039691][T17965] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 707.179591][T17972] netlink: 'syz.1.3298': attribute type 39 has an invalid length. [ 707.307943][T17975] syzkaller0: entered promiscuous mode [ 707.313477][T17975] syzkaller0: entered allmulticast mode [ 707.339045][T17975] tipc: Enabled bearer , priority 0 [ 707.355020][T17973] tipc: Resetting bearer [ 708.084734][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5820 ms [ 708.092844][ C0] lec:lec_tx_timeout: lec0 [ 708.164917][T16107] Bluetooth: hci5: command tx timeout [ 708.434812][ T3511] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 708.990670][T17973] tipc: Disabling bearer [ 709.018423][T17997] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 709.027382][ T1213] tipc: Node number set to 1637091001 [ 709.078111][T17801] veth0_vlan: entered promiscuous mode [ 709.120823][T17801] veth1_vlan: entered promiscuous mode [ 709.420400][T17801] veth0_macvtap: entered promiscuous mode [ 709.529601][T17801] veth1_macvtap: entered promiscuous mode [ 709.535780][ T30] audit: type=1400 audit(1769522026.974:486): avc: denied { accept } for pid=18015 comm="syz.0.3316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 709.582879][T18016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3316'. [ 709.603824][T17801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 709.652143][T17801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 709.661940][T18016] bridge_slave_1: left allmulticast mode [ 709.670062][T18016] bridge_slave_1: left promiscuous mode [ 709.676783][T18016] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.695861][T18016] bridge_slave_0: left allmulticast mode [ 709.701524][T18016] bridge_slave_0: left promiscuous mode [ 709.720201][T18016] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.822661][T18028] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 709.835193][ T3511] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.848440][ T3511] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.858314][ T3511] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.878644][ T3511] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.948082][T18021] syzkaller0: entered promiscuous mode [ 709.953602][T18021] syzkaller0: entered allmulticast mode [ 710.023565][T18032] netlink: 'syz.0.3320': attribute type 39 has an invalid length. [ 710.247534][T16107] Bluetooth: hci5: command tx timeout [ 712.081662][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 712.101550][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 712.224588][ T3511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 712.233671][ T3511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 712.244288][T18074] tipc: Enabling of bearer rejected, failed to enable media [ 712.263485][T18074] syzkaller0: entered promiscuous mode [ 712.271674][T18074] syzkaller0: entered allmulticast mode [ 712.377710][T18081] openvswitch: netlink: Flow key attr not present in new flow. [ 712.380845][T18077] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3330'. [ 712.451967][T18080] binder: 18079:18080 ioctl c00c620f 200000000000 returned -22 [ 713.465301][ T30] audit: type=1400 audit(1769522030.914:487): avc: denied { ioctl } for pid=18097 comm="syz.1.3336" path="socket:[59366]" dev="sockfs" ino=59366 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 713.608387][T18100] syzkaller0: entered promiscuous mode [ 713.637365][T18100] syzkaller0: entered allmulticast mode [ 714.094352][T18124] openvswitch: netlink: Flow key attr not present in new flow. [ 715.892016][T18130] tipc: Enabling of bearer rejected, failed to enable media [ 716.134038][ T30] audit: type=1400 audit(1769522033.574:488): avc: denied { create } for pid=18150 comm="syz.1.3350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 716.227914][T18151] pim6reg1: entered promiscuous mode [ 716.233265][T18151] pim6reg1: entered allmulticast mode [ 716.299914][T18162] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3354'. [ 716.355608][T18165] openvswitch: netlink: Flow key attr not present in new flow. [ 716.358777][T18159] syzkaller0: entered promiscuous mode [ 716.385516][T18159] syzkaller0: entered allmulticast mode [ 718.588923][T18183] tipc: Enabling of bearer rejected, failed to enable media [ 718.598862][ T30] audit: type=1400 audit(1769522036.044:489): avc: denied { ioctl } for pid=18204 comm="syz.1.3363" path="socket:[60286]" dev="sockfs" ino=60286 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 718.757200][T18209] netlink: 'syz.0.3365': attribute type 10 has an invalid length. [ 718.825494][T18209] veth0_vlan: left promiscuous mode [ 718.833127][T18209] veth0_vlan: entered promiscuous mode [ 718.857180][T18209] team0: Device veth0_vlan failed to register rx_handler [ 719.001791][T18225] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3371'. [ 719.034769][T18225] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3371'. [ 719.064134][T18225] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3371'. [ 719.074339][T18225] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3371'. [ 719.120633][T18228] syzkaller0: entered promiscuous mode [ 719.126579][T18228] syzkaller0: entered allmulticast mode [ 719.214802][T18231] syz.0.3374 uses old SIOCAX25GETINFO [ 719.298849][T18234] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3374'. [ 719.349106][T18233] syzkaller0: entered promiscuous mode [ 719.355005][T18233] syzkaller0: entered allmulticast mode [ 719.361012][T18235] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3374'. [ 719.390038][T18235] ipvlan2: entered promiscuous mode [ 719.408523][T18234] ipvlan3: entered promiscuous mode [ 721.113388][ T30] audit: type=1400 audit(1769522038.554:490): avc: denied { getopt } for pid=18253 comm="syz.0.3380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 722.239188][T18248] tipc: Enabling of bearer rejected, failed to enable media [ 722.709421][T18292] syzkaller0: entered promiscuous mode [ 722.753023][T18292] syzkaller0: entered allmulticast mode [ 722.773210][T18300] tipc: Enabled bearer , priority 0 [ 722.833877][ T30] audit: type=1400 audit(1769522040.274:491): avc: denied { listen } for pid=18305 comm="syz.1.3389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 722.897577][ T5869] IPVS: starting estimator thread 0... [ 722.912254][ T30] audit: type=1400 audit(1769522040.344:492): avc: denied { accept } for pid=18305 comm="syz.1.3389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 722.994843][T18307] IPVS: using max 48 ests per chain, 115200 per kthread [ 723.412338][T18291] tipc: Resetting bearer [ 723.621187][T18352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3393'. [ 725.071019][T18291] tipc: Disabling bearer [ 725.089720][ T5869] tipc: Node number set to 2037280205 [ 725.181952][T18359] tipc: Enabling of bearer rejected, failed to enable media [ 725.284789][T18362] netlink: 'syz.6.3398': attribute type 39 has an invalid length. [ 725.381015][T18367] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3399'. [ 725.403416][T18367] nbd: must specify at least one socket [ 725.640381][T18390] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3405'. [ 725.708720][T18394] syzkaller0: entered promiscuous mode [ 725.714425][T18394] syzkaller0: entered allmulticast mode [ 725.799947][T18398] syzkaller0: entered promiscuous mode [ 725.805713][T18398] syzkaller0: entered allmulticast mode [ 725.825153][T18398] tipc: Started in network mode [ 725.830203][T18398] tipc: Node identity , cluster identity 4711 [ 725.840775][T18398] tipc: Failed to obtain node identity [ 725.846951][T18398] tipc: Enabling of bearer rejected, failed to enable media [ 725.944542][T10205] lec:lec_start_xmit: lec0:No lecd attached [ 727.956138][T18434] tipc: Enabling of bearer rejected, failed to enable media [ 727.981359][T18438] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3417'. [ 728.487930][T18470] syzkaller0: entered promiscuous mode [ 728.493908][T18470] syzkaller0: entered allmulticast mode [ 728.515198][T18474] syzkaller0: entered promiscuous mode [ 728.544870][T18474] syzkaller0: entered allmulticast mode [ 728.571631][T18473] tipc: Started in network mode [ 728.576691][T18473] tipc: Node identity , cluster identity 4711 [ 728.582901][T18473] tipc: Failed to obtain node identity [ 728.598253][T18473] tipc: Enabling of bearer rejected, failed to enable media [ 729.154773][T18490] lec:lec_atm_close: lec0: Shut down! [ 729.529040][T18498] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3432'. [ 729.538487][T18498] nbd: must specify at least one socket [ 730.811879][T18506] tipc: Enabling of bearer rejected, failed to enable media [ 731.145759][T18535] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3439'. [ 731.256535][T18539] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3441'. [ 731.292287][T18541] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3443'. [ 731.313676][T18541] nbd: must specify at least one socket [ 731.399543][ T30] audit: type=1400 audit(1769522048.834:493): avc: denied { bind } for pid=18542 comm="syz.1.3442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 731.515061][T18548] syzkaller0: entered promiscuous mode [ 731.520677][T18548] syzkaller0: entered allmulticast mode [ 731.551430][T18548] tipc: Enabled bearer , priority 0 [ 731.560121][T18547] tipc: Resetting bearer [ 731.891673][T18567] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3452'. [ 733.438704][T18547] tipc: Disabling bearer [ 733.563757][T18593] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3455'. [ 733.641387][T18597] veth0: entered promiscuous mode [ 733.663700][T18597] veth0: entered allmulticast mode [ 733.708108][ T30] audit: type=1400 audit(1769522051.154:494): avc: denied { getopt } for pid=18598 comm="syz.6.3458" lport=48942 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 733.842826][T18610] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3463'. [ 734.106660][T18621] syzkaller0: entered promiscuous mode [ 734.120215][T18632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3468'. [ 734.120313][T18621] syzkaller0: entered allmulticast mode [ 734.140171][T18628] tipc: Started in network mode [ 734.151136][T18628] tipc: Node identity , cluster identity 4711 [ 734.159518][T18628] tipc: Failed to obtain node identity [ 734.165395][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 734.165495][ C0] lec:lec_tx_timeout: lec0 [ 734.184947][T18628] tipc: Enabling of bearer rejected, failed to enable media [ 735.361776][T18688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3480'. [ 736.246000][ T97] block nbd0: Possible stuck request ffff8880262b8000: control (read@0,1024B). Runtime 270 seconds [ 736.256907][ T97] block nbd0: Possible stuck request ffff8880262b8200: control (read@1024,1024B). Runtime 270 seconds [ 736.269733][ T97] block nbd0: Possible stuck request ffff8880262b8400: control (read@2048,1024B). Runtime 270 seconds [ 736.280856][ T97] block nbd0: Possible stuck request ffff8880262b8600: control (read@3072,1024B). Runtime 270 seconds [ 736.761522][T18720] tipc: Enabling of bearer rejected, failed to enable media [ 737.017958][T18694] lec:lec_atm_close: lec0: Shut down! [ 737.093295][T18736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 737.175179][T18737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3492'. [ 737.246720][T18740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 737.294499][T18739] syzkaller0: entered promiscuous mode [ 737.301936][T18739] syzkaller0: entered allmulticast mode [ 737.318045][T18736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 737.328330][T18743] tipc: Started in network mode [ 737.333205][T18743] tipc: Node identity , cluster identity 4711 [ 737.342130][T18743] tipc: Failed to obtain node identity [ 737.348019][T18743] tipc: Enabling of bearer rejected, failed to enable media [ 737.358561][T18736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 739.322857][T18788] tipc: Enabling of bearer rejected, failed to enable media [ 739.357097][ T2961] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 739.516472][T18807] tipc: Enabling of bearer rejected, failed to enable media [ 739.532879][T18804] netlink: 496 bytes leftover after parsing attributes in process `syz.6.3503'. [ 739.628758][T18817] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3507'. [ 739.639527][T18817] nbd: must specify at least one socket [ 739.983186][T18844] syzkaller0: entered promiscuous mode [ 740.030576][T18844] syzkaller0: entered allmulticast mode [ 740.146570][T18846] syzkaller0: entered promiscuous mode [ 740.152061][T18846] syzkaller0: entered allmulticast mode [ 740.177627][T18850] syzkaller0: entered promiscuous mode [ 740.183229][T18850] syzkaller0: entered allmulticast mode [ 740.190810][T18846] tipc: Enabled bearer , priority 0 [ 740.214323][T18845] tipc: Resetting bearer [ 741.882320][T18845] tipc: Disabling bearer [ 741.961459][T18867] tipc: Enabling of bearer rejected, failed to enable media [ 742.084752][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5070 ms [ 742.092861][ C0] lec:lec_tx_timeout: lec0 [ 742.509223][T18900] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 742.589900][ T30] audit: type=1400 audit(1769522060.024:495): avc: denied { bind } for pid=18909 comm="syz.2.3533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 742.852949][T18924] syzkaller0: entered promiscuous mode [ 742.862383][T18924] syzkaller0: entered allmulticast mode [ 742.905748][T18927] tipc: Enabling of bearer rejected, failed to enable media [ 743.306007][T18942] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3540'. [ 743.363163][T18941] netlink: 'syz.0.3549': attribute type 1 has an invalid length. [ 743.389044][T18941] bond1: entered promiscuous mode [ 743.394283][T18941] 8021q: adding VLAN 0 to HW filter on device bond1 [ 743.577325][T18941] bond1: (slave bridge2): making interface the new active one [ 743.611589][T18941] bridge2: entered promiscuous mode [ 743.627548][T18941] bridge2: left promiscuous mode [ 743.689995][T18963] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 743.919195][T18980] syzkaller0: entered promiscuous mode [ 743.926715][T18980] syzkaller0: entered allmulticast mode [ 744.346650][T19003] syzkaller0: entered promiscuous mode [ 744.357170][T19003] syzkaller0: entered allmulticast mode [ 744.422736][T19005] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 744.798822][T19015] syzkaller0: entered promiscuous mode [ 744.815927][T19015] syzkaller0: entered allmulticast mode [ 746.997339][T19047] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 747.207425][T19072] tipc: Enabling of bearer rejected, failed to enable media [ 747.218939][T19070] syzkaller0: entered promiscuous mode [ 747.224452][T19070] syzkaller0: entered allmulticast mode [ 747.426356][T19090] tipc: Enabling of bearer rejected, failed to enable media [ 747.585475][T19098] xfrm0 speed is unknown, defaulting to 1000 [ 747.616710][T19106] Cannot find add_set index 0 as target [ 747.729530][ T30] audit: type=1400 audit(1769522065.164:496): avc: denied { bind } for pid=19096 comm="syz.6.3582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 747.782801][ T30] audit: type=1400 audit(1769522065.164:497): avc: denied { name_bind } for pid=19096 comm="syz.6.3582" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 747.816258][ T30] audit: type=1400 audit(1769522065.164:498): avc: denied { node_bind } for pid=19096 comm="syz.6.3582" saddr=fc00::1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 748.043007][T19123] syzkaller0: entered promiscuous mode [ 748.050290][T19123] syzkaller0: entered allmulticast mode [ 748.080413][T19127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3586'. [ 748.408967][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.416382][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.424594][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 748.444030][T19130] syzkaller0: entered promiscuous mode [ 748.460100][T19130] syzkaller0: entered allmulticast mode [ 748.571482][T19133] tipc: Started in network mode [ 748.577026][T19133] tipc: Node identity , cluster identity 4711 [ 748.613797][T19133] tipc: Failed to obtain node identity [ 748.622344][T19133] tipc: Enabling of bearer rejected, failed to enable media [ 748.656344][T19143] syzkaller0: entered promiscuous mode [ 748.661897][T19143] syzkaller0: entered allmulticast mode [ 748.678481][T19142] syzkaller0: entered promiscuous mode [ 748.683962][T19142] syzkaller0: entered allmulticast mode [ 750.457142][T19158] tipc: Enabled bearer , priority 0 [ 752.312626][T19157] syzkaller0: entered promiscuous mode [ 752.318298][T19157] syzkaller0: entered allmulticast mode [ 752.336708][T19163] tipc: Resetting bearer [ 752.431791][T19154] tipc: Disabling bearer [ 752.449204][T19168] tipc: Enabling of bearer rejected, failed to enable media [ 752.463826][T19185] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 752.472686][T19185] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 752.728950][T19198] syzkaller0: entered promiscuous mode [ 752.734625][T19198] syzkaller0: entered allmulticast mode [ 752.740679][ T3607] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 752.802053][T19208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3605'. [ 752.916227][T19211] syzkaller0: entered promiscuous mode [ 752.921711][T19211] syzkaller0: entered allmulticast mode [ 752.947289][T19208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3605'. [ 753.472991][T19215] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 753.623039][T19232] tipc: Started in network mode [ 753.628130][T19232] tipc: Node identity 1e39a01a893d, cluster identity 4711 [ 753.636804][T19232] tipc: Enabled bearer , priority 0 [ 753.681975][T19232] tipc: Resetting bearer [ 753.796724][T19230] tipc: Disabling bearer [ 753.807345][ T30] audit: type=1400 audit(1769522071.254:499): avc: denied { read } for pid=19240 comm="syz.2.3617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 753.835880][T19244] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3615'. [ 753.896641][T19247] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3615'. [ 753.918793][T19244] ipvlan2: entered promiscuous mode [ 753.977973][T19247] ipvlan3: entered promiscuous mode [ 754.017356][T19249] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3618'. [ 754.043997][T19239] syzkaller0: entered promiscuous mode [ 754.049802][T19239] syzkaller0: entered allmulticast mode [ 754.084745][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5660 ms [ 754.093259][ C0] lec:lec_tx_timeout: lec0 [ 754.592996][T19251] lec:lec_atm_close: lec0: Shut down! [ 756.336515][T19264] tipc: Enabling of bearer rejected, failed to enable media [ 756.362480][T19268] xfrm0 speed is unknown, defaulting to 1000 [ 756.537495][T19281] syzkaller0: entered promiscuous mode [ 756.554064][T19281] syzkaller0: entered allmulticast mode [ 756.579488][T19281] 0: reclassify loop, rule prio 0, protocol 800 [ 756.664591][T19288] tipc: Started in network mode [ 756.673120][T19288] tipc: Node identity 4e90b68c448, cluster identity 4711 [ 756.693009][T19288] tipc: Enabled bearer , priority 0 [ 756.712916][T19291] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 756.772598][T19284] tipc: Resetting bearer [ 756.836798][T19282] tipc: Disabling bearer [ 757.059276][T19307] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 757.073235][T19306] syzkaller0: entered promiscuous mode [ 757.089156][T19306] syzkaller0: entered allmulticast mode [ 757.117268][T19306] tipc: Enabled bearer , priority 0 [ 757.207956][T19305] tipc: Resetting bearer [ 757.237940][T19305] tipc: Disabling bearer [ 757.371252][T19316] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3641'. [ 757.516762][T19322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3643'. [ 757.722724][T19339] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 757.853197][T19345] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 758.401159][ T30] audit: type=1400 audit(1769522075.844:500): avc: denied { getopt } for pid=19374 comm="syz.6.3664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 758.422095][T19375] netlink: 'syz.6.3664': attribute type 39 has an invalid length. [ 758.522113][T19383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3668'. [ 758.576182][T19383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3668'. [ 758.640356][T19386] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 758.647725][T19386] IPv6: NLM_F_CREATE should be set when creating new route [ 758.655026][T19386] IPv6: NLM_F_CREATE should be set when creating new route [ 758.771904][T19376] lec:lec_atm_close: lec0: Shut down! [ 758.888728][T19396] syzkaller0: entered promiscuous mode [ 758.904516][T19396] syzkaller0: entered allmulticast mode [ 758.952842][T19398] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3675'. [ 759.091734][T19406] tipc: Enabling of bearer rejected, failed to enable media [ 759.754157][T19424] lec:lec_atm_close: lec0: Shut down! [ 759.808140][T19445] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3690'. [ 760.177062][T19460] tipc: Enabling of bearer rejected, failed to enable media [ 760.195083][T19461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 760.198218][T19457] syzkaller0: entered promiscuous mode [ 760.224859][T19457] syzkaller0: entered allmulticast mode [ 760.254605][T19461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3696'. [ 760.289566][T19461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 760.521596][T19484] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3702'. [ 760.625392][T19481] Bluetooth: MGMT ver 1.23 [ 760.754428][T19494] syzkaller0: entered promiscuous mode [ 760.764407][T19494] syzkaller0: entered allmulticast mode [ 760.988488][T19501] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 761.122393][T19507] syzkaller0: entered promiscuous mode [ 761.130278][T19507] syzkaller0: entered allmulticast mode [ 761.254586][T19509] tipc: Started in network mode [ 761.264180][T19509] tipc: Node identity 261077a6babc, cluster identity 4711 [ 761.295295][T19509] tipc: Enabled bearer , priority 0 [ 761.303704][T19511] syzkaller0: entered promiscuous mode [ 761.320614][T19511] syzkaller0: entered allmulticast mode [ 761.358908][T19509] tipc: Resetting bearer [ 761.408161][T19521] netlink: 'syz.6.3718': attribute type 39 has an invalid length. [ 761.432917][T19508] tipc: Disabling bearer [ 761.552254][T19529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3720'. [ 761.623223][T19533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3721'. [ 761.663631][T19534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3720'. [ 761.957549][T19553] syzkaller0: entered promiscuous mode [ 761.963061][T19553] syzkaller0: entered allmulticast mode [ 762.032839][T19557] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3729'. [ 762.036404][T19559] syzkaller0: entered promiscuous mode [ 762.048117][T19559] syzkaller0: entered allmulticast mode [ 762.190552][T19566] xfrm0 speed is unknown, defaulting to 1000 [ 762.237632][T19573] openvswitch: netlink: Duplicate or invalid key (type 0). [ 762.254945][T19573] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 762.348838][T19576] tipc: Enabled bearer , priority 0 [ 762.376006][T19576] syzkaller0: entered promiscuous mode [ 762.381557][T19576] syzkaller0: entered allmulticast mode [ 762.415309][T19576] tipc: Resetting bearer [ 762.423224][T19575] tipc: Resetting bearer [ 762.466735][T19575] tipc: Disabling bearer [ 762.912160][ T8525] udevd[8525]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 763.037944][T19600] syzkaller0: entered promiscuous mode [ 763.043608][T19600] syzkaller0: entered allmulticast mode [ 763.337091][T19623] Cannot find add_set index 0 as target [ 764.675982][T19621] xfrm0 speed is unknown, defaulting to 1000 [ 764.857067][T19656] syzkaller0: entered promiscuous mode [ 764.862579][T19656] syzkaller0: entered allmulticast mode [ 764.927040][T19660] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 764.990064][T19660] __nla_validate_parse: 4 callbacks suppressed [ 764.990087][T19660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3765'. [ 765.044220][T19666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 765.054787][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5310 ms [ 765.062837][ C0] lec:lec_tx_timeout: lec0 [ 765.428573][T19680] syzkaller0: entered promiscuous mode [ 765.434092][T19680] syzkaller0: entered allmulticast mode [ 765.667673][T19689] xfrm0 speed is unknown, defaulting to 1000 [ 765.676208][T19693] syzkaller0: entered promiscuous mode [ 765.681692][T19693] syzkaller0: entered allmulticast mode [ 765.723064][T19693] tipc: Enabled bearer , priority 0 [ 765.786741][T19697] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3778'. [ 765.820927][T19692] tipc: Resetting bearer [ 765.958295][T19692] tipc: Disabling bearer [ 766.216911][T19717] tipc: Enabled bearer , priority 0 [ 766.231008][T19717] syzkaller0: entered promiscuous mode [ 766.264766][T19717] syzkaller0: entered allmulticast mode [ 766.321044][T19725] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3787'. [ 766.333142][ T97] block nbd0: Possible stuck request ffff8880262b8000: control (read@0,1024B). Runtime 300 seconds [ 766.344427][ T97] block nbd0: Possible stuck request ffff8880262b8200: control (read@1024,1024B). Runtime 300 seconds [ 766.355770][ T97] block nbd0: Possible stuck request ffff8880262b8400: control (read@2048,1024B). Runtime 300 seconds [ 766.360556][T19700] lec:lec_atm_close: lec0: Shut down! [ 766.366875][ T97] block nbd0: Possible stuck request ffff8880262b8600: control (read@3072,1024B). Runtime 300 seconds [ 766.482270][T19731] tipc: Resetting bearer [ 766.509272][T19725] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3787'. [ 766.522803][T19716] tipc: Resetting bearer [ 766.583560][T19716] tipc: Disabling bearer [ 766.996953][T19754] syzkaller0: entered promiscuous mode [ 767.010141][T19754] syzkaller0: entered allmulticast mode [ 767.037739][T19756] xfrm0 speed is unknown, defaulting to 1000 [ 767.312413][T19770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3805'. [ 767.430479][T19770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3805'. [ 767.462284][T19777] netlink: 'syz.5.3808': attribute type 39 has an invalid length. [ 767.627475][T19785] syzkaller0: entered promiscuous mode [ 767.633649][T19785] syzkaller0: entered allmulticast mode [ 767.800988][ T30] audit: type=1400 audit(1769522085.244:501): avc: denied { recv } for pid=18 comm="rcu_exp_gp_kthr" saddr=10.128.0.169 src=30006 daddr=10.128.0.235 dest=53634 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 767.904073][T19801] netlink: 332 bytes leftover after parsing attributes in process `syz.5.3813'. [ 767.930667][T19801] netlink: 'syz.5.3813': attribute type 9 has an invalid length. [ 767.971957][T19801] netlink: 'syz.5.3813': attribute type 10 has an invalid length. [ 768.018681][T19807] tipc: Enabled bearer , priority 0 [ 768.044265][T19802] syzkaller0: entered promiscuous mode [ 768.061198][T19802] syzkaller0: entered allmulticast mode [ 768.107650][T19809] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3820'. [ 768.116903][T19802] tipc: Resetting bearer [ 768.132066][T19800] tipc: Resetting bearer [ 768.169924][T19800] tipc: Disabling bearer [ 768.201510][T19819] netlink: 'syz.0.3823': attribute type 39 has an invalid length. [ 768.318868][T19823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3825'. [ 768.494334][T19832] tipc: Enabled bearer , priority 0 [ 768.524610][T19831] tipc: Disabling bearer [ 768.525778][T19796] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 768.550176][T19834] syzkaller0: entered promiscuous mode [ 768.555837][T19834] syzkaller0: entered allmulticast mode [ 768.679179][ T30] audit: type=1400 audit(1769522086.124:502): avc: denied { module_request } for pid=19842 comm="syz.5.3833" kmod="bt-proto-5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 768.780173][T19846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 768.848067][T19846] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3836'. [ 768.895604][T19846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 768.972322][T19846] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 768.992622][T19846] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 769.137946][ T36] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 769.237956][T19868] syzkaller0: entered promiscuous mode [ 769.255968][ T2954] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 769.257455][T19868] syzkaller0: entered allmulticast mode [ 769.287589][ T30] audit: type=1400 audit(1769522086.724:503): avc: denied { write } for pid=19871 comm="syz.5.3847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 769.365049][ T2954] wlan1: authentication with 08:02:11:00:00:00 timed out [ 769.516971][ T24] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 769.602725][T19885] netlink: 'syz.2.3849': attribute type 39 has an invalid length. [ 769.719176][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 769.991098][T19897] xfrm0 speed is unknown, defaulting to 1000 [ 770.111686][ T24] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 770.325567][T19921] __nla_validate_parse: 1 callbacks suppressed [ 770.325583][T19921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3859'. [ 770.377979][T19923] tipc: Enabled bearer , priority 0 [ 770.386397][T19925] syzkaller0: entered promiscuous mode [ 770.392000][T19925] syzkaller0: entered allmulticast mode [ 770.487380][T19923] tipc: Resetting bearer [ 770.605763][T19922] tipc: Resetting bearer [ 770.640574][T19922] tipc: Disabling bearer [ 770.855406][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 770.863756][ T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 770.941166][T19951] xt_CT: No such helper "syz0" [ 770.975220][T16107] Bluetooth: hci4: command 0x0406 tx timeout [ 771.394472][ T9] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 771.449851][ T30] audit: type=1400 audit(1769522088.894:504): avc: denied { egress } for pid=23 comm="ksoftirqd/1" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 771.455740][T19975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3871'. [ 771.544429][ T30] audit: type=1400 audit(1769522088.894:505): avc: denied { sendto } for pid=23 comm="ksoftirqd/1" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 771.592482][T19986] netlink: 'syz.6.3874': attribute type 39 has an invalid length. [ 771.636991][T19984] tipc: Enabled bearer , priority 0 [ 771.665907][T19984] syzkaller0: entered promiscuous mode [ 771.675667][T19984] syzkaller0: entered allmulticast mode [ 771.721077][T19984] tipc: Resetting bearer [ 771.762335][ T30] audit: type=1400 audit(1769522089.194:506): avc: denied { write } for pid=19994 comm="syz.0.3879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 771.811806][T19983] tipc: Resetting bearer [ 771.870571][T19983] tipc: Disabling bearer [ 771.886013][T20004] netlink: 'syz.2.3880': attribute type 13 has an invalid length. [ 772.059548][ T30] audit: type=1400 audit(1769522089.504:507): avc: denied { setopt } for pid=20015 comm="syz.5.3882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 772.085477][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5730 ms [ 772.093550][ C0] lec:lec_tx_timeout: lec0 [ 772.198131][T20019] syzkaller0: entered promiscuous mode [ 772.203731][T20019] syzkaller0: entered allmulticast mode [ 772.314937][T20029] vcan0: tx drop: invalid sa for name 0x0000000000000401 [ 772.392832][T20030] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 772.710444][T20053] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3895'. [ 772.857942][T20061] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3898'. [ 772.869587][T20061] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3898'. [ 772.996504][T20069] syzkaller0: entered promiscuous mode [ 773.002095][T20069] syzkaller0: entered allmulticast mode [ 773.237495][T20081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 773.264138][T20081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3907'. [ 773.277656][T20081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 773.338618][T20087] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3910'. [ 773.479450][T20093] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3912'. [ 773.494776][T20093] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3912'. [ 773.747306][T20108] syzkaller0: entered promiscuous mode [ 773.763073][T20108] syzkaller0: entered allmulticast mode [ 773.923328][T20116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3921'. [ 774.014239][T20119] tipc: Enabled bearer , priority 0 [ 774.022898][T20119] syzkaller0: entered promiscuous mode [ 774.029485][T20119] syzkaller0: entered allmulticast mode [ 774.055333][T20119] tipc: Resetting bearer [ 774.143547][T20115] tipc: Resetting bearer [ 774.194222][T20115] tipc: Disabling bearer [ 774.254467][T20133] xfrm0 speed is unknown, defaulting to 1000 [ 774.396314][ T30] audit: type=1400 audit(1769522091.834:508): avc: denied { accept } for pid=20136 comm="syz.5.3931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 774.495584][T20143] batadv0: entered promiscuous mode [ 774.501470][T20143] vlan2: entered promiscuous mode [ 774.634458][T20150] syzkaller0: entered promiscuous mode [ 774.640897][T20150] syzkaller0: entered allmulticast mode [ 774.691455][T20155] netlink: 'syz.2.3939': attribute type 39 has an invalid length. [ 774.724887][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 775.001489][T20164] tipc: Enabled bearer , priority 0 [ 775.027486][T20164] syzkaller0: entered promiscuous mode [ 775.033082][T20164] syzkaller0: entered allmulticast mode [ 775.050542][T20164] tipc: Resetting bearer [ 775.078023][T20163] tipc: Resetting bearer [ 775.126395][T20163] tipc: Disabling bearer [ 775.148356][T20167] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 775.332215][T20176] syzkaller0: entered promiscuous mode [ 775.359301][T20176] syzkaller0: entered allmulticast mode [ 775.692037][T20206] __nla_validate_parse: 3 callbacks suppressed [ 775.692059][T20206] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3959'. [ 776.060616][T20228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3967'. [ 776.089503][T20228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3967'. [ 776.279507][T20239] syzkaller0: entered promiscuous mode [ 776.294028][T20239] syzkaller0: entered allmulticast mode [ 776.311870][T20241] netlink: 'syz.5.3974': attribute type 39 has an invalid length. [ 776.499814][T20243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3975'. [ 776.568103][T20258] syzkaller0: entered promiscuous mode [ 776.573645][T20258] syzkaller0: entered allmulticast mode [ 776.645286][T10897] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 776.794085][T20273] can: request_module (can-proto-0) failed. [ 776.830714][T20273] syzkaller1: entered promiscuous mode [ 776.846170][T20273] syzkaller1: entered allmulticast mode [ 776.849575][T20280] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3985'. [ 777.019710][T20286] tipc: Enabled bearer , priority 0 [ 777.028704][T20286] syzkaller0: entered promiscuous mode [ 777.034271][T20286] syzkaller0: entered allmulticast mode [ 777.085678][ T9] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 777.096759][T20286] tipc: Resetting bearer [ 777.107349][T20285] tipc: Resetting bearer [ 777.150901][T20285] tipc: Disabling bearer [ 777.390284][T20306] syzkaller0: entered promiscuous mode [ 777.399435][T20306] syzkaller0: entered allmulticast mode [ 777.500413][ T2954] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 777.528191][T20317] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4001'. [ 777.632957][T20321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4004'. [ 777.675760][T20321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4004'. [ 777.684537][T20325] netlink: 184 bytes leftover after parsing attributes in process `syz.1.4005'. [ 777.786946][T20332] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4008'. [ 777.969588][T20344] syzkaller0: entered promiscuous mode [ 777.988471][T20344] syzkaller0: entered allmulticast mode [ 778.565351][ T2954] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 778.590802][ T2954] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 778.685327][T11859] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 779.336618][T20406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 779.350354][T20406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 779.398189][ T30] audit: type=1400 audit(1769522096.844:509): avc: denied { name_bind } for pid=20407 comm="syz.5.4033" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 779.473873][ T30] audit: type=1400 audit(1769522096.914:510): avc: denied { shutdown } for pid=20407 comm="syz.5.4033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 779.494272][T20410] netlink: 'syz.5.4033': attribute type 1 has an invalid length. [ 779.502315][T20410] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 779.678231][T20416] netlink: 'syz.1.4036': attribute type 39 has an invalid length. [ 779.971620][T20401] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 780.243448][ T30] audit: type=1400 audit(1769522097.684:511): avc: denied { mount } for pid=20442 comm="syz.5.4046" name="/" dev="hugetlbfs" ino=67396 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 780.532614][ T8525] udevd[8525]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 780.549836][T20455] syzkaller0: entered promiscuous mode [ 780.569889][T20455] syzkaller0: entered allmulticast mode [ 780.957568][T20473] netlink: 'syz.1.4057': attribute type 39 has an invalid length. [ 781.458921][T20483] ceph: No mds server is up or the cluster is laggy [ 781.599360][T20489] __nla_validate_parse: 4 callbacks suppressed [ 781.599382][T20489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4062'. [ 781.754523][T20484] syzkaller0: entered promiscuous mode [ 781.764455][T20484] syzkaller0: entered allmulticast mode [ 781.805359][T20495] syzkaller0: entered promiscuous mode [ 781.811393][T20495] syzkaller0: entered allmulticast mode [ 782.884889][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 782.964961][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 783.456263][ T30] audit: type=1400 audit(1769522100.884:512): avc: denied { mount } for pid=20529 comm="syz.5.4073" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 783.788146][T20538] mmap: syz.0.4075 (20538) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 784.699896][T20567] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4084'. [ 785.198129][T20580] can: request_module (can-proto-0) failed. [ 785.314005][T20588] syzkaller0: entered promiscuous mode [ 785.319813][T20588] syzkaller0: entered allmulticast mode [ 785.718919][ T30] audit: type=1400 audit(1769522103.164:513): avc: denied { append } for pid=20597 comm="syz.6.4095" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 785.778937][T20598] random: crng reseeded on system resumption [ 785.938490][T20607] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4096'. [ 786.111128][T20611] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4098'. [ 786.907436][T20620] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4100'. [ 787.046254][T20620] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4100'. [ 787.177552][T20627] syzkaller0: entered promiscuous mode [ 787.183056][T20627] syzkaller0: entered allmulticast mode [ 788.820179][T20651] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4114'. [ 788.957269][T20658] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4117'. [ 789.033627][T20660] syzkaller0: entered promiscuous mode [ 789.041338][T20660] syzkaller0: entered allmulticast mode [ 789.054294][T20662] fuse: Unknown parameter '0x0000000000000005' [ 789.088248][ T30] audit: type=1400 audit(1769522106.494:514): avc: denied { mounton } for pid=20661 comm="syz.2.4119" path="/193/file0" dev="tmpfs" ino=988 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 789.242419][T10205] lec:lec_start_xmit: lec0:No lecd attached [ 789.489950][ T30] audit: type=1400 audit(1769522106.934:515): avc: denied { read } for pid=20675 comm="syz.1.4125" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 790.070763][T20692] syzkaller0: entered promiscuous mode [ 790.083289][T20692] syzkaller0: entered allmulticast mode [ 790.100616][T20694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4130'. [ 791.753352][T20717] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4137'. [ 791.924840][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 791.926517][T20717] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4137'. [ 792.915854][ T30] audit: type=1400 audit(1769522110.354:516): avc: denied { unmount } for pid=17801 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 793.086086][T20740] syzkaller0: entered promiscuous mode [ 793.483900][T20740] syzkaller0: entered allmulticast mode [ 793.604797][ T24] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 793.643963][T20747] tap0: tun_chr_ioctl cmd 35111 [ 793.772926][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 793.834959][ T24] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 793.884801][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.914550][ T24] usb 1-1: config 0 descriptor?? [ 793.941620][T20755] syzkaller0: entered promiscuous mode [ 793.944586][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 793.964805][T20755] syzkaller0: entered allmulticast mode [ 794.134829][ T793] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 794.254735][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 794.262794][ C0] lec:lec_tx_timeout: lec0 [ 794.348865][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 794.366475][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 794.380367][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 794.395901][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 794.403132][ T793] usb 7-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 794.422909][ T793] usb 7-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 794.442777][ T793] usb 7-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 794.453598][T20765] QAT: Device 9 not found [ 794.464754][ T793] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.556267][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 794.563195][T20765] QAT: Invalid ioctl 1074292268 [ 794.597479][ T793] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 794.676976][T20768] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4154'. [ 795.022241][ T30] audit: type=1400 audit(1769522112.064:517): avc: denied { connect } for pid=20764 comm="syz.1.4154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 795.047185][ T24] pwc: recv_control_msg error -71 req 02 val 2000 [ 795.065771][ T793] gspca_sn9c2028: read1 error -32 [ 795.073363][ T24] pwc: recv_control_msg error -71 req 02 val 2100 [ 795.080623][ T24] pwc: recv_control_msg error -71 req 04 val 1500 [ 795.087578][ T24] pwc: recv_control_msg error -71 req 02 val 2500 [ 795.094465][ T24] pwc: recv_control_msg error -71 req 02 val 2400 [ 795.102123][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 795.109091][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 795.116900][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 795.124131][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 795.137955][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 795.169436][ T24] pwc: Registered as video103. [ 795.187934][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 795.224799][ T30] audit: type=1400 audit(1769522112.664:518): avc: denied { read } for pid=5168 comm="acpid" name="event4" dev="devtmpfs" ino=3358 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 795.252102][ T24] usb 1-1: USB disconnect, device number 18 [ 795.374856][ T793] gspca_sn9c2028: read1 error -71 [ 795.384852][ T793] sn9c2028 7-1:220.0: probe with driver sn9c2028 failed with error -71 [ 795.414819][ T30] audit: type=1400 audit(1769522112.664:519): avc: denied { open } for pid=5168 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3358 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 795.425744][ T793] usb 7-1: USB disconnect, device number 2 [ 795.451852][T20771] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4155'. [ 795.470327][T20771] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4155'. [ 795.519308][ T30] audit: type=1400 audit(1769522112.664:520): avc: denied { ioctl } for pid=5168 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3358 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 796.420850][T18087] block nbd0: Possible stuck request ffff8880262b8000: control (read@0,1024B). Runtime 330 seconds [ 796.462207][T18087] block nbd0: Possible stuck request ffff8880262b8200: control (read@1024,1024B). Runtime 330 seconds [ 797.494894][T16107] Bluetooth: hci2: command 0x0406 tx timeout [ 797.539804][T18087] block nbd0: Possible stuck request ffff8880262b8400: control (read@2048,1024B). Runtime 330 seconds [ 797.550964][T18087] block nbd0: Possible stuck request ffff8880262b8600: control (read@3072,1024B). Runtime 330 seconds [ 797.572196][ T30] audit: type=1400 audit(1769522113.214:521): avc: denied { read write } for pid=20781 comm="syz.2.4160" name="mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 797.616871][ T24] IPVS: starting estimator thread 0... [ 797.684943][ T30] audit: type=1400 audit(1769522113.214:522): avc: denied { open } for pid=20781 comm="syz.2.4160" path="/dev/input/mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 797.721516][T20798] netlink: 'syz.0.4165': attribute type 39 has an invalid length. [ 797.754874][T20793] IPVS: using max 48 ests per chain, 115200 per kthread [ 797.782315][T20795] can: request_module (can-proto-0) failed. [ 797.808197][ T30] audit: type=1400 audit(1769522115.244:523): avc: denied { bind } for pid=20800 comm="syz.6.4164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 798.489943][T20813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4170'. [ 798.583443][T20813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4170'. [ 798.917821][T20822] syzkaller0: entered promiscuous mode [ 798.927787][T20822] syzkaller0: entered allmulticast mode [ 799.432702][ T30] audit: type=1400 audit(1769522116.874:524): avc: denied { write } for pid=20831 comm="syz.2.4176" name="sg0" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 799.476567][T20832] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.484220][T20832] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.606871][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 800.005906][ T30] audit: type=1400 audit(1769522117.454:525): avc: denied { open } for pid=20837 comm="syz.6.4181" path="/dev/ptyr1" dev="devtmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 800.091852][T20842] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4180'. [ 800.216338][T20846] syzkaller0: entered promiscuous mode [ 800.334762][T20846] syzkaller0: entered allmulticast mode [ 801.027233][T20865] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 801.040414][T20863] syzkaller0: entered promiscuous mode [ 801.046125][T20863] syzkaller0: entered allmulticast mode [ 801.113124][T20865] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4188'. [ 801.172122][T20870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 801.222335][ T30] audit: type=1326 audit(1769522118.664:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20871 comm="syz.1.4193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f539aeb9 code=0x7ffc0000 [ 801.259174][ T30] audit: type=1326 audit(1769522118.664:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20871 comm="syz.1.4193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7fc2f539aeb9 code=0x7ffc0000 [ 801.284170][ T30] audit: type=1326 audit(1769522118.664:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20871 comm="syz.1.4193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f539aeb9 code=0x7ffc0000 [ 801.324990][ T30] audit: type=1326 audit(1769522118.664:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20871 comm="syz.1.4193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2f539aeb9 code=0x7ffc0000 [ 801.358358][ T30] audit: type=1400 audit(1769522118.804:530): avc: denied { read } for pid=20874 comm="syz.6.4191" path="socket:[69208]" dev="sockfs" ino=69208 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 801.403002][T20880] tipc: Enabling of bearer rejected, failed to enable media [ 801.413377][T20880] syzkaller0: entered promiscuous mode [ 801.535128][T20880] syzkaller0: entered allmulticast mode [ 801.668736][T20883] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4196'. [ 801.700922][T16107] Bluetooth: hci1: command 0x0406 tx timeout [ 802.801559][ T8525] udevd[8525]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 802.883794][T20904] syzkaller0: entered promiscuous mode [ 802.919679][T20904] syzkaller0: entered allmulticast mode [ 803.621192][T20921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 803.700354][T20921] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4207'. [ 803.853055][T20924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 805.282600][ T30] audit: type=1400 audit(1769522122.404:531): avc: denied { ioctl } for pid=20929 comm="syz.5.4209" path="/dev/sg0" dev="devtmpfs" ino=762 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 805.371250][T20935] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4210'. [ 805.463167][T20937] syzkaller0: entered promiscuous mode [ 805.555554][T20937] syzkaller0: entered allmulticast mode [ 806.008205][ T8525] udevd[8525]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 806.473645][T20972] overlay: Unknown parameter '/' [ 806.562027][T20972] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4220'. [ 807.505739][T20999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4223'. [ 808.687746][T20958] syzkaller0: entered promiscuous mode [ 808.693242][T20958] syzkaller0: entered allmulticast mode [ 808.744314][T20973] syzkaller0: entered promiscuous mode [ 808.751291][T20973] syzkaller0: entered allmulticast mode [ 808.893127][T21009] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4225'. [ 809.098457][T11859] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 809.490225][T11859] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 809.505330][T11859] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.510319][ T8525] udevd[8525]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 809.556007][T11859] usb 3-1: config 0 descriptor?? [ 809.834384][T21034] netlink: 'syz.0.4231': attribute type 21 has an invalid length. [ 809.843949][T11859] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 809.861754][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.868335][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.878254][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 810.371874][T11859] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 810.380048][T11859] [drm] Initialized udl on minor 2 [ 810.498593][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 811.115696][T11859] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 811.174893][T11859] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 811.189350][ T48] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 811.204084][T11859] usb 3-1: USB disconnect, device number 29 [ 811.221463][ T48] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 812.981545][T21034] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4231'. [ 812.991008][T21034] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4231'. [ 813.166033][ T30] audit: type=1400 audit(1769522130.604:532): avc: denied { mounton } for pid=21072 comm="syz.0.4238" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 815.044851][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5170 ms [ 815.052891][ C0] lec:lec_tx_timeout: lec0 [ 816.499047][T21099] Cannot find del_set index 4 as target [ 816.957478][T21100] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4247'. [ 817.036171][T21102] syzkaller0: entered promiscuous mode [ 817.041686][T21102] syzkaller0: entered allmulticast mode [ 817.247402][T21109] syzkaller0: entered promiscuous mode [ 817.255212][T21109] syzkaller0: entered allmulticast mode [ 817.357592][ T8525] udevd[8525]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 817.377946][T11859] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 818.467928][T11859] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 818.486897][T11859] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.503204][T11859] usb 6-1: Product: syz [ 818.514975][T11859] usb 6-1: Manufacturer: syz [ 818.526415][T11859] usb 6-1: SerialNumber: syz [ 818.561038][T11859] usb 6-1: config 0 descriptor?? [ 818.718795][T11859] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 818.744094][ T30] audit: type=1400 audit(1769522136.184:533): avc: denied { write } for pid=21132 comm="syz.1.4246" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 819.464514][T21140] overlayfs: failed to resolve './file1': -2 [ 819.951378][T21150] syzkaller0: entered promiscuous mode [ 819.958109][T21150] syzkaller0: entered allmulticast mode [ 822.132297][T11859] gspca_stk1135: reg_w 0x352 err -71 [ 822.143635][T11859] gspca_stk1135: serial bus timeout: status=0x00 [ 822.171308][T11859] gspca_stk1135: Sensor write failed [ 822.199557][T11859] gspca_stk1135: serial bus timeout: status=0x00 [ 822.225501][T11859] gspca_stk1135: Sensor write failed [ 822.230827][T11859] gspca_stk1135: serial bus timeout: status=0x00 [ 822.256651][T11859] gspca_stk1135: Sensor read failed [ 822.285975][T11859] gspca_stk1135: serial bus timeout: status=0x00 [ 822.292468][T11859] gspca_stk1135: Sensor read failed [ 822.307505][T11859] gspca_stk1135: Detected sensor type unknown (0x0) [ 822.323090][T11859] gspca_stk1135: serial bus timeout: status=0x00 [ 822.330291][T11859] gspca_stk1135: Sensor read failed [ 822.336040][T11859] gspca_stk1135: serial bus timeout: status=0x00 [ 822.342598][T11859] gspca_stk1135: Sensor read failed [ 822.348311][T11859] gspca_stk1135: serial bus timeout: status=0x00 [ 822.355367][T11859] gspca_stk1135: Sensor write failed [ 822.360755][T11859] gspca_stk1135: serial bus timeout: status=0x00 [ 822.367943][T11859] gspca_stk1135: Sensor write failed [ 822.373313][T11859] stk1135 6-1:0.0: probe with driver stk1135 failed with error -71 [ 822.392756][T11859] usb 6-1: USB disconnect, device number 20 [ 823.807460][T21152] syzkaller0: entered promiscuous mode [ 823.812942][T21152] syzkaller0: entered allmulticast mode [ 824.167891][T21215] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4282'. [ 824.563309][T21231] QAT: failed to copy from user cfg_data. [ 824.690499][T21234] syzkaller0: entered promiscuous mode [ 824.696152][T21234] syzkaller0: entered allmulticast mode [ 824.766042][T21236] syzkaller0: entered promiscuous mode [ 824.771573][T21236] syzkaller0: entered allmulticast mode [ 825.857901][ T30] audit: type=1400 audit(1769522143.304:534): avc: denied { create } for pid=21254 comm="syz.0.4295" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 825.907695][ T30] audit: type=1400 audit(1769522143.334:535): avc: denied { setattr } for pid=21254 comm="syz.0.4295" name="file0" dev="tmpfs" ino=1615 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 826.599948][T18087] block nbd0: Possible stuck request ffff8880262b8000: control (read@0,1024B). Runtime 360 seconds [ 827.105434][T21272] syzkaller0: entered promiscuous mode [ 827.128614][T21272] syzkaller0: entered allmulticast mode [ 827.364713][T16107] Bluetooth: hci5: command 0x0406 tx timeout [ 827.561185][T21280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4302'. [ 827.652875][T18087] block nbd0: Possible stuck request ffff8880262b8200: control (read@1024,1024B). Runtime 360 seconds [ 827.664033][T18087] block nbd0: Possible stuck request ffff8880262b8400: control (read@2048,1024B). Runtime 360 seconds [ 827.683600][T18087] block nbd0: Possible stuck request ffff8880262b8600: control (read@3072,1024B). Runtime 360 seconds [ 828.784883][ T5869] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 829.407059][ T5869] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 829.445352][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 829.838547][ T5869] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 829.881295][T21327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4315'. [ 829.893739][ T5869] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 829.904416][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.916308][ T5869] usb 1-1: Product: syz [ 829.934695][ T5869] usb 1-1: Manufacturer: syz [ 829.940734][ T5869] usb 1-1: SerialNumber: syz [ 829.967950][ T5869] usb 1-1: config 0 descriptor?? [ 829.982338][T21313] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 830.005622][T21330] syzkaller0: entered promiscuous mode [ 830.011126][T21330] syzkaller0: entered allmulticast mode [ 830.073827][T21335] syzkaller0: entered promiscuous mode [ 830.080266][T21335] syzkaller0: entered allmulticast mode [ 830.250509][T21313] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 831.301634][T21361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4331'. [ 831.511697][T21343] xt_CT: You must specify a L4 protocol and not use inversions on it [ 831.602127][T21370] syzkaller0: entered promiscuous mode [ 831.604861][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 831.625978][T21370] syzkaller0: entered allmulticast mode [ 831.659319][T21371] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 831.979795][T21385] netlink: 'syz.6.4339': attribute type 39 has an invalid length. [ 833.116991][T21390] can: request_module (can-proto-0) failed. [ 833.140923][T11859] usb 1-1: USB disconnect, device number 19 [ 833.166465][T21390] syzkaller1: entered promiscuous mode [ 833.171944][T21390] syzkaller1: entered allmulticast mode [ 833.821941][T21406] syzkaller0: entered promiscuous mode [ 833.864061][T21406] syzkaller0: entered allmulticast mode [ 837.585432][T21447] x_tables: duplicate entry at hook 2 [ 838.450506][T21450] netlink: set zone limit has 4 unknown bytes [ 838.565276][ T5183] udevd[5183]: worker [5800] /devices/virtual/block/nbd0 timeout; kill it [ 838.573950][ T5183] udevd[5183]: seq 15366 '/devices/virtual/block/nbd0' killed [ 838.938412][T21455] can: request_module (can-proto-0) failed. [ 838.945250][T21463] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4363'. [ 839.019516][T21470] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4363'. [ 840.030696][T21417] bridge0: port 2(bridge_slave_1) entered disabled state [ 840.038327][T21417] bridge0: port 1(bridge_slave_0) entered disabled state [ 840.116352][T21476] xfrm0 speed is unknown, defaulting to 1000 [ 842.272370][ T30] audit: type=1400 audit(1769522159.324:536): avc: denied { write } for pid=21497 comm="syz.2.4377" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 842.441433][T21509] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.449228][T21509] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.454732][ T793] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 842.675547][ T793] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 842.705578][ T793] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=10.85 [ 842.846951][T21511] ceph: No mds server is up or the cluster is laggy [ 842.948684][ T793] usb 7-1: New USB device strings: Mfr=153, Product=195, SerialNumber=0 [ 842.959522][ T793] usb 7-1: Product: syz [ 842.963697][ T793] usb 7-1: Manufacturer: syz [ 843.020764][ T793] usb 7-1: config 0 descriptor?? [ 843.056042][ T793] pwc: Askey VC010 type 2 USB webcam detected. [ 843.131359][T21519] can: request_module (can-proto-0) failed. [ 843.164433][T21519] syzkaller1: entered promiscuous mode [ 843.170116][T21519] syzkaller1: entered allmulticast mode [ 843.399832][T21522] syzkaller0: entered promiscuous mode [ 843.414693][T21522] syzkaller0: entered allmulticast mode [ 843.535444][ T793] pwc: recv_control_msg error -32 req 02 val 2b00 [ 843.546667][ T793] pwc: recv_control_msg error -32 req 02 val 2700 [ 843.573547][ T793] pwc: recv_control_msg error -32 req 02 val 2c00 [ 843.602913][ T793] pwc: recv_control_msg error -32 req 04 val 1000 [ 843.618819][ T793] pwc: recv_control_msg error -32 req 04 val 1300 [ 843.634460][ T793] pwc: recv_control_msg error -32 req 04 val 1400 [ 843.642873][ T793] pwc: recv_control_msg error -32 req 02 val 2000 [ 843.654502][T21529] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 843.666718][T21529] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 843.674617][ T793] pwc: recv_control_msg error -32 req 02 val 2100 [ 843.682210][ T793] pwc: recv_control_msg error -32 req 04 val 1500 [ 843.697386][ T793] pwc: recv_control_msg error -32 req 02 val 2500 [ 843.697561][T21529] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 843.713275][ T793] pwc: recv_control_msg error -32 req 02 val 2400 [ 843.720155][T21529] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 843.728047][ T793] pwc: recv_control_msg error -32 req 02 val 2600 [ 843.735470][ T793] pwc: recv_control_msg error -32 req 02 val 2900 [ 843.742670][ T793] pwc: recv_control_msg error -32 req 02 val 2800 [ 843.753839][ T793] pwc: recv_control_msg error -32 req 04 val 1100 [ 843.773988][ T793] pwc: Registered as video103. [ 843.783903][T21536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4385'. [ 843.795864][ T793] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input6 [ 843.974467][ T5961] usb 7-1: USB disconnect, device number 3 [ 844.224233][T21549] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4390'. [ 844.243676][T21549] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4390'. [ 844.865416][ T48] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 845.314850][ T48] usb 6-1: Using ep0 maxpacket: 8 [ 845.332996][ T48] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 845.342576][ T48] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.351924][ T48] usb 6-1: Product: syz [ 845.461369][ T48] usb 6-1: Manufacturer: syz [ 845.532579][ T48] usb 6-1: SerialNumber: syz [ 845.555460][ T48] usb 6-1: config 0 descriptor?? [ 845.766942][T21571] syzkaller0: entered promiscuous mode [ 845.772537][T21571] syzkaller0: entered allmulticast mode [ 845.782900][ T48] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 846.325017][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 846.649391][ T48] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 846.910343][ T48] usb 6-1: USB disconnect, device number 21 [ 848.050644][T21618] syzkaller0: entered promiscuous mode [ 848.080595][T21618] syzkaller0: entered allmulticast mode [ 848.290631][ T30] audit: type=1326 audit(1769522165.734:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21635 comm="syz.0.4416" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda84b9aeb9 code=0x0 [ 848.523981][ T30] audit: type=1400 audit(1769522165.964:538): avc: denied { connect } for pid=21645 comm="syz.5.4419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 848.590462][ T793] Process accounting resumed [ 849.382910][T21673] random: crng reseeded on system resumption [ 849.394601][ T30] audit: type=1400 audit(1769522166.824:539): avc: denied { write } for pid=21672 comm="syz.0.4429" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 849.480242][ T30] audit: type=1400 audit(1769522166.864:540): avc: denied { ioctl } for pid=21672 comm="syz.0.4429" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 849.529913][ T31] INFO: task syz.4.3128:17385 blocked for more than 144 seconds. [ 849.564655][ T31] Not tainted syzkaller #0 [ 849.591816][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 849.608585][ T31] task:syz.4.3128 state:D stack:25288 pid:17385 tgid:17378 ppid:5814 task_flags:0x400040 flags:0x00080002 [ 849.622025][ T31] Call Trace: [ 849.625938][ T31] [ 849.628956][ T31] ? __schedule+0xf65/0x5e10 [ 849.633764][ T31] __schedule+0xfe4/0x5e10 [ 849.639413][ T31] ? __lock_acquire+0x4a5/0x2630 [ 849.644587][ T31] ? __pfx___schedule+0x10/0x10 [ 849.649918][ T31] ? find_held_lock+0x2b/0x80 [ 849.709264][ T31] ? schedule+0x2bf/0x390 [ 849.714842][ T31] schedule+0xdd/0x390 [ 849.718985][ T31] io_schedule+0x8a/0xf0 [ 849.727708][ T31] folio_wait_bit_common+0x414/0xa70 [ 849.734167][ T31] ? folio_wait_bit_common+0x2a0/0xa70 [ 849.744816][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 849.751823][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 849.771455][ T31] ? __pfx___might_resched+0x10/0x10 [ 849.776808][ T31] ? compaction_free+0x182/0x430 [ 849.793888][ T31] migrate_pages_batch+0x1b85/0x4530 [ 849.811885][ T31] ? __pfx_compaction_alloc+0x10/0x10 [ 849.817462][ T31] ? __pfx_compaction_free+0x10/0x10 [ 849.824730][ T31] ? __pfx_migrate_pages_batch+0x10/0x10 [ 849.836363][ T31] ? finish_task_switch.isra.0+0x204/0xb70 [ 849.842187][ T31] ? rcu_is_watching+0x12/0xc0 [ 849.847365][ T31] ? __schedule+0xf65/0x5e10 [ 849.851955][ T31] ? __schedule+0xff6/0x5e10 [ 849.856612][ T31] migrate_pages_sync+0x4db/0x880 [ 849.861735][ T31] ? __pfx_compaction_alloc+0x10/0x10 [ 849.867183][ T31] ? __pfx_compaction_free+0x10/0x10 [ 849.872572][ T31] ? __pfx_migrate_pages_sync+0x10/0x10 [ 849.878559][ T31] ? lockdep_hardirqs_on+0x78/0x100 [ 849.883767][ T31] ? irqentry_exit+0x180/0x670 [ 849.888628][ T31] migrate_pages+0x1a5b/0x2810 [ 849.893499][ T31] ? __pfx_compaction_alloc+0x10/0x10 [ 849.898927][ T31] ? __pfx_compaction_free+0x10/0x10 [ 849.904331][ T31] ? __pfx_migrate_pages+0x10/0x10 [ 849.909540][ T31] ? __pfx_isolate_migratepages_block+0x10/0x10 [ 849.916019][ T31] ? __nr_to_section+0xaa/0x100 [ 849.920879][ T31] ? pfn_to_online_page+0x178/0x4c0 [ 849.926119][ T31] compact_zone+0x240c/0x4320 [ 849.930901][ T31] ? __pfx_compact_zone+0x10/0x10 [ 849.935974][ T31] ? __flush_work+0xa38/0xcb0 [ 849.940725][ T31] ? __flush_work+0xa38/0xcb0 [ 849.945532][ T31] compact_node+0x17f/0x2c0 [ 849.950020][ T31] ? __pfx_compact_node+0x10/0x10 [ 849.955320][ T31] ? __lru_add_drain_all+0x43c/0x650 [ 849.960607][ T31] ? __lru_add_drain_all+0x441/0x650 [ 849.965979][ T31] sysctl_compaction_handler+0x141/0x210 [ 849.971749][ T31] proc_sys_call_handler+0x47f/0x5a0 [ 849.977442][ T31] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 849.983269][ T31] ? splice_from_pipe_next+0x1ec/0x5a0 [ 849.988835][ T31] iter_file_splice_write+0x82b/0x10a0 [ 849.994386][ T31] ? __pfx_iter_file_splice_write+0x10/0x10 [ 850.000517][ T31] ? __pfx_iter_file_splice_write+0x10/0x10 [ 850.006750][ T31] direct_splice_actor+0x192/0x6c0 [ 850.011967][ T31] splice_direct_to_actor+0x345/0xa30 [ 850.017386][ T31] ? __pfx_direct_splice_actor+0x10/0x10 [ 850.023105][ T31] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 850.029124][ T31] do_splice_direct+0x174/0x240 [ 850.033982][ T31] ? __pfx_do_splice_direct+0x10/0x10 [ 850.039736][ T31] ? avc_policy_seqno+0x9/0x20 [ 850.044497][ T31] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 850.050479][ T31] ? rw_verify_area+0xce/0x6d0 [ 850.055448][ T31] do_sendfile+0xadc/0xe20 [ 850.059847][ T31] ? __pfx_do_sendfile+0x10/0x10 [ 850.064992][ T31] __x64_sys_sendfile64+0x154/0x220 [ 850.070180][ T31] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 850.076110][ T31] do_syscall_64+0xc9/0xf80 [ 850.080606][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.086944][ T31] RIP: 0033:0x7f336559aeb9 [ 850.091459][ T31] RSP: 002b:00007f3366434028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 850.099895][ T31] RAX: ffffffffffffffda RBX: 00007f3365816180 RCX: 00007f336559aeb9 [ 850.107927][ T31] RDX: 00002000000000c0 RSI: 0000000000000007 RDI: 0000000000000008 [ 850.116088][ T31] RBP: 00007f3365608c1f R08: 0000000000000000 R09: 0000000000000000 [ 850.124061][ T31] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 850.132072][ T31] R13: 00007f3365816218 R14: 00007f3365816180 R15: 00007ffc45b01b88 [ 850.140063][ T31] [ 850.143509][ T31] [ 850.143509][ T31] Showing all locks held in the system: [ 850.152062][ T31] 1 lock held by khungtaskd/31: [ 850.157128][ T31] #0: ffffffff8e5e32e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 850.173431][ T31] 2 locks held by getty/5570: [ 850.178231][ T31] #0: ffff88814e3500a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 850.188029][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 850.198323][ T31] 1 lock held by udevd/5800: [ 850.202908][ T31] #0: ffff88814235c358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 850.212338][ T31] 1 lock held by syz.4.3128/17385: [ 850.217456][ T31] #0: ffff88807bc44420 (sb_writers#3){.+.+}-{0:0}, at: splice_direct_to_actor+0x345/0xa30 [ 850.227532][ T31] [ 850.229845][ T31] ============================================= [ 850.229845][ T31] [ 850.238610][ T31] NMI backtrace for cpu 0 [ 850.238627][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 850.238647][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 850.238658][ T31] Call Trace: [ 850.238664][ T31] [ 850.238671][ T31] dump_stack_lvl+0x100/0x190 [ 850.238705][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 850.238731][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 850.238756][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 850.238787][ T31] sys_info+0x141/0x190 [ 850.238808][ T31] watchdog+0xcc3/0xfe0 [ 850.238841][ T31] ? __pfx_watchdog+0x10/0x10 [ 850.238872][ T31] ? __kthread_parkme+0x18c/0x230 [ 850.238899][ T31] ? __pfx_watchdog+0x10/0x10 [ 850.238925][ T31] ? __pfx_watchdog+0x10/0x10 [ 850.238949][ T31] kthread+0x3b3/0x730 [ 850.238970][ T31] ? __pfx_kthread+0x10/0x10 [ 850.238989][ T31] ? ret_from_fork+0x79/0xaf0 [ 850.239011][ T31] ? ret_from_fork+0x79/0xaf0 [ 850.239032][ T31] ? rcu_is_watching+0x12/0xc0 [ 850.239057][ T31] ? __pfx_kthread+0x10/0x10 [ 850.239076][ T31] ret_from_fork+0x754/0xaf0 [ 850.239096][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 850.239118][ T31] ? __switch_to+0x7b9/0x10c0 [ 850.239143][ T31] ? __pfx_kthread+0x10/0x10 [ 850.239162][ T31] ret_from_fork_asm+0x1a/0x30 [ 850.239190][ T31] [ 850.239197][ T31] Sending NMI from CPU 0 to CPUs 1: [ 850.377491][ C1] NMI backtrace for cpu 1 [ 850.377509][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 850.377526][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 850.377536][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 850.377561][ C1] Code: 66 78 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 bc 14 00 fb f4 fc 31 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 850.377574][ C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000246 [ 850.377587][ C1] RAX: 000000000272abb1 RBX: ffff88801e2ba4c0 RCX: ffffffff8b76c4b5 [ 850.377597][ C1] RDX: 0000000000000000 RSI: ffffffff8dc454ef RDI: ffffffff8bfa35a0 [ 850.377606][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: ffffed10170a673d [ 850.377614][ C1] R10: ffff8880b85339eb R11: 0000000000000000 R12: ffffed1003c57498 [ 850.377623][ C1] R13: 0000000000000001 R14: ffffffff90b74bd0 R15: 0000000000000000 [ 850.377632][ C1] FS: 0000000000000000(0000) GS:ffff8881246db000(0000) knlGS:0000000000000000 [ 850.377646][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 850.377655][ C1] CR2: 0000557d31298168 CR3: 00000000784b3000 CR4: 00000000003526f0 [ 850.377663][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 850.377672][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 850.377681][ C1] Call Trace: [ 850.377687][ C1] [ 850.377692][ C1] default_idle+0x9/0x10 [ 850.377713][ C1] default_idle_call+0x6c/0xb0 [ 850.377728][ C1] do_idle+0x35b/0x4b0 [ 850.377751][ C1] ? __pfx_do_idle+0x10/0x10 [ 850.377770][ C1] cpu_startup_entry+0x4f/0x60 [ 850.377787][ C1] start_secondary+0x21d/0x2d0 [ 850.377803][ C1] ? __pfx_start_secondary+0x10/0x10 [ 850.377818][ C1] common_startup_64+0x13e/0x148 [ 850.377842][ C1] [ 850.561464][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 850.568321][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 850.577401][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 850.587431][ T31] Call Trace: [ 850.590705][ T31] [ 850.593616][ T31] dump_stack_lvl+0x100/0x190 [ 850.598275][ T31] vpanic+0x20d/0x630 [ 850.602233][ T31] panic+0xd1/0xd1 [ 850.605926][ T31] ? __pfx_panic+0x10/0x10 [ 850.610314][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 850.616444][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 850.622584][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 850.628721][ T31] ? watchdog.cold+0x198/0x1ca [ 850.633463][ T31] ? watchdog+0xcd3/0xfe0 [ 850.637772][ T31] watchdog.cold+0x1a9/0x1ca [ 850.642340][ T31] ? __pfx_watchdog+0x10/0x10 [ 850.647005][ T31] ? __kthread_parkme+0x18c/0x230 [ 850.652034][ T31] ? __pfx_watchdog+0x10/0x10 [ 850.656708][ T31] ? __pfx_watchdog+0x10/0x10 [ 850.661366][ T31] kthread+0x3b3/0x730 [ 850.665416][ T31] ? __pfx_kthread+0x10/0x10 [ 850.669988][ T31] ? ret_from_fork+0x79/0xaf0 [ 850.674652][ T31] ? ret_from_fork+0x79/0xaf0 [ 850.679314][ T31] ? rcu_is_watching+0x12/0xc0 [ 850.684063][ T31] ? __pfx_kthread+0x10/0x10 [ 850.688633][ T31] ret_from_fork+0x754/0xaf0 [ 850.693204][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 850.698297][ T31] ? __switch_to+0x7b9/0x10c0 [ 850.702976][ T31] ? __pfx_kthread+0x10/0x10 [ 850.707550][ T31] ret_from_fork_asm+0x1a/0x30 [ 850.712304][ T31] [ 850.715680][ T31] Kernel Offset: disabled [ 850.719984][ T31] Rebooting in 86400 seconds..