last executing test programs: 1m54.673048502s ago: executing program 2 (id=81): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) prlimit64(0x0, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='highspeed\x00', 0xa) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, r1, 0x0, 0x1000004) 1m54.444637454s ago: executing program 3 (id=82): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4fc, 0x5d8, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffd, 0x0, 0x1, {0x22, 0xa0}}, {{{0x9, 0x5, 0x81, 0x3, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2000000d200"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2000000d200"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00005200060005000100000008000800", @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0xc0c5}, 0x0) 1m53.552684165s ago: executing program 2 (id=88): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f0000000040), 0x0, 0x40880) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/90, 0x5a}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r5, 0x0, 0x3}, 0x18) r6 = io_uring_setup(0x40f8, &(0x7f0000000480)={0x0, 0x42bad, 0x0, 0x1, 0x271}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r6, 0x14, 0x0, 0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r7 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r8, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x16f, 0x2, 0x1, 0x4, 0x100, 0x100}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) bind$unix(r7, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e) 1m52.314519816s ago: executing program 1 (id=92): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xb, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 1m52.128336616s ago: executing program 2 (id=93): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='.\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000080009efff000000100000000000000041e5ebcc54f30dbcf9c9e1d8258e54d96aceba50007d210ff9e5d5788bd927b132a311efbb8c724a9636b8b4893ef9cfbdfff4ebe5b7441b85f2d271ff7bb3fe6d86cf5b894f530d105c11445f99c9a5371a09bfd86a4d873560d2eb8cd523447baaef8363dfb2a070"], 0x24, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000002000010329bd7000100000000200000403000007020000001400110069616376746170300000000000000000080006002503"], 0x38}, 0x1, 0x0, 0x0, 0x240480c4}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3800000010003704feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="8b040400000000001800128008000100736974000c00028008000300ff"], 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x20000000) pipe(0x0) io_setup(0x4, 0x0) io_cancel(0x0, 0x0, 0x0) socket$kcm(0x1e, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) 1m51.806518208s ago: executing program 1 (id=95): socket(0x2, 0x2, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40840}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback={0xff00}}, 0x1c) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1c8, 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, 0x0, 0x0) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r6 = open$dir(&(0x7f0000000280)='./file0\x00', 0x40180, 0x0) mkdirat(r6, &(0x7f0000000300)='./file0\x00', 0x46) 1m51.241392437s ago: executing program 3 (id=96): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000340), 0x8) getsockopt$inet6_opts(r5, 0x29, 0x3b, 0x0, &(0x7f00000002c0)) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$P9_RREAD(r6, 0x0, 0x1009) recvmmsg(r0, &(0x7f0000004fc0)=[{{0x0, 0xc, 0x0}, 0x5}], 0x1, 0x2, 0x0) write(r0, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700000001000000", 0x18) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{0x0, 0x8, 0x8, 0x6}, {0x1000, 0x0, 0x8}, {0x7, 0x4, 0x1, 0x7fffffff}, {0x0, 0x7, 0x6, 0x1}]}) read$char_usb(r7, &(0x7f0000000000)=""/188, 0xbc) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) 1m50.964318592s ago: executing program 2 (id=97): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r8, 0x541c, 0x0) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r9, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r10, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r9, 0x3ba0, &(0x7f0000000380)={0x48, 0x15, r11}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x4000000, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xebaea3d5279c9aee}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x4, 0x2, 0xffffffff}}]}, 0x38}}, 0x0) 1m50.939217715s ago: executing program 0 (id=98): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000837bbc27b96d04489fafc34000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) setsockopt$inet_mreqn(r1, 0x0, 0x28, &(0x7f0000000280)={@loopback, @dev={0xac, 0x14, 0x14, 0xa}}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x10, 0x3, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) syz_emit_ethernet(0x42, &(0x7f0000000140)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0xc, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x3, 0x0, @void}}}}}}}}, 0x0) r3 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000006c0)=0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) sendfile(r8, r5, 0x0, 0x80008) 1m49.759867415s ago: executing program 0 (id=100): r0 = socket(0x400000000010, 0x3, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x4, 0x8, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000000)={0x6, 0x7, 0x10021da0, 0x0, 0xff, "42f42749a2ed195a14c84953dc7e8e5aec7776", 0xfffffffe, 0x1c67c}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) userfaultfd(0x1) r6 = syz_open_dev$media(&(0x7f0000000080), 0x1, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r6, 0x80047c05, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0x100008b}, 0x0) r10 = getpgrp(0x0) syz_open_procfs(r10, &(0x7f0000000040)='status\x00') sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x9) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0) r11 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r11, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_uring_enter(r7, 0x47f6, 0x0, 0x2, 0x0, 0x0) r12 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r12, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x887}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd, 0x16}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008080}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x10, 0x0, 0x20040001, 0x10, 0xe87e, 0x0, 0x3, 0x80000000}}) 1m49.498968632s ago: executing program 1 (id=101): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) unshare(0x20000600) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16, @ANYBLOB="010025"], 0x8c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) (async) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16, @ANYBLOB="010025"], 0x8c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) (async) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) close(r2) (async) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'geneve0\x00', 0x400}) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'geneve0\x00', 0x400}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ec0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb0}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x66) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/warn_count', 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) prctl$PR_SET_KEEPCAPS(0x8, 0x1) read$FUSE(r5, &(0x7f0000006680)={0x2020}, 0x2020) (async) read$FUSE(r5, &(0x7f0000006680)={0x2020}, 0x2020) 1m48.425074692s ago: executing program 0 (id=103): mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x4a, 0x0, {0xd496}}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x50) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)=ANY=[], 0xa8) r3 = syz_clone(0x80100800, &(0x7f0000000180)="641ed626c9927eede6b8e055efc0e5aec54285df07fb7a8261bd77abe9c6739f36b5ce8b5bd973dde9377275e3be5aab8fec996c6f36b4f9c12ad38718e45b359630a49d7fd8a5ec12f3570788d45770b57415203da931fbb2fb4926fa62f5169290d9ada75c51c0ce754bf29d72ececc26e72652f17a9237dbf655a1c29b715a368c50e0dfe13557d49507fb49c", 0x8e, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000300)="34add7aeaa62c7b76a64dc2e1eb86ac79b68fc111b126696800fe2761a33b88ef5f2fbe6a5b6ef06a1b4b8c08729368ddabe96c062d607e08872da697713313259e670d2cf184dc6304f1c30ed175a812615d115b66c575c6d1bd225a6151984015be694967ae9d7f6f9f22e1d9e79f9b78e09e0") prlimit64(r3, 0x0, 0x0, &(0x7f00000000c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 1m48.361446183s ago: executing program 4 (id=104): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000000)={0x2, 0x0, 0x98, &(0x7f00000000c0)={0x0, 0x800, 0x1000000f}}) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 1m48.32648691s ago: executing program 2 (id=105): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r1, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e29, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x16, 0x1}}}}}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r5, &(0x7f0000000180)=@abs, &(0x7f0000000080)=0x6e) connect$unix(r5, &(0x7f000057eff8)=@abs={0x1}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) socket$packet(0x11, 0x2, 0x300) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1m48.18534618s ago: executing program 4 (id=106): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r3) sendmsg$NFC_CMD_GET_SE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x709}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delchain={0x24, 0x2e, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff3, 0xffff}, {0x0, 0xe}}}, 0x24}}, 0x0) 1m47.997700188s ago: executing program 3 (id=107): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000018000109000000000000000002"], 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000837bbc27b96d04489fafc34000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) setsockopt$inet_mreqn(r1, 0x0, 0x28, &(0x7f0000000280)={@loopback, @dev={0xac, 0x14, 0x14, 0xa}}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f00000004c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x10, 0x3, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) syz_emit_ethernet(0x42, &(0x7f0000000140)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0xc, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x3, 0x0, @void}}}}}}}}, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000680), 0x80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) sendfile(r7, r4, 0x0, 0x80008) 1m47.724700859s ago: executing program 1 (id=108): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000600)={0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000550000a3d500000064264b0fc72c8df11f0000c4a3090a41c15836450fa10f0170d38f497812cf44ff47fb0f20e035800000000f22"], 0x55}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x632d40, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000000000087008000000000000f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2202c4"], 0x87}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20a201, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t root'], 0x27) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000180)={0x2, 0x7000, 0x1}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1m47.1370866s ago: executing program 0 (id=109): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/154, 0x9a}], 0x1, 0xffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x7, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000440)="b9a6080000b8b7bd3773ba000000000f30c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000040066b8de000f00d02e0f005ffa400fe8032e640fc71f", 0x5c}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x9) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000380)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001300)={0xc, {"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", 0x1000}}, 0x1006) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2042, 0x0) futex_waitv(&(0x7f00000022c0)=[{0x8, 0x0, 0x104}], 0x1, 0x0, 0x0, 0x1) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r8 = userfaultfd(0x1) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x50}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@md0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000000)='pvfs2\x00', 0x480, 0x0) 1m46.503246729s ago: executing program 4 (id=110): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r7}, 0x18) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r8, 0x541c, 0x0) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r9, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r10, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r9, 0x3ba0, &(0x7f0000000380)={0x48, 0x15, r11}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x4000000, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xebaea3d5279c9aee}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x4, 0x2, 0xffffffff}}]}, 0x38}}, 0x0) 1m43.713295957s ago: executing program 1 (id=111): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x240, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_disconnect(r0) syz_open_dev$usbfs(0x0, 0x80076, 0x402000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x24, r6, 0x1, 0xfffffffe, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x20, 0x9, 0x2, 0x25dfdbff, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r8 = socket$inet(0x2, 0x1, 0x100) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r8, 0x89f6, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000180)={@remote, 0x0, 0x0, 0x30, 0x0, [{}, {@initdev}, {@local}]}}) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000200)=0x1, 0x12) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) 1m43.711737085s ago: executing program 3 (id=112): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f00000000c0)=0xe4, &(0x7f00000002c0)=0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x3, 0x4) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) fcntl$setstatus(r3, 0x4, 0x2400) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x0, 0x12080, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00']) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x40000}}, 0x10) listen(r7, 0x0) 1m42.479848331s ago: executing program 0 (id=113): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000000000a70d000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008881) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed39", 0x10}], 0x1}}], 0x1, 0x20008000) msgrcv(0x0, 0x0, 0x0, 0x5, 0x4c00) r3 = io_uring_setup(0x5c79, &(0x7f0000000180)={0x0, 0x83c6, 0x20000, 0x0, 0x1b3}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x48100) fstat(r3, &(0x7f0000000200)) read$FUSE(0xffffffffffffffff, &(0x7f0000000940)={0x2020}, 0x2020) creat(&(0x7f00000001c0)='./file0\x00', 0x8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000100)="644183e6152f3eadf576ac37b5d9a70a4ae7acd89ec931", 0x17}, {&(0x7f0000000740)="1fca40ab9a1b8a64aa3ca48e92d1606a9eb73e57f121c9dbd048a1a93e4ef52bb70f076417735a0d4b3c0a08e057d1f6a54eef3f5f400eaf8e9dc633b8f143af70324117b140e6c78d79c8172587a1baa8957468c5634c937bba8a4c71e9590b7c8700c58661dc15b5", 0x69}], 0x2, 0x0, 0x0, 0x20004001}}], 0x1, 0x8000) recvmsg$unix(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90ff}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x89}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m42.010133157s ago: executing program 4 (id=114): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]}) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = dup(0xffffffffffffffff) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="1858b036410f017d0048b8dc4b13b61e0b813a66b899000f00d00f21f835c00000a00f23f8660f2263c4c17c773666420f3a428ce80c00000000fa6536460f01f8c422d1b7900000c0fe", 0x4a}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1m40.549352421s ago: executing program 2 (id=115): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/kcm\x00') gettid() fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0xfffffffe) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write$eventfd(r0, &(0x7f0000000000)=0x5, 0x8) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x1c, 0x2) symlink(&(0x7f0000000040)='.\x00', 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 1m38.155655936s ago: executing program 0 (id=116): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r8, 0x541c, 0x0) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r9, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r10, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r9, 0x3ba0, &(0x7f0000000380)={0x48, 0x15, r11}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x4000000, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xebaea3d5279c9aee}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x4, 0x2, 0xffffffff}}]}, 0x38}}, 0x0) 1m36.442961872s ago: executing program 3 (id=117): ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) r0 = openat$cuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000640)={0xcc, 0x7, 0x0, 0x7, 0x2, 0x0, [{0xecc, 0x6, 0xc, '\x00', 0x1}, {0x9, 0x81, 0x2, '\x00', 0x901}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYBLOB="b496a11d6af949eb94fb995474937bad4320b014773c723fb787fff115f57d65b61573c4c5747167ffaa153a7cffb828028da93eff865df931d40be905fbcc03690e208fb4d1bb2f18e6174b68a6b7f0eb9a8a66ec13530251ffa65b4eb621c8bf"], 0x28}}, 0x0) r1 = getpid() r2 = syz_io_uring_setup(0x17b3, &(0x7f0000000500)={0x0, 0x18f9, 0x13290, 0x0, 0x1e1}, &(0x7f0000000300), &(0x7f0000000340)) io_uring_enter(r2, 0x276b, 0x2, 0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x181100, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r5 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000040)={0x8}) ioctl$vim2m_VIDIOC_TRY_FMT(r5, 0xc0cc5640, &(0x7f0000000540)={0x1, @sdr={0x36314d4e, 0x7}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, &(0x7f0000000500), 0x0, 0xfffffffffffffffd) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010002104000000080000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000040)=0x3) 1m34.949308234s ago: executing program 1 (id=118): io_uring_setup(0x19c1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={'veth1_vlan\x00', {0x2, 0x4e22, @empty}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f00000002c0)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001000000000000006c4ab7ee13472400000000000a20000000000a01030000000000000000010000000900010073797a3000000000140000001100010000000000000000000000000a"], 0x48}}, 0x4000040) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwrite64(r6, &(0x7f0000000080)='3', 0x1, 0x0) prlimit64(r0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000002700)=""/102392, 0x18ff8) 1m33.960771489s ago: executing program 4 (id=119): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000000)=0x1, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002000)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], 0x20}}], 0x1, 0x4048000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r3}, 0x10) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_PORT_MIN={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000000)=0x1, 0x4) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00'}) (async) sendmmsg$inet(r0, &(0x7f0000002000)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], 0x20}}], 0x1, 0x4048000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r3}, 0x10) (async) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_PORT_MIN={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) (async) 1m31.284870062s ago: executing program 3 (id=120): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b036812e0ff64000200475400f6a13bb1000000080088474820", 0x1fffe, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) sendmsg$nl_route(r0, 0x0, 0x24008800) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000100)={0x0, @generic={0x1f, "283c5dbb594556521ac3db5e7c11"}, @in={0x2, 0x4e22, @remote}, @tipc=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x4, 0x0, 0x0, 0x0, 0x4, &(0x7f00000000c0)='pim6reg\x00', 0x9, 0x4, 0x4}) shmctl$IPC_RMID(0x0, 0x300) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r8], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000680)={0x2c, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x1, 0x0, 0x0, @binary="98"}]}]}, 0x2c}], 0x1}, 0x0) r9 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x92, 0xec, 0xc6, 0x20, 0x5ac, 0x77c2, 0xeb3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xc4, 0x1, 0x2, 0xff, 0xfd, 0x1, 0x80, [], [{{0x9, 0x5, 0x2, 0x2, 0x210, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r9, &(0x7f0000000000)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="cce3d945e1042db3"]}, 0x0) syz_usb_control_io(r9, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000140)={0x0, 0x5, 0x6, "1693c6a87ad2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r11 = socket(0x2, 0x1, 0x0) setsockopt$inet_opts(r11, 0x0, 0x1, 0x0, 0x3c) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x240801, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r5) setsockopt$bt_l2cap_L2CAP_LM(r10, 0x6, 0x3, &(0x7f0000000080)=0x4, 0x4) 1m29.804668979s ago: executing program 4 (id=121): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff00}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000440)="b805000000b9c30e00000f01d966b825000f00d06445d32a420f18147ec40260f3130f001866baf80cb858101b8cef66bafc0cb000eec744240034000000c74424024e4ba7b4ff1c2448b800700000000000000f23c80f21f8350000f0000f23f8420f79bb07000000", 0x69}], 0x1, 0x3e, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=ANY=[@ANYBLOB="280000000203030000000000000000000100000208f9ff786e3a5abbebd2f7f1b4217800010001000023090002000000000502000000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) getsockopt$inet_buf(r8, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) socket$kcm(0x2, 0xa, 0x2) 1m13.810416602s ago: executing program 32 (id=115): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/kcm\x00') gettid() fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0xfffffffe) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write$eventfd(r0, &(0x7f0000000000)=0x5, 0x8) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x1c, 0x2) symlink(&(0x7f0000000040)='.\x00', 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 1m13.220456955s ago: executing program 33 (id=116): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r8, 0x541c, 0x0) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r9, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r10, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r9, 0x3ba0, &(0x7f0000000380)={0x48, 0x15, r11}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x4000000, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xebaea3d5279c9aee}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x4, 0x2, 0xffffffff}}]}, 0x38}}, 0x0) 1m13.11459964s ago: executing program 34 (id=118): io_uring_setup(0x19c1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={'veth1_vlan\x00', {0x2, 0x4e22, @empty}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f00000002c0)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001000000000000006c4ab7ee13472400000000000a20000000000a01030000000000000000010000000900010073797a3000000000140000001100010000000000000000000000000a"], 0x48}}, 0x4000040) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwrite64(r6, &(0x7f0000000080)='3', 0x1, 0x0) prlimit64(r0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000002700)=""/102392, 0x18ff8) 1m12.953021388s ago: executing program 35 (id=120): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b036812e0ff64000200475400f6a13bb1000000080088474820", 0x1fffe, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) sendmsg$nl_route(r0, 0x0, 0x24008800) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000100)={0x0, @generic={0x1f, "283c5dbb594556521ac3db5e7c11"}, @in={0x2, 0x4e22, @remote}, @tipc=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x4, 0x0, 0x0, 0x0, 0x4, &(0x7f00000000c0)='pim6reg\x00', 0x9, 0x4, 0x4}) shmctl$IPC_RMID(0x0, 0x300) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r8], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000680)={0x2c, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x5, 0x1, 0x0, 0x0, @binary="98"}]}]}, 0x2c}], 0x1}, 0x0) r9 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x92, 0xec, 0xc6, 0x20, 0x5ac, 0x77c2, 0xeb3a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xc4, 0x1, 0x2, 0xff, 0xfd, 0x1, 0x80, [], [{{0x9, 0x5, 0x2, 0x2, 0x210, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r9, &(0x7f0000000000)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="cce3d945e1042db3"]}, 0x0) syz_usb_control_io(r9, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000140)={0x0, 0x5, 0x6, "1693c6a87ad2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r11 = socket(0x2, 0x1, 0x0) setsockopt$inet_opts(r11, 0x0, 0x1, 0x0, 0x3c) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x240801, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r5) setsockopt$bt_l2cap_L2CAP_LM(r10, 0x6, 0x3, &(0x7f0000000080)=0x4, 0x4) 1m12.800937764s ago: executing program 36 (id=121): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff00}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000440)="b805000000b9c30e00000f01d966b825000f00d06445d32a420f18147ec40260f3130f001866baf80cb858101b8cef66bafc0cb000eec744240034000000c74424024e4ba7b4ff1c2448b800700000000000000f23c80f21f8350000f0000f23f8420f79bb07000000", 0x69}], 0x1, 0x3e, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=ANY=[@ANYBLOB="280000000203030000000000000000000100000208f9ff786e3a5abbebd2f7f1b4217800010001000023090002000000000502000000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) getsockopt$inet_buf(r8, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) socket$kcm(0x2, 0xa, 0x2) 54.771640892s ago: executing program 5 (id=122): socket(0x840000000002, 0x3, 0xff) io_uring_setup(0x0, 0x0) r0 = io_uring_setup(0x2c49, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x3}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x18, &(0x7f0000000000), 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_usb_connect(0x4, 0x58, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xa1, 0xba, 0x14, 0x10, 0xb3c, 0xc002, 0xa39b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x90, 0x0, 0x5, 0xee, 0x23, 0x3e, 0x0, [], [{{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x9, 0x68, 0x80}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x2, 0x2, 0x63}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x0, 0x6, 0x1}}, {{0x9, 0x5, 0xf5ee16fb96974caa, 0x11, 0x400, 0x40, 0x0, 0xb3}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x8, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x45d5}]}}]}}]}}]}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x700}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0xb8}}, 0x20050800) 49.42777994s ago: executing program 5 (id=127): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000837bbc27b96d04489fafc34000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) setsockopt$inet_mreqn(r1, 0x0, 0x28, &(0x7f0000000280)={@loopback, @dev={0xac, 0x14, 0x14, 0xa}}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x10, 0x3, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) syz_emit_ethernet(0x42, &(0x7f0000000140)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0xc, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x3, 0x0, @void}}}}}}}}, 0x0) r3 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000006c0)=0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) sendfile(r8, r5, 0x0, 0x80008) 45.554866451s ago: executing program 7 (id=124): mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x10808a4, &(0x7f00000002c0)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e0000002cae0000050000000900000000200000", @ANYRES32, @ANYBLOB='\x00\x00\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000004000000000000000700"/28], 0x50) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x8, 0x3}}, './file0/file0\x00'}) r3 = openat$cgroup_ro(r2, &(0x7f0000000280)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, 0x0, 0x25, 0x2}, 0x14) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = fanotify_init(0x8, 0x80000) fanotify_mark(r6, 0x105, 0x4800003a, r5, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x23, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000040010000000000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000000893090008000000b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0012000000000000b70500000800000085000000a5000000181100004c6fb21eb52219c8e2566932e51f67d08b697a9b78c196fa0897b9b6127923d1601dbbd2bfbaa1d1bb1a737e8b78c625e507ac383e11e96b94dbc01cfb88808a4ddaae6e2846bce61812d2cc6004e4ec240d93dead305cedf1e8dd02ed6b6288cdabf3305d77972099c471aa855ed6a68105486875e478a893", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000086000000183b0000040000000000000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000480)='GPL\x00', 0xc4, 0x41, &(0x7f00000004c0)=""/65, 0x41100, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000007c0)={0x1, 0x6, 0x32, 0x4}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000a00)=[{0x0, 0x4, 0xe, 0x5}, {0x5, 0x4, 0x0, 0x5}, {0x3, 0x3, 0x5, 0x4}, {0x2, 0x4, 0x10, 0x1}], 0x10, 0x6}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)=ANY=[@ANYRES32=r6, @ANYRES32, @ANYBLOB="aec9f080bc0b3fc4cc08b2fd48dc50c79e53ee3f04defd40b3520c9bd21b96362e90724ed2ecfc19ed4abbe2f64e6f7e851cd32b00c2c082ea1f4854e09ab5afd7c39d4d64d847d2114b0c53d723b370b7c16f1baac91ccb80d8f354b9820be1f2b364ebf17130fdfa7d1f60a06bbe6ec98684ffa4f3c6002701329d7181dcbe203642a0830a07458a1a6ef67ebe4ec1fb6ca48e9b54039d9618fb837aabb301", @ANYRES32=r7, @ANYBLOB, @ANYRESOCT=r7], 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000002100), 0x280004, &(0x7f0000000840)=ANY=[]) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000004200)={0x50, 0x0, r9, {0x7, 0x1f, 0x0, 0xffffffff80002000, 0x2f, 0x0, 0x4, 0x5, 0x0, 0x0, 0x1}}, 0x50) r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000002ac0), 0x0, 0x0) read$rfkill(r10, 0x0, 0x0) syz_fuse_handle_req(r8, &(0x7f00000066c0)="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", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x100000000404, 0x0, 0xc, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 43.453362132s ago: executing program 7 (id=128): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="400b1f00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) syz_usb_control_io$hid(r0, &(0x7f00000012c0)={0x24, 0x0, 0x0, 0x0, &(0x7f0000001280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x4, 0x1, {0x22, 0xc16}}}}, &(0x7f00000015c0)={0x2c, 0x0, &(0x7f0000001380)={0x0, 0xa, 0x1, 0x58}, &(0x7f0000001480)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000014c0)={0x20, 0x1, 0x95, "f99d56ed9e213d3cf6f2ccd69efb91476f6da7e39a50664de243557cf19acf7a9eed2a9a889f6aea16e69703d86a84b66ee4a9adecd5ba957f01b3ff60f2e915edbe5cf8f6262e347812c676bcbdc0e705f195f13ccdbdad4372b2a11bfa32636da0e604f45c520f8aff5d989c5190d8e3d51b73a8ef3aea0b2da94ca1c22e5621ab0efa6647fe5418d67555d0ad5ea15b1df3153c"}, &(0x7f0000001580)={0x20, 0x3, 0x1, 0xf8}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000010000000000000000000000000000000a36000000120a09000000000000000000020000000900020073797a30000000000800044200000000090078ea33ddeece29010073797a30000000000800034000000001080008400000000114000000110001000000000000"], 0x6c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x6}, [@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 40.077216587s ago: executing program 8 (id=125): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000000)={0x1, 0x3}) 30.905731113s ago: executing program 6 (id=123): r0 = socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x0) connect$bt_rfcomm(r0, &(0x7f00000003c0)={0x1f, @none, 0x1}, 0xa) syz_open_dev$I2C(&(0x7f0000000800), 0x0, 0x0) (async) r3 = syz_open_dev$I2C(&(0x7f0000000800), 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f00000000c0)={0x1, 0x0, 0x5, &(0x7f0000000080)={0x6, "96ab3f272339cf3935a8824943478cb18a5722d2da3a03f39b5eaee25558f362e7"}}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000040)=ANY=[@ANYRES8=r2], 0x0) (async) syz_emit_ethernet(0x52, &(0x7f0000000040)=ANY=[@ANYRES8=r2], 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x68, 0x18, 0x1, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0x44, 0x16, 0x0, 0x1, @LWT_BPF_OUT={0x40, 0x2, 0x0, 0x1, @LWT_BPF_PROG_NAME={0x3c, 0x2, '7\xe2\xbd\xf6,\xc0}\x9c99\xeasJ\x99\xe7,3\x06\xd0k(\xd0\xac9\x19N\xb4\xb8\x91\x95\x00'/56}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20042042}, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32, @ANYBLOB], 0x3c}}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32, @ANYBLOB], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0x7) (async) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0x7) ioctl$TCFLSH(r8, 0x8925, 0x80000000000000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000840)={0x0, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000840)={0x0, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) r9 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) io_uring_setup(0x5c6c, &(0x7f0000000400)={0x0, 0x64fd, 0x2000, 0x1, 0x15b, 0x0, r9}) (async) io_uring_setup(0x5c6c, &(0x7f0000000400)={0x0, 0x64fd, 0x2000, 0x1, 0x15b, 0x0, r9}) 22.89506518s ago: executing program 37 (id=127): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000837bbc27b96d04489fafc34000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) setsockopt$inet_mreqn(r1, 0x0, 0x28, &(0x7f0000000280)={@loopback, @dev={0xac, 0x14, 0x14, 0xa}}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x10, 0x3, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) syz_emit_ethernet(0x42, &(0x7f0000000140)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0xc, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x3, 0x0, @void}}}}}}}}, 0x0) r3 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000006c0)=0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) sendfile(r8, r5, 0x0, 0x80008) 21.823799467s ago: executing program 38 (id=128): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="400b1f00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) syz_usb_control_io$hid(r0, &(0x7f00000012c0)={0x24, 0x0, 0x0, 0x0, &(0x7f0000001280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x4, 0x1, {0x22, 0xc16}}}}, &(0x7f00000015c0)={0x2c, 0x0, &(0x7f0000001380)={0x0, 0xa, 0x1, 0x58}, &(0x7f0000001480)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000014c0)={0x20, 0x1, 0x95, "f99d56ed9e213d3cf6f2ccd69efb91476f6da7e39a50664de243557cf19acf7a9eed2a9a889f6aea16e69703d86a84b66ee4a9adecd5ba957f01b3ff60f2e915edbe5cf8f6262e347812c676bcbdc0e705f195f13ccdbdad4372b2a11bfa32636da0e604f45c520f8aff5d989c5190d8e3d51b73a8ef3aea0b2da94ca1c22e5621ab0efa6647fe5418d67555d0ad5ea15b1df3153c"}, &(0x7f0000001580)={0x20, 0x3, 0x1, 0xf8}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000010000000000000000000000000000000a36000000120a09000000000000000000020000000900020073797a30000000000800044200000000090078ea33ddeece29010073797a30000000000800034000000001080008400000000114000000110001000000000000"], 0x6c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x6}, [@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 21.224768222s ago: executing program 39 (id=125): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000000)={0x1, 0x3}) 0s ago: executing program 40 (id=123): r0 = socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x0) connect$bt_rfcomm(r0, &(0x7f00000003c0)={0x1f, @none, 0x1}, 0xa) syz_open_dev$I2C(&(0x7f0000000800), 0x0, 0x0) (async) r3 = syz_open_dev$I2C(&(0x7f0000000800), 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f00000000c0)={0x1, 0x0, 0x5, &(0x7f0000000080)={0x6, "96ab3f272339cf3935a8824943478cb18a5722d2da3a03f39b5eaee25558f362e7"}}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000040)=ANY=[@ANYRES8=r2], 0x0) (async) syz_emit_ethernet(0x52, &(0x7f0000000040)=ANY=[@ANYRES8=r2], 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x68, 0x18, 0x1, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0x44, 0x16, 0x0, 0x1, @LWT_BPF_OUT={0x40, 0x2, 0x0, 0x1, @LWT_BPF_PROG_NAME={0x3c, 0x2, '7\xe2\xbd\xf6,\xc0}\x9c99\xeasJ\x99\xe7,3\x06\xd0k(\xd0\xac9\x19N\xb4\xb8\x91\x95\x00'/56}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20042042}, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32, @ANYBLOB], 0x3c}}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32, @ANYBLOB], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0x7) (async) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0x7) ioctl$TCFLSH(r8, 0x8925, 0x80000000000000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000840)={0x0, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000840)={0x0, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) r9 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) io_uring_setup(0x5c6c, &(0x7f0000000400)={0x0, 0x64fd, 0x2000, 0x1, 0x15b, 0x0, r9}) (async) io_uring_setup(0x5c6c, &(0x7f0000000400)={0x0, 0x64fd, 0x2000, 0x1, 0x15b, 0x0, r9}) kernel console output (not intermixed with test programs): eth0 [ 68.043729][ T5816] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.056086][ T5816] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.075814][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.088082][ T5816] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.128057][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.159743][ T5810] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.172055][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.179163][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.199872][ T5810] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.209932][ T5810] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.221171][ T5810] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.234521][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.241643][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.306515][ T5808] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.323153][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.335746][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.394745][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.407987][ T30] audit: type=1400 audit(1750933498.088:86): avc: denied { sys_module } for pid=5808 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 68.439953][ T5809] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.450936][ T5809] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.467091][ T3505] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.474241][ T3505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.484256][ T3505] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.491340][ T3505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.517438][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.544925][ T3505] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.552066][ T3505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.573207][ T3505] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.580344][ T3505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.649586][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.704139][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.715112][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.735937][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.743084][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.763572][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.770722][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.798185][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.837774][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.863323][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.870465][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.890882][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.937370][ T3505] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.944519][ T3505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.986301][ T5808] veth0_vlan: entered promiscuous mode [ 69.010547][ T5808] veth1_vlan: entered promiscuous mode [ 69.033192][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.098468][ T5808] veth0_macvtap: entered promiscuous mode [ 69.110030][ T5808] veth1_macvtap: entered promiscuous mode [ 69.132330][ T5809] veth0_vlan: entered promiscuous mode [ 69.175935][ T5809] veth1_vlan: entered promiscuous mode [ 69.198127][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.211558][ T5814] Bluetooth: hci0: command tx timeout [ 69.211698][ T5822] Bluetooth: hci2: command tx timeout [ 69.223551][ T5807] veth0_vlan: entered promiscuous mode [ 69.245757][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.286028][ T5807] veth1_vlan: entered promiscuous mode [ 69.291871][ T5822] Bluetooth: hci4: command tx timeout [ 69.293743][ T5814] Bluetooth: hci1: command tx timeout [ 69.311679][ T5809] veth0_macvtap: entered promiscuous mode [ 69.320903][ T5808] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.329699][ T5808] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.339450][ T5808] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.348630][ T5808] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.365306][ T5809] veth1_macvtap: entered promiscuous mode [ 69.381237][ T5814] Bluetooth: hci3: command tx timeout [ 69.397967][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.421918][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.435922][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.449320][ T5807] veth0_macvtap: entered promiscuous mode [ 69.472598][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.489639][ T5807] veth1_macvtap: entered promiscuous mode [ 69.502731][ T5809] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.512368][ T5809] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.523202][ T5809] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.532864][ T5809] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.568745][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.607654][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.648818][ T5807] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.659475][ T5807] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.668564][ T5807] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.677475][ T5807] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.752600][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.773471][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.789546][ T5810] veth0_vlan: entered promiscuous mode [ 69.813941][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.825749][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.827611][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.841040][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.869836][ T30] audit: type=1400 audit(1750933499.548:87): avc: denied { mounton } for pid=5808 comm="syz-executor" path="/root/syzkaller.3HSLRg/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 69.883629][ T5810] veth1_vlan: entered promiscuous mode [ 69.899706][ T30] audit: type=1400 audit(1750933499.548:88): avc: denied { mount } for pid=5808 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 69.922813][ T30] audit: type=1400 audit(1750933499.548:89): avc: denied { mounton } for pid=5808 comm="syz-executor" path="/root/syzkaller.3HSLRg/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 69.951167][ T30] audit: type=1400 audit(1750933499.548:90): avc: denied { mount } for pid=5808 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 69.980505][ T30] audit: type=1400 audit(1750933499.548:91): avc: denied { mounton } for pid=5808 comm="syz-executor" path="/root/syzkaller.3HSLRg/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 70.003429][ T5808] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 70.055371][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.065096][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.078029][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.082607][ T5816] veth0_vlan: entered promiscuous mode [ 70.091079][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.115836][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 70.115847][ T30] audit: type=1400 audit(1750933499.788:99): avc: denied { read write } for pid=5808 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 70.162226][ T5810] veth0_macvtap: entered promiscuous mode [ 70.169344][ T30] audit: type=1400 audit(1750933499.788:100): avc: denied { open } for pid=5808 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 70.193905][ T5816] veth1_vlan: entered promiscuous mode [ 70.213351][ T30] audit: type=1400 audit(1750933499.788:101): avc: denied { ioctl } for pid=5808 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 70.227499][ T5810] veth1_macvtap: entered promiscuous mode [ 70.244789][ T30] audit: type=1400 audit(1750933499.908:102): avc: denied { prog_load } for pid=5930 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 70.265134][ T30] audit: type=1400 audit(1750933499.908:103): avc: denied { bpf } for pid=5930 comm="syz.1.2" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 70.292719][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.307868][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.328470][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.357403][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.380559][ T30] audit: type=1400 audit(1750933500.058:104): avc: denied { read } for pid=5934 comm="syz.0.1" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 70.404614][ T5810] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.434327][ T30] audit: type=1400 audit(1750933500.058:105): avc: denied { open } for pid=5934 comm="syz.0.1" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 70.435059][ T5810] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.463175][ T30] audit: type=1400 audit(1750933500.098:106): avc: denied { ioctl } for pid=5934 comm="syz.0.1" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 70.484935][ T5810] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.503081][ T5810] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.576622][ T30] audit: type=1400 audit(1750933500.258:107): avc: denied { create } for pid=5938 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 70.597988][ T5816] veth0_macvtap: entered promiscuous mode [ 70.626449][ T30] audit: type=1400 audit(1750933500.298:108): avc: denied { create } for pid=5938 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.637347][ T5816] veth1_macvtap: entered promiscuous mode [ 70.773570][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.815917][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.865751][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.876452][ T5947] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 70.883070][ T5947] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 70.909732][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.920226][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.926415][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.938385][ T5947] vhci_hcd vhci_hcd.0: Device attached [ 70.957506][ T5952] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(12) [ 70.959345][ T5816] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.964111][ T5952] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 70.965025][ T5952] vhci_hcd vhci_hcd.0: Device attached [ 70.987984][ T5816] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.988684][ T5947] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 70.997102][ T5816] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.011909][ T5947] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(14) [ 71.020277][ T5947] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 71.032201][ T5816] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.032221][ T5947] vhci_hcd vhci_hcd.0: Device attached [ 71.058611][ T5947] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(17) [ 71.065238][ T5947] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 71.085043][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.090914][ T5947] vhci_hcd vhci_hcd.0: Device attached [ 71.111908][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.124452][ T5928] vhci_hcd: vhci_device speed not set [ 71.146115][ T5947] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(19) [ 71.152741][ T5947] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 71.170677][ T5811] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 71.197533][ T5947] vhci_hcd vhci_hcd.0: Device attached [ 71.220721][ T5928] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 71.232903][ T5947] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 71.271763][ T5947] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 71.282682][ T5947] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 71.295806][ T5814] Bluetooth: hci2: command tx timeout [ 71.295816][ T5822] Bluetooth: hci0: command tx timeout [ 71.330140][ T5947] vhci_hcd vhci_hcd.0: port 0 already used [ 71.344683][ T5811] usb 2-1: config 0 has an invalid interface number: 7 but max is 0 [ 71.359845][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.370316][ T5814] Bluetooth: hci1: command tx timeout [ 71.375728][ T5814] Bluetooth: hci4: command tx timeout [ 71.382058][ T5811] usb 2-1: config 0 has no interface number 0 [ 71.388169][ T5811] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 71.403937][ T5811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.410854][ T5953] vhci_hcd: connection closed [ 71.412958][ T5948] vhci_hcd: connection reset by peer [ 71.415595][ T5958] vhci_hcd: connection closed [ 71.417640][ T1162] vhci_hcd: stop threads [ 71.425462][ T5811] usb 2-1: config 0 descriptor?? [ 71.428236][ T5956] vhci_hcd: connection closed [ 71.438054][ T5961] vhci_hcd: connection closed [ 71.449098][ T5811] cp210x 2-1:0.7: cp210x converter detected [ 71.458334][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.461581][ T5814] Bluetooth: hci3: command tx timeout [ 71.476992][ T1162] vhci_hcd: release socket [ 71.492986][ T1162] vhci_hcd: disconnect device [ 71.501713][ T1162] vhci_hcd: stop threads [ 71.505980][ T1162] vhci_hcd: release socket [ 71.510715][ T1162] vhci_hcd: disconnect device [ 71.527593][ T1162] vhci_hcd: stop threads [ 71.536074][ T1162] vhci_hcd: release socket [ 71.542069][ T1162] vhci_hcd: disconnect device [ 71.547434][ T1162] vhci_hcd: stop threads [ 71.552686][ T1162] vhci_hcd: release socket [ 71.559520][ T1162] vhci_hcd: disconnect device [ 71.564760][ T1162] vhci_hcd: stop threads [ 71.569060][ T1162] vhci_hcd: release socket [ 71.574482][ T1162] vhci_hcd: disconnect device [ 71.604458][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.616799][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.639597][ T5811] cp210x 2-1:0.7: failed to get vendor val 0x370b size 1: -121 [ 71.672509][ T5811] cp210x 2-1:0.7: querying part number failed [ 71.700907][ T5811] usb 2-1: cp210x converter now attached to ttyUSB0 [ 71.820140][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 71.826572][ T5969] SELinux: ebitmap start bit (1634140161) is not a multiple of the map unit size (64) [ 71.843973][ T5969] SELinux: failed to load policy [ 72.005111][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.034243][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 72.059659][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.073321][ T5974] netlink: 248 bytes leftover after parsing attributes in process `syz.2.12'. [ 72.085334][ T24] usb 4-1: config 0 descriptor?? [ 72.098053][ T24] hdpvr 4-1:0.0: Could not find bulk-in endpoint [ 72.109814][ T24] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 72.301992][ T24] usb 4-1: USB disconnect, device number 2 [ 73.079928][ T5885] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 73.337480][ T974] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 73.361505][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.372457][ T5814] Bluetooth: hci0: command tx timeout [ 73.380244][ T5814] Bluetooth: hci2: command tx timeout [ 73.380632][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.486786][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 73.495540][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 73.535313][ T5814] Bluetooth: hci1: command tx timeout [ 73.540932][ T5822] Bluetooth: hci4: command tx timeout [ 73.546708][ T5814] Bluetooth: hci3: command tx timeout [ 73.589194][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 73.597904][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 73.611406][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 73.691514][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 73.700178][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 73.756150][ T974] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 73.781083][ T5885] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 73.792441][ T974] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 73.803303][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.812919][ T974] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 73.823543][ T974] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.832150][ T5885] usb 5-1: config 0 descriptor?? [ 73.845125][ T6003] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 73.866711][ T974] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 74.236042][ T24] usb 1-1: USB disconnect, device number 2 [ 74.264941][ T974] usb 2-1: USB disconnect, device number 2 [ 74.334064][ T974] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 74.558530][ T6027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.569053][ T6027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.747554][ T6015] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 74.759642][ T974] cp210x 2-1:0.7: device disconnected [ 74.824228][ T5885] hid-steam 0003:28DE:1142.0001: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 74.843178][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 74.860308][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.890933][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 74.910756][ T5885] hid-steam 0003:28DE:1142.0001: Steam wireless receiver connected [ 74.949498][ T5885] hid-steam 0003:28DE:1142.0002: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 75.187120][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 75.187133][ T30] audit: type=1400 audit(1750933504.868:165): avc: denied { create } for pid=6040 comm="syz.3.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 75.303561][ T30] audit: type=1400 audit(1750933504.908:166): avc: denied { ioctl } for pid=6040 comm="syz.3.22" path="socket:[8344]" dev="sockfs" ino=8344 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 75.502415][ T30] audit: type=1400 audit(1750933504.958:167): avc: denied { getopt } for pid=6034 comm="syz.2.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 75.772832][ T30] audit: type=1400 audit(1750933505.428:168): avc: denied { write } for pid=6047 comm="syz.3.23" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 76.037674][ T10] cfg80211: failed to load regulatory.db [ 76.190249][ T30] audit: type=1400 audit(1750933505.618:169): avc: denied { write } for pid=6047 comm="syz.3.23" name="radio2" dev="devtmpfs" ino=968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 76.290592][ T974] usb 5-1: reset high-speed USB device number 2 using dummy_hcd [ 76.365896][ T5928] vhci_hcd: vhci_device speed not set [ 76.503706][ T30] audit: type=1400 audit(1750933505.628:170): avc: denied { ioctl } for pid=6047 comm="syz.3.23" path="/dev/radio2" dev="devtmpfs" ino=968 ioctlcmd=0x5665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 76.739881][ T30] audit: type=1400 audit(1750933506.058:171): avc: denied { unmount } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 76.915493][ T30] audit: type=1400 audit(1750933506.338:172): avc: denied { create } for pid=6063 comm="syz.2.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 77.015560][ T6074] netlink: 12 bytes leftover after parsing attributes in process `syz.2.29'. [ 77.044999][ T30] audit: type=1400 audit(1750933506.358:173): avc: denied { ioctl } for pid=6063 comm="syz.2.26" path="socket:[8437]" dev="sockfs" ino=8437 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 77.115987][ T6074] netlink: 12 bytes leftover after parsing attributes in process `syz.2.29'. [ 77.128801][ T6071] xt_time: unknown flags 0xc [ 77.246760][ T30] audit: type=1400 audit(1750933506.368:174): avc: denied { bind } for pid=6063 comm="syz.2.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 77.283638][ T5885] usb 5-1: USB disconnect, device number 2 [ 77.322492][ T5885] hid-steam 0003:28DE:1142.0001: Steam wireless receiver disconnected [ 77.799836][ T6078] only policy match revision 0 supported [ 77.799854][ T6078] unable to load match [ 78.075637][ T5892] usb usb38-port1: attempt power cycle [ 79.232286][ T5892] usb usb38-port1: unable to enumerate USB device [ 79.235867][ T5928] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 79.553165][ T5928] usb 1-1: Using ep0 maxpacket: 8 [ 79.669575][ T5928] usb 1-1: unable to get BOS descriptor or descriptor too short [ 79.697775][ T5928] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 79.735917][ T5928] usb 1-1: config 0 has no interface number 0 [ 79.795613][ T5928] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 79.830141][ T5928] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 79.848839][ T5928] usb 1-1: config 0 interface 88 has no altsetting 0 [ 79.867835][ T5928] usb 1-1: language id specifier not provided by device, defaulting to English [ 79.927174][ T5928] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 80.450574][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 80.450591][ T30] audit: type=1400 audit(1750933509.748:240): avc: denied { read } for pid=6104 comm="syz.3.35" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 80.528980][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 80.545603][ T30] audit: type=1400 audit(1750933509.748:241): avc: denied { open } for pid=6104 comm="syz.3.35" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 80.640118][ T5928] usb 1-1: Product: syz [ 80.665944][ T5928] usb 1-1: SerialNumber: syz [ 80.695399][ T30] audit: type=1400 audit(1750933509.758:242): avc: denied { block_suspend } for pid=6104 comm="syz.3.35" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 80.804341][ T5928] usb 1-1: config 0 descriptor?? [ 80.818876][ T30] audit: type=1400 audit(1750933510.178:243): avc: denied { read } for pid=6113 comm="syz.2.39" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 80.846348][ T30] audit: type=1400 audit(1750933510.178:244): avc: denied { open } for pid=6113 comm="syz.2.39" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 80.873539][ T30] audit: type=1400 audit(1750933510.348:245): avc: denied { ioctl } for pid=6113 comm="syz.2.39" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 80.900458][ T30] audit: type=1400 audit(1750933510.348:246): avc: denied { bind } for pid=6113 comm="syz.2.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 80.919958][ C1] vkms_vblank_simulate: vblank timer overrun [ 81.410474][ T30] audit: type=1400 audit(1750933510.628:247): avc: denied { bind } for pid=6118 comm="syz.1.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 82.230601][ T5892] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 82.641072][ T5928] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input5 [ 82.682478][ T5892] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 82.700209][ T30] audit: type=1400 audit(1750933512.008:248): avc: denied { ioctl } for pid=6134 comm="syz.2.44" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 82.746384][ T5892] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 82.838442][ T5892] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 82.850593][ T5928] usb 1-1: USB disconnect, device number 3 [ 82.879255][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.898894][ T30] audit: type=1400 audit(1750933512.418:249): avc: denied { read } for pid=5169 comm="acpid" name="mouse1" dev="devtmpfs" ino=2807 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 82.914940][ T6144] IPv6: sit1: Disabled Multicast RS [ 82.952091][ T6133] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 82.962032][ T5892] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 82.983320][ T6147] lo speed is unknown, defaulting to 1000 [ 83.008106][ T6033] udevd[6033]: Error opening device "/dev/input/event4": No such file or directory [ 83.044217][ T6147] lo speed is unknown, defaulting to 1000 [ 83.064955][ T6147] lo speed is unknown, defaulting to 1000 [ 83.071963][ T6033] udevd[6033]: Unable to EVIOCGABS device "/dev/input/event4" [ 83.094728][ T6033] udevd[6033]: Unable to EVIOCGABS device "/dev/input/event4" [ 83.152217][ T6147] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 83.176020][ T6147] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 83.243748][ T5892] usb 2-1: USB disconnect, device number 3 [ 83.359937][ T6147] lo speed is unknown, defaulting to 1000 [ 83.398044][ T6147] lo speed is unknown, defaulting to 1000 [ 83.463652][ T6147] lo speed is unknown, defaulting to 1000 [ 83.508279][ T6147] lo speed is unknown, defaulting to 1000 [ 83.526827][ T6147] lo speed is unknown, defaulting to 1000 [ 83.578227][ T6163] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 83.591779][ T6163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.50'. [ 84.715310][ T6172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.52'. [ 85.004009][ T5892] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 85.097328][ T6175] [U] [ 85.100173][ T6175] [U] [ 85.102868][ T6175] [U] [ 85.105559][ T6175] [U] [ 85.113558][ T6175] [U] [ 85.116283][ T6175] [U] [ 85.118984][ T6175] [U] [ 85.121680][ T6175] [U] [ 85.143297][ T6175] [U] [ 85.146025][ T6175] [U] [ 85.148715][ T6175] [U] [ 85.151416][ T6175] [U] [ 85.181270][ T5892] usb 3-1: Using ep0 maxpacket: 32 [ 85.187836][ T6175] [U] [ 85.190562][ T6175] [U] [ 85.193261][ T6175] [U] [ 85.195956][ T6175] [U] [ 85.211254][ T5892] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 85.244707][ T5892] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 85.250131][ T6175] [U] [ 85.256466][ T6175] [U] [ 85.259149][ T6175] [U] [ 85.261827][ T6175] [U] [ 85.301564][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 85.320280][ T5892] usb 3-1: Product: syz [ 85.324479][ T5892] usb 3-1: Manufacturer: syz [ 85.329073][ T5892] usb 3-1: SerialNumber: syz [ 85.359558][ T6175] [U] [ 85.361759][ T5892] usb 3-1: config 0 descriptor?? [ 85.362292][ T6175] [U] [ 85.368850][ T6173] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 85.369862][ T6175] [U] [ 85.379641][ T6175] [U] [ 85.394657][ T6175] [U] [ 85.397385][ T6175] [U] [ 85.399681][ T5892] hub 3-1:0.0: bad descriptor, ignoring hub [ 85.400063][ T6175] [U] [ 85.400089][ T6175] [U] [ 85.404169][ T6175] [U] [ 85.406077][ T5892] hub 3-1:0.0: probe with driver hub failed with error -5 [ 85.408713][ T6175] [U] [ 85.423816][ T6175] [U] [ 85.426500][ T6175] [U] [ 85.466897][ T6175] [U] [ 85.469636][ T6175] [U] [ 85.472327][ T6175] [U] [ 85.475036][ T6175] [U] [ 85.481866][ T6175] [U] [ 85.484587][ T6175] [U] [ 85.487279][ T6175] [U] [ 85.489959][ T6175] [U] [ 85.494215][ T6175] [U] [ 85.496923][ T6175] [U] [ 85.499618][ T6175] [U] [ 85.502310][ T6175] [U] [ 85.506556][ T6175] [U] [ 85.509270][ T6175] [U] [ 85.511965][ T6175] [U] [ 85.514653][ T6175] [U] [ 85.519430][ T6175] [U] [ 85.522137][ T6175] [U] [ 85.525514][ T6175] [U] [ 85.528202][ T6175] [U] [ 85.531877][ T6175] [U] [ 85.534577][ T6175] [U] [ 85.537269][ T6175] [U] [ 85.539957][ T6175] [U] [ 85.543292][ T6175] [U] [ 85.545990][ T6175] [U] [ 85.548683][ T6175] [U] [ 85.551373][ T6175] [U] [ 85.554840][ T6175] [U] [ 85.557541][ T6175] [U] [ 85.560241][ T6175] [U] [ 85.562919][ T6175] [U] [ 85.600108][ T6175] [U] [ 85.602840][ T6175] [U] [ 85.605521][ T6175] [U] [ 85.608191][ T6175] [U] [ 85.639003][ T6175] [U] [ 85.641742][ T6175] [U] [ 85.644437][ T6175] [U] [ 85.647128][ T6175] [U] [ 85.685703][ T6175] [U] [ 85.688437][ T6175] [U] [ 85.691137][ T6175] [U] [ 85.693824][ T6175] [U] [ 85.720377][ T6175] [U] [ 85.723124][ T6175] [U] [ 85.725819][ T6175] [U] [ 85.728509][ T6175] [U] [ 85.740120][ T6175] [U] [ 85.742849][ T6175] [U] [ 85.745545][ T6175] [U] [ 85.748239][ T6175] [U] [ 85.751302][ T6175] [U] [ 85.754027][ T6175] [U] [ 85.756718][ T6175] [U] [ 85.759410][ T6175] [U] [ 85.762416][ T6175] [U] [ 85.765109][ T6175] [U] [ 85.767779][ T6175] [U] [ 85.770453][ T6175] [U] [ 85.773424][ T6175] [U] [ 85.776123][ T6175] [U] [ 85.778816][ T6175] [U] [ 85.781505][ T6175] [U] [ 85.785233][ T6175] [U] [ 85.787933][ T6175] [U] [ 85.790621][ T6175] [U] [ 85.793310][ T6175] [U] [ 85.796143][ T6175] [U] [ 85.798839][ T6175] [U] [ 85.801529][ T6175] [U] [ 85.804226][ T6175] [U] [ 85.807098][ T6175] [U] [ 85.809790][ T6175] [U] [ 85.812477][ T6175] [U] [ 85.815171][ T6175] [U] [ 85.818379][ T6175] [U] [ 85.821077][ T6175] [U] [ 85.823772][ T6175] [U] [ 85.826457][ T6175] [U] [ 85.863522][ T6175] [U] [ 85.866257][ T6175] [U] [ 85.868947][ T6175] [U] [ 85.871633][ T6175] [U] [ 85.894052][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 85.894069][ T30] audit: type=1400 audit(1750933515.578:264): avc: denied { bind } for pid=6185 comm="syz.0.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 85.920702][ C1] vkms_vblank_simulate: vblank timer overrun [ 85.967953][ T6175] [U] [ 85.970690][ T6175] [U] [ 85.973385][ T6175] [U] [ 85.976077][ T6175] [U] [ 85.996681][ T6186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.58'. [ 86.005556][ T30] audit: type=1400 audit(1750933515.628:265): avc: denied { map } for pid=6185 comm="syz.0.58" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 86.005599][ T30] audit: type=1400 audit(1750933515.648:266): avc: denied { ioctl } for pid=6185 comm="syz.0.58" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 86.099346][ T6175] [U] [ 86.102072][ T6175] [U] [ 86.104762][ T6175] [U] [ 86.107450][ T6175] [U] [ 86.451242][ T6175] [U] [ 86.740535][ T48] Bluetooth: hci5: Frame reassembly failed (-84) [ 86.751093][ T6195] FAULT_INJECTION: forcing a failure. [ 86.751093][ T6195] name failslab, interval 1, probability 0, space 0, times 1 [ 86.764747][ T6195] CPU: 1 UID: 0 PID: 6195 Comm: syz.1.60 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) [ 86.764762][ T6195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 86.764767][ T6195] Call Trace: [ 86.764771][ T6195] [ 86.764775][ T6195] dump_stack_lvl+0x16c/0x1f0 [ 86.764794][ T6195] should_fail_ex+0x512/0x640 [ 86.764808][ T6195] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 86.764824][ T6195] should_failslab+0xc2/0x120 [ 86.764838][ T6195] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 86.764852][ T6195] ? __alloc_skb+0x2b2/0x380 [ 86.764867][ T6195] __alloc_skb+0x2b2/0x380 [ 86.764880][ T6195] ? __pfx___alloc_skb+0x10/0x10 [ 86.764896][ T6195] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 86.764909][ T6195] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 86.764926][ T6195] netlink_alloc_large_skb+0x69/0x130 [ 86.764937][ T6195] netlink_sendmsg+0x6a1/0xdd0 [ 86.764949][ T6195] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.764975][ T6195] ____sys_sendmsg+0xa95/0xc70 [ 86.764992][ T6195] ? copy_msghdr_from_user+0x10a/0x160 [ 86.765014][ T6195] ? __pfx_____sys_sendmsg+0x10/0x10 [ 86.765034][ T6195] ___sys_sendmsg+0x134/0x1d0 [ 86.765048][ T6195] ? __pfx____sys_sendmsg+0x10/0x10 [ 86.765061][ T6195] ? __lock_acquire+0x622/0x1c90 [ 86.765094][ T6195] __sys_sendmsg+0x16d/0x220 [ 86.765108][ T6195] ? __pfx___sys_sendmsg+0x10/0x10 [ 86.765130][ T6195] do_syscall_64+0xcd/0x4c0 [ 86.765146][ T6195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.765157][ T6195] RIP: 0033:0x7f40eff8e929 [ 86.765165][ T6195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.765175][ T6195] RSP: 002b:00007f40f0d21038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 86.765185][ T6195] RAX: ffffffffffffffda RBX: 00007f40f01b5fa0 RCX: 00007f40eff8e929 [ 86.765191][ T6195] RDX: 0000000000004000 RSI: 0000200000000600 RDI: 0000000000000006 [ 86.765197][ T6195] RBP: 00007f40f0d21090 R08: 0000000000000000 R09: 0000000000000000 [ 86.765203][ T6195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.765208][ T6195] R13: 0000000000000000 R14: 00007f40f01b5fa0 R15: 00007ffda0e55b58 [ 86.765224][ T6195] [ 86.975102][ T5931] usb 3-1: USB disconnect, device number 2 [ 87.117834][ T30] audit: type=1400 audit(1750933516.768:267): avc: denied { read } for pid=6196 comm="syz.4.61" path="socket:[8723]" dev="sockfs" ino=8723 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 87.412495][ T6202] FAULT_INJECTION: forcing a failure. [ 87.412495][ T6202] name failslab, interval 1, probability 0, space 0, times 0 [ 87.426591][ T6202] CPU: 1 UID: 0 PID: 6202 Comm: syz.1.63 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) [ 87.426613][ T6202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 87.426623][ T6202] Call Trace: [ 87.426628][ T6202] [ 87.426633][ T6202] dump_stack_lvl+0x16c/0x1f0 [ 87.426662][ T6202] should_fail_ex+0x512/0x640 [ 87.426682][ T6202] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 87.426706][ T6202] should_failslab+0xc2/0x120 [ 87.426730][ T6202] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 87.426751][ T6202] ? __alloc_skb+0x2b2/0x380 [ 87.426776][ T6202] __alloc_skb+0x2b2/0x380 [ 87.426797][ T6202] ? __pfx___alloc_skb+0x10/0x10 [ 87.426817][ T6202] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 87.426839][ T6202] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 87.426866][ T6202] netlink_alloc_large_skb+0x69/0x130 [ 87.426883][ T6202] netlink_sendmsg+0x6a1/0xdd0 [ 87.426903][ T6202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.426920][ T6202] ____sys_sendmsg+0xa95/0xc70 [ 87.426931][ T6202] ? copy_msghdr_from_user+0x10a/0x160 [ 87.426945][ T6202] ? __pfx_____sys_sendmsg+0x10/0x10 [ 87.426961][ T6202] ___sys_sendmsg+0x134/0x1d0 [ 87.426976][ T6202] ? __pfx____sys_sendmsg+0x10/0x10 [ 87.426994][ T6202] ? __lock_acquire+0x622/0x1c90 [ 87.427026][ T6202] __sys_sendmsg+0x16d/0x220 [ 87.427041][ T6202] ? __pfx___sys_sendmsg+0x10/0x10 [ 87.427064][ T6202] do_syscall_64+0xcd/0x4c0 [ 87.427080][ T6202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.427091][ T6202] RIP: 0033:0x7f40eff8e929 [ 87.427100][ T6202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.427113][ T6202] RSP: 002b:00007f40f0d21038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.427122][ T6202] RAX: ffffffffffffffda RBX: 00007f40f01b5fa0 RCX: 00007f40eff8e929 [ 87.427129][ T6202] RDX: 000000000400c000 RSI: 0000200000000200 RDI: 0000000000000005 [ 87.427134][ T6202] RBP: 00007f40f0d21090 R08: 0000000000000000 R09: 0000000000000000 [ 87.427140][ T6202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.427146][ T6202] R13: 0000000000000000 R14: 00007f40f01b5fa0 R15: 00007ffda0e55b58 [ 87.427158][ T6202] [ 87.780131][ T974] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 88.652855][ T5814] Bluetooth: hci5: command 0x1003 tx timeout [ 88.652990][ T5829] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 88.674550][ T30] audit: type=1400 audit(1750933518.358:268): avc: denied { mounton } for pid=6203 comm="syz.0.64" path="/9/file1" dev="autofs" ino=8747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 88.790173][ T974] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 88.818412][ T974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.843643][ T974] usb 5-1: config 0 descriptor?? [ 88.876158][ T974] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 88.900095][ T30] audit: type=1400 audit(1750933518.578:269): avc: denied { write } for pid=6212 comm="syz.2.65" laddr=fe80::13 lport=60 faddr=fe80:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.973436][ T30] audit: type=1326 audit(1750933518.658:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6216 comm="syz.1.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40eff8e929 code=0x7ffc0000 [ 89.027091][ T6217] xt_time: unknown flags 0xc [ 89.036886][ T30] audit: type=1326 audit(1750933518.688:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6216 comm="syz.1.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f40eff8e929 code=0x7ffc0000 [ 89.084396][ T30] audit: type=1326 audit(1750933518.688:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6216 comm="syz.1.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40eff8e929 code=0x7ffc0000 [ 89.115090][ T30] audit: type=1326 audit(1750933518.688:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6216 comm="syz.1.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f40eff8e929 code=0x7ffc0000 [ 89.312855][ T974] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 89.390315][ T5892] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 89.569983][ T5892] usb 3-1: unable to get BOS descriptor or descriptor too short [ 89.632329][ T5892] usb 3-1: not running at top speed; connect to a high speed hub [ 89.705669][ T5892] usb 3-1: config 253 has an invalid interface number: 140 but max is 0 [ 89.757688][ T974] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 89.775787][ T5892] usb 3-1: config 253 has an invalid descriptor of length 204, skipping remainder of the config [ 89.790378][ T5892] usb 3-1: config 253 has no interface number 0 [ 89.817084][ T5892] usb 3-1: config 253 interface 140 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 89.842275][ T5892] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=3e.5b [ 89.864495][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.890444][ T5892] usb 3-1: Product: syz [ 89.894616][ T5892] usb 3-1: Manufacturer: syz [ 89.909407][ T5892] usb 3-1: SerialNumber: syz [ 90.442082][ T5811] usb 5-1: USB disconnect, device number 3 [ 90.468874][ T6220] delete_channel: no stack [ 90.556901][ T6233] syz.1.69 (6233) used greatest stack depth: 19256 bytes left [ 90.557843][ T5892] usbtest 3-1:253.140: couldn't get endpoints, -22 [ 90.574627][ T5892] usbtest 3-1:253.140: probe with driver usbtest failed with error -22 [ 90.593922][ T5892] usb 3-1: USB disconnect, device number 3 [ 92.013405][ T6263] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 92.044851][ T6263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.75'. [ 92.397639][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 92.397649][ T30] audit: type=1400 audit(1750933522.078:325): avc: denied { mount } for pid=6257 comm="syz.1.74" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 92.586254][ T6267] netlink: 44 bytes leftover after parsing attributes in process `syz.1.76'. [ 92.747867][ T30] audit: type=1400 audit(1750933522.428:326): avc: denied { map } for pid=6268 comm="syz.2.77" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 92.805889][ T30] audit: type=1400 audit(1750933522.428:327): avc: denied { execute } for pid=6268 comm="syz.2.77" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 92.892702][ T6274] FAULT_INJECTION: forcing a failure. [ 92.892702][ T6274] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 92.905859][ T6274] CPU: 0 UID: 0 PID: 6274 Comm: syz.1.78 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) [ 92.905873][ T6274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 92.905879][ T6274] Call Trace: [ 92.905883][ T6274] [ 92.905887][ T6274] dump_stack_lvl+0x16c/0x1f0 [ 92.905905][ T6274] should_fail_ex+0x512/0x640 [ 92.905922][ T6274] _copy_from_user+0x2e/0xd0 [ 92.905937][ T6274] __sys_bpf+0x21d/0x4d80 [ 92.905955][ T6274] ? __pfx___sys_bpf+0x10/0x10 [ 92.905970][ T6274] ? ksys_write+0x190/0x250 [ 92.905986][ T6274] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 92.906008][ T6274] ? fput+0x70/0xf0 [ 92.906023][ T6274] ? ksys_write+0x1ac/0x250 [ 92.906035][ T6274] ? __pfx_ksys_write+0x10/0x10 [ 92.906050][ T6274] __x64_sys_bpf+0x78/0xc0 [ 92.906064][ T6274] ? lockdep_hardirqs_on+0x7c/0x110 [ 92.906078][ T6274] do_syscall_64+0xcd/0x4c0 [ 92.906094][ T6274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.906105][ T6274] RIP: 0033:0x7f40eff8e929 [ 92.906113][ T6274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.906122][ T6274] RSP: 002b:00007f40eddf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 92.906132][ T6274] RAX: ffffffffffffffda RBX: 00007f40f01b6080 RCX: 00007f40eff8e929 [ 92.906138][ T6274] RDX: 0000000000000048 RSI: 0000200000000300 RDI: 0000000000000000 [ 92.906144][ T6274] RBP: 00007f40eddf6090 R08: 0000000000000000 R09: 0000000000000000 [ 92.906150][ T6274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.906155][ T6274] R13: 0000000000000000 R14: 00007f40f01b6080 R15: 00007ffda0e55b58 [ 92.906167][ T6274] [ 93.082663][ T30] audit: type=1400 audit(1750933522.538:328): avc: denied { create } for pid=6270 comm="syz.1.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 93.102147][ T30] audit: type=1400 audit(1750933522.538:329): avc: denied { ioctl } for pid=6270 comm="syz.1.78" path="socket:[9495]" dev="sockfs" ino=9495 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 93.126788][ T30] audit: type=1400 audit(1750933522.778:330): avc: denied { create } for pid=6275 comm="syz.2.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 93.189697][ T30] audit: type=1400 audit(1750933522.868:331): avc: denied { getopt } for pid=6275 comm="syz.2.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 93.384568][ T6273] 9pnet_fd: Insufficient options for proto=fd [ 94.051901][ T5885] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 94.059472][ T5892] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 94.220515][ T5885] usb 2-1: Using ep0 maxpacket: 16 [ 94.226019][ T5892] usb 4-1: Using ep0 maxpacket: 16 [ 94.242741][ T5885] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.258499][ T5885] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 94.277366][ T5885] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 94.285009][ T30] audit: type=1400 audit(1750933523.958:332): avc: denied { read } for pid=6297 comm="syz.4.86" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 94.287512][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.321692][ T30] audit: type=1400 audit(1750933523.958:333): avc: denied { open } for pid=6297 comm="syz.4.86" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 94.323902][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.357992][ T5892] usb 4-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 94.368672][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.383228][ T30] audit: type=1400 audit(1750933524.008:334): avc: denied { ioctl } for pid=6297 comm="syz.4.86" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 94.418998][ T5885] usb 2-1: config 0 descriptor?? [ 94.429864][ T5892] usb 4-1: config 0 descriptor?? [ 94.447346][ T5885] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input6 [ 94.904369][ T5931] usb 2-1: USB disconnect, device number 4 [ 94.930214][ T5169] bcm5974 2-1:0.0: could not read from device [ 94.974657][ T5892] sunplus 0003:04FC:05D8.0003: reserved main item tag 0xd [ 95.029930][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 95.040979][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 95.054714][ T6289] bcm5974 2-1:0.0: could not read from device [ 95.089125][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 95.172504][ T6033] bcm5974 2-1:0.0: could not read from device [ 95.213422][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 95.290278][ T5928] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 95.388542][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 95.439863][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 95.490501][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 95.497606][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 95.560139][ T5928] usb 1-1: Using ep0 maxpacket: 16 [ 95.563249][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 95.582549][ T5928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 95.588110][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 95.601856][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 95.609398][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 95.635966][ T5928] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 95.649515][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 95.650131][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.668422][ T5928] usb 1-1: Product: syz [ 95.673202][ T5928] usb 1-1: Manufacturer: syz [ 95.677153][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 95.677854][ T5928] usb 1-1: SerialNumber: syz [ 95.695119][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 95.709797][ T5928] usb 1-1: config 0 descriptor?? [ 95.721951][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 95.745367][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 95.757767][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 95.766949][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 95.775348][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 95.843819][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 95.946477][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 95.946660][ T5928] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 96.070355][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 96.159754][ T5928] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 96.162522][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 96.237614][ T5928] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 96.289211][ T6323] netlink: 36 bytes leftover after parsing attributes in process `syz.4.94'. [ 96.340112][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 96.444967][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 96.452459][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 96.459515][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 96.463931][ T6323] netlink: 16 bytes leftover after parsing attributes in process `syz.4.94'. [ 96.466907][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 96.483133][ T5928] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 96.503057][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 96.509407][ T6323] netlink: 36 bytes leftover after parsing attributes in process `syz.4.94'. [ 96.514496][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 96.520385][ T5928] em28xx 1-1:0.0: board has no eeprom [ 96.540343][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 96.547465][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 96.554679][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 96.564554][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 96.573459][ T6323] netlink: 36 bytes leftover after parsing attributes in process `syz.4.94'. [ 96.598605][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 96.607176][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 96.615601][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 96.623854][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 96.633259][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 96.685656][ T5928] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 96.698211][ T6332] block device autoloading is deprecated and will be removed. [ 96.713011][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 96.715585][ T5928] em28xx 1-1:0.0: dvb set to bulk mode. [ 96.739700][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 96.778885][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 96.786730][ T5811] em28xx 1-1:0.0: Binding DVB extension [ 96.843574][ T5928] usb 1-1: USB disconnect, device number 4 [ 96.849831][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 96.859770][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 96.881321][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 96.910891][ T5928] em28xx 1-1:0.0: Disconnecting em28xx [ 96.914108][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 96.939471][ T5811] em28xx 1-1:0.0: Registering input extension [ 96.949068][ T5928] em28xx 1-1:0.0: Closing input extension [ 96.972861][ T5928] em28xx 1-1:0.0: Freeing device [ 97.080935][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 97.088222][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 97.095820][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 97.104935][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 97.600023][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 97.683758][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 97.714491][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 97.809635][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 97.878185][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 97.925982][ T6347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.98'. [ 98.129578][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 98.246450][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 98.262185][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 98.279535][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 98.294392][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 98.320096][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 98.353116][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 98.383025][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 98.401613][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 98.418146][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 98.439720][ T6351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.100'. [ 98.451855][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 98.483965][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 98.485201][ T6351] netlink: 12 bytes leftover after parsing attributes in process `syz.0.100'. [ 98.498604][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 98.525956][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 98.548722][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 98.570745][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 98.585802][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 98.594451][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 98.601645][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 98.609150][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 98.619109][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 98.626515][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 98.633685][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 98.771245][ T6356] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 98.779240][ T6356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.97'. [ 99.480189][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 99.487291][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 99.508229][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 99.530436][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 99.537512][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 99.544728][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 99.544740][ T30] audit: type=1400 audit(1750933529.218:341): avc: denied { execute } for pid=6361 comm="syz.4.102" path="/19/blkio.bfq.io_service_bytes" dev="tmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 99.626598][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 99.653576][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 99.661189][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 99.668271][ T30] audit: type=1400 audit(1750933529.268:342): avc: denied { ioctl } for pid=6354 comm="syz.1.101" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 99.715375][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 99.729241][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 99.740488][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 99.758859][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 99.772760][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 99.785074][ T30] audit: type=1400 audit(1750933529.468:343): avc: denied { read } for pid=6366 comm="syz.4.104" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 99.819057][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 99.847701][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 99.861957][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 99.927417][ T30] audit: type=1400 audit(1750933529.468:344): avc: denied { open } for pid=6366 comm="syz.4.104" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 99.928904][ T6372] netlink: 60 bytes leftover after parsing attributes in process `syz.2.105'. [ 100.014231][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 100.025941][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 100.034145][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 100.041294][ T30] audit: type=1400 audit(1750933529.498:345): avc: denied { ioctl } for pid=6366 comm="syz.4.104" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 100.066211][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 100.073388][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 100.164339][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 100.265801][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 100.293838][ T30] audit: type=1400 audit(1750933529.608:346): avc: denied { nlmsg_write } for pid=6369 comm="syz.2.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 100.406655][ T6376] netlink: 24 bytes leftover after parsing attributes in process `syz.4.106'. [ 100.426927][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 100.497557][ T6378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.107'. [ 100.724585][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 100.813438][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 100.851722][ T30] audit: type=1400 audit(1750933529.938:347): avc: denied { name_connect } for pid=6369 comm="syz.2.105" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 101.531902][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 101.668537][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 101.718425][ T30] audit: type=1400 audit(1750933530.728:348): avc: denied { accept } for pid=6369 comm="syz.2.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 101.924661][ T6384] SELinux: syz.1.108 (6384) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 102.099513][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 102.190508][ T30] audit: type=1400 audit(1750933531.818:349): avc: denied { write } for pid=6388 comm="syz.0.109" name="ip6_flowlabel" dev="proc" ino=4026533243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 104.455082][ T30] audit: type=1400 audit(1750933534.138:350): avc: denied { read write } for pid=6400 comm="syz.1.111" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 104.970109][ T5928] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 105.053277][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 105.100789][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 105.107861][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 105.258595][ T6405] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 105.267261][ T6405] netlink: 4 bytes leftover after parsing attributes in process `syz.4.110'. [ 105.290665][ T30] audit: type=1400 audit(1750933534.168:351): avc: denied { open } for pid=6400 comm="syz.1.111" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 105.314468][ T30] audit: type=1400 audit(1750933534.168:352): avc: denied { ioctl } for pid=6400 comm="syz.1.111" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 105.371311][ T6396] orangefs_mount: mount request failed with -4 [ 105.460467][ T5928] usb 2-1: Using ep0 maxpacket: 32 [ 105.570277][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.746612][ T5928] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 105.759328][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.772260][ T5928] usb 2-1: config 0 descriptor?? [ 106.028947][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 106.307842][ T5928] arvo 0003:1E7D:30D4.0004: unknown main item tag 0x0 [ 106.879906][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 107.058943][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 107.112276][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 107.119352][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 107.318315][ T5928] arvo 0003:1E7D:30D4.0004: unknown main item tag 0x0 [ 107.350163][ T5928] arvo 0003:1E7D:30D4.0004: unknown main item tag 0x0 [ 107.363624][ T5928] arvo 0003:1E7D:30D4.0004: unknown main item tag 0x0 [ 107.374766][ T5928] arvo 0003:1E7D:30D4.0004: unknown main item tag 0x0 [ 107.442680][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 107.550234][ T30] audit: type=1400 audit(1750933537.118:353): avc: denied { bind } for pid=6400 comm="syz.1.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 109.903492][ T5928] arvo 0003:1E7D:30D4.0004: hidraw0: USB HID v0.05 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 110.554702][ T30] audit: type=1400 audit(1750933537.118:354): avc: denied { name_bind } for pid=6400 comm="syz.1.111" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 110.601172][ T5928] arvo 0003:1E7D:30D4.0004: couldn't init struct arvo_device [ 110.790145][ T5928] arvo 0003:1E7D:30D4.0004: couldn't install keyboard [ 110.799870][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 110.817050][ T5928] arvo 0003:1E7D:30D4.0004: probe with driver arvo failed with error -71 [ 110.839390][ T30] audit: type=1400 audit(1750933537.118:355): avc: denied { node_bind } for pid=6400 comm="syz.1.111" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 110.839433][ T30] audit: type=1400 audit(1750933537.178:356): avc: denied { write } for pid=6409 comm="syz.0.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 110.850834][ T5928] usb 2-1: USB disconnect, device number 5 [ 110.855677][ C1] sched: DL replenish lagged too much [ 112.755776][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 113.342311][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 113.349385][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 113.529892][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 115.262395][ T6425] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 115.681763][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 115.688859][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 115.803240][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 116.303285][ T6425] batman_adv: batadv0: Adding interface: gretap1 [ 116.309649][ T6425] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.351653][ T6425] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 117.242885][ T30] audit: type=1400 audit(1750933546.878:357): avc: denied { create } for pid=6426 comm="syz.1.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 118.004023][ T6431] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 118.093241][ T30] audit: type=1400 audit(1750933547.718:358): avc: denied { prog_load } for pid=6430 comm="syz.4.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 118.108975][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 118.180364][ T6435] netlink: 76 bytes leftover after parsing attributes in process `syz.3.120'. [ 118.217501][ T30] audit: type=1400 audit(1750933547.718:359): avc: denied { bpf } for pid=6430 comm="syz.4.119" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 118.315632][ T30] audit: type=1400 audit(1750933547.718:360): avc: denied { perfmon } for pid=6430 comm="syz.4.119" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 118.378231][ T30] audit: type=1400 audit(1750933547.728:361): avc: denied { create } for pid=6434 comm="syz.3.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 121.767023][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 122.160114][ T30] audit: type=1400 audit(1750933547.728:362): avc: denied { setopt } for pid=6434 comm="syz.3.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 122.193420][ T30] audit: type=1400 audit(1750933547.738:363): avc: denied { ioctl } for pid=6434 comm="syz.3.120" path="socket:[9956]" dev="sockfs" ino=9956 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 127.612499][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 134.083837][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.106799][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.430153][ T30] audit: type=1400 audit(1750933547.738:364): avc: denied { write } for pid=6434 comm="syz.3.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 134.664983][ T30] audit: type=1400 audit(1750933547.778:365): avc: denied { read } for pid=6434 comm="syz.3.120" dev="nsfs" ino=4026533358 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 134.797117][ T30] audit: type=1400 audit(1750933547.778:366): avc: denied { open } for pid=6434 comm="syz.3.120" path="net:[4026533358]" dev="nsfs" ino=4026533358 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 135.010129][ T30] audit: type=1400 audit(1750933547.778:367): avc: denied { create } for pid=6434 comm="syz.3.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 135.172557][ T30] audit: type=1400 audit(1750933547.838:368): avc: denied { write } for pid=6434 comm="syz.3.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 135.340310][ T30] audit: type=1400 audit(1750933547.838:369): avc: denied { read } for pid=6434 comm="syz.3.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 135.565121][ T30] audit: type=1400 audit(1750933547.838:370): avc: denied { ioctl } for pid=6434 comm="syz.3.120" path="socket:[9962]" dev="sockfs" ino=9962 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 135.890119][ T30] audit: type=1400 audit(1750933547.888:371): avc: denied { module_request } for pid=6434 comm="syz.3.120" kmod=6E65742D636C732D98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 136.140138][ T30] audit: type=1400 audit(1750933547.888:372): avc: denied { read write } for pid=5816 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 136.410265][ T30] audit: type=1400 audit(1750933547.888:373): avc: denied { open } for pid=5816 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 136.861152][ T5822] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 136.869048][ T5822] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 136.878692][ T5822] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 136.886486][ T5822] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 136.893849][ T5825] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 136.901695][ T5822] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 136.909522][ T5825] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 136.917959][ T5825] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 136.927172][ T5829] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 136.943882][ T5825] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 136.963539][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 137.012746][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 137.019843][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 137.156371][ T5814] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 137.167447][ T5814] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 137.178159][ T5814] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 137.188082][ T5814] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 137.195962][ T5814] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 137.232657][ T6452] lo speed is unknown, defaulting to 1000 [ 137.298783][ T6451] lo speed is unknown, defaulting to 1000 [ 137.350949][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 137.359012][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 137.367093][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 137.375199][ T5829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 137.383999][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 137.441787][ T5822] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 137.460262][ T5822] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 137.468641][ T5822] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 137.477200][ T5822] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 137.487613][ T5822] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 138.265468][ T6456] lo speed is unknown, defaulting to 1000 [ 138.907087][ T6460] lo speed is unknown, defaulting to 1000 [ 138.963334][ T6458] lo speed is unknown, defaulting to 1000 [ 138.970500][ T5829] Bluetooth: hci6: command tx timeout [ 138.976160][ T5829] Bluetooth: hci5: command tx timeout [ 139.472289][ T6451] chnl_net:caif_netlink_parms(): no params data found [ 139.614854][ T5825] Bluetooth: hci8: command tx timeout [ 139.620632][ T5822] Bluetooth: hci7: command tx timeout [ 139.626579][ T5829] Bluetooth: hci3: command tx timeout [ 139.775064][ T6452] chnl_net:caif_netlink_parms(): no params data found [ 139.937936][ T6456] chnl_net:caif_netlink_parms(): no params data found [ 140.038699][ T6458] chnl_net:caif_netlink_parms(): no params data found [ 140.084288][ T6460] chnl_net:caif_netlink_parms(): no params data found [ 140.395103][ T6451] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.405428][ T6451] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.417310][ T6451] bridge_slave_0: entered allmulticast mode [ 140.426854][ T6451] bridge_slave_0: entered promiscuous mode [ 140.508529][ T6451] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.518083][ T6451] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.529277][ T6451] bridge_slave_1: entered allmulticast mode [ 140.538236][ T6451] bridge_slave_1: entered promiscuous mode [ 140.732492][ T6452] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.739657][ T6452] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.757359][ T6452] bridge_slave_0: entered allmulticast mode [ 140.767167][ T6452] bridge_slave_0: entered promiscuous mode [ 140.869211][ T6451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.938916][ T6456] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.951800][ T6456] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.958983][ T6456] bridge_slave_0: entered allmulticast mode [ 140.971952][ T6456] bridge_slave_0: entered promiscuous mode [ 141.023112][ T6458] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.041686][ T6458] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.048856][ T6458] bridge_slave_0: entered allmulticast mode [ 141.059391][ T5829] Bluetooth: hci5: command tx timeout [ 141.065018][ T5825] Bluetooth: hci6: command tx timeout [ 141.081307][ T6458] bridge_slave_0: entered promiscuous mode [ 141.088562][ T6452] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.101006][ T6452] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.108152][ T6452] bridge_slave_1: entered allmulticast mode [ 141.124814][ T6452] bridge_slave_1: entered promiscuous mode [ 141.178755][ T6460] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.189190][ T6460] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.198712][ T6460] bridge_slave_0: entered allmulticast mode [ 141.209638][ T6460] bridge_slave_0: entered promiscuous mode [ 141.221345][ T6451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.280804][ T6456] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.287927][ T6456] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.301377][ T6456] bridge_slave_1: entered allmulticast mode [ 141.308722][ T6456] bridge_slave_1: entered promiscuous mode [ 141.319535][ T6458] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.327460][ T6458] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.339484][ T6458] bridge_slave_1: entered allmulticast mode [ 141.347096][ T6458] bridge_slave_1: entered promiscuous mode [ 141.494912][ T6460] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.505369][ T6460] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.515694][ T6460] bridge_slave_1: entered allmulticast mode [ 141.525682][ T6460] bridge_slave_1: entered promiscuous mode [ 141.673303][ T6452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.690217][ T5829] Bluetooth: hci3: command tx timeout [ 141.695812][ T5825] Bluetooth: hci8: command tx timeout [ 141.701517][ T5829] Bluetooth: hci7: command tx timeout [ 141.724392][ T6452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.846497][ T6451] team0: Port device team_slave_0 added [ 141.925760][ T6456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.957670][ T6458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.976354][ T6458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.105470][ T6460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.116109][ T6451] team0: Port device team_slave_1 added [ 142.130480][ T6456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.260002][ T6460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.360996][ T6451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.367979][ T6451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.407705][ T6451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.472176][ T6458] team0: Port device team_slave_0 added [ 142.486538][ T6452] team0: Port device team_slave_0 added [ 142.653003][ T6456] team0: Port device team_slave_0 added [ 142.659517][ T6451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.673466][ T6451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.707606][ T6451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.739530][ T6458] team0: Port device team_slave_1 added [ 142.753446][ T6452] team0: Port device team_slave_1 added [ 142.765470][ T6460] team0: Port device team_slave_0 added [ 142.778927][ T6456] team0: Port device team_slave_1 added [ 142.967751][ T6460] team0: Port device team_slave_1 added [ 143.130665][ T5825] Bluetooth: hci6: command tx timeout [ 143.139855][ T5822] Bluetooth: hci5: command tx timeout [ 143.253798][ T6458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.265646][ T6458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.304471][ T6458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.468878][ T6451] hsr_slave_0: entered promiscuous mode [ 143.479186][ T6451] hsr_slave_1: entered promiscuous mode [ 143.493866][ T6451] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.502973][ T6451] Cannot create hsr debugfs directory [ 143.509506][ T6458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.530507][ T6458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.561970][ T6458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.577256][ T6452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.586496][ T6452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.618010][ T6452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.645463][ T6452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.658114][ T6452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.689730][ T6452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.707329][ T6460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.714658][ T6460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.755177][ T6460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.775060][ T5822] Bluetooth: hci8: command tx timeout [ 143.784411][ T5822] Bluetooth: hci7: command tx timeout [ 143.789806][ T5822] Bluetooth: hci3: command tx timeout [ 143.798946][ T6456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.811705][ T6456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.844854][ T6456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.894129][ T6460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.906353][ T6460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.943388][ T6460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.969879][ T6456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.983077][ T6456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.017327][ T6456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.425477][ T6452] hsr_slave_0: entered promiscuous mode [ 144.436883][ T6452] hsr_slave_1: entered promiscuous mode [ 144.444162][ T6452] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 144.458348][ T6452] Cannot create hsr debugfs directory [ 144.469628][ T6458] hsr_slave_0: entered promiscuous mode [ 144.481640][ T6458] hsr_slave_1: entered promiscuous mode [ 144.487789][ T6458] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 144.501826][ T6458] Cannot create hsr debugfs directory [ 144.614593][ T6456] hsr_slave_0: entered promiscuous mode [ 144.622876][ T6456] hsr_slave_1: entered promiscuous mode [ 144.644002][ T6456] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 144.660458][ T6456] Cannot create hsr debugfs directory [ 144.763883][ T6460] hsr_slave_0: entered promiscuous mode [ 144.775894][ T6460] hsr_slave_1: entered promiscuous mode [ 144.782597][ T6460] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 144.795580][ T6460] Cannot create hsr debugfs directory [ 145.210281][ T5829] Bluetooth: hci5: command tx timeout [ 145.215745][ T5822] Bluetooth: hci6: command tx timeout [ 145.850443][ T5822] Bluetooth: hci7: command tx timeout [ 145.855947][ T5825] Bluetooth: hci8: command tx timeout [ 145.861973][ T5829] Bluetooth: hci3: command tx timeout [ 145.956692][ T6451] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 146.017307][ T6451] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 146.062535][ T6451] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 146.116923][ T6451] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 146.221047][ T6456] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 146.265814][ T6456] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 146.307349][ T6456] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 146.353206][ T6456] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 146.470236][ T6458] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 146.568212][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 146.568795][ T6458] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 146.639044][ T6451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.682877][ T6458] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 146.758557][ T6458] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 146.837408][ T6451] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.899719][ T6452] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 146.969223][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.976670][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.008169][ T6452] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 147.057518][ T6456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.062392][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 147.094498][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.094615][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.099367][ T6452] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 147.279825][ T6451] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 147.298287][ T6451] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 147.316605][ T6452] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 147.379604][ T6456] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.396315][ T6460] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 147.426423][ T6460] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 147.515712][ T6460] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 147.576189][ T6460] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 147.583754][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 147.583768][ T30] audit: type=1400 audit(1750933577.268:387): avc: denied { sys_module } for pid=6451 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 147.683953][ T6308] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.691126][ T6308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.798564][ T6308] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.805751][ T6308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.079688][ T6458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.219269][ T6451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.297924][ T6452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.329207][ T6456] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 148.376562][ T6458] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.472275][ T6452] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.503656][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.510823][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.583446][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.591373][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.669310][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.676698][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.733552][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.740708][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.927278][ T6458] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 149.108124][ T6460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.175914][ T6452] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 149.358265][ T6456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.445729][ T6460] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.629400][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.636597][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.716962][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.724143][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.016800][ T6458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.131539][ T6451] veth0_vlan: entered promiscuous mode [ 150.323829][ T6451] veth1_vlan: entered promiscuous mode [ 150.629084][ T6451] veth0_macvtap: entered promiscuous mode [ 150.729631][ T6452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.830374][ T6451] veth1_macvtap: entered promiscuous mode [ 151.005289][ T6456] veth0_vlan: entered promiscuous mode [ 151.080931][ T6451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.162608][ T6451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.188649][ T6460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.232949][ T6456] veth1_vlan: entered promiscuous mode [ 151.294190][ T6451] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.350337][ T6451] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.359071][ T6451] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.440539][ T6451] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.679785][ T6456] veth0_macvtap: entered promiscuous mode [ 151.785769][ T6456] veth1_macvtap: entered promiscuous mode [ 151.960933][ T6456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.991892][ T6458] veth0_vlan: entered promiscuous mode [ 152.043293][ T6456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.108597][ T6458] veth1_vlan: entered promiscuous mode [ 152.152785][ T6456] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.182568][ T6456] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.215127][ T6456] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.245680][ T6456] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.367091][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.391765][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.516447][ T6458] veth0_macvtap: entered promiscuous mode [ 152.596735][ T6458] veth1_macvtap: entered promiscuous mode [ 152.633403][ T6452] veth0_vlan: entered promiscuous mode [ 152.687174][ T6458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.704775][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.737360][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.747678][ T6452] veth1_vlan: entered promiscuous mode [ 152.768879][ T6460] veth0_vlan: entered promiscuous mode [ 152.827896][ T30] audit: type=1400 audit(1750933582.508:388): avc: denied { mounton } for pid=6451 comm="syz-executor" path="/root/syzkaller.YjbXcQ/syz-tmp" dev="sda1" ino=2051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 152.935682][ T6458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.965807][ T30] audit: type=1400 audit(1750933582.548:389): avc: denied { mount } for pid=6451 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 153.009285][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.036698][ T6452] veth0_macvtap: entered promiscuous mode [ 153.056149][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.081066][ T6460] veth1_vlan: entered promiscuous mode [ 153.098118][ T6458] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.116156][ T30] audit: type=1400 audit(1750933582.548:390): avc: denied { mounton } for pid=6451 comm="syz-executor" path="/root/syzkaller.YjbXcQ/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 153.143496][ T6458] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.168536][ T6458] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.177992][ T6458] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.191760][ T30] audit: type=1400 audit(1750933582.568:391): avc: denied { mount } for pid=6451 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 153.310212][ T30] audit: type=1400 audit(1750933582.568:392): avc: denied { mounton } for pid=6451 comm="syz-executor" path="/root/syzkaller.YjbXcQ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 153.353859][ T6452] veth1_macvtap: entered promiscuous mode [ 153.502922][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.432948][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.886183][ T30] audit: type=1400 audit(1750933582.568:393): avc: denied { mounton } for pid=6451 comm="syz-executor" path="/root/syzkaller.YjbXcQ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=13356 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 158.652475][ T30] audit: type=1400 audit(1750933582.608:394): avc: denied { unmount } for pid=6451 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 158.735306][ T6460] veth0_macvtap: entered promiscuous mode [ 158.812152][ T6452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.825964][ T30] audit: type=1400 audit(1750933582.638:395): avc: denied { mounton } for pid=6451 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2774 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 159.487279][ T30] audit: type=1400 audit(1750933582.638:396): avc: denied { mount } for pid=6451 comm="syz-executor" name="/" dev="gadgetfs" ino=6048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 159.518741][ T30] audit: type=1400 audit(1750933582.638:397): avc: denied { mount } for pid=6451 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 159.955555][ T6460] veth1_macvtap: entered promiscuous mode [ 160.199399][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 161.080089][ T30] audit: type=1400 audit(1750933582.638:398): avc: denied { mounton } for pid=6451 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 161.546297][ T6452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.908636][ T30] audit: type=1400 audit(1750933582.638:399): avc: denied { mount } for pid=6451 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 162.208484][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 162.244569][ T30] audit: type=1400 audit(1750933583.098:400): avc: denied { create } for pid=6577 comm="syz.5.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 162.244614][ T30] audit: type=1400 audit(1750933583.108:401): avc: denied { allowed } for pid=6577 comm="syz.5.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 162.244650][ T30] audit: type=1400 audit(1750933583.108:402): avc: denied { create } for pid=6577 comm="syz.5.122" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 162.244689][ T30] audit: type=1400 audit(1750933585.488:403): avc: denied { read } for pid=6577 comm="syz.5.122" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 162.519711][ T6590] netlink: 4 bytes leftover after parsing attributes in process `syz.5.127'. [ 164.426597][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 164.426613][ T30] audit: type=1400 audit(1750933594.108:411): avc: denied { watch } for pid=6592 comm="syz.7.124" path="/0" dev="tmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 164.548168][ T30] audit: type=1400 audit(1750933594.108:412): avc: denied { watch_sb watch_reads } for pid=6592 comm="syz.7.124" path="/0" dev="tmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 164.578560][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.610124][ T30] audit: type=1400 audit(1750933594.158:413): avc: denied { unlink } for pid=6592 comm="syz.7.124" name="#1" dev="tmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 164.689175][ T6452] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.723818][ T30] audit: type=1400 audit(1750933594.158:414): avc: denied { mount } for pid=6592 comm="syz.7.124" name="/" dev="overlay" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 164.768784][ T6452] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.798900][ T6452] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.816302][ T6452] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.630934][ T6308] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.638812][ T6308] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.646381][ T5933] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 167.379354][ T6460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.428246][ T5933] usb 8-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 167.449612][ T5933] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.495240][ T5933] usb 8-1: config 0 descriptor?? [ 167.522253][ T6460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.546966][ T5933] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 167.580903][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.621618][ T6460] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.640107][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.663298][ T6460] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.680520][ T6460] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.689313][ T6460] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.818239][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.859047][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.973433][ T5933] cpia1 8-1:0.0: unexpected state after lo power cmd: 00 [ 168.023258][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.081464][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.174774][ T30] audit: type=1400 audit(1750933597.858:415): avc: denied { ioctl } for pid=6605 comm="syz.8.125" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 168.355614][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.471540][ T5933] gspca_cpia1: usb_control_msg 02, error -32 [ 168.761507][ T5933] gspca_cpia1: usb_control_msg 02, error -71 [ 168.767529][ T5933] cpia1 8-1:0.0: only firmware version 1 is supported (got: 0) [ 168.785724][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.362432][ T5933] usb 8-1: USB disconnect, device number 2 [ 186.914986][ T30] audit: type=1400 audit(1750933616.518:416): avc: denied { create } for pid=6614 comm="syz.6.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 195.570525][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.576871][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 206.649450][ T30] audit: type=1400 audit(1750933616.528:417): avc: denied { getopt } for pid=6614 comm="syz.6.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 209.827196][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.107703][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.917020][ T5822] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 221.960088][ T5822] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 221.990851][ T5822] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 222.049362][ T5822] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 222.080428][ T5814] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 222.092090][ T5814] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 222.140345][ T5814] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 222.150682][ T5814] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 222.158472][ T5814] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 222.170078][ T5814] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 222.358472][ T5825] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 222.367124][ T5825] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 222.381050][ T5825] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 222.419451][ T5825] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 222.450077][ T5825] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 222.589745][ T5135] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 222.602228][ T5135] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 222.610361][ T5135] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 222.618397][ T5135] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 222.626052][ T5135] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 222.650532][ T5825] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 222.658734][ T5825] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 222.666457][ T5825] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 222.677323][ T5825] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 222.693612][ T5825] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 232.835713][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.509256][ T5813] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 247.519210][ T5813] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 247.541999][ T5813] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 247.575196][ T5813] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 247.582981][ T5813] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 248.298147][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 248.306594][ T5828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 248.314435][ T5828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 248.322620][ T5828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 248.330254][ T5828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 248.429512][ T5830] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 248.440349][ T5830] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 248.447922][ T5830] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 248.456406][ T5830] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 248.464219][ T5830] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 250.385651][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 255.228607][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.237439][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.055174][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 261.532144][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 268.091342][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 268.098423][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 275.143278][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 275.191645][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 275.198729][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 275.992210][ T5827] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 276.006192][ T5827] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 276.040434][ T5826] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 276.048105][ T5826] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 276.057026][ T5826] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 276.065558][ T5826] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 276.073007][ T5826] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 276.081541][ T5826] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 276.088716][ T5826] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 276.097532][ T5826] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 282.080319][ T6670] Bluetooth: hci11: command tx timeout [ 282.086346][ T6670] Bluetooth: hci8: command tx timeout [ 284.170355][ T6668] Bluetooth: hci11: command tx timeout [ 284.176970][ T6670] Bluetooth: hci8: command tx timeout [ 285.544593][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 286.251102][ T6668] Bluetooth: hci11: command tx timeout [ 286.264168][ T6670] Bluetooth: hci8: command tx timeout [ 286.833109][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 286.876604][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 288.330256][ T6668] Bluetooth: hci11: command tx timeout [ 288.335806][ T6670] Bluetooth: hci8: command tx timeout [ 292.072697][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 292.079866][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 297.095268][ T6623] lo speed is unknown, defaulting to 1000 [ 307.003297][ T6630] lo speed is unknown, defaulting to 1000 [ 307.082296][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.134182][ T6634] lo speed is unknown, defaulting to 1000 [ 307.254882][ T6632] lo speed is unknown, defaulting to 1000 [ 307.400172][ T6655] lo speed is unknown, defaulting to 1000 [ 307.501023][ T6657] lo speed is unknown, defaulting to 1000 [ 307.508350][ T6665] lo speed is unknown, defaulting to 1000 [ 307.843990][ T6649] lo speed is unknown, defaulting to 1000 [ 307.965066][ T6668] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 307.974044][ T6668] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 307.989294][ T6668] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 307.997976][ T6668] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 308.006845][ T6668] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 308.134378][ T6664] lo speed is unknown, defaulting to 1000 [ 308.807408][ T6684] lo speed is unknown, defaulting to 1000 [ 309.147925][ T6668] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 309.158313][ T6668] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 309.166601][ T6668] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 309.183072][ T6668] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 309.191172][ T6668] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 309.351668][ T6670] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 309.360248][ T6670] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 309.368048][ T6670] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 309.376404][ T6670] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 309.387380][ T6670] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 309.489141][ T6689] lo speed is unknown, defaulting to 1000 [ 309.679147][ T6691] lo speed is unknown, defaulting to 1000 [ 309.898421][ T6665] chnl_net:caif_netlink_parms(): no params data found [ 310.090271][ T6670] Bluetooth: hci12: command tx timeout [ 310.270205][ T6664] chnl_net:caif_netlink_parms(): no params data found [ 310.623124][ T6684] chnl_net:caif_netlink_parms(): no params data found [ 310.687255][ T6665] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.703804][ T6665] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.713408][ T6665] bridge_slave_0: entered allmulticast mode [ 310.728940][ T6665] bridge_slave_0: entered promiscuous mode [ 310.827659][ T6665] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.858087][ T6665] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.895985][ T6665] bridge_slave_1: entered allmulticast mode [ 310.914742][ T6665] bridge_slave_1: entered promiscuous mode [ 311.078895][ T6689] chnl_net:caif_netlink_parms(): no params data found [ 311.234164][ T6665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.290399][ T6670] Bluetooth: hci13: command tx timeout [ 311.427648][ T6665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.450234][ T6670] Bluetooth: hci14: command tx timeout [ 311.489183][ T6664] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.510201][ T6664] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.517457][ T6664] bridge_slave_0: entered allmulticast mode [ 311.547542][ T6664] bridge_slave_0: entered promiscuous mode [ 311.828780][ T6664] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.837897][ T6664] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.859932][ T6664] bridge_slave_1: entered allmulticast mode [ 311.867591][ T6664] bridge_slave_1: entered promiscuous mode [ 311.942226][ T6684] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.949359][ T6684] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.969068][ T6684] bridge_slave_0: entered allmulticast mode [ 311.993025][ T6684] bridge_slave_0: entered promiscuous mode [ 312.019066][ T6665] team0: Port device team_slave_0 added [ 312.149106][ T6691] chnl_net:caif_netlink_parms(): no params data found [ 312.171150][ T6670] Bluetooth: hci12: command tx timeout [ 312.177822][ T6684] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.201379][ T6684] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.208626][ T6684] bridge_slave_1: entered allmulticast mode [ 312.223800][ T6684] bridge_slave_1: entered promiscuous mode [ 312.244338][ T6665] team0: Port device team_slave_1 added [ 312.315783][ T6664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.573376][ T6665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.587607][ T6665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.652763][ T6665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.676626][ T6664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.718165][ T6684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.799774][ T6665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.818665][ T6665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.854932][ T6665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.007960][ T6684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.027595][ T6689] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.036736][ T6689] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.051900][ T6689] bridge_slave_0: entered allmulticast mode [ 313.059667][ T6689] bridge_slave_0: entered promiscuous mode [ 313.278121][ T6689] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.288692][ T6689] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.317185][ T6689] bridge_slave_1: entered allmulticast mode [ 313.331740][ T6689] bridge_slave_1: entered promiscuous mode [ 313.342681][ T6664] team0: Port device team_slave_0 added [ 313.370805][ T6670] Bluetooth: hci13: command tx timeout [ 313.530372][ T6670] Bluetooth: hci14: command tx timeout [ 313.571556][ T6664] team0: Port device team_slave_1 added [ 313.640732][ T6684] team0: Port device team_slave_0 added [ 313.768299][ T6689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.889446][ T6684] team0: Port device team_slave_1 added [ 313.951372][ T6691] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.958522][ T6691] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.976545][ T6691] bridge_slave_0: entered allmulticast mode [ 313.997957][ T6691] bridge_slave_0: entered promiscuous mode [ 314.017069][ T6665] hsr_slave_0: entered promiscuous mode [ 314.038124][ T6665] hsr_slave_1: entered promiscuous mode [ 314.045732][ T6665] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 314.061931][ T6665] Cannot create hsr debugfs directory [ 314.082167][ T6689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.105299][ T6664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.115898][ T6664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.158178][ T6664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.227649][ T6691] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.247797][ T6691] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.256099][ T6670] Bluetooth: hci12: command tx timeout [ 314.270250][ T6691] bridge_slave_1: entered allmulticast mode [ 314.288136][ T6691] bridge_slave_1: entered promiscuous mode [ 314.454152][ T6664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.467111][ T6664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.501377][ T6664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.527428][ T6684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.550173][ T6684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.589376][ T6684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.784055][ T6691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.805289][ T6689] team0: Port device team_slave_0 added [ 314.837523][ T6684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.861656][ T6684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.903644][ T6684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.944035][ T6691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.030902][ T6689] team0: Port device team_slave_1 added [ 315.268231][ T6691] team0: Port device team_slave_0 added [ 315.450191][ T6670] Bluetooth: hci13: command tx timeout [ 315.467004][ T6684] hsr_slave_0: entered promiscuous mode [ 315.481015][ T6684] hsr_slave_1: entered promiscuous mode [ 315.488123][ T6684] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 315.508498][ T6684] Cannot create hsr debugfs directory [ 315.532538][ T6691] team0: Port device team_slave_1 added [ 315.610468][ T6670] Bluetooth: hci14: command tx timeout [ 315.618925][ T6689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.640237][ T6689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.681819][ T6689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.706563][ T6664] hsr_slave_0: entered promiscuous mode [ 315.724408][ T6664] hsr_slave_1: entered promiscuous mode [ 315.742709][ T6664] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 315.757933][ T6664] Cannot create hsr debugfs directory [ 315.914248][ T6689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.926929][ T6689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.967014][ T6689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.330280][ T6670] Bluetooth: hci12: command tx timeout [ 316.398917][ T6691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.411898][ T6691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.451511][ T6691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.534709][ T6689] hsr_slave_0: entered promiscuous mode [ 316.544730][ T6689] hsr_slave_1: entered promiscuous mode [ 316.557041][ T6689] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 316.569867][ T6689] Cannot create hsr debugfs directory [ 316.615324][ T6691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.633206][ T6691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.681693][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.694366][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.711225][ T6691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.184703][ T6691] hsr_slave_0: entered promiscuous mode [ 317.194843][ T6691] hsr_slave_1: entered promiscuous mode [ 317.222961][ T6691] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 317.236223][ T6691] Cannot create hsr debugfs directory [ 317.530688][ T6670] Bluetooth: hci13: command tx timeout [ 317.690676][ T6670] Bluetooth: hci14: command tx timeout [ 320.335752][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 337.274069][ T6668] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 337.293504][ T6668] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 337.301690][ T6668] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 337.310960][ T6668] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 337.318776][ T6668] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 337.398026][ T6668] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 337.406832][ T6668] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 337.415272][ T6668] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 337.423171][ T6668] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 337.431037][ T6668] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 339.373881][ T6670] Bluetooth: hci15: command tx timeout [ 339.454446][ T6670] Bluetooth: hci16: command tx timeout [ 341.456636][ T6670] Bluetooth: hci15: command tx timeout [ 341.530290][ T6670] Bluetooth: hci16: command tx timeout [ 342.225719][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 342.264181][ T5892] sunplus 0003:04FC:05D8.0003: unknown main item tag 0x0 [ 343.530661][ T6670] Bluetooth: hci15: command tx timeout [ 343.610326][ T6670] Bluetooth: hci16: command tx timeout [ 345.610172][ T6670] Bluetooth: hci15: command tx timeout [ 345.690206][ T6670] Bluetooth: hci16: command tx timeout [ 368.855333][ T6668] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 368.879459][ T6668] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 368.890384][ T6668] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 368.899027][ T6668] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 368.918985][ T6668] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 369.077417][ T6670] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 369.086172][ T6670] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 369.094005][ T6670] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 369.108217][ T6670] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 369.120627][ T6670] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 369.459393][ T6668] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 369.482682][ T6668] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 369.494177][ T6668] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 369.502902][ T6668] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 369.510748][ T6668] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 370.410535][ T31] INFO: task kworker/u9:1:5135 blocked for more than 143 seconds. [ 370.418395][ T31] Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 [ 370.445838][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 370.479207][ T31] task:kworker/u9:1 state:D stack:25880 pid:5135 tgid:5135 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 370.500038][ T30] audit: type=1400 audit(1750933800.178:418): avc: denied { write } for pid=5797 comm="syz-executor" path="pipe:[3641]" dev="pipefs" ino=3641 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 370.530117][ T31] Workqueue: hci9 hci_rx_work [ 370.534840][ T31] Call Trace: [ 370.538115][ T31] [ 370.640043][ T31] __schedule+0x116a/0x5de0 [ 370.644623][ T31] ? __lock_acquire+0x622/0x1c90 [ 370.649576][ T31] ? __pfx___schedule+0x10/0x10 [ 370.734808][ T31] ? find_held_lock+0x2b/0x80 [ 370.739549][ T31] ? schedule+0x2d7/0x3a0 [ 370.769458][ T31] schedule+0xe7/0x3a0 [ 370.777329][ T31] schedule_preempt_disabled+0x13/0x30 [ 370.789986][ T31] __mutex_lock+0x6c7/0xb90 [ 370.794578][ T31] ? hci_remote_features_evt+0x472/0x970 [ 370.810096][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 370.815451][ T31] ? queue_work_on+0x12a/0x1f0 [ 370.829987][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 370.835215][ T31] ? queue_work_on+0x8b/0x1f0 [ 370.839898][ T31] ? hci_remote_features_evt+0x472/0x970 [ 370.855660][ T31] hci_remote_features_evt+0x472/0x970 [ 370.870822][ T31] ? __pfx_hci_remote_features_evt+0x10/0x10 [ 370.876836][ T31] ? skb_pull_data+0x166/0x210 [ 370.889775][ T31] hci_event_packet+0xa0d/0x11c0 [ 370.898000][ T31] ? __pfx_hci_remote_features_evt+0x10/0x10 [ 370.909987][ T31] ? __pfx_hci_event_packet+0x10/0x10 [ 370.915386][ T31] ? kcov_remote_start+0x3c9/0x6d0 [ 370.930944][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 370.936173][ T31] hci_rx_work+0x2c5/0x16b0 [ 370.953062][ T31] ? rcu_is_watching+0x12/0xc0 [ 370.957854][ T31] process_one_work+0x9cc/0x1b70 [ 370.976148][ T31] ? __pfx_process_one_work+0x10/0x10 [ 370.985100][ T6668] Bluetooth: hci17: command tx timeout [ 370.997372][ T31] ? assign_work+0x1a0/0x250 [ 371.005203][ T31] worker_thread+0x6c8/0xf10 [ 371.009838][ T31] ? __kthread_parkme+0x19e/0x250 [ 371.020267][ T31] ? __pfx_worker_thread+0x10/0x10 [ 371.025399][ T31] kthread+0x3c2/0x780 [ 371.029470][ T31] ? __pfx_kthread+0x10/0x10 [ 371.044039][ T31] ? rcu_is_watching+0x12/0xc0 [ 371.048828][ T31] ? __pfx_kthread+0x10/0x10 [ 371.060004][ T31] ret_from_fork+0x5d4/0x6f0 [ 371.079082][ T31] ? __pfx_kthread+0x10/0x10 [ 371.083900][ T31] ret_from_fork_asm+0x1a/0x30 [ 371.088682][ T31] [ 371.099870][ T31] INFO: task kworker/u9:3:5814 blocked for more than 144 seconds. [ 371.109111][ T31] Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 [ 371.124801][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 371.151954][ T31] task:kworker/u9:3 state:D stack:26920 pid:5814 tgid:5814 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 371.189980][ T31] Workqueue: hci4 hci_rx_work [ 371.194713][ T31] Call Trace: [ 371.197993][ T31] [ 371.208819][ T31] __schedule+0x116a/0x5de0 [ 371.213544][ T6668] Bluetooth: hci18: command tx timeout [ 371.227067][ T31] ? __lock_acquire+0x622/0x1c90 [ 371.236366][ T31] ? __pfx___schedule+0x10/0x10 [ 371.244803][ T31] ? find_held_lock+0x2b/0x80 [ 371.249512][ T31] ? schedule+0x2d7/0x3a0 [ 371.258656][ T31] schedule+0xe7/0x3a0 [ 371.271049][ T31] schedule_preempt_disabled+0x13/0x30 [ 371.276545][ T31] __mutex_lock+0x6c7/0xb90 [ 371.289988][ T31] ? hci_remote_features_evt+0x472/0x970 [ 371.295654][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 371.311204][ T31] ? queue_work_on+0x12a/0x1f0 [ 371.315999][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 371.330962][ T31] ? queue_work_on+0x8b/0x1f0 [ 371.335665][ T31] ? hci_remote_features_evt+0x472/0x970 [ 371.350169][ T31] hci_remote_features_evt+0x472/0x970 [ 371.355659][ T31] ? __pfx_hci_remote_features_evt+0x10/0x10 [ 371.372820][ T31] ? skb_pull_data+0x166/0x210 [ 371.377615][ T31] hci_event_packet+0xa0d/0x11c0 [ 371.394529][ T31] ? __pfx_hci_remote_features_evt+0x10/0x10 [ 371.412701][ T31] ? __pfx_hci_event_packet+0x10/0x10 [ 371.418102][ T31] ? kcov_remote_start+0x3c9/0x6d0 [ 371.429980][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 371.435590][ T31] hci_rx_work+0x2c5/0x16b0 [ 371.447696][ T31] ? rcu_is_watching+0x12/0xc0 [ 371.453040][ T31] process_one_work+0x9cc/0x1b70 [ 371.458319][ T31] ? __pfx_process_one_work+0x10/0x10 [ 371.469990][ T31] ? assign_work+0x1a0/0x250 [ 371.487747][ T31] worker_thread+0x6c8/0xf10 [ 371.492983][ T31] ? __pfx_worker_thread+0x10/0x10 [ 371.498104][ T31] kthread+0x3c2/0x780 [ 371.509971][ T31] ? __pfx_kthread+0x10/0x10 [ 371.514576][ T31] ? rcu_is_watching+0x12/0xc0 [ 371.519345][ T31] ? __pfx_kthread+0x10/0x10 [ 371.539063][ T31] ret_from_fork+0x5d4/0x6f0 [ 371.544744][ T31] ? __pfx_kthread+0x10/0x10 [ 371.549344][ T31] ret_from_fork_asm+0x1a/0x30 [ 371.560413][ T31] [ 371.563443][ T31] INFO: task kworker/u9:4:5822 blocked for more than 144 seconds. [ 371.587162][ T31] Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 [ 371.598086][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 371.611736][ T31] task:kworker/u9:4 state:D stack:27144 pid:5822 tgid:5822 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 371.629760][ T6668] Bluetooth: hci19: command tx timeout [ 371.645892][ T31] Workqueue: hci2 hci_rx_work [ 371.658064][ T31] Call Trace: [ 371.663044][ T31] [ 371.665987][ T31] __schedule+0x116a/0x5de0 [ 371.681949][ T31] ? __lock_acquire+0x622/0x1c90 [ 371.686924][ T31] ? __pfx___schedule+0x10/0x10 [ 371.705058][ T31] ? find_held_lock+0x2b/0x80 [ 371.709768][ T31] ? schedule+0x2d7/0x3a0 [ 371.719981][ T31] schedule+0xe7/0x3a0 [ 371.724072][ T31] schedule_preempt_disabled+0x13/0x30 [ 371.729534][ T31] __mutex_lock+0x6c7/0xb90 [ 371.741907][ T31] ? hci_remote_features_evt+0x472/0x970 [ 371.747587][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 371.762763][ T31] ? queue_work_on+0x12a/0x1f0 [ 371.767562][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 371.787775][ T31] ? queue_work_on+0x8b/0x1f0 [ 371.797423][ T31] ? hci_remote_features_evt+0x472/0x970 [ 371.808536][ T31] hci_remote_features_evt+0x472/0x970 [ 371.818407][ T31] ? __pfx_hci_remote_features_evt+0x10/0x10 [ 371.829141][ T31] ? skb_pull_data+0x166/0x210 [ 371.837562][ T31] hci_event_packet+0xa0d/0x11c0 [ 371.847657][ T31] ? __pfx_hci_remote_features_evt+0x10/0x10 [ 371.858694][ T31] ? __pfx_hci_event_packet+0x10/0x10 [ 371.875095][ T31] ? kcov_remote_start+0x3c9/0x6d0 [ 371.891396][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 371.896636][ T31] hci_rx_work+0x2c5/0x16b0 [ 371.909975][ T31] ? rcu_is_watching+0x12/0xc0 [ 371.914779][ T31] process_one_work+0x9cc/0x1b70 [ 371.919728][ T31] ? __pfx_process_one_work+0x10/0x10 [ 371.933749][ T31] ? assign_work+0x1a0/0x250 [ 371.938371][ T31] worker_thread+0x6c8/0xf10 [ 371.954257][ T31] ? __pfx_worker_thread+0x10/0x10 [ 371.959399][ T31] kthread+0x3c2/0x780 [ 371.967562][ T31] ? __pfx_kthread+0x10/0x10 [ 371.981215][ T31] ? rcu_is_watching+0x12/0xc0 [ 371.999980][ T31] ? __pfx_kthread+0x10/0x10 [ 372.004609][ T31] ret_from_fork+0x5d4/0x6f0 [ 372.009209][ T31] ? __pfx_kthread+0x10/0x10 [ 372.021658][ T31] ret_from_fork_asm+0x1a/0x30 [ 372.026464][ T31] [ 372.029484][ T31] INFO: task kworker/u9:5:5825 blocked for more than 144 seconds. [ 372.045696][ T31] Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 [ 372.056142][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 372.069967][ T31] task:kworker/u9:5 state:D stack:26776 pid:5825 tgid:5825 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 372.102614][ T31] Workqueue: hci10 hci_rx_work [ 372.107428][ T31] Call Trace: [ 372.122023][ T31] [ 372.125013][ T31] __schedule+0x116a/0x5de0 [ 372.129546][ T31] ? __lock_acquire+0x622/0x1c90 [ 372.144004][ T31] ? __pfx___schedule+0x10/0x10 [ 372.148922][ T31] ? find_held_lock+0x2b/0x80 [ 372.158695][ T31] ? schedule+0x2d7/0x3a0 [ 372.166848][ T31] schedule+0xe7/0x3a0 [ 372.180357][ T31] schedule_preempt_disabled+0x13/0x30 [ 372.185844][ T31] __mutex_lock+0x6c7/0xb90 [ 372.206796][ T31] ? hci_remote_features_evt+0x472/0x970 [ 372.218580][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 372.229892][ T31] ? queue_work_on+0x12a/0x1f0 [ 372.236500][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 372.247913][ T31] ? queue_work_on+0x8b/0x1f0 [ 372.256452][ T31] ? hci_remote_features_evt+0x472/0x970 [ 372.268608][ T31] hci_remote_features_evt+0x472/0x970 [ 372.276144][ T31] ? __pfx_hci_remote_features_evt+0x10/0x10 [ 372.288429][ T31] ? skb_pull_data+0x166/0x210 [ 372.309336][ T31] hci_event_packet+0xa0d/0x11c0 [ 372.315971][ T31] ? __pfx_hci_remote_features_evt+0x10/0x10 [ 372.329982][ T31] ? __pfx_hci_event_packet+0x10/0x10 [ 372.335388][ T31] ? kcov_remote_start+0x3c9/0x6d0 [ 372.353072][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 372.358311][ T31] hci_rx_work+0x2c5/0x16b0 [ 372.374704][ T31] ? rcu_is_watching+0x12/0xc0 [ 372.379516][ T31] process_one_work+0x9cc/0x1b70 [ 372.388626][ T31] ? __pfx_process_one_work+0x10/0x10 [ 372.403140][ T31] ? assign_work+0x1a0/0x250 [ 372.407779][ T31] worker_thread+0x6c8/0xf10 [ 372.421241][ T31] ? __pfx_worker_thread+0x10/0x10 [ 372.426393][ T31] kthread+0x3c2/0x780 [ 372.442650][ T31] ? __pfx_kthread+0x10/0x10 [ 372.447276][ T31] ? rcu_is_watching+0x12/0xc0 [ 372.457105][ T31] ? __pfx_kthread+0x10/0x10 [ 372.464855][ T31] ret_from_fork+0x5d4/0x6f0 [ 372.469467][ T31] ? __pfx_kthread+0x10/0x10 [ 372.480588][ T31] ret_from_fork_asm+0x1a/0x30 [ 372.485380][ T31] [ 372.488402][ T31] INFO: task kworker/u9:9:5829 blocked for more than 145 seconds. [ 372.512174][ T31] Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 [ 372.519813][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 372.539566][ T31] task:kworker/u9:9 state:D stack:26264 pid:5829 tgid:5829 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 372.581760][ T31] Workqueue: hci1 hci_rx_work [ 372.586501][ T31] Call Trace: [ 372.589775][ T31] [ 372.607896][ T31] __schedule+0x116a/0x5de0 [ 372.618771][ T31] ? __lock_acquire+0x622/0x1c90 [ 372.627070][ T31] ? __pfx___schedule+0x10/0x10 [ 372.636804][ T31] ? find_held_lock+0x2b/0x80 [ 372.651031][ T31] ? schedule+0x2d7/0x3a0 [ 372.655380][ T31] schedule+0xe7/0x3a0 [ 372.659453][ T31] schedule_preempt_disabled+0x13/0x30 [ 372.676323][ T31] __mutex_lock+0x6c7/0xb90 [ 372.682252][ T31] ? hci_remote_features_evt+0x472/0x970 [ 372.687899][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 372.704041][ T31] ? queue_work_on+0x12a/0x1f0 [ 372.708819][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 372.722204][ T31] ? queue_work_on+0x8b/0x1f0 [ 372.726907][ T31] ? hci_remote_features_evt+0x472/0x970 [ 372.738455][ T31] hci_remote_features_evt+0x472/0x970 [ 372.746680][ T31] ? __pfx_hci_remote_features_evt+0x10/0x10 [ 372.762797][ T31] ? skb_pull_data+0x166/0x210 [ 372.767585][ T31] hci_event_packet+0xa0d/0x11c0 [ 372.779978][ T31] ? __pfx_hci_remote_features_evt+0x10/0x10 [ 372.785976][ T31] ? __pfx_hci_event_packet+0x10/0x10 [ 372.798745][ T31] ? kcov_remote_start+0x3c9/0x6d0 [ 372.819104][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 372.824517][ T31] hci_rx_work+0x2c5/0x16b0 [ 372.829039][ T31] ? rcu_is_watching+0x12/0xc0 [ 372.841694][ T31] process_one_work+0x9cc/0x1b70 [ 372.846656][ T31] ? __pfx_process_one_work+0x10/0x10 [ 372.858762][ T31] ? assign_work+0x1a0/0x250 [ 372.877663][ T31] worker_thread+0x6c8/0xf10 [ 372.889965][ T31] ? __kthread_parkme+0x19e/0x250 [ 372.895022][ T31] ? __pfx_worker_thread+0x10/0x10 [ 372.914246][ T31] kthread+0x3c2/0x780 [ 372.918367][ T31] ? __pfx_kthread+0x10/0x10 [ 372.927576][ T31] ? rcu_is_watching+0x12/0xc0 [ 372.937253][ T31] ? __pfx_kthread+0x10/0x10 [ 372.945343][ T31] ret_from_fork+0x5d4/0x6f0 [ 372.955123][ T31] ? __pfx_kthread+0x10/0x10 [ 372.959731][ T31] ret_from_fork_asm+0x1a/0x30 [ 372.968416][ T31] [ 372.997738][ T31] INFO: task syz-executor:6452 blocked for more than 145 seconds. [ 373.013085][ T31] Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 [ 373.026272][ T31] Blocked by coredump. [ 373.034789][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 373.048901][ T31] task:syz-executor state:D stack:24104 pid:6452 tgid:6452 ppid:1 task_flags:0x40054c flags:0x00004006 [ 373.069389][ T6668] Bluetooth: hci17: command tx timeout [ 373.075690][ T31] Call Trace: [ 373.078975][ T31] [ 373.091284][ T31] __schedule+0x116a/0x5de0 [ 373.095828][ T31] ? __lock_acquire+0x622/0x1c90 [ 373.116872][ T31] ? __pfx___schedule+0x10/0x10 [ 373.130026][ T31] ? find_held_lock+0x2b/0x80 [ 373.134729][ T31] ? schedule+0x2d7/0x3a0 [ 373.139071][ T31] schedule+0xe7/0x3a0 [ 373.152451][ T31] schedule_preempt_disabled+0x13/0x30 [ 373.157943][ T31] __mutex_lock+0x6c7/0xb90 [ 373.168156][ T31] ? rcu_is_watching+0x12/0xc0 [ 373.176213][ T31] ? hci_conn_hash_flush+0xbb/0x260 [ 373.186873][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 373.197850][ T31] ? hci_dev_close_sync+0x3ae/0x11d0 [ 373.208517][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 373.231598][ T31] ? hci_conn_hash_flush+0xbb/0x260 [ 373.236831][ T31] hci_conn_hash_flush+0xbb/0x260 [ 373.251215][ T31] hci_dev_close_sync+0x602/0x11d0 [ 373.256363][ T31] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 373.271169][ T31] ? up_write+0x1b2/0x520 [ 373.275723][ T31] hci_dev_do_close+0x2e/0x90 [ 373.287415][ T31] hci_unregister_dev+0x213/0x620 [ 373.292853][ T6668] Bluetooth: hci18: command tx timeout [ 373.300599][ T31] ? __pfx_vhci_release+0x10/0x10 [ 373.305646][ T31] vhci_release+0x79/0xf0 [ 373.321399][ T31] __fput+0x3ff/0xb70 [ 373.325416][ T31] task_work_run+0x150/0x240 [ 373.340239][ T31] ? __pfx_task_work_run+0x10/0x10 [ 373.345388][ T31] do_exit+0x86c/0x2bd0 [ 373.349549][ T31] ? __pfx___might_resched+0x10/0x10 [ 373.366355][ T31] ? __pfx_do_exit+0x10/0x10 [ 373.380142][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 373.385192][ T31] ? find_held_lock+0x2b/0x80 [ 373.389880][ T31] do_group_exit+0xd3/0x2a0 [ 373.403547][ T31] get_signal+0x2673/0x26d0 [ 373.408090][ T31] ? kmem_cache_free+0x2d1/0x4d0 [ 373.424523][ T31] ? fd_install+0x225/0x750 [ 373.429062][ T31] ? __pfx_get_signal+0x10/0x10 [ 373.445941][ T31] ? do_sys_openat2+0x157/0x1d0 [ 373.460290][ T31] arch_do_signal_or_restart+0x8f/0x7d0 [ 373.465875][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 373.479989][ T31] exit_to_user_mode_loop+0x84/0x110 [ 373.485312][ T31] do_syscall_64+0x3f6/0x4c0 [ 373.489911][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.504765][ T31] RIP: 0033:0x7f036d18e221 [ 373.509207][ T31] RSP: 002b:00007fff1e2449c0 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 373.524969][ T31] RAX: 0000000000000003 RBX: 0000000000000003 RCX: 00007f036d18e221 [ 373.539119][ T31] RDX: 0000000000090800 RSI: 00007f036d210e59 RDI: 00000000ffffff9c [ 373.552697][ T31] RBP: 00007fff1e244a6c R08: 0000000000000000 R09: 0000000000000000 [ 373.569989][ T31] R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000000 [ 373.578316][ T31] R13: 0000000000000000 R14: 000000000002ebbf R15: 00007fff1e244ac0 [ 373.597468][ T31] [ 373.601950][ T31] [ 373.601950][ T31] Showing all locks held in the system: [ 373.609668][ T31] 3 locks held by kworker/u8:0/12: [ 373.627620][ T31] #0: ffff88801b881148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 373.646232][ T31] #1: ffffc90000117d10 ((work_completion)(&pool->idle_cull_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 373.663204][ T31] #2: ffffffff8e47b788 (wq_pool_attach_mutex){+.+.}-{4:4}, at: idle_cull_fn+0x99/0x460 [ 373.684800][ T31] 1 lock held by kworker/R-mm_pe/14: [ 373.690402][ T6668] Bluetooth: hci19: command tx timeout [ 373.698933][ T31] #0: ffffffff8e47b788 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 373.714668][ T31] 3 locks held by kworker/1:0/24: [ 373.719696][ T31] 1 lock held by khungtaskd/31: [ 373.738235][ T31] #0: ffffffff8e5c4940 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 373.751851][ T31] 8 locks held by kworker/u8:2/36: [ 373.756980][ T31] #0: ffff88801c6f3948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 373.775473][ T31] #1: ffffc90000ac7d10 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 373.795262][ T31] #2: ffffffff90336b90 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x890 [ 373.811788][ T31] #3: ffff8880256c50e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x12c/0x2b0 [ 373.830610][ T31] #4: ffff8880256c6250 (&devlink->lock_key#5){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x136/0x2b0 [ 373.853058][ T31] #5: ffffffff9034cbe8 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0xfc/0x5d0 [ 373.870158][ T31] #6: ffff888077aacd30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0xb2f/0x2700 [ 373.890022][ T31] #7: ffffffff8e5cff38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 373.916046][ T31] 4 locks held by kworker/u9:0/50: [ 373.925453][ T31] #0: ffff888043258948 ((wq_completion)hci0#2){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 373.946320][ T31] #1: ffffc90000ba7d10 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 373.961628][ T31] #2: ffff88808866c078 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x94/0x970 [ 373.977692][ T31] #3: ffffffff905be2c8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x472/0x970 [ 373.990974][ T31] 3 locks held by kworker/1:1/54: [ 373.996008][ T31] 6 locks held by kworker/1:2/974: [ 374.008372][ T31] 3 locks held by kworker/u8:6/1162: [ 374.023326][ T31] #0: ffff88801b881148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 374.048437][ T31] #1: ffffc9000400fd10 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 374.059686][ T31] #2: ffffffff9034cbe8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 374.081286][ T31] 4 locks held by kworker/u9:1/5135: [ 374.086581][ T31] #0: ffff88803543d948 ((wq_completion)hci9#2){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 374.105386][ T31] #1: ffffc9000f69fd10 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 374.132174][ T31] #2: ffff88806117c078 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x94/0x970 [ 374.154286][ T31] #3: ffffffff905be2c8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x472/0x970 [ 374.168215][ T31] 2 locks held by getty/5576: [ 374.177681][ T31] #0: ffff88803268b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 374.191769][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 374.208024][ T31] 4 locks held by kworker/u9:2/5813: [ 374.215538][ T31] #0: ffff888078702148 ((wq_completion)hci7#2){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 374.231944][ T31] #1: ffffc90002e87d10 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 374.271344][ T31] #2: ffff88804da04078 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x94/0x970 [ 374.291767][ T31] #3: ffffffff905be2c8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x472/0x970 [ 374.309978][ T31] 4 locks held by kworker/u9:3/5814: [ 374.315273][ T31] #0: ffff888047291148 ((wq_completion)hci4#2){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 374.333699][ T31] #1: ffffc90002e77d10 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 374.356152][ T31] #2: ffff88804cbec078 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x94/0x970 [ 374.375581][ T31] #3: ffffffff905be2c8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x472/0x970 [ 374.392744][ T31] 4 locks held by kworker/u9:4/5822: [ 374.398043][ T31] #0: ffff888055a11948 ((wq_completion)hci2#2){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 374.414166][ T31] #1: ffffc90003effd10 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 374.438952][ T31] #2: ffff8880762e8078 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x94/0x970 [ 374.459743][ T31] #3: ffffffff905be2c8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x472/0x970 [ 374.483557][ T31] 4 locks held by kworker/u9:5/5825: [ 374.488862][ T31] #0: ffff88803947c148 ((wq_completion)hci10#2){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 374.509983][ T31] #1: ffffc90003f2fd10 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 374.529340][ T31] #2: ffff888042888078 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x94/0x970 [ 374.540633][ T31] #3: ffffffff905be2c8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x472/0x970 [ 374.563845][ T31] 4 locks held by kworker/u9:8/5828: [ 374.569143][ T31] #0: ffff888039a9f148 ((wq_completion)hci3#4){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 374.583655][ T31] #1: ffffc9000214fd10 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 374.605704][ T31] #2: ffff88804e418078 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x94/0x970 [ 374.624145][ T31] #3: ffffffff905be2c8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x472/0x970 [ 374.642864][ T31] 4 locks held by kworker/u9:9/5829: [ 374.658903][ T31] #0: ffff888035429148 ((wq_completion)hci1#2){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 374.672661][ T31] #1: ffffc90003f4fd10 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 374.688940][ T31] #2: ffff8880393c4078 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x94/0x970 [ 374.702044][ T31] #3: ffffffff905be2c8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x472/0x970 [ 374.722891][ T31] 1 lock held by kworker/R-wg-cr/5846: [ 374.728356][ T31] #0: ffffffff8e47b788 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 374.746362][ T31] 1 lock held by kworker/R-wg-cr/5847: [ 374.758952][ T31] #0: ffffffff8e47b788 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 374.777330][ T31] 1 lock held by kworker/R-wg-cr/5849: [ 374.784311][ T31] #0: ffffffff8e47b788 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 374.800118][ T31] 1 lock held by kworker/R-wg-cr/5850: [ 374.805578][ T31] #0: ffffffff8e47b788 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 374.823743][ T31] 1 lock held by kworker/R-wg-cr/5851: [ 374.829218][ T31] 1 lock held by kworker/R-wg-cr/5852: [ 374.849002][ T31] #0: ffffffff8e47b788 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 374.868637][ T31] 1 lock held by kworker/R-wg-cr/5853: [ 374.877895][ T31] #0: ffffffff8e47b788 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 374.893948][ T31] 1 lock held by kworker/R-wg-cr/5854: [ 374.899412][ T31] #0: ffffffff8e47b788 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 374.919503][ T31] 1 lock held by kworker/R-wg-cr/5855: [ 374.925385][ T31] #0: ffffffff8e47b788 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 374.948928][ T31] 1 lock held by kworker/R-wg-cr/5856: [ 374.970681][ T31] #0: ffffffff8e47b788 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 374.989958][ T31] 1 lock held by kworker/R-wg-cr/5857: [ 374.995428][ T31] #0: ffffffff8e47b788 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x839/0xea0 [ 375.014573][ T31] 1 lock held by kworker/R-wg-cr/5858: [ 375.023006][ T31] #0: ffffffff8e47b788 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x839/0xea0 [ 375.038167][ T31] 3 locks held by kworker/1:3/5871: [ 375.046301][ T31] 2 locks held by kworker/1:4/5878: [ 375.068613][ T31] 2 locks held by kworker/1:5/5885: [ 375.079379][ T31] 6 locks held by kworker/1:6/5892: [ 375.093064][ T31] 4 locks held by kworker/0:7/5933: [ 375.098271][ T31] #0: ffff8880580b7948 ((wq_completion)wg-kex-wg2#10){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 375.117202][ T31] #1: ffffc90004adfd10 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 375.176228][ T6668] Bluetooth: hci17: command tx timeout [ 375.188605][ T31] #2: ffff8880581c5308 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1c2/0x880 [ 375.209290][ T31] #3: ffff888075a8bea8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x5ac/0x880 [ 375.229216][ T31] 2 locks held by kworker/1:7/5963: [ 375.234642][ T31] 3 locks held by syz-executor/6452: [ 375.239922][ T31] #0: ffff88807acd8d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 375.249698][ T31] #1: ffff88807acd8078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 375.276880][ T31] #2: ffffffff905be2c8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260 [ 375.300179][ T31] 2 locks held by kworker/1:8/6463: [ 375.305419][ T31] 1 lock held by kworker/R-wg-cr/6477: [ 375.320143][ T31] #0: ffffffff8e47b788 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 375.339626][ T31] 1 lock held by kworker/R-wg-cr/6480: [ 375.345570][ T31] #0: ffffffff8e47b788 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x839/0xea0 [ 375.366497][ T31] 1 lock held by kworker/R-wg-cr/6481: [ 375.373710][ T6668] Bluetooth: hci18: command tx timeout [ 375.386618][ T31] #0: ffffffff8e47b788 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 375.410066][ T31] 1 lock held by kworker/R-wg-cr/6482: [ 375.415557][ T31] #0: ffffffff8e47b788 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 375.438573][ T31] 1 lock held by kworker/R-wg-cr/6483: [ 375.447580][ T31] #0: ffffffff8e47b788 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x839/0xea0 [ 375.469687][ T31] 1 lock held by kworker/R-wg-cr/6484: [ 375.478684][ T31] #0: ffffffff8e47b788 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x839/0xea0 [ 375.493406][ T31] 1 lock held by kworker/R-wg-cr/6485: [ 375.498870][ T31] #0: ffffffff8e47b788 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 375.519988][ T31] 1 lock held by kworker/R-wg-cr/6486: [ 375.525746][ T31] #0: ffffffff8e47b788 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x839/0xea0 [ 375.548883][ T31] 1 lock held by kworker/R-wg-cr/6487: [ 375.556252][ T31] #0: ffffffff8e47b788 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0x839/0xea0 [ 375.579070][ T31] 1 lock held by kworker/R-wg-cr/6488: [ 375.586422][ T31] #0: ffffffff8e47b788 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 375.603413][ T31] 1 lock held by kworker/R-wg-cr/6489: [ 375.608876][ T31] #0: ffffffff8e47b788 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 375.624235][ T31] 1 lock held by kworker/R-wg-cr/6490: [ 375.629696][ T31] #0: ffffffff8e47b788 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 375.657797][ T31] 1 lock held by kworker/R-wg-cr/6491: [ 375.665083][ T31] #0: ffffffff8e47b788 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 375.686215][ T31] 1 lock held by kworker/R-wg-cr/6492: [ 375.694072][ T31] #0: ffffffff8e47b788 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 375.710124][ T31] 1 lock held by kworker/R-wg-cr/6493: [ 375.715586][ T31] #0: ffffffff8e47b788 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 375.733894][ T31] 2 locks held by kworker/1:9/6579: [ 375.739096][ T31] 2 locks held by kworker/1:10/6580: [ 375.748210][ T31] 3 locks held by syz.5.127/6589: [ 375.767461][ T31] 4 locks held by kworker/1:11/6586: [ 375.776332][ T6668] Bluetooth: hci19: command tx timeout [ 375.795667][ T31] 3 locks held by kworker/u8:9/6596: [ 375.804415][ T31] #0: ffff88814c417948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 375.823988][ T31] #1: ffffc90003157d10 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 375.841147][ T31] #2: ffffffff9034cbe8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x12/0x30 [ 375.857189][ T31] 2 locks held by kworker/1:12/6603: [ 375.870086][ T31] 1 lock held by syz.8.125/6608: [ 375.890308][ T31] #0: ffffffff8e5cff38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 375.908501][ T31] 2 locks held by syz-executor/6623: [ 375.913986][ T31] #0: ffffffff90336b90 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 375.931548][ T31] #1: ffffffff9034cbe8 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_pernet_exit+0x17/0x150 [ 375.947729][ T31] 2 locks held by syz-executor/6630: [ 375.955078][ T31] #0: ffffffff90336b90 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 375.970915][ T31] #1: ffffffff9034cbe8 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_pernet_exit+0x17/0x150 [ 376.005577][ T31] 2 locks held by syz-executor/6632: [ 376.018847][ T31] #0: ffffffff90336b90 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 376.030280][ T31] #1: ffffffff9034cbe8 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_pernet_exit+0x17/0x150 [ 376.039921][ T31] 2 locks held by syz-executor/6634: [ 376.046099][ T31] #0: ffffffff90336b90 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 376.064736][ T31] #1: ffffffff9034cbe8 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_pernet_exit+0x17/0x150 [ 376.088593][ T31] 3 locks held by kworker/u8:10/6642: [ 376.106378][ T31] #0: ffff88801b881148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 376.124702][ T31] #1: ffffc900030a7d10 ((work_completion)(&pool->idle_cull_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 376.142868][ T31] #2: ffffffff8e47b788 (wq_pool_attach_mutex){+.+.}-{4:4}, at: idle_cull_fn+0x99/0x460 [ 376.159850][ T31] 2 locks held by kworker/1:13/6646: [ 376.165378][ T31] 2 locks held by kworker/1:14/6647: [ 376.185517][ T31] 2 locks held by syz-executor/6649: [ 376.197433][ T31] #0: ffffffff90336b90 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 376.210927][ T31] #1: ffffffff9034cbe8 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_pernet_exit+0x17/0x150 [ 376.231632][ T31] 2 locks held by syz-executor/6655: [ 376.237280][ T31] #0: ffffffff90336b90 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 376.255799][ T31] #1: ffffffff9034cbe8 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_pernet_exit+0x17/0x150 [ 376.270002][ T31] 2 locks held by syz-executor/6657: [ 376.275297][ T31] #0: ffffffff90336b90 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 376.302523][ T31] #1: ffffffff9034cbe8 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_pernet_exit+0x17/0x150 [ 376.320101][ T31] 4 locks held by syz-executor/6664: [ 376.325409][ T31] #0: ffff8880367ba428 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 376.356763][ T31] #1: ffff88805d5e3c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 376.371373][ T31] #2: ffff8881437313c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 376.390701][ T31] #3: ffffffff8f8e9928 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 376.409865][ T31] 5 locks held by syz-executor/6665: [ 376.419973][ T31] #0: ffff8880367ba428 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 376.428983][ T31] #1: ffff88803aae6888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 376.458793][ T31] #2: ffff8881437313c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 376.477976][ T31] #3: ffffffff8f8e9928 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 376.494393][ T31] #4: ffff8880256c50e8 (&dev->mutex){....}-{4:4}, at: device_del+0xa0/0x9f0 [ 376.513263][ T31] 3 locks held by kworker/1:15/6679: [ 376.518565][ T31] #0: ffff88801b878d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 376.533570][ T31] #1: ffffc90002f17d10 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 376.548222][ T31] #2: ffffffff9034cbe8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 376.564470][ T31] 4 locks held by kworker/1:16/6682: [ 376.569764][ T31] 4 locks held by syz-executor/6684: [ 376.587833][ T31] #0: ffff8880367ba428 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 376.610756][ T31] #1: ffff8880448e9888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 376.627391][ T31] #2: ffff8881437313c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 376.638804][ T31] #3: ffffffff8f8e9928 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 376.656172][ T31] 4 locks held by syz-executor/6689: [ 376.662957][ T31] #0: ffff8880367ba428 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 376.683620][ T31] #1: ffff88805c1da888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 376.709511][ T31] #2: ffff8881437313c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 376.722631][ T31] #3: ffffffff8f8e9928 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 376.741212][ T31] 4 locks held by syz-executor/6691: [ 376.746503][ T31] #0: ffff8880367ba428 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 376.762377][ T31] #1: ffff888022fc1488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 376.777721][ T31] #2: ffff8881437313c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 376.791944][ T31] #3: ffffffff8f8e9928 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 376.816659][ T31] 1 lock held by kworker/1:17/6707: [ 376.830440][ T31] #0: ffffffff8e47b788 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 376.850716][ T31] 1 lock held by syz-executor/6726: [ 376.855923][ T31] #0: ffffffff9034cbe8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 376.873078][ T31] 1 lock held by syz-executor/6729: [ 376.878287][ T31] #0: ffffffff9034cbe8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 376.894112][ T31] 1 lock held by dhcpcd/6733: [ 376.908496][ T31] #0: ffff88809f510258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf60 [ 376.927168][ T31] 1 lock held by dhcpcd/6735: [ 376.936735][ T31] #0: ffff88803c64c258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf60 [ 376.949926][ T31] 1 lock held by dhcpcd/6736: [ 376.956845][ T31] #0: ffff888090756258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf60 [ 376.974147][ T31] 1 lock held by dhcpcd/6737: [ 376.978832][ T31] #0: ffff88808b8c4258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf60 [ 376.992213][ T31] 1 lock held by dhcpcd/6738: [ 376.996893][ T31] #0: ffff88803326c258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf60 [ 377.022960][ T31] 1 lock held by dhcpcd/6739: [ 377.027665][ T31] #0: ffff8880a3424258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf60 [ 377.048534][ T31] 1 lock held by syz-executor/6743: [ 377.056655][ T31] #0: ffffffff9034cbe8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 377.076812][ T31] 1 lock held by dhcpcd/6746: [ 377.083332][ T31] #0: ffff888091220258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf60 [ 377.101912][ T31] 1 lock held by syz-executor/6748: [ 377.120116][ T31] #0: ffffffff9034cbe8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 377.129552][ T31] 1 lock held by syz-executor/6750: [ 377.145730][ T31] #0: ffffffff9034cbe8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 377.163211][ T31] [ 377.165544][ T31] ============================================= [ 377.165544][ T31] [ 377.184829][ T31] NMI backtrace for cpu 0 [ 377.184845][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) [ 377.184873][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 377.184884][ T31] Call Trace: [ 377.184889][ T31] [ 377.184896][ T31] dump_stack_lvl+0x116/0x1f0 [ 377.184925][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 377.184951][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 377.184976][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 377.184998][ T31] watchdog+0xf70/0x12c0 [ 377.185023][ T31] ? __pfx_watchdog+0x10/0x10 [ 377.185040][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 377.185066][ T31] ? __kthread_parkme+0x19e/0x250 [ 377.185091][ T31] ? __pfx_watchdog+0x10/0x10 [ 377.185110][ T31] kthread+0x3c2/0x780 [ 377.185126][ T31] ? __pfx_kthread+0x10/0x10 [ 377.185143][ T31] ? rcu_is_watching+0x12/0xc0 [ 377.185163][ T31] ? __pfx_kthread+0x10/0x10 [ 377.185180][ T31] ret_from_fork+0x5d4/0x6f0 [ 377.185202][ T31] ? __pfx_kthread+0x10/0x10 [ 377.185218][ T31] ret_from_fork_asm+0x1a/0x30 [ 377.185246][ T31] [ 377.185253][ T31] Sending NMI from CPU 0 to CPUs 1: [ 377.309717][ C1] NMI backtrace for cpu 1 [ 377.309732][ C1] CPU: 1 UID: 0 PID: 5885 Comm: kworker/1:5 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) [ 377.309750][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 377.309760][ C1] Workqueue: wg-crypt-wg1 wg_packet_encrypt_worker [ 377.309780][ C1] RIP: 0010:hlock_class+0x0/0x70 [ 377.309799][ C1] Code: ff ff ff 90 0f 0b 90 e9 01 ff ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <0f> b7 47 20 66 25 ff 1f 0f b7 c0 48 0f a3 05 3d 9b 3b 14 73 15 48 [ 377.309812][ C1] RSP: 0018:ffffc90000a081b0 EFLAGS: 00000086 [ 377.309823][ C1] RAX: ffffffff95d3aed8 RBX: 0000000000000004 RCX: 0000000036198be1 [ 377.309832][ C1] RDX: 0000000000000000 RSI: 00000000501fefef RDI: ffff888032cf0b90 [ 377.309841][ C1] RBP: ffff888032cf0000 R08: 0000000000000000 R09: 0000000000000000 [ 377.309849][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888032cf0af0 [ 377.309858][ C1] R13: ffff888032cf0b90 R14: 0000000000000004 R15: 0000000000000001 [ 377.309867][ C1] FS: 0000000000000000(0000) GS:ffff888124852000(0000) knlGS:0000000000000000 [ 377.309882][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 377.309891][ C1] CR2: 0000200000361030 CR3: 000000000e382000 CR4: 00000000003526f0 [ 377.309900][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 377.309908][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 377.309917][ C1] Call Trace: [ 377.309922][ C1] [ 377.309927][ C1] __lock_acquire+0x622/0x1c90 [ 377.309954][ C1] ? lock_acquire+0x179/0x350 [ 377.309975][ C1] lock_acquire+0x179/0x350 [ 377.309997][ C1] ? unwind_next_frame+0xbd/0x20a0 [ 377.310022][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 377.310045][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 377.310066][ C1] unwind_next_frame+0xd1/0x20a0 [ 377.310089][ C1] ? unwind_next_frame+0xbd/0x20a0 [ 377.310112][ C1] ? init_conntrack.constprop.0+0x5af/0x1080 [ 377.310132][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 377.310153][ C1] arch_stack_walk+0x94/0x100 [ 377.310171][ C1] ? init_conntrack.constprop.0+0x5af/0x1080 [ 377.310191][ C1] stack_trace_save+0x8e/0xc0 [ 377.310216][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 377.310237][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 377.310256][ C1] ? stack_depot_save_flags+0x28/0xa40 [ 377.310280][ C1] kasan_save_stack+0x33/0x60 [ 377.310300][ C1] ? kasan_save_stack+0x33/0x60 [ 377.310318][ C1] ? kasan_save_track+0x14/0x30 [ 377.310336][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 377.310354][ C1] ? __kmalloc_node_track_caller_noprof+0x221/0x510 [ 377.310375][ C1] ? krealloc_noprof+0x1fc/0x370 [ 377.310394][ C1] ? nf_ct_ext_add+0x1a7/0x420 [ 377.310410][ C1] ? init_conntrack.constprop.0+0x5af/0x1080 [ 377.310440][ C1] kasan_save_track+0x14/0x30 [ 377.310459][ C1] __kasan_kmalloc+0xaa/0xb0 [ 377.310478][ C1] __kmalloc_node_track_caller_noprof+0x221/0x510 [ 377.310501][ C1] ? rcu_is_watching+0x12/0xc0 [ 377.310520][ C1] ? nf_ct_ext_add+0x1a7/0x420 [ 377.310537][ C1] krealloc_noprof+0x1fc/0x370 [ 377.310558][ C1] nf_ct_ext_add+0x1a7/0x420 [ 377.310575][ C1] init_conntrack.constprop.0+0x5af/0x1080 [ 377.310594][ C1] ? __pfx_init_conntrack.constprop.0+0x10/0x10 [ 377.310611][ C1] ? __pfx_hash_conntrack_raw+0x10/0x10 [ 377.310637][ C1] ? ipt_do_table+0xd48/0x1ae0 [ 377.310655][ C1] ? __local_bh_enable_ip+0xa4/0x120 [ 377.310675][ C1] ? ipt_do_table+0xd78/0x1ae0 [ 377.310694][ C1] nf_conntrack_in+0xb03/0x1950 [ 377.310715][ C1] ? __pfx_nf_conntrack_in+0x10/0x10 [ 377.310735][ C1] ? lock_acquire+0x179/0x350 [ 377.310759][ C1] ? __pfx_ipv4_conntrack_in+0x10/0x10 [ 377.310781][ C1] nf_hook_slow+0xbe/0x200 [ 377.310803][ C1] nf_hook.constprop.0+0x422/0x750 [ 377.310826][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 377.310849][ C1] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 377.310872][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 377.310894][ C1] ? ip_rcv_core+0x934/0xe80 [ 377.310918][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 377.310938][ C1] ip_rcv+0x7d/0x5d0 [ 377.310959][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 377.310980][ C1] __netif_receive_skb_one_core+0x197/0x1e0 [ 377.311001][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 377.311021][ C1] ? lock_acquire+0x179/0x350 [ 377.311042][ C1] ? process_backlog+0x3f0/0x15e0 [ 377.311058][ C1] __netif_receive_skb+0x1d/0x160 [ 377.311074][ C1] process_backlog+0x442/0x15e0 [ 377.311093][ C1] __napi_poll.constprop.0+0xb7/0x550 [ 377.311111][ C1] net_rx_action+0xa9f/0xfe0 [ 377.311130][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 377.311147][ C1] ? mark_held_locks+0x49/0x80 [ 377.311166][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 377.311185][ C1] ? tmigr_handle_remote+0x132/0x380 [ 377.311208][ C1] ? run_timer_base+0x121/0x190 [ 377.311227][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 377.311247][ C1] handle_softirqs+0x216/0x8e0 [ 377.311263][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 377.311279][ C1] ? kernel_fpu_end+0x59/0x70 [ 377.311292][ C1] do_softirq+0xb2/0xf0 [ 377.311307][ C1] [ 377.311311][ C1] [ 377.311316][ C1] __local_bh_enable_ip+0x100/0x120 [ 377.311332][ C1] kernel_fpu_end+0x5e/0x70 [ 377.311344][ C1] poly1305_blocks_arch+0x66/0xf0 [ 377.311360][ C1] poly1305_update+0x12e/0x2d0 [ 377.311381][ C1] chacha20poly1305_crypt_sg_inplace+0xa52/0xc90 [ 377.311402][ C1] ? __pfx_chacha20poly1305_crypt_sg_inplace+0x10/0x10 [ 377.311423][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 377.311440][ C1] ? __pfx_netif_rx_internal+0x10/0x10 [ 377.311460][ C1] ? eth_type_trans+0x335/0x7a0 [ 377.311476][ C1] ? __lock_acquire+0x622/0x1c90 [ 377.311503][ C1] ? __skb_to_sgvec+0x541/0xad0 [ 377.311520][ C1] chacha20poly1305_encrypt_sg_inplace+0x3e/0x50 [ 377.311540][ C1] encrypt_packet+0x73b/0x910 [ 377.311554][ C1] ? __pfx_encrypt_packet+0x10/0x10 [ 377.311567][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 377.311608][ C1] ? __local_bh_enable_ip+0xa4/0x120 [ 377.311625][ C1] wg_packet_encrypt_worker+0x2d0/0xdb0 [ 377.311642][ C1] ? __pfx_wg_packet_encrypt_worker+0x10/0x10 [ 377.311657][ C1] ? rcu_is_watching+0x12/0xc0 [ 377.311674][ C1] process_one_work+0x9cc/0x1b70 [ 377.311690][ C1] ? __pfx_neigh_periodic_work+0x10/0x10 [ 377.311703][ C1] ? __pfx_process_one_work+0x10/0x10 [ 377.311719][ C1] ? assign_work+0x1a0/0x250 [ 377.311740][ C1] worker_thread+0x6c8/0xf10 [ 377.311756][ C1] ? __kthread_parkme+0x19e/0x250 [ 377.311775][ C1] ? __pfx_worker_thread+0x10/0x10 [ 377.311788][ C1] kthread+0x3c2/0x780 [ 377.311800][ C1] ? __pfx_kthread+0x10/0x10 [ 377.311812][ C1] ? rcu_is_watching+0x12/0xc0 [ 377.311827][ C1] ? __pfx_kthread+0x10/0x10 [ 377.311839][ C1] ret_from_fork+0x5d4/0x6f0 [ 377.311858][ C1] ? __pfx_kthread+0x10/0x10 [ 377.311869][ C1] ret_from_fork_asm+0x1a/0x30 [ 377.311888][ C1] [ 377.312304][ T6668] Bluetooth: hci17: command tx timeout [ 378.027609][ T6670] Bluetooth: hci18: command tx timeout [ 378.033333][ T6670] Bluetooth: hci19: command tx timeout [ 378.109632][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.116194][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.139796][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 378.146683][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) [ 378.158495][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 378.168555][ T31] Call Trace: [ 378.171833][ T31] [ 378.174763][ T31] dump_stack_lvl+0x3d/0x1f0 [ 378.179367][ T31] panic+0x71c/0x800 [ 378.183266][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 378.189164][ T31] ? __pfx_panic+0x10/0x10 [ 378.193586][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 378.198967][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 378.204985][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 378.210375][ T31] ? watchdog+0xdda/0x12c0 [ 378.214794][ T31] ? watchdog+0xdcd/0x12c0 [ 378.219221][ T31] watchdog+0xdeb/0x12c0 [ 378.223471][ T31] ? __pfx_watchdog+0x10/0x10 [ 378.228151][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 378.233359][ T31] ? __kthread_parkme+0x19e/0x250 [ 378.238390][ T31] ? __pfx_watchdog+0x10/0x10 [ 378.243067][ T31] kthread+0x3c2/0x780 [ 378.247133][ T31] ? __pfx_kthread+0x10/0x10 [ 378.251719][ T31] ? rcu_is_watching+0x12/0xc0 [ 378.256488][ T31] ? __pfx_kthread+0x10/0x10 [ 378.261082][ T31] ret_from_fork+0x5d4/0x6f0 [ 378.265676][ T31] ? __pfx_kthread+0x10/0x10 [ 378.270261][ T31] ret_from_fork_asm+0x1a/0x30 [ 378.275041][ T31] [ 378.278247][ T31] Kernel Offset: disabled [ 378.282549][ T31] Rebooting in 86400 seconds..