last executing test programs: 1m17.758032203s ago: executing program 4 (id=739): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080c}, 0x2000c845) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[], 0x17) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, 0x0, &(0x7f0000000540)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r1, 0x8, &(0x7f0000000400)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001580)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) read(r5, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f00000001c0)={0x3, 0xa07, 0x2}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYRESOCT=r5, @ANYRES32=r0, @ANYBLOB="0acec34c22055c643b84bb5f0c8026b6416d57491d19e25757fcb41a1b346633bb1e35d811cb41d4ad4ac3a1c0e4e6cd348ae9c9b7ca2710e7297f2983aaad3dfb2af9d1c76b741a33ba402edb8ec80e4337cadcafa04299b2f0eecc70e58e1a6c34c0d64dfdd0fcac7dc57150edbe1b57edcbdf6c7d0b959aed2c54ddafec573081b63103838cc0f374f7ba8dc069604227f4f9874b3bb0b758a454", @ANYBLOB="5940acd79c58f84f57e14a2c8655cfed8c497d4e87c41fc024dd32899bf60aa598c877f3abf2cccdb6ea36077089a37b20ecc2bcdde49509e5c368b98d5331a06c6ddb75c7162fe28126c1da05843c2f504945f3396d50984b19b4707182cfb2fb9ae9fe62784d4b1d7be651a42337cdd8e0f35bb49953f61fc78d30dc", @ANYRES32=0x0, @ANYRES8, @ANYRES16=r0, @ANYRES16=r4, @ANYRES64=r0], 0x50) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056ac", 0xffd7, 0x1) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card1/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r6, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xd3) syz_io_uring_setup(0x4000592, &(0x7f0000000880)={0x0, 0xa943, 0x800, 0x0, 0x321}, &(0x7f0000000900), &(0x7f0000000940)) r7 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_ifreq(r7, 0x89a2, &(0x7f0000000280)={'bridge0\x00', @ifru_settings={0x43, 0x0, @sync=0x0}}) socket$kcm(0x10, 0x7, 0x10) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x8c281, 0x0) ioctl$TIOCMIWAIT(r8, 0x545c, 0x7cb7562f2d67) ioctl$TIOCMSET(r8, 0x5418, &(0x7f0000000140)=0xfffffdfb) 1m16.657835938s ago: executing program 1 (id=748): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffdfe}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) readv(r3, &(0x7f0000000040), 0x0) write$proc_mixer(r3, 0x0, 0xff0e) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x1a1900, 0x0) dup3(r4, r3, 0x0) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_fscache}]}}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x800}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4003, 0x0, 0x44, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r7 = fanotify_init(0x8, 0x0) r8 = epoll_create1(0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0x2f5380, 0x34343459, 0x58595556, 0x425, 0x10001, 0x8, 0x0, 0x1, 0x3, 0x0, 0x7}}) r9 = fcntl$dupfd(r7, 0x0, r8) fanotify_mark(r9, 0x21, 0x8000008, r9, 0x0) 1m16.339474239s ago: executing program 4 (id=749): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000400)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x400, 0x2}}, 0x10) 1m16.164746118s ago: executing program 4 (id=752): socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) socket$kcm(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000580)}], 0x1}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f00000001c0), 0x2, 0x0) syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0xc383, 0x3000, 0x2, 0x200004}, 0x0, 0x0) migrate_pages(0x0, 0x5, 0x0, &(0x7f0000000080)=0x272) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, 0x0, 0x0) bind$inet(r5, 0x0, 0x0) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r5, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) write$cgroup_subtree(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2b63707573657420a111eec780c24caf7c29aad8e9624428112a2e5cab8673167d1a28cf4fa99a489dbfb433065d2d467c705459cda3dedd0c64feab36298a68fdcd842a70fa68e075b6b349da5dd29674355e8176691f3c9d1560bd366bd4af86f7e4cfaed0ed534339adfa3cba502275659427d32b7d6a7292bcbc000000"], 0x8) 1m15.959188777s ago: executing program 0 (id=755): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000000906010200000000000000000400000a05000100070000000a00094000000008100008800c00078008000940000000d40900020073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x10000001}, 0x40000) 1m15.263321472s ago: executing program 2 (id=756): r0 = syz_io_uring_setup(0x952, &(0x7f0000000400)={0x0, 0x537, 0x2, 0x1, 0x3d5}, &(0x7f0000000040), &(0x7f0000000240)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x700) 1m15.229123423s ago: executing program 0 (id=757): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000180)=""/130) 1m15.228370856s ago: executing program 1 (id=758): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000000000000000001000850000009b0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m15.227685864s ago: executing program 3 (id=759): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) truncate(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = socket$netlink(0x10, 0x3, 0x10) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r4, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x2000) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000140)=""/102, 0x66}], 0x1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(r0, 0xc02054a5, &(0x7f00000001c0)={0x5b, r3, 'id0\x00'}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r5, 0xb, &(0x7f00000000c0)=[@ioring_restriction_register_op={0x0, 0x22}], 0x1) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$RTC_AIE_ON(r6, 0x7001) ioctl$RTC_AIE_OFF(r6, 0x7002) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0x0) unshare(0x2040400) 1m15.165763963s ago: executing program 4 (id=760): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x1, 0x0, 0x1, 0xffffffff}) 1m15.104354189s ago: executing program 1 (id=761): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = mq_open(&(0x7f0000000040)='sched_switch\x00', 0x800, 0x80, &(0x7f00000002c0)={0x107d, 0xc, 0x80, 0x1}) write(r1, &(0x7f0000000300)="fed90c13cfed940541adb3c67aae22e4e16cfc41b384540678b1c366b3cb97a077b557c226a1e272043e67a114f834085fc2056c0a66b8861845d928ed719e6c8cb1b3fdc1343320a78370f12e0759e7b4f89f836e8c14e94e2a14fba4957199cd1a65660c1f4d62", 0x68) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) setsockopt$inet_buf(r2, 0x0, 0x25, &(0x7f0000000380)="40679d070740582077fe64710260394b78ce06a752059735caeab56a8979b80e0228fe4d05eeee4007c7858b119e6f83435cdf3125c7db2289056eb2ddd3d920db959a64223a6c8fc44a74c6e86b16077b39c8be2485f4f62a30f6f252b42ae5cfe508af302a762e1e63354e305a4cf634eb9e9e1c8fefff84a1e7665895c1d74bfcec5bb1fbf3c094050c981cdb8f3f0e3bd959aa53ef7fce5205c5d36e2a294ee445c457ca6e207cbfda7ce50f08732a88f729fb617337924764a36272b3c14d2e83e5e1758b21c2718c9fd1", 0xcd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4001, 0x800000, @empty}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01", 0x53}], 0x1) r8 = openat$vicodec0(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f00000000c0)={0x3, 0x3, 0x2, "767f62ae8c510ba06355dfb5bb8f7280a40529b89a36aa4cb07925e4e586ec01", 0x34363248}) 1m15.070073226s ago: executing program 2 (id=762): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, &(0x7f0000000640)) 1m15.02682729s ago: executing program 0 (id=763): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000003c0)=0x5, 0x4) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000002c0)="23000000010006", 0x7) socket$vsock_stream(0x28, 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='io_uring_link\x00', r4, 0x0, 0x4}, 0x18) r5 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfffffffc}, &(0x7f00000007c0)=0x0, &(0x7f0000000800)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x4007, @fd, 0x9, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1m15.025902419s ago: executing program 3 (id=764): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() r0 = syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r1, 0x1100100) keyctl$chown(0x6, r1, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x831, 0x2, {0x0}, {}, 0x4, 0x8}) prlimit64(r2, 0xe, &(0x7f0000000140)={0x2, 0x8f}, 0x0) ioctl$TIOCGSID(r0, 0x5429, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r4, &(0x7f0000001600)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0}, 0x8000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x70bd28, 0x0, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x80004}, [@migrate={0x50, 0x11, [{@in=@local, @in=@broadcast, @in=@multicast2, @in6=@local, 0x3c, 0x4, 0x0, 0x2, 0x2, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40180}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x102) mount(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380)='rpc_pipefs\x00', 0x18642, 0x0) r7 = syz_clone(0x0, &(0x7f0000000280)="3405dec5957dd5fe1c795d880153fbe75a5adc7affab3cabc673db68567c07d416e723aa4c82c3e623e735d84cee3c96f72c37ba786f36bdc97c2443a35a50d55d6f8972996592a814490d9e7f9d37271de6add93cc20d1ecc5b03df62cc7b15a75a634e7ceee24a0f62b5edbbb098b25b7d5b7bd37ddfc9f4bd8ba94ce8ac28ad0f8fef291a87b2226a766aa8ed8c620f38a66f2533d40eb0fa3730db1d157815c7c19eb1b7707b87ac120bc6d0b3e287326a594e", 0xb5, &(0x7f00000000c0), &(0x7f0000000180), &(0x7f0000000340)="d6b3295a358519e844e5b5a517a1df62a423bbf445da1eb287ad669f9120a70f4f694c539d5a1ce11cea3bc27190c7211404886e3b0ae54d71369d3bc0c2ec44687099695fdb10") sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) 1m14.956468053s ago: executing program 4 (id=765): r0 = syz_io_uring_setup(0xb7f, &(0x7f0000000180)={0x0, 0x38ab, 0x80, 0x0, 0x1e6}, &(0x7f0000000340), &(0x7f0000000600)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={0x0, 0x0, 0x1}, 0x1) 1m14.823511548s ago: executing program 2 (id=766): r0 = socket$packet(0x11, 0xa, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$vim2m(&(0x7f00000005c0), 0x8eb0, 0x2) read(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000e11e00820000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100018f1b565c09cb278b3eabf4de550e8acd588fdb7a754a163bcea76b40249de432e9b28cb48e426657a12e2306e9e344a4e93b90"], 0x7c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'veth0_vlan\x00', 0x2000}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x7c, r3, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20008094}, 0x40000d0) socket(0x10, 0x803, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) r5 = socket$inet(0x2, 0x3, 0x6) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000140)='xfrm0\x00', 0x10) sendto$inet(r5, 0x0, 0x0, 0x24000080, &(0x7f0000000000)={0x2, 0x5e22, @rand_addr=0x64010101}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r7 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f0000000500)=r6, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f2, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000380)={'ip6tnl0\x00', 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, @empty, @empty, 0x8, 0x0, 0x0, 0xc}}) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) getsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000540), &(0x7f0000000580)=0x4) open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r8 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r8, 0x84, 0xd, &(0x7f0000000900)=@assoc_value={0x0, 0x8}, 0x8) syz_emit_ethernet(0xd0, &(0x7f0000000680)=ANY=[@ANYBLOB="0000000000000180c200000e080500021313bc340a9e4c09a05d426bbe25f524f26d9bb145d7d284eb188034ee01dcec0747eff69cfdb0d1f48ddab11fd13bca1f40bf1caa2122ba6c5a3e35e85632b27ccb3c07504eb0924a393591c0d1f89191bc11a3af510f64669478e4de0eb5963770746a1f7e108c60522655453823725c756f32be6e6f47885a646de967d965fcbd65f9dd1ec66b989cc64753ffda85699ad38cdac8d4429df4d47bab16897200d4077e54c99e4f68316e366afbc9d2cd3eb36d92f1e6eba156ef77b3d5f9ccf18e1144829566a262c93440ee4076422991c73f8b9e6f603fce339a9bf896356a9deaabe4f7d7e34240be29bcc2350ab9dc7bf3c7909311912283047dac2b5872041afc06ea24d42b36c73414974efa1af7f97848c5c7721ebd83f766e5351497829cfc9180"], &(0x7f0000000240)={0x1, 0x4, [0xe7b, 0xb76, 0x72c, 0x78a]}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_open_procfs(0x0, &(0x7f0000000ec0)='fdinfo\x00') 1m14.219867572s ago: executing program 4 (id=767): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000003c0)=0x5, 0x4) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000002c0)="23000000010006", 0x7) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='io_uring_link\x00', r6, 0x0, 0x4}, 0x18) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x4007, @fd, 0x9, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000040)=0x5) r7 = socket(0x10, 0x3, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x401, 0x3fc, 0x7, {0x0, 0x0, 0x0, r9, 0x0, 0x49000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x7}]}}}]}, 0x44}}, 0x80) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000240)=0x6) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x5, 0x8) 1m14.122623204s ago: executing program 1 (id=768): socketpair$unix(0x1, 0x2, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x8000, '\x00', 0x0, 0x0}, 0x50) 1m13.197514678s ago: executing program 1 (id=769): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffdfe}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) readv(r3, &(0x7f0000000040), 0x0) write$proc_mixer(r3, 0x0, 0xff0e) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x1a1900, 0x0) dup3(r4, r3, 0x0) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_fscache}]}}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x800}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4003, 0x0, 0x44, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r7 = fanotify_init(0x8, 0x0) r8 = epoll_create1(0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0x2f5380, 0x34343459, 0x58595556, 0x425, 0x10001, 0x8, 0x0, 0x1, 0x3, 0x0, 0x7}}) r9 = fcntl$dupfd(r7, 0x0, r8) fanotify_mark(r9, 0x21, 0x8000008, r9, 0x0) 1m13.196821725s ago: executing program 2 (id=770): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x28, 0x8, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4004) 1m13.1465166s ago: executing program 2 (id=771): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b00010000100009045507010349020009058203"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000540)={0x0, 0x8c7c8f6744f0b74e, 0x8, "d4a911bb11e39d2e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m12.932871721s ago: executing program 3 (id=772): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)='~', 0x1}], 0x38a) 1m12.578583357s ago: executing program 0 (id=773): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e29, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x16, 0x1}}}}}}, 0x0) 1m12.416325113s ago: executing program 3 (id=774): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) ioctl$BLKDISCARDZEROES(r1, 0x127c, &(0x7f0000000000)) 1m12.367342079s ago: executing program 3 (id=775): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="130000000800000008"], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000b40)={r0, &(0x7f0000000a40)}, 0x20) 1m11.97039612s ago: executing program 1 (id=776): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001c00)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) 1m11.91219186s ago: executing program 0 (id=777): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x20, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20044836}, 0x20004004) 1m5.95323565s ago: executing program 2 (id=778): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x20, 0x3, 0x7, 0x301, 0x0, 0x0, {0x5, 0x0, 0xd}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 1m5.896422508s ago: executing program 3 (id=779): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000900)="e02742e8680d85ff", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2001}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xf23}, 0x18}}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x2c020400) r4 = msgget$private(0x0, 0x101) msgsnd(r4, &(0x7f0000000000)={0x2}, 0x4, 0x0) msgsnd(0x0, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x2000, 0x0) msgrcv(r4, 0x0, 0x0, 0x1, 0x5800) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r6, 0x0, 0x0, 0x4890, &(0x7f0000000040)={0xa, 0x0, 0xfffffffd, @mcast1, 0x6, 0x4}, 0x20) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r0, 0x1) chdir(0x0) 1m5.246762208s ago: executing program 0 (id=780): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x70bd2a, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x683c6, 0x75498}, [@IFLA_MASTER={0x8, 0x3}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0xd, 0x0, 0x480c5}, 0x44000) 47.174123837s ago: executing program 32 (id=767): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000003c0)=0x5, 0x4) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000002c0)="23000000010006", 0x7) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='io_uring_link\x00', r6, 0x0, 0x4}, 0x18) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x4007, @fd, 0x9, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000040)=0x5) r7 = socket(0x10, 0x3, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x401, 0x3fc, 0x7, {0x0, 0x0, 0x0, r9, 0x0, 0x49000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x7}]}}}]}, 0x44}}, 0x80) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000240)=0x6) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x5, 0x8) 43.50549123s ago: executing program 33 (id=780): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x70bd2a, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x683c6, 0x75498}, [@IFLA_MASTER={0x8, 0x3}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0xd, 0x0, 0x480c5}, 0x44000) 43.393741012s ago: executing program 34 (id=776): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001c00)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) 42.559148672s ago: executing program 35 (id=778): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x20, 0x3, 0x7, 0x301, 0x0, 0x0, {0x5, 0x0, 0xd}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 40.168949685s ago: executing program 36 (id=779): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000900)="e02742e8680d85ff", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2001}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xf23}, 0x18}}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x2c020400) r4 = msgget$private(0x0, 0x101) msgsnd(r4, &(0x7f0000000000)={0x2}, 0x4, 0x0) msgsnd(0x0, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x2000, 0x0) msgrcv(r4, 0x0, 0x0, 0x1, 0x5800) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r6, 0x0, 0x0, 0x4890, &(0x7f0000000040)={0xa, 0x0, 0xfffffffd, @mcast1, 0x6, 0x4}, 0x20) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r0, 0x1) chdir(0x0) 21.402764755s ago: executing program 6 (id=782): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f00000000c0), 0x8) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000)=0x200081, 0x4) 21.183886575s ago: executing program 6 (id=786): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xf, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="d8cd005efe926ba4a576c17d5939c67977a2dd096d61930c15e6a9f0a92cf2e5cb9623291e6432bc1c3f4d6af5cc0f31b9085b09517e77200b8f5edbf4c33185dd006cce1b7058853fc7146eea3a9c8720b453eafa7d21be76f8fce5ab856e684bb1fdc4560524c406e863a8773e54d551160e45f278a306d231f20a500bd9497989e39bc9f8d8ebf02d77ee359552e39d0d2a84a311812508504d65b4306e58ebef3f31b88b7ca6bb41893def6e57118e7d21cd1d50417ea30103665b0af8e7e1077489727758c2069fc2cccd8c7319b8f267a405381df6133f49dd459d3cf13559511be766b04873baf251c2dc0324", @ANYRES64, @ANYRESDEC=0x0, @ANYBLOB="112b2cf575b34996a9447d409d4f525f222ce3e76973601e39f0e36aea84b3d66bc07e3565e3927acfd09c04f0df3dc2dfd31396d53d192000a81a38b307e1bc0ecd1a72227f1dddadcb912bf3cd8dd00ebf3156d177802d4573b48a0c53f2cf447c7feb23dfa61c79a005aa969175e430619019db8c4731891a3399993afdc393229b4e42b9632e5265c7cdb66f93a678b129cf6fd86b97d15996c59cd31332d4bf14ba941cab37df658b30cd9ec2569fa2777e769ff845ead5c54a10e9ba12cd373f0a276993708132beda1e3d4489dfbc42329e6977d2afda", @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/protocols\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/vmallocinfo\x00', 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) sendto$inet6(r0, &(0x7f0000000180)="a803", 0x2, 0x4010, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="b493efd0600df5e3a79e561c37434f3e395249a48ad746e1b54cb9c60cce9cb1c139b3a2d333bfff64e451956c589593ea3f6aef7a60637e883097e10abf72e39f3a051c685bd9585d2d54a934f78a8e58b66b81fdbf7f3243e56aca9bb0df34227e03fe26c36ad9da363f8734228411f8a3bcb1b4ea6c2e31e70879b9b7010a5a2d5487dac8a2092199283043e7b85f8fb9b45bdce5a44dc5a17e60e692e93ea7f0370b1262f254d6a05644ab6caa59db5e933667fe8c7e772312f45c6489c8594ff93bca73ebe413b177d6dce495bb71ca9d7d860df0", 0xd7) read$FUSE(r0, &(0x7f0000005100)={0x2020}, 0x2020) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r5, 0x3b88, &(0x7f00000000c0)={0xc, r6}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r5, 0x3b72, &(0x7f0000000300)=ANY=[]) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000440)='affs\x00', 0x200000, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) 20.128503126s ago: executing program 6 (id=787): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffdfe}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) readv(r3, &(0x7f0000000040), 0x0) write$proc_mixer(r3, 0x0, 0xff0e) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x1a1900, 0x0) dup3(r4, r3, 0x0) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_fscache}]}}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x800}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4003, 0x0, 0x44, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r7 = fanotify_init(0x8, 0x0) r8 = epoll_create1(0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0x2f5380, 0x34343459, 0x58595556, 0x425, 0x10001, 0x8, 0x0, 0x1, 0x3, 0x0, 0x7}}) r9 = fcntl$dupfd(r7, 0x0, r8) fanotify_mark(r9, 0x21, 0x8000008, r9, 0x0) 19.302367585s ago: executing program 9 (id=785): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x1}, 0x50) syz_io_uring_setup(0x7d08, &(0x7f0000000400)={0x0, 0x20000, 0x4002, 0xffffffff, 0x3de}, 0x0, 0x0) 19.173265304s ago: executing program 5 (id=781): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x5, 0x8, 0xf}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56741, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0xfffffeee, 0x2, {0x21}}]}}]}, 0x48}}, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000001100000095"], &(0x7f00000000c0)='GPL\x00', 0x1005}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f0000000240), 0x0}, 0x20) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffff"], 0x6f4}}, 0x0) 18.67209195s ago: executing program 9 (id=788): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000003c0007010000000000400000037c00000400fc80100001805f"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 18.629118475s ago: executing program 5 (id=789): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000", @ANYRESOCT], 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 18.61120348s ago: executing program 7 (id=783): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x24, r0, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x24}}, 0x0) 18.280436093s ago: executing program 9 (id=790): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080c}, 0x2000c845) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[], 0x17) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, 0x0, &(0x7f0000000540)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000400)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001580)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) read(r3, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f00000001c0)={0x3, 0xa07, 0x2}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYRESOCT=r3, @ANYRES32=r0, @ANYBLOB="0acec34c22055c643b84bb5f0c8026b6416d57491d19e25757fcb41a1b346633bb1e35d811cb41d4ad4ac3a1c0e4e6cd348ae9c9b7ca2710e7297f2983aaad3dfb2af9d1c76b741a33ba402edb8ec80e4337cadcafa04299b2f0eecc70e58e1a6c34c0d64dfdd0fcac7dc57150edbe1b57edcbdf6c7d0b959aed2c54ddafec573081b63103838cc0f374f7ba8dc069604227f4f9874b3bb0b758a454", @ANYBLOB="5940acd79c58f84f57e14a2c8655cfed8c497d4e87c41fc024dd32899bf60aa598c877f3abf2cccdb6ea36077089a37b20ecc2bcdde49509e5c368b98d5331a06c6ddb75c7162fe28126c1da05843c2f504945f3396d50984b19b4707182cfb2fb9ae9fe62784d4b1d7be651a42337cdd8e0f35bb49953f61fc78d30dc", @ANYRES32=0x0, @ANYRES8, @ANYRES16=r0, @ANYRES16, @ANYRES64=r0], 0x50) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056ac", 0xffd7, 0x1) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card1/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xd3) syz_io_uring_setup(0x4000592, &(0x7f0000000880)={0x0, 0xa943, 0x800, 0x0, 0x321}, &(0x7f0000000900), &(0x7f0000000940)) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_ifreq(r5, 0x89a2, &(0x7f0000000280)={'bridge0\x00', @ifru_settings={0x43, 0x0, @sync=0x0}}) socket$kcm(0x10, 0x7, 0x10) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x8c281, 0x0) ioctl$TIOCMIWAIT(r6, 0x545c, 0x7cb7562f2d67) ioctl$TIOCMSET(r6, 0x5418, &(0x7f0000000140)=0xfffffdfb) 18.216237161s ago: executing program 7 (id=791): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080c}, 0x2000c845) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[], 0x17) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, &(0x7f0000000540)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001580)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) read(r4, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f00000001c0)={0x3, 0xa07, 0x2}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYRESOCT=r4, @ANYRES32=r0, @ANYBLOB="0acec34c22055c643b84bb5f0c8026b6416d57491d19e25757fcb41a1b346633bb1e35d811cb41d4ad4ac3a1c0e4e6cd348ae9c9b7ca2710e7297f2983aaad3dfb2af9d1c76b741a33ba402edb8ec80e4337cadcafa04299b2f0eecc70e58e1a6c34c0d64dfdd0fcac7dc57150edbe1b57edcbdf6c7d0b959aed2c54ddafec573081b63103838cc0f374f7ba8dc069604227f4f9874b3bb0b758a454", @ANYBLOB="5940acd79c58f84f57e14a2c8655cfed8c497d4e87c41fc024dd32899bf60aa598c877f3abf2cccdb6ea36077089a37b20ecc2bcdde49509e5c368b98d5331a06c6ddb75c7162fe28126c1da05843c2f504945f3396d50984b19b4707182cfb2fb9ae9fe62784d4b1d7be651a42337cdd8e0f35bb49953f61fc78d30dc", @ANYRES32=0x0, @ANYRES8, @ANYRES16=r0, @ANYRES16=r3, @ANYRES64=r0], 0x50) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056ac", 0xffd7, 0x1) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card1/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xd3) syz_io_uring_setup(0x4000592, &(0x7f0000000880)={0x0, 0xa943, 0x800, 0x0, 0x321}, &(0x7f0000000900), &(0x7f0000000940)) r6 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_ifreq(r6, 0x89a2, &(0x7f0000000280)={'bridge0\x00', @ifru_settings={0x43, 0x0, @sync=0x0}}) socket$kcm(0x10, 0x7, 0x10) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x8c281, 0x0) ioctl$TIOCMIWAIT(r7, 0x545c, 0x7cb7562f2d67) ioctl$TIOCMSET(r7, 0x5418, &(0x7f0000000140)=0xfffffdfb) 17.820999096s ago: executing program 8 (id=784): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) truncate(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = socket$netlink(0x10, 0x3, 0x10) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r4, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x2000) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000140)=""/102, 0x66}], 0x1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(r0, 0xc02054a5, &(0x7f00000001c0)={0x5b, r3, 'id0\x00'}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r5, 0xb, &(0x7f00000000c0)=[@ioring_restriction_register_op={0x0, 0x22}], 0x1) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$RTC_AIE_ON(r6, 0x7001) ioctl$RTC_AIE_OFF(r6, 0x7002) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0x0) unshare(0x2040400) 17.675579203s ago: executing program 5 (id=792): socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) socket$kcm(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000580)}], 0x1}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f00000001c0), 0x2, 0x0) syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0xc383, 0x3000, 0x2, 0x200004}, 0x0, 0x0) migrate_pages(0x0, 0x5, 0x0, &(0x7f0000000080)=0x272) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r5, 0x0, 0x0) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r5, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) write$cgroup_subtree(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2b63707573657420a111eec780c24caf7c29aad8e9624428112a2e5cab8673167d1a28cf4fa99a489dbfb433065d2d467c705459cda3dedd0c64feab36298a68fdcd842a70fa68e075b6b349da5dd29674355e8176691f3c9d1560bd366bd4af"], 0x8) 3.840361064s ago: executing program 37 (id=787): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffdfe}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) readv(r3, &(0x7f0000000040), 0x0) write$proc_mixer(r3, 0x0, 0xff0e) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x1a1900, 0x0) dup3(r4, r3, 0x0) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_fscache}]}}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x800}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4003, 0x0, 0x44, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r7 = fanotify_init(0x8, 0x0) r8 = epoll_create1(0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0x2f5380, 0x34343459, 0x58595556, 0x425, 0x10001, 0x8, 0x0, 0x1, 0x3, 0x0, 0x7}}) r9 = fcntl$dupfd(r7, 0x0, r8) fanotify_mark(r9, 0x21, 0x8000008, r9, 0x0) 2.646147661s ago: executing program 38 (id=791): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080c}, 0x2000c845) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[], 0x17) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, &(0x7f0000000540)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001580)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) read(r4, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f00000001c0)={0x3, 0xa07, 0x2}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYRESOCT=r4, @ANYRES32=r0, @ANYBLOB="0acec34c22055c643b84bb5f0c8026b6416d57491d19e25757fcb41a1b346633bb1e35d811cb41d4ad4ac3a1c0e4e6cd348ae9c9b7ca2710e7297f2983aaad3dfb2af9d1c76b741a33ba402edb8ec80e4337cadcafa04299b2f0eecc70e58e1a6c34c0d64dfdd0fcac7dc57150edbe1b57edcbdf6c7d0b959aed2c54ddafec573081b63103838cc0f374f7ba8dc069604227f4f9874b3bb0b758a454", @ANYBLOB="5940acd79c58f84f57e14a2c8655cfed8c497d4e87c41fc024dd32899bf60aa598c877f3abf2cccdb6ea36077089a37b20ecc2bcdde49509e5c368b98d5331a06c6ddb75c7162fe28126c1da05843c2f504945f3396d50984b19b4707182cfb2fb9ae9fe62784d4b1d7be651a42337cdd8e0f35bb49953f61fc78d30dc", @ANYRES32=0x0, @ANYRES8, @ANYRES16=r0, @ANYRES16=r3, @ANYRES64=r0], 0x50) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056ac", 0xffd7, 0x1) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card1/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xd3) syz_io_uring_setup(0x4000592, &(0x7f0000000880)={0x0, 0xa943, 0x800, 0x0, 0x321}, &(0x7f0000000900), &(0x7f0000000940)) r6 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_ifreq(r6, 0x89a2, &(0x7f0000000280)={'bridge0\x00', @ifru_settings={0x43, 0x0, @sync=0x0}}) socket$kcm(0x10, 0x7, 0x10) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x8c281, 0x0) ioctl$TIOCMIWAIT(r7, 0x545c, 0x7cb7562f2d67) ioctl$TIOCMSET(r7, 0x5418, &(0x7f0000000140)=0xfffffdfb) 2.097308714s ago: executing program 39 (id=784): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) truncate(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = socket$netlink(0x10, 0x3, 0x10) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r4, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x2000) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000000140)=""/102, 0x66}], 0x1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(r0, 0xc02054a5, &(0x7f00000001c0)={0x5b, r3, 'id0\x00'}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r5, 0xb, &(0x7f00000000c0)=[@ioring_restriction_register_op={0x0, 0x22}], 0x1) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$RTC_AIE_ON(r6, 0x7001) ioctl$RTC_AIE_OFF(r6, 0x7002) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0x0) unshare(0x2040400) 301.218906ms ago: executing program 40 (id=790): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080c}, 0x2000c845) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[], 0x17) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, 0x0, &(0x7f0000000540)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000400)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001580)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) read(r3, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f00000001c0)={0x3, 0xa07, 0x2}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYRESOCT=r3, @ANYRES32=r0, @ANYBLOB="0acec34c22055c643b84bb5f0c8026b6416d57491d19e25757fcb41a1b346633bb1e35d811cb41d4ad4ac3a1c0e4e6cd348ae9c9b7ca2710e7297f2983aaad3dfb2af9d1c76b741a33ba402edb8ec80e4337cadcafa04299b2f0eecc70e58e1a6c34c0d64dfdd0fcac7dc57150edbe1b57edcbdf6c7d0b959aed2c54ddafec573081b63103838cc0f374f7ba8dc069604227f4f9874b3bb0b758a454", @ANYBLOB="5940acd79c58f84f57e14a2c8655cfed8c497d4e87c41fc024dd32899bf60aa598c877f3abf2cccdb6ea36077089a37b20ecc2bcdde49509e5c368b98d5331a06c6ddb75c7162fe28126c1da05843c2f504945f3396d50984b19b4707182cfb2fb9ae9fe62784d4b1d7be651a42337cdd8e0f35bb49953f61fc78d30dc", @ANYRES32=0x0, @ANYRES8, @ANYRES16=r0, @ANYRES16, @ANYRES64=r0], 0x50) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056ac", 0xffd7, 0x1) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card1/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xd3) syz_io_uring_setup(0x4000592, &(0x7f0000000880)={0x0, 0xa943, 0x800, 0x0, 0x321}, &(0x7f0000000900), &(0x7f0000000940)) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_ifreq(r5, 0x89a2, &(0x7f0000000280)={'bridge0\x00', @ifru_settings={0x43, 0x0, @sync=0x0}}) socket$kcm(0x10, 0x7, 0x10) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x8c281, 0x0) ioctl$TIOCMIWAIT(r6, 0x545c, 0x7cb7562f2d67) ioctl$TIOCMSET(r6, 0x5418, &(0x7f0000000140)=0xfffffdfb) 0s ago: executing program 41 (id=792): socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) socket$kcm(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000580)}], 0x1}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f00000001c0), 0x2, 0x0) syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0xc383, 0x3000, 0x2, 0x200004}, 0x0, 0x0) migrate_pages(0x0, 0x5, 0x0, &(0x7f0000000080)=0x272) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r5, 0x0, 0x0) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r5, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) write$cgroup_subtree(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2b63707573657420a111eec780c24caf7c29aad8e9624428112a2e5cab8673167d1a28cf4fa99a489dbfb433065d2d467c705459cda3dedd0c64feab36298a68fdcd842a70fa68e075b6b349da5dd29674355e8176691f3c9d1560bd366bd4af"], 0x8) kernel console output (not intermixed with test programs): u_device_t tclass=chr_file permissive=1 [ 80.636649][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 80.660544][ T6076] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.675849][ T30] audit: type=1400 audit(1751567606.905:184): avc: denied { open } for pid=6074 comm="syz.3.27" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 80.683023][ T6076] ======================================================= [ 80.683023][ T6076] WARNING: The mand mount option has been deprecated and [ 80.683023][ T6076] and is ignored by this kernel. Remove the mand [ 80.683023][ T6076] option from the mount to silence this warning. [ 80.683023][ T6076] ======================================================= [ 80.734169][ C0] vkms_vblank_simulate: vblank timer overrun [ 80.800128][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 80.942849][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.106329][ T6037] veth1_to_batadv: entered promiscuous mode [ 81.116243][ T6037] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.169725][ T24] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 81.189844][ T6037] batadv_slave_1: entered promiscuous mode [ 81.196512][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.224849][ T30] audit: type=1400 audit(1751567606.975:185): avc: denied { write } for pid=6074 comm="syz.3.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.402168][ T24] usb 2-1: Product: syz [ 81.405196][ T6037] xfrm0: entered promiscuous mode [ 81.406362][ T24] usb 2-1: Manufacturer: syz [ 81.416196][ T24] usb 2-1: SerialNumber: syz [ 81.422433][ T30] audit: type=1400 audit(1751567607.055:186): avc: denied { mount } for pid=6074 comm="syz.3.27" name="/" dev="rpc_pipefs" ino=8457 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 81.502257][ T6106] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6106 comm=syz.4.28 [ 81.549596][ T6037] veth0_to_hsr: entered promiscuous mode [ 81.572044][ T6106] netlink: 12 bytes leftover after parsing attributes in process `syz.4.28'. [ 81.606150][ T6037] veth1_to_hsr: entered promiscuous mode [ 81.618417][ T6037] hsr0: entered promiscuous mode [ 81.636606][ T24] usb 2-1: config 0 descriptor?? [ 81.648840][ T6037] veth1_virt_wifi: entered promiscuous mode [ 81.657692][ T6037] veth0_virt_wifi: entered promiscuous mode [ 81.673569][ T6037] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 81.690442][ T24] ati_remote 2-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 81.714543][ T6037] vlan0: entered promiscuous mode [ 82.476523][ T6037] vlan1: entered promiscuous mode [ 82.491901][ T9] usb 2-1: USB disconnect, device number 2 [ 82.578215][ T30] audit: type=1400 audit(1751567608.865:187): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 82.598501][ C0] vkms_vblank_simulate: vblank timer overrun [ 82.606018][ T6037] macvlan0: entered promiscuous mode [ 82.622639][ T6037] macvlan1: entered promiscuous mode [ 82.642830][ T6037] ipvlan0: entered promiscuous mode [ 82.650418][ T6037] ipvlan1: entered promiscuous mode [ 82.673903][ T6037] macvtap0: entered promiscuous mode [ 82.684337][ T6037] macsec0: entered promiscuous mode [ 82.734481][ T6037] geneve0: entered promiscuous mode [ 82.742208][ T6037] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.761191][ T6037] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.791874][ T6037] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.801479][ T6037] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.833948][ T6037] geneve1: entered promiscuous mode [ 82.843723][ T6037] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 82.862169][ T6037] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 82.873425][ T6037] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 82.900434][ T6037] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 82.919011][ T6037] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 82.951344][ T6037] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 83.132649][ T6037] syztnl1: entered promiscuous mode [ 83.215818][ T30] audit: type=1400 audit(1751567609.515:188): avc: denied { search } for pid=6119 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.313465][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 83.370940][ T30] audit: type=1400 audit(1751567609.565:189): avc: denied { search } for pid=6119 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1832 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.435216][ T6108] vlan2: entered allmulticast mode [ 83.463999][ T30] audit: type=1400 audit(1751567609.565:190): avc: denied { search } for pid=6119 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.490184][ T30] audit: type=1400 audit(1751567609.565:191): avc: denied { search } for pid=6119 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.515787][ T6108] veth0: entered allmulticast mode [ 83.550210][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 83.650839][ T30] audit: type=1400 audit(1751567609.605:192): avc: denied { read open } for pid=6123 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.690424][ T5921] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 83.702723][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.816524][ T6136] CUSE: unknown device info "KJ éH+ßãÛ¤2Lh¸änLþ1Õ`†CcÝòn§õ†îì8­¨×0º©®(À3Õ¶ië®â>f¡Çè_Ù®,°ð<Ö_e¤FÀÆ" [ 83.828225][ T6136] CUSE: unknown device info "3ÜŸ•,²¥Ì˜õ" [ 83.834134][ T6136] CUSE: unknown device info "Jô©Ð2S Zûü !e/ëÅúãõž‘­J½+-n´¸a4¼ßØÁDÿ|G$öó­5O~©q ´ƒ [ 83.834134][ T6136] f𳦧ìýzóÚXÁSAäx¡Ùjª½T¾Ç”¨åw— üæšxRÉQ÷®(hÒj pøVdY0¨Æ|M?2JÿúIšvö^RÎ@´å" [ 83.852928][ T6136] CUSE: unknown device info "!ToÛ}Ý&|L+U²®oæõϲ±„Ð"–¨FstVµ:׌E• gJºî‹ÂÁ<@cÁ”²ûŽ4ÊTáM˜M|©·š‚ô" [ 83.864529][ T6136] CUSE: DEVNAME unspecified [ 84.180123][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.315021][ T9] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 84.326641][ T5921] usb 2-1: Using ep0 maxpacket: 32 [ 84.388601][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.564250][ T9] usb 4-1: config 0 descriptor?? [ 87.191312][ T5815] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 87.199854][ T5815] Bluetooth: hci4: Injecting HCI hardware error event [ 87.207763][ T5815] Bluetooth: hci4: hardware error 0x00 [ 87.270594][ T5921] usb 2-1: unable to get BOS descriptor or descriptor too short [ 87.640223][ T5921] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 87.784583][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 87.784597][ T30] audit: type=1400 audit(1751567614.015:201): avc: denied { add_name } for pid=6119 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.790538][ T5921] usb 2-1: can't read configurations, error -71 [ 87.840080][ T30] audit: type=1400 audit(1751567614.015:202): avc: denied { create } for pid=6119 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 87.953750][ T6184] Bluetooth: MGMT ver 1.23 [ 87.961248][ T30] audit: type=1400 audit(1751567614.015:203): avc: denied { write } for pid=6119 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb4.link" dev="tmpfs" ino=2077 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 88.117307][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 88.595367][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 88.617607][ T9] usb 4-1: USB disconnect, device number 2 [ 88.631348][ T30] audit: type=1400 audit(1751567614.095:204): avc: denied { append } for pid=6119 comm="dhcpcd-run-hook" name="resolv.conf.lapb4.link" dev="tmpfs" ino=2077 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 88.760241][ T30] audit: type=1400 audit(1751567614.255:205): avc: denied { setopt } for pid=6182 comm="syz.1.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 88.829362][ T30] audit: type=1400 audit(1751567614.255:206): avc: denied { write } for pid=6182 comm="syz.1.36" path="socket:[8572]" dev="sockfs" ino=8572 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 89.104696][ T30] audit: type=1400 audit(1751567615.405:207): avc: denied { remove_name } for pid=6192 comm="rm" name="resolv.conf.lapb4.link" dev="tmpfs" ino=2077 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.488147][ T30] audit: type=1400 audit(1751567615.455:208): avc: denied { unlink } for pid=6192 comm="rm" name="resolv.conf.lapb4.link" dev="tmpfs" ino=2077 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 89.530480][ T5816] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 90.015562][ T5816] usb 4-1: Using ep0 maxpacket: 8 [ 90.041451][ T5819] Bluetooth: hci0: Malformed Event: 0x13 [ 90.069168][ T5816] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=ad.1d [ 90.098755][ T5816] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.108858][ T5816] usb 4-1: Product: syz [ 90.118648][ T5816] usb 4-1: Manufacturer: syz [ 90.230090][ T5815] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 90.238892][ T5816] usb 4-1: SerialNumber: syz [ 90.264009][ T5816] usb 4-1: config 0 descriptor?? [ 90.380172][ T5816] usb_ehset_test 4-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 90.452316][ T30] audit: type=1400 audit(1751567616.745:209): avc: denied { write } for pid=6216 comm="syz.0.41" name="ip_vs_stats" dev="proc" ino=4026532987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 90.898950][ T6224] lo speed is unknown, defaulting to 1000 [ 91.127177][ T30] audit: type=1400 audit(1751567617.005:210): avc: denied { create } for pid=6216 comm="syz.0.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 91.150411][ T5921] usb 4-1: USB disconnect, device number 3 [ 91.502941][ T6236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.44'. [ 92.088419][ T6236] Zero length message leads to an empty skb [ 92.200934][ T5921] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 92.532105][ T5921] usb 5-1: config 2 has an invalid interface number: 177 but max is 0 [ 92.552526][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 92.560054][ T5921] usb 5-1: config 2 has no interface number 0 [ 92.560098][ T5921] usb 5-1: config 2 interface 177 has no altsetting 0 [ 92.614143][ T5921] usb 5-1: New USB device found, idVendor=04da, idProduct=3904, bcdDevice=63.e6 [ 92.652043][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.677729][ T5921] usb 5-1: Product: syz [ 92.713993][ T5921] usb 5-1: Manufacturer: syz [ 92.718613][ T5921] usb 5-1: SerialNumber: syz [ 92.740168][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 92.749833][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 92.922690][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 92.936203][ T24] usb 1-1: config 248 has an invalid interface number: 3 but max is 1 [ 93.097900][ T6262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.48'. [ 93.711021][ T24] usb 1-1: config 248 has an invalid interface number: 111 but max is 1 [ 93.719399][ T24] usb 1-1: config 248 has no interface number 0 [ 93.736910][ T24] usb 1-1: config 248 has no interface number 1 [ 93.745644][ T24] usb 1-1: config 248 interface 3 has no altsetting 0 [ 93.752503][ T24] usb 1-1: config 248 interface 111 has no altsetting 0 [ 93.846946][ T24] usb 1-1: New USB device found, idVendor=05c6, idProduct=9212, bcdDevice=91.28 [ 93.850078][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 93.874107][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.894269][ T5921] usb 5-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 93.906966][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 94.020092][ T24] usb 1-1: Product: syz [ 94.026235][ T24] usb 1-1: Manufacturer: syz [ 94.032529][ T24] usb 1-1: SerialNumber: syz [ 94.052854][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 94.127508][ T5921] usb 5-1: USB disconnect, device number 2 [ 94.165913][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 94.188143][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 94.218522][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 94.391326][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 94.399037][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 94.468854][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 94.472120][ T24] usb 1-1: unknown number of interfaces: 2 [ 94.494841][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 94.659737][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 94.691016][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 94.698402][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 94.731661][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 94.763340][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 94.806626][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 94.818341][ T24] usb 1-1: USB disconnect, device number 3 [ 94.866063][ T9] usb 3-1: string descriptor 0 read error: -22 [ 94.876105][ T9] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 95.042930][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.153232][ T9] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 95.560371][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 95.678580][ T6250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.700821][ T6250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.812311][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 95.950749][ T24] usb 5-1: config 2 has an invalid interface number: 169 but max is 0 [ 95.958984][ T24] usb 5-1: config 2 has no interface number 0 [ 96.070103][ T24] usb 5-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=b8.92 [ 96.079181][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.104814][ T6250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.160797][ T6250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.185268][ T24] cypress_m8 5-1:2.169: DeLorme Earthmate USB converter detected [ 96.226590][ T24] earthmate ttyUSB0: required endpoint is missing [ 97.398210][ T5871] usb 5-1: USB disconnect, device number 3 [ 97.430091][ T5921] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 97.445551][ T6298] veth0_to_team: entered promiscuous mode [ 97.451429][ T6298] veth0_to_team: entered allmulticast mode [ 97.693248][ T5871] cypress_m8 5-1:2.169: device disconnected [ 98.145960][ T24] usb 3-1: USB disconnect, device number 2 [ 98.310639][ T5921] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 98.348193][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.438825][ T5921] usb 4-1: Product: syz [ 98.449878][ T5921] usb 4-1: Manufacturer: syz [ 98.479232][ T5921] usb 4-1: SerialNumber: syz [ 98.489437][ T6314] netlink: 12 bytes leftover after parsing attributes in process `syz.2.57'. [ 98.500180][ T5921] usb 4-1: config 0 descriptor?? [ 98.532219][ T5921] usb 4-1: selecting invalid altsetting 3 [ 98.540200][ T5871] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 98.570140][ T5921] comedi comedi0: could not set alternate setting 3 in high speed [ 98.613027][ T5921] usbdux 4-1:0.0: driver 'usbdux' failed to auto-configure device. [ 98.662811][ T5921] usbdux 4-1:0.0: probe with driver usbdux failed with error -22 [ 98.751184][ T5871] usb 2-1: Using ep0 maxpacket: 32 [ 98.772851][ T5871] usb 2-1: config 0 interface 0 altsetting 181 endpoint 0x3 has invalid wMaxPacketSize 0 [ 98.810565][ T5871] usb 2-1: config 0 interface 0 altsetting 181 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.830118][ T5921] usb 4-1: USB disconnect, device number 4 [ 98.870191][ T5871] usb 2-1: config 0 interface 0 has no altsetting 0 [ 98.901424][ T5871] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 98.954749][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.980846][ T5871] usb 2-1: Product: syz [ 98.985041][ T5871] usb 2-1: Manufacturer: syz [ 98.989642][ T5871] usb 2-1: SerialNumber: syz [ 99.067568][ T5871] usb 2-1: config 0 descriptor?? [ 99.710156][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 99.710169][ T30] audit: type=1400 audit(1751567625.605:213): avc: denied { setopt } for pid=6324 comm="syz.2.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 99.735446][ T5871] usb 2-1: no audio or video endpoints found [ 99.913996][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 100.301117][ T24] usb 3-1: device descriptor read/64, error -71 [ 100.311170][ T5893] usb 2-1: USB disconnect, device number 5 [ 100.540095][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 100.741585][ T973] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 100.856426][ T30] audit: type=1400 audit(1751567627.155:214): avc: denied { mounton } for pid=6336 comm="syz.3.64" path="/12/file0" dev="tmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 100.900083][ T973] usb 5-1: Using ep0 maxpacket: 8 [ 100.960320][ T24] usb 3-1: device descriptor read/64, error -71 [ 101.609264][ T24] usb usb3-port1: attempt power cycle [ 101.718536][ T973] usb 5-1: unable to get BOS descriptor or descriptor too short [ 101.727022][ T973] usb 5-1: config 255 has an invalid interface number: 146 but max is 0 [ 101.735409][ T973] usb 5-1: config 255 has no interface number 0 [ 101.741706][ T973] usb 5-1: config 255 interface 146 altsetting 6 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 101.752724][ T973] usb 5-1: config 255 interface 146 has no altsetting 0 [ 101.778338][ T973] usb 5-1: New USB device found, idVendor=0742, idProduct=2008, bcdDevice=19.d8 [ 101.851639][ T973] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.898424][ T973] usb 5-1: Product: syz [ 101.931753][ T973] usb 5-1: Manufacturer: syz [ 101.973445][ T30] audit: type=1400 audit(1751567628.275:215): avc: denied { write } for pid=6356 comm="syz.0.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 101.997343][ T973] usb 5-1: SerialNumber: syz [ 102.012590][ T30] audit: type=1400 audit(1751567628.315:216): avc: denied { getopt } for pid=6352 comm="syz.1.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 102.320239][ T6366] netlink: 48 bytes leftover after parsing attributes in process `syz.1.71'. [ 102.379440][ T973] HFC-S_USB 5-1:255.146: probe with driver HFC-S_USB failed with error -5 [ 102.427462][ T973] usb 5-1: USB disconnect, device number 4 [ 102.544850][ T5871] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 102.606880][ T30] audit: type=1400 audit(1751567628.905:217): avc: denied { create } for pid=6370 comm="syz.1.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 102.669066][ T30] audit: type=1400 audit(1751567628.965:218): avc: denied { getopt } for pid=6372 comm="syz.2.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 102.759807][ T5871] usb 1-1: Using ep0 maxpacket: 32 [ 102.816952][ T6378] Cannot find add_set index 0 as target [ 102.864985][ T30] audit: type=1400 audit(1751567629.145:219): avc: denied { connect } for pid=6370 comm="syz.1.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 103.067113][ T5871] usb 1-1: unable to get BOS descriptor or descriptor too short [ 103.128512][ T5871] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 103.147073][ T5871] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 103.182249][ T30] audit: type=1400 audit(1751567629.475:220): avc: denied { sys_module } for pid=6370 comm="syz.1.73" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 103.216669][ T5871] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 103.263440][ T5871] usb 1-1: config 128 has no interface number 0 [ 103.289356][ T5871] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 103.353165][ T5871] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 103.363383][ T5921] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 103.417676][ T5871] usb 1-1: config 128 interface 127 has no altsetting 0 [ 103.435373][ T6386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.76'. [ 103.458700][ T5871] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 103.479937][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.499797][ T5871] usb 1-1: Product: syz [ 103.510191][ T5871] usb 1-1: Manufacturer: syz [ 103.553199][ T5871] usb 1-1: SerialNumber: syz [ 103.571809][ T5921] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 103.604094][ T5921] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.675311][ T5921] usb 3-1: config 0 has no interface number 0 [ 103.700908][ T5921] usb 3-1: New USB device found, idVendor=056d, idProduct=0000, bcdDevice=39.00 [ 103.737946][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.770066][ T5921] usb 3-1: Product: syz [ 103.780085][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 103.790306][ T30] audit: type=1400 audit(1751567630.095:221): avc: denied { getopt } for pid=6394 comm="syz.3.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 103.797759][ T5921] usb 3-1: Manufacturer: syz [ 103.875823][ T5921] usb 3-1: SerialNumber: syz [ 103.934605][ T5921] usb 3-1: config 0 descriptor?? [ 103.980108][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 104.006616][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.048412][ T5871] usb 1-1: USB disconnect, device number 4 [ 104.063912][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 104.421446][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 104.455311][ T5921] usb 3-1: Found UVC 0.00 device syz (056d:0000) [ 104.471504][ T5921] usb 3-1: No valid video chain found. [ 104.488542][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 104.511005][ T6138] udevd[6138]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 104.518311][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.535437][ T5921] usb 3-1: USB disconnect, device number 6 [ 104.567535][ T5816] IPVS: starting estimator thread 0... [ 104.721355][ T9] usb 2-1: Product: syz [ 104.727829][ T9] usb 2-1: Manufacturer: syz [ 104.737124][ T9] usb 2-1: SerialNumber: syz [ 104.880872][ T6409] IPVS: using max 42 ests per chain, 100800 per kthread [ 104.895140][ T30] audit: type=1400 audit(1751567631.115:222): avc: denied { name_bind } for pid=6410 comm="syz.3.83" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 105.175346][ T30] audit: type=1400 audit(1751567631.115:223): avc: denied { node_bind } for pid=6410 comm="syz.3.83" saddr=224.0.0.2 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 105.411897][ T9] usb 2-1: USB disconnect, device number 6 [ 105.502455][ T30] audit: type=1400 audit(1751567631.685:224): avc: denied { create } for pid=6416 comm="syz.4.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 106.059841][ T6424] openvswitch: netlink: EtherType 0 is less than min 600 [ 106.106660][ T6138] udevd[6138]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 106.413086][ T6436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.89'. [ 107.550964][ T30] audit: type=1400 audit(1751567633.695:225): avc: denied { read append } for pid=6449 comm="syz.4.94" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 107.756135][ T30] audit: type=1400 audit(1751567633.695:226): avc: denied { open } for pid=6449 comm="syz.4.94" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 107.811889][ T30] audit: type=1400 audit(1751567633.835:227): avc: denied { execute } for pid=6449 comm="syz.4.94" path="/16/net_prio.prioidx" dev="tmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 108.036574][ T30] audit: type=1400 audit(1751567634.055:228): avc: denied { write } for pid=6450 comm="syz.3.95" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 108.059262][ C0] vkms_vblank_simulate: vblank timer overrun [ 108.907413][ T30] audit: type=1400 audit(1751567635.205:229): avc: denied { mount } for pid=6458 comm="syz.0.98" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 110.662221][ T30] audit: type=1400 audit(1751567636.585:230): avc: denied { setopt } for pid=6480 comm="syz.2.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 110.913813][ T6489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.105'. [ 111.838768][ T6501] netlink: 'syz.3.109': attribute type 1 has an invalid length. [ 111.945445][ T6503] netlink: 44 bytes leftover after parsing attributes in process `syz.1.110'. [ 111.988444][ T30] audit: type=1400 audit(1751567638.285:231): avc: denied { ioctl } for pid=6504 comm="syz.3.111" path="socket:[9356]" dev="sockfs" ino=9356 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 112.112531][ T30] audit: type=1400 audit(1751567638.325:232): avc: denied { unmount } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 112.155067][ T30] audit: type=1400 audit(1751567638.335:233): avc: denied { setopt } for pid=6504 comm="syz.3.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 112.197742][ T30] audit: type=1400 audit(1751567638.335:234): avc: denied { read } for pid=6504 comm="syz.3.111" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 112.236219][ T30] audit: type=1400 audit(1751567638.335:235): avc: denied { open } for pid=6504 comm="syz.3.111" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 112.259582][ C0] vkms_vblank_simulate: vblank timer overrun [ 112.855166][ T30] audit: type=1400 audit(1751567638.785:236): avc: denied { watch_reads } for pid=6506 comm="syz.0.112" path="/20" dev="tmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 112.877477][ T30] audit: type=1400 audit(1751567638.795:237): avc: denied { ioctl } for pid=6506 comm="syz.0.112" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=9384 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 114.512720][ T30] audit: type=1400 audit(1751567640.785:238): avc: denied { firmware_load } for pid=6518 comm="syz.2.116" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 114.660607][ T6525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.118'. [ 114.722156][ T6522] syz.2.116 (6522) used greatest stack depth: 17976 bytes left [ 115.284156][ T6542] affs: No valid root block on device nullb0 [ 115.311602][ T30] audit: type=1400 audit(1751567641.565:239): avc: denied { mounton } for pid=6534 comm="syz.3.122" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 115.898616][ T6546] mmap: syz.0.126 (6546) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 115.930069][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 115.930085][ T30] audit: type=1400 audit(1751567642.195:241): avc: denied { read append } for pid=6545 comm="syz.0.126" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 116.050085][ T30] audit: type=1400 audit(1751567642.195:242): avc: denied { open } for pid=6545 comm="syz.0.126" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 116.340098][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 116.490105][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 117.040405][ T30] audit: type=1400 audit(1751567642.195:243): avc: denied { map } for pid=6545 comm="syz.0.126" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 117.064066][ T30] audit: type=1400 audit(1751567642.195:244): avc: denied { write execute } for pid=6545 comm="syz.0.126" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 117.088670][ T30] audit: type=1400 audit(1751567642.285:245): avc: denied { read } for pid=6545 comm="syz.0.126" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 117.111733][ T30] audit: type=1400 audit(1751567642.285:246): avc: denied { open } for pid=6545 comm="syz.0.126" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 117.135331][ T30] audit: type=1400 audit(1751567642.285:247): avc: denied { ioctl } for pid=6545 comm="syz.0.126" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 117.162328][ T9] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.173389][ T9] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.183214][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 117.200088][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.356648][ T9] hub 2-1:4.0: USB hub found [ 117.450343][ T6565] affs: No valid root block on device nullb0 [ 117.857210][ T9] hub 2-1:4.0: 2 ports detected [ 118.065505][ T9] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 118.090243][ T9] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 118.104362][ T6567] tipc: Can't bind to reserved service type 0 [ 118.138544][ T30] audit: type=1400 audit(1751567644.405:248): avc: denied { bind } for pid=6566 comm="syz.2.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 118.181757][ T9] usb 2-1: USB disconnect, device number 7 [ 118.299641][ T30] audit: type=1400 audit(1751567644.595:249): avc: denied { ioctl } for pid=6572 comm="syz.3.136" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 118.462755][ T30] audit: type=1400 audit(1751567644.595:250): avc: denied { setopt } for pid=6570 comm="syz.2.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 118.892380][ T6592] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.144'. [ 120.152916][ T6601] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 120.312803][ T6606] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 120.390370][ T6605] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 120.397203][ T6605] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 120.440792][ T6605] vhci_hcd vhci_hcd.0: Device attached [ 120.509500][ T6608] vhci_hcd: connection closed [ 120.512285][ T2907] vhci_hcd: stop threads [ 120.561298][ T2907] vhci_hcd: release socket [ 120.572923][ T6615] Illegal XDP return value 4294967282 on prog (id 32) dev N/A, expect packet loss! [ 120.593375][ T2907] vhci_hcd: disconnect device [ 120.660195][ T43] vhci_hcd: vhci_device speed not set [ 120.770164][ T5893] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 121.034369][ T5893] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.070106][ T1212] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 121.328377][ T5893] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41 [ 121.337736][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 121.346466][ T5893] usb 5-1: Product: syz [ 121.350856][ T5893] usb 5-1: SerialNumber: syz [ 121.358320][ T5893] usb 5-1: config 0 descriptor?? [ 121.369013][ T5893] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 121.379025][ T5893] usb 5-1: Detected SIO [ 121.387763][ T5893] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 121.420247][ T1212] usb 1-1: Using ep0 maxpacket: 32 [ 121.434228][ T1212] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.462104][ T1212] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.495602][ T1212] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 121.554001][ T1212] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 121.583382][ T1212] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 121.600384][ T1212] usb 1-1: Product: syz [ 121.604575][ T1212] usb 1-1: Manufacturer: syz [ 121.609168][ T1212] usb 1-1: SerialNumber: syz [ 121.623503][ T43] usb 5-1: USB disconnect, device number 5 [ 121.648014][ T43] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 121.667266][ T1212] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input5 [ 121.683458][ T43] ftdi_sio 5-1:0.0: device disconnected [ 121.694400][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 121.694412][ T30] audit: type=1400 audit(1751567647.995:258): avc: denied { read } for pid=5169 comm="acpid" name="mouse1" dev="devtmpfs" ino=2831 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 121.728208][ T30] audit: type=1400 audit(1751567647.995:259): avc: denied { open } for pid=5169 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2831 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 121.899229][ T30] audit: type=1400 audit(1751567648.195:260): avc: denied { read } for pid=6620 comm="syz.0.156" name="mouse1" dev="devtmpfs" ino=2831 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 121.963003][ T43] usb 1-1: USB disconnect, device number 5 [ 121.968482][ T6636] veth0_vlan: left allmulticast mode [ 121.978937][ T30] audit: type=1400 audit(1751567648.195:261): avc: denied { open } for pid=6620 comm="syz.0.156" path="/dev/input/mouse1" dev="devtmpfs" ino=2831 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 122.022486][ T43] appletouch 1-1:1.0: input: appletouch disconnected [ 122.047507][ T6638] kAFS: unparsable volume name [ 122.138593][ T30] audit: type=1400 audit(1751567648.435:262): avc: denied { ioctl } for pid=6641 comm="syz.2.163" path="mnt:[4026532810]" dev="nsfs" ino=4026532810 ioctlcmd=0xb706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 122.188357][ T6644] netlink: 132 bytes leftover after parsing attributes in process `syz.3.165'. [ 122.283702][ T30] audit: type=1400 audit(1751567648.585:263): avc: denied { create } for pid=6649 comm="syz.3.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 122.552653][ T30] audit: type=1400 audit(1751567648.705:264): avc: denied { getopt } for pid=6649 comm="syz.3.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 123.870079][ T30] audit: type=1400 audit(1751567650.165:265): avc: denied { connect } for pid=6673 comm="syz.1.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 124.036408][ T30] audit: type=1400 audit(1751567650.335:266): avc: denied { create } for pid=6679 comm="syz.1.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 124.107492][ T30] audit: type=1400 audit(1751567650.335:267): avc: denied { getopt } for pid=6679 comm="syz.1.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 124.857473][ T6678] orangefs_mount: mount request failed with -4 [ 125.531616][ T6702] affs: No valid root block on device nullb0 [ 126.290089][ T973] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 126.318922][ T6716] netlink: 80 bytes leftover after parsing attributes in process `syz.0.195'. [ 126.519699][ T6716] netlink: 80 bytes leftover after parsing attributes in process `syz.0.195'. [ 126.824225][ T973] usb 2-1: Using ep0 maxpacket: 8 [ 126.856087][ T973] usb 2-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 126.886013][ T973] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.912851][ T973] usb 2-1: Product: syz [ 126.949101][ T973] usb 2-1: Manufacturer: syz [ 127.057878][ T973] usb 2-1: SerialNumber: syz [ 127.931561][ T973] mxuport 2-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 128.577132][ T973] mxuport 2-1:254.0: probe with driver mxuport failed with error -5 [ 128.588583][ T973] usb 2-1: USB disconnect, device number 8 [ 129.383156][ T6746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.206'. [ 129.942670][ T6738] ALSA: mixer_oss: invalid OSS volume '' [ 130.198074][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 130.464868][ T6760] lo speed is unknown, defaulting to 1000 [ 130.510339][ T30] audit: type=1400 audit(1751567656.495:269): avc: denied { setopt } for pid=6749 comm="syz.2.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 130.588290][ T30] audit: type=1400 audit(1751567656.695:270): avc: denied { write } for pid=6749 comm="syz.2.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 131.510111][ T6773] netlink: 'syz.2.211': attribute type 2 has an invalid length. [ 131.539948][ T6773] netlink: 'syz.2.211': attribute type 1 has an invalid length. [ 131.693263][ T6779] netlink: 16 bytes leftover after parsing attributes in process `syz.1.215'. [ 132.304944][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.408590][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.935293][ T6805] netlink: 'syz.2.225': attribute type 1 has an invalid length. [ 133.980844][ T6805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.225'. [ 134.069069][ T6811] netlink: 16 bytes leftover after parsing attributes in process `syz.1.228'. [ 134.146716][ T30] audit: type=1400 audit(1751567660.435:271): avc: denied { create } for pid=6816 comm="syz.0.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 134.197966][ T30] audit: type=1400 audit(1751567660.485:272): avc: denied { bind } for pid=6816 comm="syz.0.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 134.427444][ T6828] netlink: 56 bytes leftover after parsing attributes in process `syz.0.237'. [ 135.289836][ T6849] bridge0: port 3(netdevsim0) entered blocking state [ 135.297097][ T6849] bridge0: port 3(netdevsim0) entered disabled state [ 135.305590][ T6849] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 135.323594][ T6849] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 135.332811][ T6849] bridge0: port 3(netdevsim0) entered blocking state [ 135.339685][ T6849] bridge0: port 3(netdevsim0) entered forwarding state [ 135.611010][ T30] audit: type=1400 audit(1751567661.585:273): avc: denied { ioctl } for pid=6840 comm="syz.3.240" path="socket:[10000]" dev="sockfs" ino=10000 ioctlcmd=0x89a2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 135.854796][ T6840] ALSA: mixer_oss: invalid OSS volume '' [ 136.080749][ T6854] netlink: 16 bytes leftover after parsing attributes in process `syz.3.245'. [ 136.293231][ T30] audit: type=1400 audit(1751567662.575:274): avc: denied { bind } for pid=6859 comm="syz.0.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 136.404139][ T30] audit: type=1400 audit(1751567662.575:275): avc: denied { node_bind } for pid=6859 comm="syz.0.247" saddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 136.480088][ T30] audit: type=1400 audit(1751567662.665:276): avc: denied { connect } for pid=6861 comm="syz.4.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 136.538811][ T30] audit: type=1400 audit(1751567662.705:277): avc: denied { getopt } for pid=6864 comm="syz.3.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 137.365933][ T30] audit: type=1400 audit(1751567662.875:278): avc: denied { accept } for pid=6866 comm="syz.0.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 137.385404][ T30] audit: type=1400 audit(1751567662.905:279): avc: denied { write } for pid=6866 comm="syz.0.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 137.404677][ T30] audit: type=1400 audit(1751567662.905:280): avc: denied { read } for pid=6866 comm="syz.0.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 138.013731][ T6888] bridge0: port 4(netdevsim0) entered blocking state [ 138.020820][ T6888] bridge0: port 4(netdevsim0) entered disabled state [ 138.029195][ T6888] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 138.046064][ T6888] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 138.055534][ T6888] bridge0: port 4(netdevsim0) entered blocking state [ 138.062308][ T6888] bridge0: port 4(netdevsim0) entered forwarding state [ 138.095342][ T30] audit: type=1400 audit(1751567664.265:281): avc: denied { ioctl } for pid=6885 comm="syz.1.261" path="socket:[10725]" dev="sockfs" ino=10725 ioctlcmd=0x8931 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 138.640546][ T6879] ALSA: mixer_oss: invalid OSS volume '' [ 139.475953][ T6901] netlink: 16 bytes leftover after parsing attributes in process `syz.1.263'. [ 139.592818][ T6904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.265'. [ 139.820216][ T6911] affs: No valid root block on device nullb0 [ 140.656580][ T30] audit: type=1400 audit(1751567666.955:282): avc: denied { write } for pid=6925 comm="syz.2.273" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 140.850122][ T43] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 141.146076][ T6938] bridge0: port 3(netdevsim0) entered blocking state [ 141.153749][ T6938] bridge0: port 3(netdevsim0) entered disabled state [ 141.176514][ T6938] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 141.930182][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 141.945201][ T43] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 141.972518][ T43] usb 4-1: config 0 has no interface number 0 [ 141.993418][ T30] audit: type=1400 audit(1751567668.295:283): avc: denied { create } for pid=6941 comm="syz.2.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 142.021716][ T43] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 142.040059][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.048261][ T30] audit: type=1400 audit(1751567668.295:284): avc: denied { write } for pid=6941 comm="syz.2.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 142.074172][ T43] usb 4-1: Product: syz [ 142.078351][ T43] usb 4-1: Manufacturer: syz [ 142.104495][ T43] usb 4-1: SerialNumber: syz [ 142.113173][ T6944] netlink: 48 bytes leftover after parsing attributes in process `syz.2.278'. [ 142.134385][ T43] usb 4-1: config 0 descriptor?? [ 142.385117][ T43] radio-si470x 4-1:0.35: this is not a si470x device. [ 142.507909][ T6955] affs: No valid root block on device nullb0 [ 142.623416][ T43] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 142.659697][ T43] usb 4-1: USB disconnect, device number 5 [ 143.414943][ T6961] cgroup: Bad value for 'name' [ 145.607941][ T6991] openvswitch: netlink: IP tunnel TTL not specified. [ 146.637584][ T30] audit: type=1400 audit(1751567672.935:285): avc: denied { create } for pid=7006 comm="syz.4.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 146.744765][ T30] audit: type=1400 audit(1751567672.965:286): avc: denied { ioctl } for pid=7006 comm="syz.4.301" path="socket:[11267]" dev="sockfs" ino=11267 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 146.888872][ T7010] delete_channel: no stack [ 146.900151][ T30] audit: type=1400 audit(1751567673.105:287): avc: denied { create } for pid=7010 comm="syz.4.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 146.919531][ T30] audit: type=1400 audit(1751567673.185:288): avc: denied { write } for pid=7010 comm="syz.4.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 147.766981][ T30] audit: type=1400 audit(1751567674.055:289): avc: denied { getopt } for pid=7029 comm="syz.2.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 148.824780][ T7053] affs: No valid root block on device nullb0 [ 149.230319][ T30] audit: type=1400 audit(1751567675.095:290): avc: denied { read } for pid=7042 comm="syz.2.317" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 149.378087][ T30] audit: type=1400 audit(1751567675.095:291): avc: denied { open } for pid=7042 comm="syz.2.317" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 149.641246][ T30] audit: type=1400 audit(1751567675.105:292): avc: denied { ioctl } for pid=7042 comm="syz.2.317" path="/dev/iommu" dev="devtmpfs" ino=624 ioctlcmd=0x3b81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 151.221145][ T30] audit: type=1400 audit(1751567677.495:293): avc: denied { create } for pid=7071 comm="syz.3.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 151.346657][ T30] audit: type=1400 audit(1751567677.545:294): avc: denied { write } for pid=7071 comm="syz.3.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 151.588319][ T7081] netlink: 44 bytes leftover after parsing attributes in process `syz.4.329'. [ 151.842826][ T30] audit: type=1400 audit(1751567678.145:295): avc: denied { read } for pid=7084 comm="syz.3.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 152.203425][ T30] audit: type=1400 audit(1751567678.505:296): avc: denied { write } for pid=7094 comm="syz.4.334" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 152.470048][ T43] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 152.682024][ T43] usb 5-1: unable to get BOS descriptor or descriptor too short [ 152.696447][ T43] usb 5-1: not running at top speed; connect to a high speed hub [ 152.709480][ T43] usb 5-1: config 9 has an invalid interface number: 25 but max is 0 [ 152.789348][ T43] usb 5-1: config 9 has no interface number 0 [ 152.797576][ T43] usb 5-1: config 9 interface 25 has no altsetting 0 [ 152.806398][ T43] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=4a.98 [ 152.820052][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.828545][ T43] usb 5-1: Product: syz [ 152.834732][ T43] usb 5-1: Manufacturer: syz [ 153.490026][ T43] usb 5-1: SerialNumber: syz [ 153.600611][ T7110] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 153.630696][ T30] audit: type=1400 audit(1751567679.885:297): avc: denied { append } for pid=7109 comm="syz.3.341" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 153.779662][ T43] usb 5-1: USB disconnect, device number 6 [ 154.230022][ T30] audit: type=1400 audit(1751567680.525:298): avc: denied { read } for pid=7118 comm="syz.1.344" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 154.275169][ T30] audit: type=1400 audit(1751567680.525:299): avc: denied { open } for pid=7118 comm="syz.1.344" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 154.573562][ T30] audit: type=1400 audit(1751567680.535:300): avc: denied { ioctl } for pid=7118 comm="syz.1.344" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 155.071684][ T30] audit: type=1400 audit(1751567681.375:301): avc: denied { create } for pid=7131 comm="syz.1.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 155.228574][ T30] audit: type=1400 audit(1751567681.405:302): avc: denied { ioctl } for pid=7129 comm="syz.2.346" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 155.706689][ T30] audit: type=1400 audit(1751567681.425:303): avc: denied { setopt } for pid=7131 comm="syz.1.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 155.758885][ T30] audit: type=1400 audit(1751567681.565:304): avc: denied { setopt } for pid=7133 comm="syz.1.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 156.600451][ T7148] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 156.607060][ T7148] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 156.615430][ T7148] vhci_hcd vhci_hcd.0: Device attached [ 156.623600][ T7154] vhci_hcd: connection closed [ 156.628449][ T13] vhci_hcd: stop threads [ 156.806985][ T13] vhci_hcd: release socket [ 156.822510][ T973] vhci_hcd: vhci_device speed not set [ 156.865768][ T13] vhci_hcd: disconnect device [ 157.260124][ T973] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 157.568948][ T7166] xt_recent: Unsupported userspace flags (000000de) [ 158.095789][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 158.095803][ T30] audit: type=1400 audit(1751567684.395:309): avc: denied { write } for pid=7173 comm="syz.1.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 158.133885][ T7176] netlink: 276 bytes leftover after parsing attributes in process `syz.4.365'. [ 158.169426][ T30] audit: type=1400 audit(1751567684.435:310): avc: denied { nlmsg_read } for pid=7174 comm="syz.4.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 158.340656][ T30] audit: type=1400 audit(1751567684.645:311): avc: denied { ioctl } for pid=7183 comm="syz.3.369" path="socket:[11182]" dev="sockfs" ino=11182 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 159.098116][ T30] audit: type=1400 audit(1751567685.385:312): avc: denied { create } for pid=7192 comm="syz.1.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 159.210272][ T30] audit: type=1400 audit(1751567685.395:313): avc: denied { write } for pid=7192 comm="syz.1.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 159.838831][ T30] audit: type=1400 audit(1751567686.135:314): avc: denied { connect } for pid=7199 comm="syz.1.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 161.094595][ T30] audit: type=1400 audit(1751567687.385:315): avc: denied { setopt } for pid=7227 comm="syz.1.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 161.318083][ T7235] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 161.353536][ T7235] /dev/nullb0: Can't open blockdev [ 161.410832][ T7238] netlink: 'syz.0.388': attribute type 32 has an invalid length. [ 162.370084][ T973] vhci_hcd: vhci_device speed not set [ 162.676911][ T30] audit: type=1400 audit(1751567688.825:316): avc: denied { create } for pid=7249 comm="syz.3.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 163.246352][ T30] audit: type=1400 audit(1751567688.835:317): avc: denied { connect } for pid=7249 comm="syz.3.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 164.004977][ T7265] openvswitch: netlink: Key type 30 is not supported [ 164.017066][ T30] audit: type=1400 audit(1751567690.305:318): avc: denied { bind } for pid=7261 comm="syz.4.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 164.115810][ T7257] ALSA: mixer_oss: invalid OSS volume '' [ 164.276685][ T7274] netlink: 'syz.1.403': attribute type 1 has an invalid length. [ 164.406171][ T7281] netlink: 'syz.1.405': attribute type 1 has an invalid length. [ 164.538833][ T7285] netlink: 'syz.1.406': attribute type 8 has an invalid length. [ 166.107000][ T30] audit: type=1400 audit(1751567692.405:319): avc: denied { setopt } for pid=7303 comm="syz.1.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 166.129639][ T7297] ALSA: mixer_oss: invalid OSS volume '' [ 166.189903][ T7299] overlayfs: missing 'lowerdir' [ 166.324587][ T7310] tmpfs: Bad value for 'mpol' [ 169.603062][ T30] audit: type=1400 audit(1751567695.895:320): avc: denied { setcheckreqprot } for pid=7347 comm="syz.2.427" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 171.059913][ T7374] openvswitch: netlink: Key 0 has unexpected len 20 expected 0 [ 171.134031][ T7376] overlayfs: missing 'lowerdir' [ 172.667485][ T7396] netlink: 'syz.3.445': attribute type 1 has an invalid length. [ 172.747587][ T7386] ALSA: mixer_oss: invalid OSS volume '' [ 174.222191][ T7416] NILFS (nullb0): couldn't find nilfs on the device [ 175.054772][ T30] audit: type=1400 audit(1751567701.355:321): avc: denied { setopt } for pid=7430 comm="syz.1.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 175.280026][ T30] audit: type=1400 audit(1751567701.575:322): avc: denied { write } for pid=7434 comm="syz.0.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 175.346809][ T30] audit: type=1400 audit(1751567701.635:323): avc: denied { read } for pid=7436 comm="syz.2.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 175.699999][ T30] audit: type=1400 audit(1751567701.985:324): avc: denied { read } for pid=7454 comm="syz.2.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 175.758419][ T7458] overlayfs: missing 'lowerdir' [ 175.940226][ T30] audit: type=1400 audit(1751567702.135:325): avc: denied { getopt } for pid=7459 comm="syz.2.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 176.282295][ T7469] 9pnet_fd: Insufficient options for proto=fd [ 177.875356][ T30] audit: type=1400 audit(1751567704.165:326): avc: denied { setopt } for pid=7496 comm="syz.2.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 178.843532][ T7508] netlink: 128 bytes leftover after parsing attributes in process `syz.2.486'. [ 180.714837][ T30] audit: type=1400 audit(1751567707.015:327): avc: denied { read write } for pid=7528 comm="syz.1.493" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 180.830071][ T30] audit: type=1400 audit(1751567707.015:328): avc: denied { open } for pid=7528 comm="syz.1.493" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 181.016605][ T30] audit: type=1400 audit(1751567707.315:329): avc: denied { getopt } for pid=7534 comm="syz.4.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 183.070821][ T7577] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 183.156259][ T7579] xt_hashlimit: max too large, truncated to 1048576 [ 183.385660][ T30] audit: type=1400 audit(1751567709.685:330): avc: denied { ioctl } for pid=7585 comm="syz.0.513" path="socket:[12170]" dev="sockfs" ino=12170 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 184.245147][ T7597] bridge0: port 3(netdevsim0) entered blocking state [ 184.252274][ T7597] bridge0: port 3(netdevsim0) entered disabled state [ 184.259777][ T7597] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 184.276168][ T7597] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 184.285210][ T7597] bridge0: port 3(netdevsim0) entered blocking state [ 184.291963][ T7597] bridge0: port 3(netdevsim0) entered forwarding state [ 184.804747][ T7592] ALSA: mixer_oss: invalid OSS volume '' [ 185.294664][ T30] audit: type=1400 audit(1751567711.585:331): avc: denied { ioctl } for pid=7617 comm="syz.2.525" path="socket:[12210]" dev="sockfs" ino=12210 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 185.746779][ T5825] Bluetooth: hci1: command 0x0406 tx timeout [ 185.753091][ T5826] Bluetooth: hci0: command 0x0406 tx timeout [ 185.759168][ T5827] Bluetooth: hci2: command 0x0406 tx timeout [ 185.765344][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 186.388074][ T7622] ALSA: mixer_oss: invalid OSS volume '' [ 186.491362][ T30] audit: type=1400 audit(1751567712.795:332): avc: denied { create } for pid=7624 comm="syz.3.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 186.511176][ T7629] netlink: 'syz.2.527': attribute type 4 has an invalid length. [ 186.511798][ T30] audit: type=1400 audit(1751567712.795:333): avc: denied { setopt } for pid=7624 comm="syz.3.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 187.757644][ T7633] ALSA: mixer_oss: invalid OSS volume '' [ 188.379994][ T7632] ALSA: mixer_oss: invalid OSS volume '' [ 188.682965][ T973] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 189.530348][ T973] usb 3-1: Using ep0 maxpacket: 16 [ 190.027771][ T973] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 190.036522][ T973] usb 3-1: config 1 has an invalid interface number: 4 but max is 0 [ 190.208179][ T973] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 190.339580][ T973] usb 3-1: config 1 has no interface number 0 [ 190.367226][ T973] usb 3-1: config 1 has no interface number 1 [ 190.412614][ T973] usb 3-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 190.430180][ T7676] netlink: 68 bytes leftover after parsing attributes in process `syz.1.542'. [ 190.662543][ T7664] ALSA: mixer_oss: invalid OSS volume '' [ 190.852276][ T973] usb 3-1: config 1 interface 4 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 190.862665][ T973] usb 3-1: config 1 interface 4 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 190.877579][ T973] usb 3-1: config 1 interface 105 has no altsetting 0 [ 190.906464][ T973] usb 3-1: config 1 interface 4 has no altsetting 0 [ 190.926029][ T973] usb 3-1: string descriptor 0 read error: -71 [ 190.944998][ T973] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 190.955648][ T30] audit: type=1400 audit(1751567717.245:334): avc: denied { read } for pid=7684 comm="syz.3.546" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 190.989742][ T973] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.016048][ T7687] netlink: 16 bytes leftover after parsing attributes in process `syz.1.545'. [ 191.058034][ T973] usb 3-1: can't set config #1, error -71 [ 191.085868][ T30] audit: type=1400 audit(1751567717.245:335): avc: denied { open } for pid=7684 comm="syz.3.546" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 191.152114][ T973] usb 3-1: USB disconnect, device number 7 [ 191.292733][ T30] audit: type=1400 audit(1751567717.335:336): avc: denied { ioctl } for pid=7684 comm="syz.3.546" path="/dev/input/event0" dev="devtmpfs" ino=918 ioctlcmd=0x4524 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 192.465833][ T7717] tmpfs: Bad value for 'mpol' [ 192.509069][ T30] audit: type=1400 audit(1751567718.775:337): avc: denied { getopt } for pid=7715 comm="syz.1.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 193.068447][ T7711] ALSA: mixer_oss: invalid OSS volume '' [ 193.745743][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.752128][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.081323][ T30] audit: type=1400 audit(1751567721.385:338): avc: denied { read append } for pid=7753 comm="syz.4.567" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 195.168151][ T30] audit: type=1400 audit(1751567721.385:339): avc: denied { open } for pid=7753 comm="syz.4.567" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 195.290185][ T7756] netlink: 104 bytes leftover after parsing attributes in process `syz.4.569'. [ 195.306096][ T7761] netlink: 32 bytes leftover after parsing attributes in process `syz.0.572'. [ 196.068575][ T7757] ALSA: mixer_oss: invalid OSS volume '' [ 197.367180][ T7792] netlink: 48 bytes leftover after parsing attributes in process `syz.4.581'. [ 199.150029][ T30] audit: type=1400 audit(1751567725.425:340): avc: denied { read } for pid=7805 comm="syz.3.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 199.150056][ T5893] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 199.280621][ T30] audit: type=1400 audit(1751567725.545:341): avc: denied { read } for pid=7812 comm="syz.3.589" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 199.373978][ T5893] usb 5-1: Using ep0 maxpacket: 8 [ 199.374628][ T30] audit: type=1400 audit(1751567725.545:342): avc: denied { open } for pid=7812 comm="syz.3.589" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 199.594704][ T5893] usb 5-1: too many configurations: 26, using maximum allowed: 8 [ 199.630914][ T30] audit: type=1400 audit(1751567725.615:343): avc: denied { ioctl } for pid=7812 comm="syz.3.589" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 ioctlcmd=0x9405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 200.245158][ T5893] usb 5-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=a8.17 [ 200.337192][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.410091][ T5893] usb 5-1: Product: syz [ 200.414284][ T5893] usb 5-1: Manufacturer: syz [ 200.626010][ T5893] usb 5-1: SerialNumber: syz [ 200.657265][ T5893] usb 5-1: config 0 descriptor?? [ 200.671067][ T5893] hub 5-1:0.0: Invalid hub with more than one config or interface [ 200.679164][ T5893] hub 5-1:0.0: probe with driver hub failed with error -22 [ 200.711169][ T5893] gspca_main: 0979:0270 too many config [ 201.773011][ T43] usb 5-1: USB disconnect, device number 7 [ 201.810226][ T7840] netdevsim netdevsim1: Firmware load for './cgroup/../file0' refused, path contains '..' component [ 201.840567][ T30] audit: type=1400 audit(1751567728.125:344): avc: denied { getopt } for pid=7837 comm="syz.3.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 202.007741][ T7843] openvswitch: netlink: Missing valid actions attribute. [ 202.067785][ T7843] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.432955][ T30] audit: type=1400 audit(1751567728.735:345): avc: denied { read write } for pid=7850 comm="syz.1.603" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 202.502748][ T30] audit: type=1400 audit(1751567728.735:346): avc: denied { open } for pid=7850 comm="syz.1.603" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 204.330451][ T7873] nvme_fabrics: unknown parameter or missing value 'P' in ctrl creation request [ 205.227625][ T7883] netlink: 44 bytes leftover after parsing attributes in process `syz.4.613'. [ 205.347230][ T7877] ALSA: mixer_oss: invalid OSS volume '' [ 205.616384][ T30] audit: type=1400 audit(1751567731.895:347): avc: denied { read } for pid=7891 comm="syz.3.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 205.730111][ T7896] netlink: 28 bytes leftover after parsing attributes in process `syz.4.619'. [ 205.815413][ T30] audit: type=1400 audit(1751567732.115:348): avc: denied { append } for pid=7897 comm="syz.3.620" name="video8" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 206.470056][ T973] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 206.567571][ T30] audit: type=1400 audit(1751567732.865:349): avc: denied { bind } for pid=7914 comm="syz.3.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 206.671559][ T7920] bridge0: port 3(netdevsim0) entered blocking state [ 206.678642][ T7920] bridge0: port 3(netdevsim0) entered disabled state [ 206.686130][ T7920] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 206.702002][ T7920] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 206.710824][ T7920] bridge0: port 3(netdevsim0) entered blocking state [ 206.717559][ T7920] bridge0: port 3(netdevsim0) entered forwarding state [ 207.052366][ T973] usb 3-1: config 224 has an invalid interface number: 231 but max is 0 [ 207.090726][ T973] usb 3-1: config 224 has no interface number 0 [ 207.122440][ T973] usb 3-1: New USB device found, idVendor=04e2, idProduct=1403, bcdDevice=3e.05 [ 207.132215][ T973] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.268123][ T7917] ALSA: mixer_oss: invalid OSS volume '' [ 207.370057][ T973] usb 3-1: Product: syz [ 207.374262][ T973] usb 3-1: Manufacturer: syz [ 207.384700][ T973] usb 3-1: SerialNumber: syz [ 207.411575][ T7926] netlink: 128 bytes leftover after parsing attributes in process `syz.0.631'. [ 207.421211][ T5871] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 207.580072][ T5871] usb 5-1: Using ep0 maxpacket: 8 [ 207.588645][ T5871] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 207.629218][ T5871] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 207.640045][ T5871] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 207.680068][ T5871] usb 5-1: Product: syz [ 207.688311][ T5871] usb 5-1: Manufacturer: syz [ 207.710344][ T5871] usb 5-1: SerialNumber: syz [ 207.771225][ T5893] usb 3-1: USB disconnect, device number 8 [ 207.945953][ T5871] usb 5-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 207.986641][ T5871] usb 5-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 208.009776][ T5871] usb 5-1: Handspring Visor / Palm OS: Number of ports: 2 [ 208.463015][ T5871] usb 5-1: palm_os_3_probe - error -71 getting bytes available request [ 208.518830][ T5871] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 208.544317][ T5871] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 208.638226][ T5871] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 208.656687][ T5871] usb 5-1: USB disconnect, device number 8 [ 208.710856][ T5871] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 208.751908][ T5871] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 208.822392][ T5871] visor 5-1:1.0: device disconnected [ 209.288758][ T973] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 209.904770][ T973] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 209.932465][ T973] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 209.934904][ T7966] netlink: 'syz.0.646': attribute type 1 has an invalid length. [ 209.989068][ T7966] netlink: 220 bytes leftover after parsing attributes in process `syz.0.646'. [ 210.080206][ T973] usb 2-1: Product: syz [ 210.084383][ T973] usb 2-1: SerialNumber: syz [ 210.112898][ T973] usb 2-1: config 0 descriptor?? [ 210.336191][ T30] audit: type=1400 audit(1751567736.635:350): avc: denied { write } for pid=7970 comm="syz.2.649" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 210.399928][ T973] hso 2-1:0.0: Failed to find BULK IN ep [ 210.731405][ T973] usb 2-1: USB disconnect, device number 9 [ 211.626897][ T7989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.656'. [ 212.165341][ T7980] ALSA: mixer_oss: invalid OSS volume '' [ 213.295922][ T8019] vivid-007: ================= START STATUS ================= [ 213.369053][ T8019] vivid-007: Generate PTS: true [ 213.468975][ T8019] vivid-007: Generate SCR: true [ 213.555138][ T8019] tpg source WxH: 320x240 (Y'CbCr) [ 213.592027][ T8019] tpg field: 1 [ 213.779596][ T8019] tpg crop: (0,0)/320x240 [ 213.860087][ T8019] tpg compose: (0,0)/320x240 [ 213.865956][ T8019] tpg colorspace: 8 [ 213.881828][ T8019] tpg transfer function: 0/0 [ 213.896746][ T8019] tpg Y'CbCr encoding: 0/0 [ 213.910044][ T8019] tpg quantization: 0/0 [ 214.042878][ T8019] tpg RGB range: 0/2 [ 214.046833][ T8019] vivid-007: ================== END STATUS ================== [ 214.601823][ T8035] geneve2: entered promiscuous mode [ 216.120076][ T30] audit: type=1400 audit(1751567742.405:351): avc: denied { connect } for pid=8050 comm="syz.4.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 216.428133][ T8039] ALSA: mixer_oss: invalid OSS volume '' [ 216.482030][ T8061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.682'. [ 216.519877][ T8044] ALSA: mixer_oss: invalid OSS volume '' [ 216.843060][ T30] audit: type=1400 audit(1751567743.135:352): avc: denied { ioctl } for pid=8071 comm="syz.4.686" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 216.868384][ T8073] usb usb8: usbfs: process 8073 (syz.2.688) did not claim interface 0 before use [ 217.039633][ T8076] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 217.147411][ T8079] netlink: 16 bytes leftover after parsing attributes in process `syz.4.689'. [ 217.229600][ T8079] netlink: 16 bytes leftover after parsing attributes in process `syz.4.689'. [ 217.351177][ T1212] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 217.617792][ T1212] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 217.628348][ T1212] usb 1-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 217.642711][ T1212] usb 1-1: Product: syz [ 217.648061][ T1212] usb 1-1: Manufacturer: syz [ 217.668180][ T1212] usb 1-1: SerialNumber: syz [ 217.829458][ T1212] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 218.251363][ T8086] ALSA: mixer_oss: invalid OSS volume '' [ 218.533928][ T1212] vp7045: USB control message 'out' went wrong. [ 218.556321][ T1212] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 218.567048][ T30] audit: type=1400 audit(1751567744.855:353): avc: denied { write } for pid=8107 comm="syz.1.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 218.828475][ T1212] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 219.421391][ T8106] ALSA: mixer_oss: invalid OSS volume '' [ 219.502187][ T1212] usb 1-1: USB disconnect, device number 6 [ 219.824432][ T30] audit: type=1400 audit(1751567746.125:354): avc: denied { getopt } for pid=8128 comm="syz.2.711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 219.955223][ T8137] netlink: 284 bytes leftover after parsing attributes in process `syz.2.714'. [ 221.001461][ T8144] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.718'. [ 221.726734][ T8166] affs: No valid root block on device nullb0 [ 222.637420][ T8172] netlink: 36 bytes leftover after parsing attributes in process `syz.1.724'. [ 222.761315][ T30] audit: type=1400 audit(1751567749.055:355): avc: denied { append } for pid=8177 comm="syz.2.728" name="sg0" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 223.082340][ T8186] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.731'. [ 225.555459][ T8211] affs: No valid root block on device nullb0 [ 226.419222][ T8221] ALSA: mixer_oss: invalid OSS volume '' [ 226.803452][ T8212] ALSA: mixer_oss: invalid OSS volume '' [ 226.871015][ T8236] Cache volume key already in use (9p,(null),) [ 227.198328][ T8248] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.754'. [ 227.208916][ T8248] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.754'. [ 227.290922][ T8252] netlink: 'syz.0.755': attribute type 9 has an invalid length. [ 228.032123][ T30] audit: type=1400 audit(1751567754.315:356): avc: denied { sqpoll } for pid=8254 comm="syz.2.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 230.433973][ T30] audit: type=1400 audit(1751567756.645:357): avc: denied { write } for pid=8297 comm="syz.3.772" path="socket:[15234]" dev="sockfs" ino=15234 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 230.520117][ T5871] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 230.800131][ T5871] usb 3-1: Using ep0 maxpacket: 32 [ 230.812313][ T5871] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 230.830074][ T5871] usb 3-1: config 0 has no interface number 0 [ 230.839482][ T5871] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 230.859609][ T5871] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 230.881137][ T5871] usb 3-1: config 0 interface 85 has no altsetting 0 [ 230.899882][ T5871] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 230.909311][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.925835][ T5871] usb 3-1: Product: syz [ 231.079005][ T5871] usb 3-1: Manufacturer: syz [ 231.100050][ T5871] usb 3-1: SerialNumber: syz [ 231.282778][ T5871] usb 3-1: config 0 descriptor?? [ 237.199478][ T5871] appletouch 3-1:0.85: Failed to read mode from device. [ 237.255428][ T5871] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 237.368997][ T5871] usb 3-1: USB disconnect, device number 9 [ 237.460051][ T973] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 244.188215][ T1212] sched: DL replenish lagged too much [ 244.210401][ T973] usb 2-1: device descriptor read/all, error -71 [ 256.033585][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.040136][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 267.100718][ T5135] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 267.108974][ T5135] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 267.116760][ T5135] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 267.124706][ T5135] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 267.132359][ T5135] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 267.141625][ T5811] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 267.171466][ T5135] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 267.179351][ T5135] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 267.190117][ T5135] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 267.197677][ T5135] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 267.265157][ T5819] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 267.277743][ T5819] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 267.286144][ T5819] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 267.294047][ T5819] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 267.303953][ T5819] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 267.340727][ T30] audit: type=1400 audit(1751567793.625:358): avc: denied { mounton } for pid=8340 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 267.376058][ T5819] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 267.384518][ T5819] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 267.397196][ T5819] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 267.418607][ T5819] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 267.427877][ T5819] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 267.474165][ T5811] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 267.493480][ T5811] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 267.501536][ T5811] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 267.509746][ T5811] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 267.517622][ T5811] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 267.794094][ T8340] lo speed is unknown, defaulting to 1000 [ 267.867749][ T8334] lo speed is unknown, defaulting to 1000 [ 267.899369][ T8332] lo speed is unknown, defaulting to 1000 [ 267.996327][ T8343] lo speed is unknown, defaulting to 1000 [ 268.235659][ T8333] lo speed is unknown, defaulting to 1000 [ 268.515381][ T8340] chnl_net:caif_netlink_parms(): no params data found [ 268.626805][ T8332] chnl_net:caif_netlink_parms(): no params data found [ 268.754562][ T8334] chnl_net:caif_netlink_parms(): no params data found [ 269.038270][ T8343] chnl_net:caif_netlink_parms(): no params data found [ 269.155674][ T8340] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.167715][ T8340] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.175254][ T8340] bridge_slave_0: entered allmulticast mode [ 269.187482][ T8340] bridge_slave_0: entered promiscuous mode [ 269.315163][ T8340] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.330196][ T8340] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.337416][ T8340] bridge_slave_1: entered allmulticast mode [ 269.348249][ T5811] Bluetooth: hci4: command tx timeout [ 269.358587][ T8340] bridge_slave_1: entered promiscuous mode [ 269.420764][ T5811] Bluetooth: hci2: command tx timeout [ 269.500754][ T5811] Bluetooth: hci0: command tx timeout [ 269.526398][ T8334] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.552976][ T8334] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.564484][ T8334] bridge_slave_0: entered allmulticast mode [ 269.574822][ T8334] bridge_slave_0: entered promiscuous mode [ 269.580974][ T5811] Bluetooth: hci3: command tx timeout [ 269.587105][ T5819] Bluetooth: hci1: command tx timeout [ 269.702151][ T8332] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.710680][ T8332] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.717851][ T8332] bridge_slave_0: entered allmulticast mode [ 269.730113][ T8332] bridge_slave_0: entered promiscuous mode [ 269.742843][ T8333] chnl_net:caif_netlink_parms(): no params data found [ 269.768635][ T8334] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.780651][ T8334] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.787831][ T8334] bridge_slave_1: entered allmulticast mode [ 269.799602][ T8334] bridge_slave_1: entered promiscuous mode [ 269.853248][ T8340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.875991][ T8340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.930874][ T8332] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.938000][ T8332] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.952747][ T8332] bridge_slave_1: entered allmulticast mode [ 269.962436][ T8332] bridge_slave_1: entered promiscuous mode [ 270.129060][ T8343] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.141865][ T8343] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.149044][ T8343] bridge_slave_0: entered allmulticast mode [ 270.162096][ T8343] bridge_slave_0: entered promiscuous mode [ 270.225287][ T8334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.324694][ T8343] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.335697][ T8343] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.344730][ T8343] bridge_slave_1: entered allmulticast mode [ 270.355863][ T8343] bridge_slave_1: entered promiscuous mode [ 270.406823][ T8334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.436148][ T8340] team0: Port device team_slave_0 added [ 270.488811][ T8332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.556956][ T8340] team0: Port device team_slave_1 added [ 270.613800][ T8343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.632162][ T8332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.694653][ T8334] team0: Port device team_slave_0 added [ 270.812848][ T8343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.878711][ T8334] team0: Port device team_slave_1 added [ 271.008348][ T8340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.016235][ T8340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.048197][ T8340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.238466][ T8333] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.265011][ T8333] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.273574][ T8333] bridge_slave_0: entered allmulticast mode [ 271.289609][ T8333] bridge_slave_0: entered promiscuous mode [ 271.426501][ T5811] Bluetooth: hci4: command tx timeout [ 271.451296][ T8340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.458262][ T8340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.489837][ T8340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.505824][ T5811] Bluetooth: hci2: command tx timeout [ 271.555197][ T8332] team0: Port device team_slave_0 added [ 271.569193][ T8334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.577282][ T8334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.609057][ T5811] Bluetooth: hci0: command tx timeout [ 271.615087][ T8334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.632758][ T8334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.639712][ T8334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.666270][ T5811] Bluetooth: hci3: command tx timeout [ 271.671789][ T5819] Bluetooth: hci1: command tx timeout [ 271.686789][ T8334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.705853][ T8333] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.713929][ T8333] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.725895][ T8333] bridge_slave_1: entered allmulticast mode [ 271.734306][ T8333] bridge_slave_1: entered promiscuous mode [ 271.807703][ T8343] team0: Port device team_slave_0 added [ 271.824718][ T8332] team0: Port device team_slave_1 added [ 271.942272][ T8343] team0: Port device team_slave_1 added [ 271.958644][ T8340] hsr_slave_0: entered promiscuous mode [ 271.965358][ T8340] hsr_slave_1: entered promiscuous mode [ 271.976809][ T8340] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 271.984750][ T8340] Cannot create hsr debugfs directory [ 272.243446][ T8334] hsr_slave_0: entered promiscuous mode [ 272.249882][ T8334] hsr_slave_1: entered promiscuous mode [ 272.263889][ T8334] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 272.273892][ T8334] Cannot create hsr debugfs directory [ 272.284879][ T8333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.347228][ T8343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.356486][ T8343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.396152][ T8343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.413081][ T8332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.423677][ T8332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.459081][ T8332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.619725][ T8333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.637266][ T8343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.644732][ T8343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.679536][ T8343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.736656][ T8332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.743712][ T8332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.777954][ T8332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.102351][ T8333] team0: Port device team_slave_0 added [ 273.239270][ T8333] team0: Port device team_slave_1 added [ 273.303904][ T8343] hsr_slave_0: entered promiscuous mode [ 273.315526][ T8343] hsr_slave_1: entered promiscuous mode [ 273.321778][ T8343] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 273.329327][ T8343] Cannot create hsr debugfs directory [ 273.363288][ T8332] hsr_slave_0: entered promiscuous mode [ 273.369722][ T8332] hsr_slave_1: entered promiscuous mode [ 273.382020][ T8332] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 273.389576][ T8332] Cannot create hsr debugfs directory [ 273.501006][ T5811] Bluetooth: hci4: command tx timeout [ 273.556105][ T8333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.569626][ T8333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.596218][ T5811] Bluetooth: hci2: command tx timeout [ 273.609222][ T8333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.665047][ T5811] Bluetooth: hci0: command tx timeout [ 273.741294][ T5811] Bluetooth: hci3: command tx timeout [ 273.746731][ T5811] Bluetooth: hci1: command tx timeout [ 273.885039][ T8333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.906162][ T8333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.938200][ T8333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.243766][ T8333] hsr_slave_0: entered promiscuous mode [ 274.257190][ T8333] hsr_slave_1: entered promiscuous mode [ 274.264593][ T8333] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 274.276636][ T8333] Cannot create hsr debugfs directory [ 274.683533][ T8340] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 274.766688][ T8340] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 274.795419][ T8340] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 274.852517][ T8340] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 275.034265][ T8334] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 275.127640][ T8334] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 275.172347][ T8334] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 275.209046][ T8334] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 275.366089][ T8343] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 275.425704][ T8343] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 275.455157][ T8343] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 275.516098][ T8343] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 275.580457][ T5811] Bluetooth: hci4: command tx timeout [ 275.619528][ T8340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.661721][ T5811] Bluetooth: hci2: command tx timeout [ 275.726727][ T8340] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.740084][ T5811] Bluetooth: hci0: command tx timeout [ 275.755403][ T8332] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 275.803145][ T6107] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.810305][ T6107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.821006][ T5811] Bluetooth: hci1: command tx timeout [ 275.826425][ T5811] Bluetooth: hci3: command tx timeout [ 275.861390][ T8332] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 275.894583][ T6107] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.901759][ T6107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.944703][ T8332] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 276.012810][ T8332] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 276.046950][ T8334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.165951][ T8333] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 276.239653][ T8334] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.256628][ T8333] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 276.319011][ T8343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.362229][ T6107] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.369372][ T6107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.397774][ T6107] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.404927][ T6107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.429704][ T8333] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 276.542447][ T8333] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 276.618083][ T8343] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.758558][ T6168] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.765759][ T6168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.805203][ T6168] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.812368][ T6168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.033766][ T8332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.256980][ T8332] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.405613][ T6104] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.412828][ T6104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.469547][ T6104] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.476705][ T6104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.553167][ T8340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.599096][ T8333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.873031][ T8333] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.929230][ T8332] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 278.031976][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.039111][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.091512][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.098665][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.196997][ T8334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.332945][ T8343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.171328][ T8340] veth0_vlan: entered promiscuous mode [ 279.267698][ T8340] veth1_vlan: entered promiscuous mode [ 279.364282][ T8332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.462708][ T8340] veth0_macvtap: entered promiscuous mode [ 279.578222][ T8340] veth1_macvtap: entered promiscuous mode [ 279.635506][ T8333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.813139][ T8340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.896644][ T8340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.004094][ T8340] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.050457][ T8340] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.059182][ T8340] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.108809][ T8340] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.238241][ T8343] veth0_vlan: entered promiscuous mode [ 280.323828][ T8334] veth0_vlan: entered promiscuous mode [ 280.364953][ T8343] veth1_vlan: entered promiscuous mode [ 280.512422][ T8334] veth1_vlan: entered promiscuous mode [ 280.710253][ T8343] veth0_macvtap: entered promiscuous mode [ 280.871720][ T8343] veth1_macvtap: entered promiscuous mode [ 280.933903][ T8334] veth0_macvtap: entered promiscuous mode [ 280.954508][ T8332] veth0_vlan: entered promiscuous mode [ 280.980763][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.988598][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.004570][ T8334] veth1_macvtap: entered promiscuous mode [ 281.074540][ T8332] veth1_vlan: entered promiscuous mode [ 281.096571][ T8343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.194214][ T8343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.226925][ T8334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.275534][ T8343] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.291330][ T8343] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.307048][ T8343] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.317756][ T8343] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.337417][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.367048][ T8334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.383693][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.419236][ T8334] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.437156][ T8334] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.446432][ T8334] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.470787][ T8334] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.511449][ T30] audit: type=1400 audit(1751567807.815:359): avc: denied { mount } for pid=8340 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 281.603006][ T8333] veth0_vlan: entered promiscuous mode [ 281.640141][ T30] audit: type=1400 audit(1751567807.845:360): avc: denied { mounton } for pid=8340 comm="syz-executor" path="/root/syzkaller.LIP2ss/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 281.702996][ T8332] veth0_macvtap: entered promiscuous mode [ 281.717025][ T30] audit: type=1400 audit(1751567807.885:361): avc: denied { mount } for pid=8340 comm="syz-executor" name="/" dev="gadgetfs" ino=18641 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 281.755977][ T8333] veth1_vlan: entered promiscuous mode [ 281.829379][ T8332] veth1_macvtap: entered promiscuous mode [ 281.983861][ T8332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.139537][ T8332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.640134][ T8465] affs: No valid root block on device nullb0 [ 282.681793][ T8333] veth0_macvtap: entered promiscuous mode [ 282.707026][ T6107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.726589][ T8332] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.737747][ T6107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.752503][ T8332] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.768041][ T8332] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.794970][ T8332] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.831225][ T8333] veth1_macvtap: entered promiscuous mode [ 282.916177][ T6107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.945371][ T6107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.107657][ T8333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.249555][ T8333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.277788][ T6104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.298110][ T6104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.538660][ T8333] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.566700][ T8333] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.645906][ T8333] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.658222][ T8333] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.699060][ T2907] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.729701][ T2907] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.928430][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.999176][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.276687][ T2942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.312135][ T2942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.515530][ T2942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.590167][ T2942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.730563][ T8479] netlink: 8 bytes leftover after parsing attributes in process `syz.9.788'. [ 284.775233][ T5811] Bluetooth: hci3: adv larger than maximum supported [ 284.775281][ T5811] Bluetooth: hci3: Unknown advertising packet type: 0x40 [ 284.783288][ T5811] Bluetooth: hci3: Malformed LE Event: 0x0d [ 284.891536][ T2942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.928757][ T2942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.535923][ T2942] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.633366][ T5819] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 310.642540][ T5819] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 310.650445][ T5819] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 310.658264][ T5819] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 310.666132][ T5819] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 310.799638][ T5815] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 310.825324][ T5815] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 310.832579][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 310.842472][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 310.851520][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 310.858996][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 310.889485][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 310.898017][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 310.906171][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 310.914214][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 311.058366][ T5815] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 311.080819][ T5815] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 311.096713][ T5815] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 311.104798][ T5815] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 311.112853][ T5815] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 311.257086][ T5827] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 311.278891][ T5827] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 311.291034][ T5827] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 311.298781][ T5827] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 311.306667][ T5827] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 316.640398][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.646793][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 364.219386][ T5826] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 364.249354][ T5826] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 364.270840][ T5826] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 364.291775][ T5826] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 364.310052][ T5826] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 364.756016][ T8539] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 364.772364][ T8539] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 364.780990][ T8539] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 364.789138][ T8539] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 364.797022][ T8539] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 365.154443][ T8544] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 365.163289][ T8544] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 365.171984][ T8544] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 365.179805][ T8544] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 365.187556][ T8544] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 365.267704][ T8547] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 365.276573][ T8547] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 365.285785][ T8547] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 365.300646][ T8547] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 365.310854][ T8547] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 365.402778][ T8549] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 365.411773][ T8549] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 365.419568][ T8549] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 365.428023][ T8549] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 365.435654][ T8549] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 378.064323][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.077453][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 390.385371][ T5825] Bluetooth: hci0: command 0x0406 tx timeout [ 418.323023][ T51] Bluetooth: hci7: command tx timeout [ 420.221251][ T8539] Bluetooth: hci4: command tx timeout [ 420.320257][ T8539] Bluetooth: hci6: command tx timeout [ 420.326187][ T8539] Bluetooth: hci5: command tx timeout [ 420.400279][ T5827] Bluetooth: hci8: command tx timeout [ 420.406196][ T5827] Bluetooth: hci11: command tx timeout [ 420.412848][ T8539] Bluetooth: hci7: command tx timeout [ 420.418584][ T8539] Bluetooth: hci10: command tx timeout [ 420.466112][ T8539] Bluetooth: hci12: command tx timeout [ 420.471939][ T5827] Bluetooth: hci9: command tx timeout [ 420.477721][ T5827] Bluetooth: hci13: command tx timeout [ 420.511564][ T2942] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.901566][ T8533] lo speed is unknown, defaulting to 1000 [ 421.814935][ T8539] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 421.828726][ T8539] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 421.857892][ T8539] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 421.865744][ T8539] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 421.873854][ T8539] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 421.948083][ T8561] lo speed is unknown, defaulting to 1000 [ 422.338100][ T8561] chnl_net:caif_netlink_parms(): no params data found [ 422.460445][ T8539] Bluetooth: hci10: command tx timeout [ 422.465967][ T8539] Bluetooth: hci11: command tx timeout [ 422.540248][ T5827] Bluetooth: hci12: command tx timeout [ 422.546351][ T8539] Bluetooth: hci13: command tx timeout [ 422.675491][ T8561] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.703521][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 422.712407][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 422.721264][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 422.729013][ T5827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 422.736851][ T5827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 422.770524][ T8561] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.777729][ T8561] bridge_slave_0: entered allmulticast mode [ 422.794998][ T8561] bridge_slave_0: entered promiscuous mode [ 422.819387][ T8561] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.827355][ T8561] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.841496][ T8561] bridge_slave_1: entered allmulticast mode [ 422.848887][ T8561] bridge_slave_1: entered promiscuous mode [ 422.976923][ T8561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.996779][ T8561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.162561][ T8561] team0: Port device team_slave_0 added [ 423.189170][ T8561] team0: Port device team_slave_1 added [ 423.369241][ T8561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.395069][ T8561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.480037][ T8561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.511943][ T8561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.540825][ T8561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.615775][ T5827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 423.633515][ T5827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 423.642193][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 423.650287][ T5827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 423.657758][ T5827] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 423.700120][ T8561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.818173][ T8561] hsr_slave_0: entered promiscuous mode [ 423.839758][ T8561] hsr_slave_1: entered promiscuous mode [ 423.847110][ T8561] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 423.860077][ T8561] Cannot create hsr debugfs directory [ 423.900466][ T5827] Bluetooth: hci0: command tx timeout [ 424.540281][ T8539] Bluetooth: hci10: command tx timeout [ 424.548329][ T5827] Bluetooth: hci11: command tx timeout [ 424.620196][ T5827] Bluetooth: hci13: command tx timeout [ 424.625723][ T5827] Bluetooth: hci12: command tx timeout [ 424.780657][ T5827] Bluetooth: hci1: command tx timeout [ 424.836066][ T5827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 424.844850][ T5827] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 424.855564][ T5827] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 424.864364][ T5827] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 424.872225][ T5827] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 424.919194][ T8539] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 424.927636][ T8539] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 424.935400][ T8539] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 424.945099][ T8539] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 424.955690][ T8539] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 425.038227][ T8577] lo speed is unknown, defaulting to 1000 [ 425.282462][ T8577] chnl_net:caif_netlink_parms(): no params data found [ 425.496885][ T8577] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.505442][ T8577] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.518055][ T8577] bridge_slave_0: entered allmulticast mode [ 425.526885][ T8577] bridge_slave_0: entered promiscuous mode [ 425.539040][ T8577] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.549775][ T8577] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.563565][ T8577] bridge_slave_1: entered allmulticast mode [ 425.589529][ T8577] bridge_slave_1: entered promiscuous mode [ 425.695134][ T8577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.715229][ T8577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.740359][ T8539] Bluetooth: hci2: command tx timeout [ 425.849083][ T8577] team0: Port device team_slave_0 added [ 425.858572][ T8577] team0: Port device team_slave_1 added [ 425.978426][ T8577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.985855][ T8539] Bluetooth: hci0: command tx timeout [ 426.000331][ T8577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.042601][ T8577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.083880][ T8577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.094748][ T8577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.127429][ T8577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.268426][ T8577] hsr_slave_0: entered promiscuous mode [ 426.274934][ T8577] hsr_slave_1: entered promiscuous mode [ 426.290619][ T8577] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 426.298188][ T8577] Cannot create hsr debugfs directory [ 426.620295][ T8539] Bluetooth: hci11: command tx timeout [ 426.625851][ T5827] Bluetooth: hci10: command tx timeout [ 426.700339][ T5827] Bluetooth: hci12: command tx timeout [ 426.705853][ T5827] Bluetooth: hci13: command tx timeout [ 426.860417][ T5827] Bluetooth: hci1: command tx timeout [ 426.940078][ T5827] Bluetooth: hci3: command tx timeout [ 427.024474][ T5827] Bluetooth: hci4: command tx timeout [ 427.820148][ T5827] Bluetooth: hci2: command tx timeout [ 428.067081][ T5827] Bluetooth: hci0: command tx timeout [ 428.940231][ T5827] Bluetooth: hci1: command tx timeout [ 429.020103][ T5827] Bluetooth: hci3: command tx timeout [ 429.100134][ T5827] Bluetooth: hci4: command tx timeout [ 429.900266][ T5827] Bluetooth: hci2: command tx timeout [ 430.142071][ T5827] Bluetooth: hci0: command tx timeout [ 431.020401][ T5827] Bluetooth: hci1: command tx timeout [ 431.100239][ T5827] Bluetooth: hci3: command tx timeout [ 431.180713][ T5827] Bluetooth: hci4: command tx timeout [ 431.980142][ T5827] Bluetooth: hci2: command tx timeout [ 433.180142][ T5827] Bluetooth: hci3: command tx timeout [ 433.261679][ T5827] Bluetooth: hci4: command tx timeout [ 439.504695][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.520102][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 484.821616][ T8539] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 484.830540][ T8539] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 484.838244][ T8539] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 484.857651][ T8539] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 484.866204][ T8539] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 485.853095][ T5827] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 485.865575][ T5827] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 485.881647][ T5827] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 485.889463][ T5827] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 485.897282][ T5827] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 486.104376][ T8539] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 486.113459][ T8539] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 486.121393][ T8539] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 486.129484][ T8539] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 486.137107][ T8539] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 486.192034][ T8539] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 486.208477][ T8539] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 486.221840][ T8539] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 486.240112][ T8539] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 486.247674][ T8539] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 486.325280][ T5827] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 486.334709][ T5827] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 486.348506][ T5827] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 486.356388][ T5827] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 486.364181][ T5827] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 486.940233][ T5827] Bluetooth: hci5: command tx timeout [ 487.986776][ T5827] Bluetooth: hci6: command tx timeout [ 488.220245][ T5827] Bluetooth: hci7: command tx timeout [ 488.300083][ T5827] Bluetooth: hci8: command tx timeout [ 488.380618][ T5827] Bluetooth: hci9: command tx timeout [ 489.020309][ T5827] Bluetooth: hci5: command tx timeout [ 490.060308][ T8539] Bluetooth: hci6: command tx timeout [ 490.307808][ T8539] Bluetooth: hci7: command tx timeout [ 490.380190][ T8539] Bluetooth: hci8: command tx timeout [ 490.460180][ T8539] Bluetooth: hci9: command tx timeout [ 491.100179][ T8539] Bluetooth: hci5: command tx timeout [ 492.140006][ T8539] Bluetooth: hci6: command tx timeout [ 492.380235][ T8539] Bluetooth: hci7: command tx timeout [ 492.460043][ T8539] Bluetooth: hci8: command tx timeout [ 492.540156][ T8539] Bluetooth: hci9: command tx timeout [ 493.180202][ T8539] Bluetooth: hci5: command tx timeout [ 494.222922][ T8539] Bluetooth: hci6: command tx timeout [ 494.463555][ T8539] Bluetooth: hci7: command tx timeout [ 494.540234][ T8539] Bluetooth: hci8: command tx timeout [ 494.620347][ T8539] Bluetooth: hci9: command tx timeout [ 500.946175][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.959978][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 544.002334][ T5826] Bluetooth: hci12: command 0x0406 tx timeout [ 544.008520][ T5826] Bluetooth: hci0: command 0x0406 tx timeout [ 544.014741][ T5826] Bluetooth: hci10: command 0x0406 tx timeout [ 544.021057][ T51] Bluetooth: hci11: command 0x0406 tx timeout [ 544.027175][ T5827] Bluetooth: hci13: command 0x0406 tx timeout [ 545.204039][ T8549] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 545.216545][ T8549] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 545.224743][ T8549] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 545.240627][ T8549] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 545.248559][ T8549] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 546.041036][ T8549] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 546.050580][ T8549] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 546.058463][ T8549] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 546.066864][ T8549] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 546.081948][ T8549] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 546.208392][ T8539] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 546.217318][ T8539] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 546.226458][ T8539] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 546.235128][ T8539] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 546.243841][ T8539] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 546.744951][ T8549] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 546.753726][ T8549] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 546.762105][ T8549] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 546.770278][ T8549] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 546.778718][ T8549] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 546.971173][ T8539] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 546.979564][ T8539] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 546.987826][ T8539] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 546.995733][ T8539] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 547.005420][ T8539] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 547.340273][ T8549] Bluetooth: hci14: command tx timeout [ 548.140242][ T8549] Bluetooth: hci15: command tx timeout [ 548.300134][ T8549] Bluetooth: hci16: command tx timeout [ 548.860271][ T8549] Bluetooth: hci17: command tx timeout [ 549.119561][ T5826] Bluetooth: hci1: command 0x0406 tx timeout [ 549.125681][ T5827] Bluetooth: hci2: command 0x0406 tx timeout [ 549.131819][ T5135] Bluetooth: hci3: command 0x0406 tx timeout [ 549.137820][ T5135] Bluetooth: hci4: command 0x0406 tx timeout [ 549.144031][ T8549] Bluetooth: hci18: command tx timeout [ 549.420168][ T8539] Bluetooth: hci14: command tx timeout [ 550.220129][ T8539] Bluetooth: hci15: command tx timeout [ 550.380241][ T8539] Bluetooth: hci16: command tx timeout [ 550.941663][ T8539] Bluetooth: hci17: command tx timeout [ 551.181129][ T8539] Bluetooth: hci18: command tx timeout [ 551.500549][ T8539] Bluetooth: hci14: command tx timeout [ 552.310655][ T8539] Bluetooth: hci15: command tx timeout [ 552.460063][ T8539] Bluetooth: hci16: command tx timeout [ 553.020452][ T8539] Bluetooth: hci17: command tx timeout [ 553.261018][ T8539] Bluetooth: hci18: command tx timeout [ 553.580216][ T8539] Bluetooth: hci14: command tx timeout [ 554.380407][ T8539] Bluetooth: hci15: command tx timeout [ 554.540013][ T8539] Bluetooth: hci16: command tx timeout [ 555.102196][ T8539] Bluetooth: hci17: command tx timeout [ 555.340575][ T8539] Bluetooth: hci18: command tx timeout [ 562.389305][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.395848][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.421083][ T31] INFO: task kworker/u8:3:49 blocked for more than 143 seconds. [ 569.428762][ T31] Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 [ 569.456914][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 569.483931][ T31] task:kworker/u8:3 state:D stack:23592 pid:49 tgid:49 ppid:2 task_flags:0x4208160 flags:0x00004000 [ 569.535771][ T31] Workqueue: events_unbound linkwatch_event [ 569.620041][ T31] Call Trace: [ 569.623363][ T31] [ 569.626296][ T31] __schedule+0x116a/0x5de0 [ 569.729897][ T31] ? kthread+0x3c2/0x780 [ 569.734187][ T31] ? ret_from_fork+0x5d4/0x6f0 [ 569.738960][ T31] ? ret_from_fork_asm+0x1a/0x30 [ 569.810171][ T31] ? __lock_acquire+0x622/0x1c90 [ 569.815171][ T31] ? __pfx___schedule+0x10/0x10 [ 569.862495][ T31] ? find_held_lock+0x2b/0x80 [ 569.867227][ T31] ? schedule+0x2d7/0x3a0 [ 569.918246][ T31] schedule+0xe7/0x3a0 [ 569.951850][ T31] schedule_preempt_disabled+0x13/0x30 [ 569.957368][ T31] __mutex_lock+0x6c7/0xb90 [ 569.990035][ T31] ? linkwatch_event+0x51/0xc0 [ 569.994848][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 570.054249][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 570.059257][ T31] ? linkwatch_event+0x51/0xc0 [ 570.120176][ T31] linkwatch_event+0x51/0xc0 [ 570.124820][ T31] ? __pfx_linkwatch_event+0x10/0x10 [ 570.167032][ T31] ? rcu_is_watching+0x12/0xc0 [ 570.190264][ T31] process_one_work+0x9cf/0x1b70 [ 570.195266][ T31] ? __pfx_process_one_work+0x10/0x10 [ 570.238219][ T31] ? assign_work+0x1a0/0x250 [ 570.258556][ T31] worker_thread+0x6c8/0xf10 [ 570.268830][ T31] ? __pfx_worker_thread+0x10/0x10 [ 570.275675][ T31] kthread+0x3c2/0x780 [ 570.279756][ T31] ? __pfx_kthread+0x10/0x10 [ 570.289268][ T31] ? rcu_is_watching+0x12/0xc0 [ 570.295763][ T31] ? __pfx_kthread+0x10/0x10 [ 570.305170][ T31] ret_from_fork+0x5d4/0x6f0 [ 570.309781][ T31] ? __pfx_kthread+0x10/0x10 [ 570.316198][ T31] ret_from_fork_asm+0x1a/0x30 [ 570.325720][ T31] [ 570.328846][ T31] INFO: task kworker/u8:7:2942 blocked for more than 144 seconds. [ 570.361470][ T31] Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 [ 570.369133][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 570.387721][ T31] task:kworker/u8:7 state:D stack:22264 pid:2942 tgid:2942 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 570.406075][ T31] Workqueue: netns cleanup_net [ 570.411054][ T31] Call Trace: [ 570.414333][ T31] [ 570.417270][ T31] __schedule+0x116a/0x5de0 [ 570.430013][ T31] ? stack_trace_save+0x8e/0xc0 [ 570.434895][ T31] ? __lock_acquire+0x622/0x1c90 [ 570.447535][ T31] ? __pfx___schedule+0x10/0x10 [ 570.521449][ T31] ? find_held_lock+0x2b/0x80 [ 570.526545][ T31] ? schedule+0x2d7/0x3a0 [ 570.537008][ T31] schedule+0xe7/0x3a0 [ 570.544768][ T31] schedule_preempt_disabled+0x13/0x30 [ 570.556532][ T31] __mutex_lock+0x6c7/0xb90 [ 570.561332][ T31] ? rtnl_net_dev_lock+0x146/0x360 [ 570.569542][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 570.582625][ T31] ? mntput+0x6b/0x90 [ 570.586646][ T31] ? find_held_lock+0x2b/0x80 [ 570.596173][ T31] ? rtnl_net_dev_lock+0x137/0x360 [ 570.603065][ T31] ? rtnl_net_dev_lock+0x28/0x360 [ 570.608109][ T31] ? rtnl_net_dev_lock+0x146/0x360 [ 570.618042][ T31] rtnl_net_dev_lock+0x146/0x360 [ 570.637635][ T31] unregister_netdevice_notifier_dev_net+0x2c/0x2d0 [ 570.646002][ T31] nsim_destroy+0xf2/0x5d0 [ 570.655134][ T31] ? kfree+0x2b4/0x4d0 [ 570.659220][ T31] __nsim_dev_port_del+0x189/0x240 [ 570.669339][ T31] nsim_dev_reload_destroy+0x10a/0x4d0 [ 570.679549][ T31] nsim_dev_reload_down+0x6e/0xd0 [ 570.686356][ T31] devlink_reload+0x1a1/0x7c0 [ 570.695753][ T31] ? __pfx_devlink_reload+0x10/0x10 [ 570.705372][ T31] devlink_pernet_pre_exit+0x1a0/0x2b0 [ 570.715568][ T31] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 570.724099][ T31] ? up_write+0x1b2/0x520 [ 570.728445][ T31] ? kobject_put+0xab/0x5a0 [ 570.740725][ T31] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 570.746736][ T31] ops_undo_list+0x184/0xab0 [ 570.759352][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 570.764696][ T31] ? __local_bh_enable_ip+0xa4/0x120 [ 570.780176][ T31] cleanup_net+0x408/0x890 [ 570.784614][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 570.789557][ T31] ? rcu_is_watching+0x12/0xc0 [ 570.800267][ T31] process_one_work+0x9cf/0x1b70 [ 570.805229][ T31] ? __pfx_macvlan_process_broadcast+0x10/0x10 [ 570.817445][ T31] ? __pfx_process_one_work+0x10/0x10 [ 570.823175][ T31] ? assign_work+0x1a0/0x250 [ 570.827787][ T31] worker_thread+0x6c8/0xf10 [ 570.838623][ T31] ? __pfx_worker_thread+0x10/0x10 [ 570.857045][ T31] kthread+0x3c2/0x780 [ 570.865798][ T31] ? __pfx_kthread+0x10/0x10 [ 570.879463][ T31] ? rcu_is_watching+0x12/0xc0 [ 570.884510][ T31] ? __pfx_kthread+0x10/0x10 [ 570.889110][ T31] ret_from_fork+0x5d4/0x6f0 [ 570.900104][ T31] ? __pfx_kthread+0x10/0x10 [ 570.904710][ T31] ret_from_fork_asm+0x1a/0x30 [ 570.909490][ T31] [ 570.921251][ T31] INFO: task kworker/u8:15:6175 blocked for more than 144 seconds. [ 570.929152][ T31] Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 [ 570.948473][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 570.969733][ T31] task:kworker/u8:15 state:D stack:25848 pid:6175 tgid:6175 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 570.993354][ T31] Workqueue: ipv6_addrconf addrconf_dad_work [ 570.999381][ T31] Call Trace: [ 571.007636][ T31] [ 571.012356][ T31] __schedule+0x116a/0x5de0 [ 571.016883][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 571.027214][ T31] ? __lock_acquire+0x622/0x1c90 [ 571.033895][ T31] ? __pfx___schedule+0x10/0x10 [ 571.038765][ T31] ? find_held_lock+0x2b/0x80 [ 571.048289][ T31] ? schedule+0x2d7/0x3a0 [ 571.054365][ T31] schedule+0xe7/0x3a0 [ 571.058449][ T31] schedule_preempt_disabled+0x13/0x30 [ 571.078206][ T31] __mutex_lock+0x6c7/0xb90 [ 571.090192][ T31] ? addrconf_dad_work+0x120/0x14e0 [ 571.095428][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 571.107049][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 571.112315][ T31] ? addrconf_dad_work+0x120/0x14e0 [ 571.117553][ T31] ? rtnl_lock+0x9/0x20 [ 571.128158][ T31] addrconf_dad_work+0x120/0x14e0 [ 571.133430][ T31] ? __pfx_addrconf_dad_work+0x10/0x10 [ 571.138904][ T31] ? rcu_is_watching+0x12/0xc0 [ 571.150097][ T31] process_one_work+0x9cf/0x1b70 [ 571.155068][ T31] ? __pfx_addrconf_dad_work+0x10/0x10 [ 571.166801][ T31] ? __pfx_process_one_work+0x10/0x10 [ 571.173931][ T31] ? assign_work+0x1a0/0x250 [ 571.189925][ T31] worker_thread+0x6c8/0xf10 [ 571.194567][ T31] ? __pfx_worker_thread+0x10/0x10 [ 571.199683][ T31] kthread+0x3c2/0x780 [ 571.215864][ T31] ? __pfx_kthread+0x10/0x10 [ 571.226365][ T31] ? rcu_is_watching+0x12/0xc0 [ 571.231894][ T31] ? __pfx_kthread+0x10/0x10 [ 571.236495][ T31] ret_from_fork+0x5d4/0x6f0 [ 571.247062][ T31] ? __pfx_kthread+0x10/0x10 [ 571.252442][ T31] ret_from_fork_asm+0x1a/0x30 [ 571.257327][ T31] [ 571.266987][ T31] INFO: task syz-executor:8334 blocked for more than 145 seconds. [ 571.275537][ T31] Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 [ 571.300035][ T31] Blocked by coredump. [ 571.304649][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 571.319741][ T31] task:syz-executor state:D stack:24104 pid:8334 tgid:8334 ppid:1 task_flags:0x40054c flags:0x00004006 [ 571.341313][ T31] Call Trace: [ 571.344611][ T31] [ 571.347548][ T31] __schedule+0x116a/0x5de0 [ 571.358548][ T31] ? stack_depot_save_flags+0x28/0xa40 [ 571.364241][ T31] ? __lock_acquire+0x622/0x1c90 [ 571.369197][ T31] ? __pfx___schedule+0x10/0x10 [ 571.380139][ T31] ? find_held_lock+0x2b/0x80 [ 571.388192][ T31] ? schedule+0x2d7/0x3a0 [ 571.399809][ T31] schedule+0xe7/0x3a0 [ 571.415452][ T31] schedule_preempt_disabled+0x13/0x30 [ 571.422492][ T31] __mutex_lock+0x6c7/0xb90 [ 571.427029][ T31] ? tun_chr_close+0x38/0x230 [ 571.438881][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 571.444696][ T31] ? locks_remove_file+0x39e/0x5c0 [ 571.455698][ T31] ? __pfx_locks_remove_file+0x10/0x10 [ 571.461780][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 571.466904][ T31] ? tun_chr_close+0x38/0x230 [ 571.479744][ T31] ? rtnl_lock+0x9/0x20 [ 571.487638][ T31] tun_chr_close+0x38/0x230 [ 571.497919][ T31] __fput+0x402/0xb70 [ 571.504066][ T31] task_work_run+0x150/0x240 [ 571.508672][ T31] ? __pfx_task_work_run+0x10/0x10 [ 571.520949][ T31] do_exit+0x86c/0x2bd0 [ 571.525136][ T31] ? __pfx___might_resched+0x10/0x10 [ 571.536617][ T31] ? __pfx_do_exit+0x10/0x10 [ 571.541436][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 571.546467][ T31] ? find_held_lock+0x2b/0x80 [ 571.557443][ T31] do_group_exit+0xd3/0x2a0 [ 571.562265][ T31] get_signal+0x2673/0x26d0 [ 571.566786][ T31] ? dput.part.0+0xce/0x9b0 [ 571.577649][ T31] ? __pfx_get_signal+0x10/0x10 [ 571.584785][ T31] ? path_umount+0x6f7/0x11d0 [ 571.598577][ T31] arch_do_signal_or_restart+0x8f/0x7d0 [ 571.607043][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 571.625460][ T31] ? __x64_sys_umount+0x124/0x1a0 [ 571.636645][ T31] ? __pfx___x64_sys_umount+0x10/0x10 [ 571.642506][ T31] exit_to_user_mode_loop+0x84/0x110 [ 571.647963][ T31] do_syscall_64+0x3f6/0x4c0 [ 571.659012][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.665403][ T31] RIP: 0033:0x7f082a38fc57 [ 571.676153][ T31] RSP: 002b:00007ffd6b532bc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 571.684917][ T31] RAX: 0000000000000000 RBX: 00007f082a410925 RCX: 00007f082a38fc57 [ 571.702235][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd6b532c80 [ 571.714008][ T31] RBP: 00007ffd6b532c80 R08: 0000000000000000 R09: 0000000000000000 [ 571.728513][ T31] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd6b533d10 [ 571.751270][ T31] R13: 00007f082a410925 R14: 0000000000049ed6 R15: 00007ffd6b533d50 [ 571.759301][ T31] [ 571.771434][ T31] INFO: task syz.7.791:8493 blocked for more than 145 seconds. [ 571.779001][ T31] Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 [ 571.790240][ T31] Blocked by coredump. [ 571.804726][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 571.815700][ T31] task:syz.7.791 state:D stack:27672 pid:8493 tgid:8485 ppid:8332 task_flags:0x40044c flags:0x00004006 [ 571.835835][ T31] Call Trace: [ 571.839139][ T31] [ 571.846250][ T31] __schedule+0x116a/0x5de0 [ 571.857162][ T31] ? stack_depot_save_flags+0x28/0xa40 [ 571.866235][ T31] ? __lock_acquire+0x622/0x1c90 [ 571.878695][ T31] ? __pfx___schedule+0x10/0x10 [ 571.885414][ T31] ? find_held_lock+0x2b/0x80 [ 571.897971][ T31] ? schedule+0x2d7/0x3a0 [ 571.908704][ T31] schedule+0xe7/0x3a0 [ 571.917543][ T31] schedule_preempt_disabled+0x13/0x30 [ 571.924747][ T31] __mutex_lock+0x6c7/0xb90 [ 571.929307][ T31] ? tun_chr_close+0x38/0x230 [ 571.943213][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 571.948280][ T31] ? locks_remove_file+0x39e/0x5c0 [ 571.961564][ T31] ? __pfx_locks_remove_file+0x10/0x10 [ 571.967061][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 571.984637][ T31] ? tun_chr_close+0x38/0x230 [ 571.989356][ T31] ? rtnl_lock+0x9/0x20 [ 572.000139][ T31] tun_chr_close+0x38/0x230 [ 572.004676][ T31] __fput+0x402/0xb70 [ 572.008684][ T31] task_work_run+0x150/0x240 [ 572.021795][ T31] ? __pfx_task_work_run+0x10/0x10 [ 572.026948][ T31] do_exit+0x86c/0x2bd0 [ 572.035424][ T31] ? __pfx___might_resched+0x10/0x10 [ 572.042962][ T31] ? __pfx_do_exit+0x10/0x10 [ 572.047621][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 572.058421][ T31] ? find_held_lock+0x2b/0x80 [ 572.068517][ T31] do_group_exit+0xd3/0x2a0 [ 572.078764][ T31] get_signal+0x2673/0x26d0 [ 572.086758][ T31] ? __pfx_do_recvmmsg+0x10/0x10 [ 572.096109][ T31] ? __pfx_get_signal+0x10/0x10 [ 572.106251][ T31] arch_do_signal_or_restart+0x8f/0x7d0 [ 572.116112][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 572.124568][ T31] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 572.134359][ T31] exit_to_user_mode_loop+0x84/0x110 [ 572.139664][ T31] do_syscall_64+0x3f6/0x4c0 [ 572.149435][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.159652][ T31] RIP: 0033:0x7f010178e929 [ 572.167887][ T31] RSP: 002b:00007f010262c038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 572.187000][ T31] RAX: 0000000000010106 RBX: 00007f01019b6240 RCX: 00007f010178e929 [ 572.197337][ T31] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 572.214742][ T31] RBP: 00007f0101810b39 R08: 0000000000000000 R09: 0000000000000000 [ 572.224179][ T31] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 572.237381][ T31] R13: 0000000000000001 R14: 00007f01019b6240 R15: 00007ffc3b4076c8 [ 572.246655][ T31] [ 572.249723][ T31] INFO: task kworker/0:9:8503 blocked for more than 146 seconds. [ 572.264137][ T31] Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 [ 572.278307][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 572.297131][ T31] task:kworker/0:9 state:D stack:28184 pid:8503 tgid:8503 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 572.322789][ T31] Workqueue: events switchdev_deferred_process_work [ 572.329428][ T31] Call Trace: [ 572.343090][ T31] [ 572.346054][ T31] __schedule+0x116a/0x5de0 [ 572.354341][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 572.359312][ T31] ? __pfx___schedule+0x10/0x10 [ 572.367057][ T31] ? find_held_lock+0x2b/0x80 [ 572.375450][ T31] ? schedule+0x2d7/0x3a0 [ 572.379804][ T31] schedule+0xe7/0x3a0 [ 572.389154][ T31] schedule_preempt_disabled+0x13/0x30 [ 572.399514][ T31] __mutex_lock+0x6c7/0xb90 [ 572.424835][ T31] ? switchdev_deferred_process_work+0xe/0x20 [ 572.432822][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 572.437876][ T31] ? debug_object_deactivate+0x1ec/0x3a0 [ 572.448441][ T31] ? finish_task_switch.isra.0+0x221/0xc10 [ 572.456048][ T31] ? switchdev_deferred_process_work+0xe/0x20 [ 572.467288][ T31] switchdev_deferred_process_work+0xe/0x20 [ 572.474985][ T31] process_one_work+0x9cf/0x1b70 [ 572.484825][ T31] ? __pfx_process_one_work+0x10/0x10 [ 572.493488][ T31] ? assign_work+0x1a0/0x250 [ 572.498108][ T31] worker_thread+0x6c8/0xf10 [ 572.513992][ T31] ? __kthread_parkme+0x19e/0x250 [ 572.519062][ T31] ? __pfx_worker_thread+0x10/0x10 [ 572.531863][ T31] kthread+0x3c2/0x780 [ 572.535966][ T31] ? __pfx_kthread+0x10/0x10 [ 572.547826][ T31] ? rcu_is_watching+0x12/0xc0 [ 572.556725][ T31] ? __pfx_kthread+0x10/0x10 [ 572.565629][ T31] ret_from_fork+0x5d4/0x6f0 [ 572.572460][ T31] ? __pfx_kthread+0x10/0x10 [ 572.577065][ T31] ret_from_fork_asm+0x1a/0x30 [ 572.586198][ T31] [ 572.589280][ T31] INFO: task syz-executor:8538 blocked for more than 146 seconds. [ 572.605816][ T31] Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 [ 572.619782][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 572.644820][ T31] task:syz-executor state:D stack:27000 pid:8538 tgid:8538 ppid:1 task_flags:0x400140 flags:0x00004004 [ 572.659561][ T31] Call Trace: [ 572.666596][ T31] [ 572.669545][ T31] __schedule+0x116a/0x5de0 [ 572.676932][ T31] ? ops_init+0x77/0x5f0 [ 572.684905][ T31] ? stack_trace_save+0x8e/0xc0 [ 572.689782][ T31] ? __lock_acquire+0x622/0x1c90 [ 572.700152][ T31] ? __pfx___schedule+0x10/0x10 [ 572.705039][ T31] ? find_held_lock+0x2b/0x80 [ 572.721483][ T31] ? schedule+0x2d7/0x3a0 [ 572.725862][ T31] schedule+0xe7/0x3a0 [ 572.736956][ T31] schedule_preempt_disabled+0x13/0x30 [ 572.744860][ T31] __mutex_lock+0x6c7/0xb90 [ 572.749393][ T31] ? register_netdevice_notifier_net+0x23/0xb0 [ 572.759941][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 572.765003][ T31] ? find_held_lock+0x2b/0x80 [ 572.769686][ T31] ? net_generic+0xea/0x2a0 [ 572.782534][ T31] ? register_netdevice_notifier_net+0x23/0xb0 [ 572.788715][ T31] ? rtnl_lock+0x9/0x20 [ 572.798672][ T31] register_netdevice_notifier_net+0x23/0xb0 [ 572.805594][ T31] ? __pfx_rtnl_net_debug_net_init+0x10/0x10 [ 572.822396][ T31] ops_init+0x1e2/0x5f0 [ 572.826596][ T31] setup_net+0x1ff/0x510 [ 572.838414][ T31] ? lockdep_init_map_type+0x5c/0x280 [ 572.847457][ T31] ? __pfx_setup_net+0x10/0x10 [ 572.861432][ T31] ? debug_mutex_init+0x37/0x70 [ 572.866318][ T31] copy_net_ns+0x2a6/0x5f0 [ 572.877644][ T31] create_new_namespaces+0x3ea/0xa90 [ 572.883326][ T31] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 572.888977][ T31] ksys_unshare+0x45b/0xa40 [ 572.899765][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 572.905041][ T31] ? xfd_validate_state+0x61/0x180 [ 572.916407][ T31] __x64_sys_unshare+0x31/0x40 [ 572.925139][ T31] do_syscall_64+0xcd/0x4c0 [ 572.929678][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.942000][ T31] RIP: 0033:0x7f78e3190127 [ 572.946435][ T31] RSP: 002b:00007fff564e1e68 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 572.967728][ T31] RAX: ffffffffffffffda RBX: 00007f78e33b5f40 RCX: 00007f78e3190127 [ 572.982478][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 572.996453][ T31] RBP: 00007f78e33b6738 R08: 0000000000000000 R09: 0000000000000000 [ 573.007163][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 573.028782][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 573.044678][ T31] [ 573.047767][ T31] INFO: task syz-executor:8542 blocked for more than 146 seconds. [ 573.063993][ T31] Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 [ 573.076268][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 573.093160][ T31] task:syz-executor state:D stack:27000 pid:8542 tgid:8542 ppid:1 task_flags:0x400140 flags:0x00004004 [ 573.108133][ T31] Call Trace: [ 573.115185][ T31] [ 573.118135][ T31] __schedule+0x116a/0x5de0 [ 573.128267][ T31] ? ops_init+0x77/0x5f0 [ 573.136324][ T31] ? stack_trace_save+0x8e/0xc0 [ 573.143938][ T31] ? __lock_acquire+0x622/0x1c90 [ 573.148907][ T31] ? __pfx___schedule+0x10/0x10 [ 573.159074][ T31] ? find_held_lock+0x2b/0x80 [ 573.168167][ T31] ? schedule+0x2d7/0x3a0 [ 573.176313][ T31] schedule+0xe7/0x3a0 [ 573.188290][ T31] schedule_preempt_disabled+0x13/0x30 [ 573.199356][ T31] __mutex_lock+0x6c7/0xb90 [ 573.205731][ T31] ? register_netdevice_notifier_net+0x23/0xb0 [ 573.218328][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 573.228259][ T31] ? find_held_lock+0x2b/0x80 [ 573.237733][ T31] ? net_generic+0xea/0x2a0 [ 573.244035][ T31] ? register_netdevice_notifier_net+0x23/0xb0 [ 573.254961][ T31] ? rtnl_lock+0x9/0x20 [ 573.259140][ T31] register_netdevice_notifier_net+0x23/0xb0 [ 573.268810][ T31] ? __pfx_rtnl_net_debug_net_init+0x10/0x10 [ 573.282721][ T31] ops_init+0x1e2/0x5f0 [ 573.286911][ T31] setup_net+0x1ff/0x510 [ 573.299353][ T31] ? lockdep_init_map_type+0x5c/0x280 [ 573.306152][ T31] ? __pfx_setup_net+0x10/0x10 [ 573.317127][ T31] ? debug_mutex_init+0x37/0x70 [ 573.322286][ T31] copy_net_ns+0x2a6/0x5f0 [ 573.326715][ T31] create_new_namespaces+0x3ea/0xa90 [ 573.342800][ T31] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 573.348475][ T31] ksys_unshare+0x45b/0xa40 [ 573.357829][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 573.364771][ T31] ? xfd_validate_state+0x61/0x180 [ 573.378488][ T31] __x64_sys_unshare+0x31/0x40 [ 573.387434][ T31] do_syscall_64+0xcd/0x4c0 [ 573.396667][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.406682][ T31] RIP: 0033:0x7f5601b90127 [ 573.416937][ T31] RSP: 002b:00007ffd1b06f978 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 573.427278][ T31] RAX: ffffffffffffffda RBX: 00007f5601db5f40 RCX: 00007f5601b90127 [ 573.444589][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 573.453849][ T31] RBP: 00007f5601db6738 R08: 0000000000000000 R09: 0000000000000000 [ 573.467075][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008 [ 573.476340][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 573.491508][ T31] [ 573.497332][ T31] INFO: task syz-executor:8545 blocked for more than 147 seconds. [ 573.517327][ T31] Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 [ 573.527305][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 573.545838][ T31] task:syz-executor state:D stack:27000 pid:8545 tgid:8545 ppid:1 task_flags:0x400140 flags:0x00004004 [ 573.558618][ T31] Call Trace: [ 573.567628][ T31] [ 573.571371][ T31] __schedule+0x116a/0x5de0 [ 573.575888][ T31] ? ops_init+0x77/0x5f0 [ 573.587108][ T31] ? stack_trace_save+0x8e/0xc0 [ 573.594172][ T31] ? __lock_acquire+0x622/0x1c90 [ 573.599142][ T31] ? __pfx___schedule+0x10/0x10 [ 573.609970][ T31] ? find_held_lock+0x2b/0x80 [ 573.614668][ T31] ? schedule+0x2d7/0x3a0 [ 573.619007][ T31] schedule+0xe7/0x3a0 [ 573.637521][ T31] schedule_preempt_disabled+0x13/0x30 [ 573.648677][ T31] __mutex_lock+0x6c7/0xb90 [ 573.655594][ T31] ? register_netdevice_notifier_net+0x23/0xb0 [ 573.667250][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 573.674034][ T31] ? find_held_lock+0x2b/0x80 [ 573.678726][ T31] ? net_generic+0xea/0x2a0 [ 573.688063][ T31] ? register_netdevice_notifier_net+0x23/0xb0 [ 573.695965][ T31] ? rtnl_lock+0x9/0x20 [ 573.706212][ T31] register_netdevice_notifier_net+0x23/0xb0 [ 573.715574][ T31] ? __pfx_rtnl_net_debug_net_init+0x10/0x10 [ 573.726302][ T31] ops_init+0x1e2/0x5f0 [ 573.734529][ T31] setup_net+0x1ff/0x510 [ 573.751443][ T31] ? lockdep_init_map_type+0x5c/0x280 [ 573.756859][ T31] ? __pfx_setup_net+0x10/0x10 [ 573.766462][ T31] ? debug_mutex_init+0x37/0x70 [ 573.773113][ T31] copy_net_ns+0x2a6/0x5f0 [ 573.777545][ T31] create_new_namespaces+0x3ea/0xa90 [ 573.788434][ T31] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 573.795842][ T31] ksys_unshare+0x45b/0xa40 [ 573.805089][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 573.813315][ T31] ? __pfx_fput_close_sync+0x10/0x10 [ 573.818612][ T31] ? dnotify_flush+0x79/0x4c0 [ 573.834363][ T31] __x64_sys_unshare+0x31/0x40 [ 573.839160][ T31] do_syscall_64+0xcd/0x4c0 [ 573.858724][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.865492][ T31] RIP: 0033:0x7f574e790127 [ 573.875861][ T31] RSP: 002b:00007ffe382efb28 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 573.885116][ T31] RAX: ffffffffffffffda RBX: 00007f574e9b5f40 RCX: 00007f574e790127 [ 573.899630][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 573.909006][ T31] RBP: 00007f574e9b6738 R08: 0000000000000000 R09: 0000000000000000 [ 573.921648][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 573.929646][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 573.953164][ T31] [ 573.956260][ T31] INFO: task syz-executor:8548 blocked for more than 147 seconds. [ 573.973612][ T31] Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 [ 573.987724][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 573.999952][ T31] task:syz-executor state:D stack:27000 pid:8548 tgid:8548 ppid:1 task_flags:0x400140 flags:0x00004004 [ 574.018061][ T31] Call Trace: [ 574.021698][ T31] [ 574.024639][ T31] __schedule+0x116a/0x5de0 [ 574.029152][ T31] ? ops_init+0x77/0x5f0 [ 574.043048][ T31] ? stack_trace_save+0x8e/0xc0 [ 574.056608][ T31] ? __lock_acquire+0x622/0x1c90 [ 574.068965][ T31] ? __pfx___schedule+0x10/0x10 [ 574.082582][ T31] ? find_held_lock+0x2b/0x80 [ 574.087300][ T31] ? schedule+0x2d7/0x3a0 [ 574.097702][ T31] schedule+0xe7/0x3a0 [ 574.102933][ T31] schedule_preempt_disabled+0x13/0x30 [ 574.108448][ T31] __mutex_lock+0x6c7/0xb90 [ 574.120620][ T31] ? register_netdevice_notifier_net+0x23/0xb0 [ 574.126801][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 574.137644][ T31] ? find_held_lock+0x2b/0x80 [ 574.144627][ T31] ? net_generic+0xea/0x2a0 [ 574.158619][ T31] ? register_netdevice_notifier_net+0x23/0xb0 [ 574.166374][ T31] ? rtnl_lock+0x9/0x20 [ 574.177066][ T31] register_netdevice_notifier_net+0x23/0xb0 [ 574.188755][ T31] ? __pfx_rtnl_net_debug_net_init+0x10/0x10 [ 574.201084][ T31] ops_init+0x1e2/0x5f0 [ 574.205265][ T31] setup_net+0x1ff/0x510 [ 574.209517][ T31] ? lockdep_init_map_type+0x5c/0x280 [ 574.220447][ T31] ? __pfx_setup_net+0x10/0x10 [ 574.225244][ T31] ? debug_mutex_init+0x37/0x70 [ 574.236221][ T31] copy_net_ns+0x2a6/0x5f0 [ 574.240889][ T31] create_new_namespaces+0x3ea/0xa90 [ 574.246192][ T31] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 574.260690][ T31] ksys_unshare+0x45b/0xa40 [ 574.265234][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 574.278098][ T31] ? xfd_validate_state+0x61/0x180 [ 574.284251][ T31] __x64_sys_unshare+0x31/0x40 [ 574.289033][ T31] do_syscall_64+0xcd/0x4c0 [ 574.302416][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.308330][ T31] RIP: 0033:0x7f6618390127 [ 574.319034][ T31] RSP: 002b:00007ffd35da66d8 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 574.327729][ T31] RAX: ffffffffffffffda RBX: 00007f66185b5f40 RCX: 00007f6618390127 [ 574.340064][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 574.348046][ T31] RBP: 00007f66185b6738 R08: 0000000000000000 R09: 0000000000000000 [ 574.366441][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 574.376574][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 574.394075][ T31] [ 574.397122][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 574.412266][ T31] INFO: task syz-executor:8561 blocked for more than 148 seconds. [ 574.427474][ T31] Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 [ 574.437490][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 574.452606][ T31] task:syz-executor state:D stack:24392 pid:8561 tgid:8561 ppid:1 task_flags:0x400140 flags:0x00004004 [ 574.475449][ T31] Call Trace: [ 574.478762][ T31] [ 574.484439][ T31] __schedule+0x116a/0x5de0 [ 574.488979][ T31] ? __lock_acquire+0x622/0x1c90 [ 574.500640][ T31] ? __pfx___schedule+0x10/0x10 [ 574.505531][ T31] ? find_held_lock+0x2b/0x80 [ 574.518717][ T31] ? schedule+0x2d7/0x3a0 [ 574.523618][ T31] schedule+0xe7/0x3a0 [ 574.527735][ T31] schedule_preempt_disabled+0x13/0x30 [ 574.540522][ T31] __mutex_lock+0x6c7/0xb90 [ 574.545058][ T31] ? device_del+0xa0/0x9f0 [ 574.549487][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 574.564279][ T31] ? mark_held_locks+0x49/0x80 [ 574.569091][ T31] ? device_del+0xa0/0x9f0 [ 574.578162][ T31] device_del+0xa0/0x9f0 [ 574.589515][ T31] ? __pfx_ida_free+0x10/0x10 [ 574.596705][ T31] ? __pfx_device_del+0x10/0x10 [ 574.607021][ T31] device_unregister+0x1d/0xc0 [ 574.614331][ T31] del_device_store+0x355/0x4a0 [ 574.619205][ T31] ? __pfx_del_device_store+0x10/0x10 [ 574.630584][ T31] ? find_held_lock+0x2b/0x80 [ 574.635292][ T31] ? sysfs_file_kobj+0xe4/0x290 [ 574.646046][ T31] ? __pfx_del_device_store+0x10/0x10 [ 574.651708][ T31] bus_attr_store+0x71/0xb0 [ 574.656221][ T31] ? __pfx_bus_attr_store+0x10/0x10 [ 574.669930][ T31] sysfs_kf_write+0xef/0x150 [ 574.674564][ T31] kernfs_fop_write_iter+0x354/0x510 [ 574.686036][ T31] ? __pfx_sysfs_kf_write+0x10/0x10 [ 574.693113][ T31] vfs_write+0x6c4/0x1150 [ 574.697465][ T31] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 574.715262][ T31] ? __pfx_vfs_write+0x10/0x10 [ 574.725588][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 574.734811][ T31] ksys_write+0x12a/0x250 [ 574.739174][ T31] ? __pfx_ksys_write+0x10/0x10 [ 574.750174][ T31] do_syscall_64+0xcd/0x4c0 [ 574.754712][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.770102][ T31] RIP: 0033:0x7fd2ec38d3df [ 574.774538][ T31] RSP: 002b:00007ffc2214c830 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 574.789594][ T31] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fd2ec38d3df [ 574.797836][ T31] RDX: 0000000000000001 RSI: 00007ffc2214c880 RDI: 0000000000000005 [ 574.814483][ T31] RBP: 00007fd2ec411d8d R08: 0000000000000000 R09: 00007ffc2214c687 [ 574.825521][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 574.838517][ T31] R13: 00007ffc2214c880 R14: 00007fd2ed0e4620 R15: 0000000000000003 [ 574.858689][ T31] [ 574.867609][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 574.882971][ T31] INFO: task syz-executor:8570 blocked for more than 148 seconds. [ 574.893987][ T31] Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 [ 574.905567][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 574.918418][ T31] task:syz-executor state:D stack:27800 pid:8570 tgid:8570 ppid:1 task_flags:0x400140 flags:0x00004004 [ 574.939131][ T31] Call Trace: [ 574.943587][ T31] [ 574.946533][ T31] __schedule+0x116a/0x5de0 [ 574.960756][ T31] ? __lock_acquire+0x622/0x1c90 [ 574.965732][ T31] ? __pfx___schedule+0x10/0x10 [ 574.982464][ T31] ? find_held_lock+0x2b/0x80 [ 574.987182][ T31] ? schedule+0x2d7/0x3a0 [ 574.997881][ T31] schedule+0xe7/0x3a0 [ 575.002183][ T31] schedule_preempt_disabled+0x13/0x30 [ 575.007654][ T31] __mutex_lock+0x6c7/0xb90 [ 575.018456][ T31] ? inet_rtm_newaddr+0x30c/0x1540 [ 575.029389][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 575.046819][ T31] ? find_held_lock+0x2b/0x80 [ 575.055376][ T31] ? __nla_parse+0x40/0x60 [ 575.067808][ T31] ? inet_rtm_newaddr+0x30c/0x1540 [ 575.076778][ T31] inet_rtm_newaddr+0x30c/0x1540 [ 575.087670][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 575.093908][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 575.099298][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 575.109948][ T31] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 575.115103][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 575.129202][ T31] rtnetlink_rcv_msg+0x95e/0xe90 [ 575.135970][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 575.148574][ T31] ? __lock_acquire+0x622/0x1c90 [ 575.155264][ T31] netlink_rcv_skb+0x155/0x420 [ 575.167018][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 575.178073][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 575.190682][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 575.196005][ T31] ? is_vmalloc_addr+0x86/0xa0 [ 575.206627][ T31] netlink_unicast+0x53d/0x7f0 [ 575.212194][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 575.217497][ T31] netlink_sendmsg+0x8d1/0xdd0 [ 575.228031][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 575.234132][ T31] __sys_sendto+0x4a3/0x520 [ 575.238650][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 575.250807][ T31] ? find_held_lock+0x2b/0x80 [ 575.255533][ T31] __x64_sys_sendto+0xe0/0x1c0 [ 575.268115][ T31] ? do_syscall_64+0x91/0x4c0 [ 575.277215][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 575.292458][ T31] do_syscall_64+0xcd/0x4c0 [ 575.297004][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.309056][ T31] RIP: 0033:0x7fdd39b907bc [ 575.313733][ T31] RSP: 002b:00007ffc1c32e190 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 575.328385][ T31] RAX: ffffffffffffffda RBX: 00007fdd3a8e4620 RCX: 00007fdd39b907bc [ 575.336664][ T31] RDX: 0000000000000028 RSI: 00007fdd3a8e4670 RDI: 0000000000000003 [ 575.351428][ T31] RBP: 0000000000000000 R08: 00007ffc1c32e1e4 R09: 000000000000000c [ 575.359419][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 575.379286][ T31] R13: 0000000000000000 R14: 00007fdd3a8e4670 R15: 0000000000000000 [ 575.399078][ T31] [ 575.403875][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 575.418194][ T31] INFO: task syz-executor:8573 blocked for more than 149 seconds. [ 575.428222][ T31] Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 [ 575.443014][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 575.455437][ T31] task:syz-executor state:D stack:27480 pid:8573 tgid:8573 ppid:1 task_flags:0x400140 flags:0x00004004 [ 575.475252][ T31] Call Trace: [ 575.484005][ T31] [ 575.486963][ T31] __schedule+0x116a/0x5de0 [ 575.498888][ T31] ? __lock_acquire+0x622/0x1c90 [ 575.507597][ T31] ? __pfx___schedule+0x10/0x10 [ 575.518161][ T31] ? find_held_lock+0x2b/0x80 [ 575.523907][ T31] ? schedule+0x2d7/0x3a0 [ 575.528260][ T31] schedule+0xe7/0x3a0 [ 575.538124][ T31] schedule_preempt_disabled+0x13/0x30 [ 575.544287][ T31] __mutex_lock+0x6c7/0xb90 [ 575.548810][ T31] ? inet_rtm_newaddr+0x30c/0x1540 [ 575.559722][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 575.565574][ T31] ? find_held_lock+0x2b/0x80 [ 575.577584][ T31] ? __nla_parse+0x40/0x60 [ 575.586157][ T31] ? inet_rtm_newaddr+0x30c/0x1540 [ 575.603338][ T31] inet_rtm_newaddr+0x30c/0x1540 [ 575.608320][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 575.622395][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 575.627816][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 575.637590][ T31] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 575.645966][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 575.654605][ T31] rtnetlink_rcv_msg+0x95e/0xe90 [ 575.659571][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 575.668489][ T31] ? __lock_acquire+0x622/0x1c90 [ 575.676652][ T31] netlink_rcv_skb+0x155/0x420 [ 575.689436][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 575.698206][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 575.714515][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 575.725425][ T31] ? is_vmalloc_addr+0x86/0xa0 [ 575.733483][ T31] netlink_unicast+0x53d/0x7f0 [ 575.738271][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 575.748050][ T31] netlink_sendmsg+0x8d1/0xdd0 [ 575.756071][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 575.764650][ T31] __sys_sendto+0x4a3/0x520 [ 575.769174][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 575.777566][ T31] ? find_held_lock+0x2b/0x80 [ 575.788533][ T31] __x64_sys_sendto+0xe0/0x1c0 [ 575.798159][ T31] ? do_syscall_64+0x91/0x4c0 [ 575.806890][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 575.819256][ T31] do_syscall_64+0xcd/0x4c0 [ 575.828941][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.844150][ T31] RIP: 0033:0x7fcca0b907bc [ 575.848583][ T31] RSP: 002b:00007ffd20647ea0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 575.863723][ T31] RAX: ffffffffffffffda RBX: 00007fcca18e4620 RCX: 00007fcca0b907bc [ 575.873998][ T31] RDX: 0000000000000028 RSI: 00007fcca18e4670 RDI: 0000000000000003 [ 575.886200][ T31] RBP: 0000000000000000 R08: 00007ffd20647ef4 R09: 000000000000000c [ 575.902201][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 575.919732][ T31] R13: 0000000000000000 R14: 00007fcca18e4670 R15: 0000000000000000 [ 575.929675][ T31] [ 575.939676][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 575.960279][ T31] INFO: task syz-executor:8579 blocked for more than 149 seconds. [ 575.968100][ T31] Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 [ 575.983664][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 575.997449][ T31] task:syz-executor state:D stack:27000 pid:8579 tgid:8579 ppid:1 task_flags:0x400140 flags:0x00004006 [ 576.013746][ T31] Call Trace: [ 576.017068][ T31] [ 576.025542][ T31] __schedule+0x116a/0x5de0 [ 576.035899][ T31] ? __lock_acquire+0x622/0x1c90 [ 576.043910][ T31] ? __pfx___schedule+0x10/0x10 [ 576.048793][ T31] ? find_held_lock+0x2b/0x80 [ 576.058619][ T31] ? schedule+0x2d7/0x3a0 [ 576.071198][ T31] schedule+0xe7/0x3a0 [ 576.075298][ T31] schedule_preempt_disabled+0x13/0x30 [ 576.089617][ T31] __mutex_lock+0x6c7/0xb90 [ 576.097336][ T31] ? ib_get_eth_speed+0x117/0xb50 [ 576.108588][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 576.113862][ T31] ? ib_device_get_netdev+0x263/0x360 [ 576.119248][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 576.132351][ T31] ? ib_get_eth_speed+0x117/0xb50 [ 576.137403][ T31] ? rtnl_lock+0x9/0x20 [ 576.151766][ T31] ib_get_eth_speed+0x117/0xb50 [ 576.156651][ T31] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 576.168827][ T31] ? ref_tracker_free+0x37c/0x830 [ 576.175677][ T31] siw_query_port+0x3c/0x4e0 [ 576.186900][ T31] ib_query_port+0x3d5/0x8a0 [ 576.191796][ T31] ib_setup_port_attrs+0x1d7/0x600 [ 576.206252][ T31] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 576.212354][ T31] ? __init_waitqueue_head+0xca/0x150 [ 576.217749][ T31] add_one_compat_dev+0x558/0x7d0 [ 576.229537][ T31] rdma_dev_init_net+0x2b1/0x530 [ 576.236862][ T31] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 576.252415][ T31] ? trace_kmalloc+0x2b/0xd0 [ 576.257043][ T31] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 576.269276][ T31] ops_init+0x1e2/0x5f0 [ 576.274403][ T31] setup_net+0x1ff/0x510 [ 576.278664][ T31] ? lockdep_init_map_type+0x5c/0x280 [ 576.290525][ T31] ? __pfx_setup_net+0x10/0x10 [ 576.295319][ T31] ? debug_mutex_init+0x37/0x70 [ 576.310390][ T31] copy_net_ns+0x2a6/0x5f0 [ 576.314836][ T31] create_new_namespaces+0x3ea/0xa90 [ 576.325977][ T31] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 576.332419][ T31] ksys_unshare+0x45b/0xa40 [ 576.336943][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 576.347904][ T31] ? __pfx_fput_close_sync+0x10/0x10 [ 576.357929][ T31] ? dnotify_flush+0x79/0x4c0 [ 576.371302][ T31] __x64_sys_unshare+0x31/0x40 [ 576.376101][ T31] do_syscall_64+0xcd/0x4c0 [ 576.387963][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.396227][ T31] RIP: 0033:0x7fd39b390127 [ 576.411175][ T31] RSP: 002b:00007ffc19009558 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 576.419614][ T31] RAX: ffffffffffffffda RBX: 00007fd39b5b5f40 RCX: 00007fd39b390127 [ 576.433488][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 576.444572][ T31] RBP: 00007fd39b5b6738 R08: 0000000000000000 R09: 0000000000000000 [ 576.456306][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008 [ 576.471547][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 576.479556][ T31] [ 576.493230][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 576.511205][ T31] [ 576.511205][ T31] Showing all locks held in the system: [ 576.518941][ T31] 1 lock held by khungtaskd/31: [ 576.530648][ T31] #0: ffffffff8e5c4940 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 576.546311][ T31] 2 locks held by kworker/1:1/43: [ 576.552099][ T31] 3 locks held by kworker/u8:3/49: [ 576.557211][ T31] #0: ffff88801b881148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 576.576861][ T31] #1: ffffc90000b97d10 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 576.595750][ T31] #2: ffffffff9034cc68 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 576.609402][ T31] 6 locks held by kworker/u8:7/2942: [ 576.626769][ T31] #0: ffff88801c6f3948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 576.643503][ T31] #1: ffffc9000bbb7d10 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 576.655775][ T31] #2: ffffffff90336c10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x890 [ 576.669358][ T31] #3: ffff8880564160e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x12c/0x2b0 [ 576.688384][ T31] #4: ffff888056417250 (&devlink->lock_key#4){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x136/0x2b0 [ 576.701122][ T31] #5: ffffffff9034cc68 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x146/0x360 [ 576.722301][ T31] 2 locks held by getty/5575: [ 576.727013][ T31] #0: ffff88814d4a80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 576.746037][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 576.759015][ T31] 2 locks held by kworker/1:3/5816: [ 576.767937][ T31] 3 locks held by kworker/1:4/5878: [ 576.775912][ T31] 3 locks held by kworker/u8:15/6175: [ 576.785874][ T31] #0: ffff88814beff948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 576.800002][ T31] #1: ffffc9000b927d10 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 576.826630][ T31] #2: ffffffff9034cc68 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x120/0x14e0 [ 576.843965][ T31] 1 lock held by syz-executor/8334: [ 576.849179][ T31] #0: ffffffff9034cc68 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 576.865205][ T31] 1 lock held by syz.9.790/8486: [ 576.871021][ T31] 1 lock held by syz.7.791/8493: [ 576.875957][ T31] #0: ffffffff9034cc68 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 576.889941][ T31] 2 locks held by kworker/1:8/8490: [ 576.895144][ T31] 3 locks held by kworker/0:9/8503: [ 576.908775][ T31] #0: ffff88801b878d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 576.922504][ T31] #1: ffffc90002fb7d10 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 576.942357][ T31] #2: ffffffff9034cc68 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 576.963006][ T31] 5 locks held by kworker/1:13/8526: [ 576.968305][ T31] 2 locks held by syz-executor/8538: [ 576.976952][ T31] #0: ffffffff90336c10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 576.989584][ T31] #1: ffffffff9034cc68 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x23/0xb0 [ 577.007215][ T31] 2 locks held by syz-executor/8542: [ 577.017393][ T31] #0: ffffffff90336c10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 577.034219][ T31] #1: ffffffff9034cc68 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x23/0xb0 [ 577.054018][ T31] 2 locks held by syz-executor/8545: [ 577.059314][ T31] #0: ffffffff90336c10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 577.079474][ T31] #1: ffffffff9034cc68 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x23/0xb0 [ 577.096363][ T31] 2 locks held by syz-executor/8548: [ 577.119307][ T31] #0: ffffffff90336c10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 577.136620][ T31] #1: ffffffff9034cc68 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x23/0xb0 [ 577.148065][ T31] 2 locks held by kworker/1:14/8552: [ 577.160123][ T31] 5 locks held by syz-executor/8561: [ 577.165424][ T31] #0: ffff88807aa2a428 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 577.189622][ T31] #1: ffff888056674088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 577.205733][ T31] #2: ffff8880262381e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 577.216056][ T31] #3: ffffffff8f8e95c8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 577.237123][ T31] #4: ffff8880564160e8 (&dev->mutex){....}-{4:4}, at: device_del+0xa0/0x9f0 [ 577.246259][ T31] 1 lock held by syz-executor/8570: [ 577.258392][ T31] #0: ffffffff9034cc68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 577.277344][ T31] 1 lock held by syz-executor/8573: [ 577.285091][ T31] #0: ffffffff9034cc68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 577.302686][ T31] 4 locks held by syz-executor/8577: [ 577.307982][ T31] #0: ffff88807aa2a428 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 577.320022][ T31] #1: ffff888032395888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 577.338877][ T31] #2: ffff8880262381e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 577.360957][ T31] #3: ffffffff8f8e95c8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 577.382437][ T31] 5 locks held by syz-executor/8579: [ 577.387748][ T31] #0: ffffffff90336c10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 577.406355][ T31] #1: ffffffff8ff829b0 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x233/0x530 [ 577.427038][ T31] #2: ffffffff8ff82730 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x2a6/0x530 [ 577.438763][ T31] #3: ffff88807a848f60 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0x112/0x7d0 [ 577.456081][ T31] #4: ffffffff9034cc68 (rtnl_mutex){+.+.}-{4:4}, at: ib_get_eth_speed+0x117/0xb50 [ 577.466435][ T31] 4 locks held by syz-executor/8595: [ 577.478951][ T31] #0: ffffffff90336c10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 577.498536][ T31] #1: ffffffff8ff829b0 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x233/0x530 [ 577.509321][ T31] #2: ffffffff8ff82730 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x2a6/0x530 [ 577.529086][ T31] #3: ffff88807a848f60 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0x112/0x7d0 [ 577.546871][ T31] 4 locks held by syz-executor/8602: [ 577.552385][ T31] #0: ffffffff90336c10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 577.568080][ T31] #1: ffffffff8ff829b0 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x233/0x530 [ 577.578777][ T31] #2: ffffffff8ff82730 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x2a6/0x530 [ 577.603515][ T31] #3: ffff88807a848f60 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0x112/0x7d0 [ 577.620839][ T31] 2 locks held by syz-executor/8605: [ 577.626137][ T31] #0: ffffffff90336c10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 577.646984][ T31] #1: ffffffff9034cc68 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x1b/0x70 [ 577.657305][ T31] 2 locks held by syz-executor/8604: [ 577.669184][ T31] #0: ffffffff90336c10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 577.679586][ T31] #1: ffffffff9034cc68 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x1b/0x70 [ 577.696550][ T31] 4 locks held by syz-executor/8608: [ 577.703487][ T31] #0: ffffffff90336c10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 577.722495][ T31] #1: ffffffff8ff829b0 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x233/0x530 [ 577.748313][ T31] #2: ffffffff8ff82730 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x2a6/0x530 [ 577.762982][ T31] #3: ffff88807a848f60 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0x112/0x7d0 [ 577.776822][ T31] 4 locks held by syz-executor/8618: [ 577.785785][ T31] #0: ffffffff90336c10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 577.798011][ T31] #1: ffffffff8ff829b0 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x233/0x530 [ 577.812377][ T31] #2: ffffffff8ff82730 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x2a6/0x530 [ 577.831627][ T31] #3: ffff88807a848f60 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0x112/0x7d0 [ 577.853645][ T31] 4 locks held by syz-executor/8625: [ 577.858953][ T31] #0: ffffffff90336c10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 577.878115][ T31] #1: ffffffff8ff829b0 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x233/0x530 [ 577.888062][ T31] #2: ffffffff8ff82730 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x2a6/0x530 [ 577.904261][ T31] #3: ffff88807a848f60 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0x112/0x7d0 [ 577.917935][ T31] 4 locks held by syz-executor/8627: [ 577.929438][ T31] #0: ffffffff90336c10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 577.948457][ T31] #1: ffffffff8ff829b0 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x233/0x530 [ 577.966399][ T31] #2: ffffffff8ff82730 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x2a6/0x530 [ 577.977518][ T31] #3: ffff88807a848f60 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0x112/0x7d0 [ 577.997181][ T31] 4 locks held by syz-executor/8630: [ 578.002773][ T31] #0: ffffffff90336c10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 578.018335][ T31] #1: ffffffff8ff829b0 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x233/0x530 [ 578.029722][ T31] #2: ffffffff8ff82730 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x2a6/0x530 [ 578.052340][ T31] #3: ffff88807a848f60 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0x112/0x7d0 [ 578.073826][ T31] 4 locks held by syz-executor/8632: [ 578.079309][ T31] #0: ffffffff90336c10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 578.095283][ T31] #1: ffffffff8ff829b0 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x233/0x530 [ 578.105280][ T31] #2: ffffffff8ff82730 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x2a6/0x530 [ 578.121504][ T31] #3: ffff88807a848f60 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0x112/0x7d0 [ 578.137932][ T31] [ 578.149474][ T31] ============================================= [ 578.149474][ T31] [ 578.168883][ T31] NMI backtrace for cpu 0 [ 578.168896][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 578.168918][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 578.168928][ T31] Call Trace: [ 578.168934][ T31] [ 578.168939][ T31] dump_stack_lvl+0x116/0x1f0 [ 578.168970][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 578.168990][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 578.169014][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 578.169036][ T31] watchdog+0xf70/0x12c0 [ 578.169061][ T31] ? __pfx_watchdog+0x10/0x10 [ 578.169078][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 578.169110][ T31] ? __kthread_parkme+0x19e/0x250 [ 578.169135][ T31] ? __pfx_watchdog+0x10/0x10 [ 578.169153][ T31] kthread+0x3c2/0x780 [ 578.169168][ T31] ? __pfx_kthread+0x10/0x10 [ 578.169190][ T31] ? rcu_is_watching+0x12/0xc0 [ 578.169211][ T31] ? __pfx_kthread+0x10/0x10 [ 578.169228][ T31] ret_from_fork+0x5d4/0x6f0 [ 578.169252][ T31] ? __pfx_kthread+0x10/0x10 [ 578.169268][ T31] ret_from_fork_asm+0x1a/0x30 [ 578.169297][ T31] [ 578.169303][ T31] Sending NMI from CPU 0 to CPUs 1: [ 578.290035][ C1] NMI backtrace for cpu 1 [ 578.290049][ C1] CPU: 1 UID: 0 PID: 8526 Comm: kworker/1:13 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 578.290068][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 578.290078][ C1] Workqueue: wg-kex-wg2 wg_packet_handshake_receive_worker [ 578.290100][ C1] RIP: 0010:check_preemption_disabled+0x0/0xe0 [ 578.290125][ C1] Code: c0 75 0f 65 8b 05 bc 2a 4c 08 85 c0 74 04 90 0f 0b 90 e9 53 fc ff ff 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <41> 54 55 53 48 83 ec 08 65 8b 1d 35 ec 4b 08 65 8b 05 2a ec 4b 08 [ 578.290139][ C1] RSP: 0018:ffffc90000a08520 EFLAGS: 00000002 [ 578.290150][ C1] RAX: 0000000000000001 RBX: ffffffff895e83b0 RCX: ffffffff81c3f20f [ 578.290160][ C1] RDX: 0000000000000000 RSI: ffffffff8c157d20 RDI: ffffffff8c157d60 [ 578.290169][ C1] RBP: ffff88809f474d50 R08: 0000000000000000 R09: fffffbfff215030a [ 578.290178][ C1] R10: ffffffff90a81857 R11: 0000000000002c00 R12: 0000000000000000 [ 578.290187][ C1] R13: 0000000000000200 R14: ffff888031b95b40 R15: ffffc90000a08658 [ 578.290197][ C1] FS: 0000000000000000(0000) GS:ffff888124852000(0000) knlGS:0000000000000000 [ 578.290212][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 578.290222][ C1] CR2: 00007f6dc6255020 CR3: 000000000e382000 CR4: 00000000003526f0 [ 578.290231][ C1] Call Trace: [ 578.290236][ C1] [ 578.290241][ C1] __call_rcu_common.constprop.0+0xbb/0xa10 [ 578.290256][ C1] ? percpu_counter_add_batch+0xb8/0x1f0 [ 578.290276][ C1] dst_release+0x266/0x340 [ 578.290293][ C1] skb_release_head_state+0x234/0x290 [ 578.290313][ C1] consume_skb+0x85/0x100 [ 578.290334][ C1] nft_synproxy_do_eval+0xa6b/0xd80 [ 578.290353][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 578.290368][ C1] ? blake2s_compress+0x7f/0xe0 [ 578.290381][ C1] ? blake2s_update+0xef/0x360 [ 578.290397][ C1] ? hmac.constprop.0+0x32a/0x420 [ 578.290415][ C1] ? wg_noise_handshake_create_response+0x448/0x640 [ 578.290435][ C1] ? wg_packet_handshake_receive_worker+0x17f/0x3a0 [ 578.290450][ C1] ? process_one_work+0x9cf/0x1b70 [ 578.290464][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 578.290481][ C1] ? __pfx_nft_synproxy_eval+0x10/0x10 [ 578.290497][ C1] nft_do_chain+0x2e6/0x1920 [ 578.290514][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 578.290528][ C1] ? mark_held_locks+0x49/0x80 [ 578.290548][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 578.290568][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 578.290585][ C1] ? ipt_do_table+0xd48/0x1ae0 [ 578.290608][ C1] nft_do_chain_inet+0x18a/0x340 [ 578.290623][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 578.290638][ C1] ? __pfx_ipt_do_table+0x10/0x10 [ 578.290655][ C1] ? __pfx_iptable_mangle_hook+0x10/0x10 [ 578.290672][ C1] ? nf_nat_ipv4_local_in+0x181/0x720 [ 578.290691][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 578.290705][ C1] nf_hook_slow+0xbb/0x200 [ 578.290726][ C1] nf_hook.constprop.0+0x422/0x750 [ 578.290746][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 578.290767][ C1] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 578.290786][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 578.290808][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 578.290831][ C1] ip_local_deliver+0x169/0x1f0 [ 578.290850][ C1] ? __pfx_ip_local_deliver+0x10/0x10 [ 578.290869][ C1] ip_rcv+0x2c3/0x5d0 [ 578.290888][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 578.290906][ C1] __netif_receive_skb_one_core+0x197/0x1e0 [ 578.290924][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 578.290942][ C1] ? lock_acquire+0x179/0x350 [ 578.290964][ C1] ? process_backlog+0x3f0/0x15e0 [ 578.290985][ C1] __netif_receive_skb+0x1d/0x160 [ 578.291001][ C1] process_backlog+0x442/0x15e0 [ 578.291020][ C1] __napi_poll.constprop.0+0xba/0x550 [ 578.291039][ C1] net_rx_action+0xa9f/0xfe0 [ 578.291059][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 578.291076][ C1] ? find_held_lock+0x2b/0x80 [ 578.291091][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 578.291108][ C1] ? sched_clock+0x38/0x60 [ 578.291124][ C1] ? sched_clock_cpu+0x6c/0x530 [ 578.291147][ C1] ? mark_held_locks+0x49/0x80 [ 578.291173][ C1] handle_softirqs+0x219/0x8e0 [ 578.291191][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 578.291207][ C1] ? kernel_fpu_end+0x59/0x70 [ 578.291220][ C1] do_softirq+0xb2/0xf0 [ 578.291235][ C1] [ 578.291239][ C1] [ 578.291244][ C1] __local_bh_enable_ip+0x100/0x120 [ 578.291259][ C1] kernel_fpu_end+0x5e/0x70 [ 578.291272][ C1] blake2s_compress+0x7f/0xe0 [ 578.291285][ C1] blake2s_update+0xef/0x360 [ 578.291303][ C1] hmac.constprop.0+0x32a/0x420 [ 578.291322][ C1] ? __pfx_hmac.constprop.0+0x10/0x10 [ 578.291344][ C1] ? kdf.constprop.0+0x223/0x280 [ 578.291363][ C1] ? __pfx_curve25519_arch+0x10/0x10 [ 578.291380][ C1] kdf.constprop.0+0x1f2/0x280 [ 578.291398][ C1] ? __pfx_kdf.constprop.0+0x10/0x10 [ 578.291415][ C1] ? __crypto_memneq+0x203/0x430 [ 578.291431][ C1] ? mix_dh+0xf7/0x150 [ 578.291447][ C1] ? mix_dh+0x103/0x150 [ 578.291467][ C1] wg_noise_handshake_create_response+0x448/0x640 [ 578.291488][ C1] ? __pfx_wg_noise_handshake_create_response+0x10/0x10 [ 578.291511][ C1] ? ktime_get_coarse_with_offset+0x1af/0x240 [ 578.291530][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 578.291548][ C1] ? ktime_get_coarse_with_offset+0x1c1/0x240 [ 578.291566][ C1] ? ktime_get_coarse_with_offset+0x150/0x240 [ 578.291586][ C1] wg_packet_send_handshake_response+0xe0/0x310 [ 578.291601][ C1] ? wg_socket_set_peer_endpoint+0x5f6/0xbd0 [ 578.291616][ C1] ? __pfx_wg_packet_send_handshake_response+0x10/0x10 [ 578.291638][ C1] wg_receive_handshake_packet+0x247/0xbf0 [ 578.291653][ C1] ? __pfx_wg_receive_handshake_packet+0x10/0x10 [ 578.291671][ C1] ? __local_bh_enable_ip+0xa4/0x120 [ 578.291687][ C1] wg_packet_handshake_receive_worker+0x17f/0x3a0 [ 578.291706][ C1] process_one_work+0x9cf/0x1b70 [ 578.291722][ C1] ? __pfx_wg_packet_decrypt_worker+0x10/0x10 [ 578.291738][ C1] ? __pfx_process_one_work+0x10/0x10 [ 578.291754][ C1] ? assign_work+0x1a0/0x250 [ 578.291775][ C1] worker_thread+0x6c8/0xf10 [ 578.291790][ C1] ? __kthread_parkme+0x19e/0x250 [ 578.291809][ C1] ? __pfx_worker_thread+0x10/0x10 [ 578.291822][ C1] kthread+0x3c2/0x780 [ 578.291835][ C1] ? __pfx_kthread+0x10/0x10 [ 578.291847][ C1] ? rcu_is_watching+0x12/0xc0 [ 578.291864][ C1] ? __pfx_kthread+0x10/0x10 [ 578.291876][ C1] ret_from_fork+0x5d4/0x6f0 [ 578.291893][ C1] ? __pfx_kthread+0x10/0x10 [ 578.291905][ C1] ret_from_fork_asm+0x1a/0x30 [ 578.291923][ C1] [ 578.976974][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 578.983851][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 578.995656][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 579.005710][ T31] Call Trace: [ 579.008991][ T31] [ 579.011920][ T31] dump_stack_lvl+0x3d/0x1f0 [ 579.016521][ T31] panic+0x71c/0x800 [ 579.020423][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 579.026317][ T31] ? __pfx_panic+0x10/0x10 [ 579.030736][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 579.036112][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 579.042094][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 579.047469][ T31] ? watchdog+0xdda/0x12c0 [ 579.051896][ T31] ? watchdog+0xdcd/0x12c0 [ 579.056329][ T31] watchdog+0xdeb/0x12c0 [ 579.060586][ T31] ? __pfx_watchdog+0x10/0x10 [ 579.065266][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 579.070476][ T31] ? __kthread_parkme+0x19e/0x250 [ 579.075508][ T31] ? __pfx_watchdog+0x10/0x10 [ 579.080189][ T31] kthread+0x3c2/0x780 [ 579.084260][ T31] ? __pfx_kthread+0x10/0x10 [ 579.088849][ T31] ? rcu_is_watching+0x12/0xc0 [ 579.093616][ T31] ? __pfx_kthread+0x10/0x10 [ 579.098206][ T31] ret_from_fork+0x5d4/0x6f0 [ 579.102800][ T31] ? __pfx_kthread+0x10/0x10 [ 579.107387][ T31] ret_from_fork_asm+0x1a/0x30 [ 579.112162][ T31] [ 579.115369][ T31] Kernel Offset: disabled [ 579.119670][ T31] Rebooting in 86400 seconds..