last executing test programs: 21m9.428403726s ago: executing program 32 (id=555): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x65) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000080)={{0x1, 0x1, 0x1, 0x1}, 'syz1\x00', 0x1}) r1 = syz_open_procfs(0x0, 0x0) r2 = openat(r1, &(0x7f0000000280)='auth.unix.ip/channel\x00', 0x2, 0x1d0) write(r2, &(0x7f00000002c0)='n\\ 127.0.0.1 2\\0000000\\0l\\calhost\n', 0x24) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0xffffffffffffffbd, &(0x7f00000003c0)=0xd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000400)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0) read$msr(r6, &(0x7f0000000480)=""/102392, 0x18ff8) ptrace$setregset(0x4205, r5, 0x6, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000019480)='/proc/asound/seq/clients\x00', 0x0, 0x0) readv(r7, &(0x7f00000194c0)=[{&(0x7f0000019500)=""/4103, 0x1007}], 0x1) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_ENCODED_WRITE(r2, 0x40809440, &(0x7f000001a540)={&(0x7f000001a5c0)=[{&(0x7f000001a600)="8e3bac52f88b20678e4c6c002f0e953e", 0x10}, {&(0x7f000001a640)="dbe02609f164733567c3bc666543399a8bb137f71065f1b0b244b5d518f2503846a6314747f7c83804c93a4fc8c140aea72dfbdecf17defa", 0x38}, {&(0x7f000001a680)="3475ee57d337c5e9db0daf4d496b709dff25ca7fea60212b5e0704889934c2364836ae8d63ff9ce254675b03496edd6fae7811514988828d2367c5bb5bc015cea05d4d492650fd6d1fbc1c116432c230f13d99e5610615122cbc5b8c5cfd87b7959e683167d48d819d036b69514d22fff1184261892f16312e081561ef784706ee22016de8ba5de97acf48bdc53661dc7746eff6cf75e4da198646e77e9d362a8962308ffb558f2c6244d5aefc5683edb8ffbe3b2b9a73a62f7e78fd278015b2694e093ced672f107ac00f562365a57823a0c1062aa9d1f2953eab3e", 0xdc}], 0x3, 0x6c, 0x0, 0x8, 0x80000001, 0x8000000000000000, 0x5, 0x2}) getsockopt$IP_VS_SO_GET_DESTS(r8, 0x0, 0x484, &(0x7f000001a780)=""/172, &(0x7f000001a840)=0xac) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000001a8c0)={0x0, 0x0, &(0x7f000001a900)={0x0}, 0x1, 0x0, 0x0, 0x4004040}, 0x4040000) 10m13.774417997s ago: executing program 33 (id=1389): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xe0881) syz_io_uring_setup(0x2518, &(0x7f0000000980)={0x0, 0x69ec, 0xc00, 0x5, 0x50}, &(0x7f0000000040), &(0x7f0000000a40), &(0x7f0000000a80)) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000005c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000600)=0x5) r2 = getpgid(r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000680), 0x0, 0x0) read$msr(r5, &(0x7f0000000b40)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x47, &(0x7f0000019b40)=0x7) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000019b80)={'sit0\x00', {0x2, 0x4e22, @empty}}) ioctl$sock_SIOCSPGRP(r6, 0x8902, &(0x7f0000019bc0)=r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/bus/pci/00/00.0\x00', 0x12d) mount(0x0, &(0x7f0000019c40)='./proc\x00', &(0x7f0000019c80)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000019cc0)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000019d00)={0x9, 0x6f, 0x1}, 0x9) unshare(0x64000600) bind$bt_l2cap(r0, &(0x7f0000000200)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'syzkaller0\x00'}) 2m26.692628287s ago: executing program 34 (id=2447): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x80) 2m21.476602822s ago: executing program 35 (id=2462): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000002700)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000002780)={0x6c, 0x2, 0x6, 0x301, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4840}, 0x0) 2m18.522878212s ago: executing program 36 (id=2473): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f000000c740)={0x0, 0x0, &(0x7f000000c700)={&(0x7f00000047c0)={0x14, 0x0, 0x6, 0x401, 0x70bd29, 0x25dfdbfe, {0x5, 0x0, 0x8}}, 0x14}}, 0xc010) 1m32.959558352s ago: executing program 37 (id=2583): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) 1m29.653631042s ago: executing program 2 (id=2648): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/110, 0x6e}], 0x1, 0xa3d5, 0x2) 1m28.992432984s ago: executing program 9 (id=2654): r0 = creat(&(0x7f0000000140)='./bus\x00', 0x1) ioctl$FS_IOC_SETFLAGS(r0, 0x40046602, &(0x7f0000000180)=0x80) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000200)=0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f0000000280)=@filename='mtd0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000340)='./file0\x00') r1 = socket$netlink(0x10, 0x3, 0xc) mknodat$loop(r0, 0x0, 0xc000, 0x0) bind$netlink(r1, 0x0, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000e80)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000f00)='./file1/file2\x00', 0x1000, 0x0) r3 = landlock_create_ruleset(0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000f80)='./file0\x00', 0x202000, 0x13b) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000001040)='./file0\x00', 0x2) poll(&(0x7f0000000e00)=[{r2, 0x8010}], 0x1, 0x1ff) sendmsg$IPCTNL_MSG_CT_NEW(r1, 0x0, 0x0) creat(&(0x7f0000000440)='./file0\x00', 0x40) r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) dup(r4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b00), 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x3, 0x18, &(0x7f0000000c00)=ANY=[@ANYBLOB="180200000000000000000000a8ea0000b7080000000000007b8af8ff00000000b7080000000200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32, @ANYBLOB], &(0x7f0000000cc0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d00)={r5, 0x0, 0xe, 0x0, &(0x7f0000000d80)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000080)=0xb0000) 1m28.059302496s ago: executing program 9 (id=2655): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, 0x0, 0x8, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x20000}, 0x40000) 1m27.930731744s ago: executing program 9 (id=2656): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r0, 0x29, 0xcd, 0x0, 0x0) 1m27.89455208s ago: executing program 9 (id=2658): r0 = syz_open_dev$loop(&(0x7f0000000580), 0x6, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x80081280, &(0x7f0000001c80)) 1m27.833719687s ago: executing program 9 (id=2659): r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0xffffffff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000240)={0x0, 0x30314142, 0x3, @discrete={0x7, 0x12}}) 1m27.742695197s ago: executing program 9 (id=2660): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x37324123}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0) 1m26.205191137s ago: executing program 2 (id=2665): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={0x24, 0x2f, 0x107, 0x0, 0x25dfdbfd, {0x4, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x12}]}, @nested={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x3}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c011}, 0xc010) 1m26.06378117s ago: executing program 2 (id=2666): r0 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x0) 1m26.012110774s ago: executing program 2 (id=2667): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000540), 0x1) keyctl$revoke(0x3, 0x0) mkdir(&(0x7f0000000440)='./sys_mount\x00', 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000480), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x14, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{r3}, &(0x7f0000000a00), &(0x7f0000000a40)=r4}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) mount(0x0, &(0x7f00000004c0)='./sys_mount\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000006c0)='fd/3\x00') r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys_mount/block/nullb0/queue/scheduler\x00', 0x2, 0x0) pread64(r5, &(0x7f00000007c0), 0x4, 0x1002) r7 = socket$alg(0x26, 0x5, 0x0) r8 = syz_open_dev$dvb_demux(&(0x7f0000000a80), 0x0, 0x2) ioctl$DVB_DEMUX_DMX_START(r8, 0x6f29) ioctl$DVB_DEMUX_DMX_START(r8, 0x6f29) bind$alg(r7, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fd831bbffac7569cc9a0f9b", 0x16) r9 = accept4$alg(r7, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="b8", 0xfffffffffffffec7}], 0x1, 0x0, 0x0, 0x200088c0}], 0x1, 0x80001) sendmsg$can_bcm(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x5, 0xbf, 0x0, 0x0, @time, {}, {0x0, 0x81}, @connect={{0x6, 0x3}, {0xf9, 0x8}}}], 0x1c) r10 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x101041, 0x15) ioctl$OCFS2_IOC_RESVSP64(r10, 0x4030582a, &(0x7f0000000340)={0x1, 0x2, 0x8, 0xffffffff, 0xffffffff, 0x4}) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000380)) 1m25.414592385s ago: executing program 2 (id=2668): openat$null(0xffffffffffffff9c, 0x0, 0x80, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x2000b, 0x1000005, 0x401d031, 0xffffffffffffffff, 0x0) setreuid(0xffffffffffffffff, 0xee01) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x0, 0x2}, 0x30, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1) landlock_restrict_self(r0, 0xe) landlock_restrict_self(r0, 0x9) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000200)=@ethtool_sfeatures={0x11, 0x2, [{0x300}, {0xfffffffd, 0x80003}]}}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) syz_io_uring_setup(0x27f7, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x4) syz_usb_connect(0x0, 0x38, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x1b80, &(0x7f0000000040)={0x0, 0x8970, 0x1f280, 0x0, 0x8000399}) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2802) io_uring_enter(r4, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x18) socket$inet_udp(0x2, 0x2, 0x0) 1m24.672767053s ago: executing program 3 (id=2669): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000440)={0x14, 0x0, 0x2, 0x16de49125438e53b, 0x0, 0x0, {0x1, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x3aeb9977b0355cbc}, 0x48010) 1m24.285467472s ago: executing program 3 (id=2670): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000600000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000780)={r0}, 0xc) 1m24.207495782s ago: executing program 3 (id=2671): openat$null(0xffffffffffffff9c, 0x0, 0x80, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x2000b, 0x1000005, 0x401d031, 0xffffffffffffffff, 0x0) setreuid(0xffffffffffffffff, 0xee01) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x0, 0x2}, 0x30, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1) landlock_restrict_self(r0, 0xe) landlock_restrict_self(r0, 0x9) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000200)=@ethtool_sfeatures={0x11, 0x2, [{0x300}, {0xfffffffd, 0x80003}]}}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) syz_io_uring_setup(0x27f7, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x4) syz_usb_connect(0x0, 0x38, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x1b80, &(0x7f0000000040)={0x0, 0x8970, 0x1f280, 0x0, 0x8000399}) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2802) io_uring_enter(r4, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x18) socket$inet_udp(0x2, 0x2, 0x0) 1m23.074751178s ago: executing program 3 (id=2672): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0x18, 0x18, 0x107, 0x70bd25, 0x25dfdbfc, {0x4b, 0x7c, 0x3f}, [@nested={0x4, 0xba}]}, 0x18}, 0x1, 0x0, 0x0, 0x82}, 0xc814) 1m23.02244799s ago: executing program 3 (id=2673): socket$inet(0xa, 0x801, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f00004da000/0x4000)=nil, 0x4000, 0x19) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=@newtaction={0x14, 0x30, 0xb, 0x0, 0xfffffffd}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000340)='./bus\x00', &(0x7f00000003c0)='exfat\x00', 0x8080, &(0x7f0000000440)='discard') r2 = syz_open_dev$sg(&(0x7f0000000000), 0xa, 0x28102) ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380) epoll_create1(0x80000) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/power/wakeup_count', 0x0, 0x10) read$char_usb(r3, &(0x7f0000000600)=""/214, 0xd6) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, 0x0) r4 = io_uring_setup(0x2e06, &(0x7f00000001c0)={0x0, 0x405acf, 0x40, 0xffffffff, 0x0, 0x0, r3}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newspdinfo={0x1c, 0x24, 0x21, 0x70bd2d, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) setrlimit(0x7, &(0x7f0000000100)={0x4, 0x100}) socket$pppl2tp(0x18, 0x1, 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) r6 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) 1m22.045742521s ago: executing program 38 (id=2611): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000740)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0) 1m21.927323193s ago: executing program 2 (id=2675): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x4084) 1m21.802737302s ago: executing program 3 (id=2676): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x0) 1m14.655881366s ago: executing program 1 (id=2677): r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$selinux_validatetrans(r0, 0x0, 0x75) 1m14.504564517s ago: executing program 1 (id=2678): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x48100, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000400)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000440)=0xcb) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000480)=0x7e) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd600000a600180601fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60101400907803e6fe04f989"], 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x3, 0x0, 0x0, 0x0, 0x401, 0x4, 0xfffffffffffffff7, 0x1, 0x2000003e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) pread64(r1, &(0x7f00000004c0)=""/18, 0x12, 0xcc4) readv(0xffffffffffffffff, &(0x7f00000000c0), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x7, 0x401d031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x40000) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x40500, 0x0) r4 = pidfd_getfd(r3, r2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, r2, 0x76bdd000) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) sendto$phonet(r5, 0x0, 0x0, 0x80, 0x0, 0x0) syz_io_uring_setup(0x7b68, &(0x7f0000000100)={0x0, 0xf057, 0x2, 0x1, 0x2ae, 0x0, r4}, &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000500)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x20902, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r6, 0x5404) setns(r4, 0x80) 1m13.658066951s ago: executing program 1 (id=2679): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000fbffffff000000000000000085000000bc000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0xb5, 0x0, &(0x7f00000005c0)="3682e50ad46933c1dc6200201db6dec81586df88ba7aa1fcd7ec73b8457f01227265ba2b7408c2dd1b04eac0d1bf47f2e2508d9d4fcc078d2fa3cced618722e2a955254c9117a0bb0acc8537b769fff64e28c50321080b69623b4c6e056a86b0d5f405173836fcaaf2554d675205b96142243cc9bbbf8e86fb4d1ce55e00839f5be5bf51c201eb8c4d97d68f52c07d3e3b1550ce97185e3ddaaf99cca131d5f3a7f21730bb8b14d1db66441ded85370389ea47c2b2", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1m13.232268354s ago: executing program 1 (id=2680): socket$inet(0xa, 0x801, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) madvise(&(0x7f00004da000/0x4000)=nil, 0x4000, 0x19) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=@newtaction={0x64, 0x30, 0xb, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x740, 0x1800, 0x1, 0xac, 0x5}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000340)='./bus\x00', &(0x7f00000003c0)='exfat\x00', 0x8080, &(0x7f0000000440)='discard') r2 = syz_open_dev$sg(&(0x7f0000000000), 0xa, 0x28102) ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380) epoll_create1(0x80000) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/power/wakeup_count', 0x0, 0x10) read$char_usb(r3, &(0x7f0000000600)=""/214, 0xd6) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, 0x0) r4 = io_uring_setup(0x2e06, &(0x7f00000001c0)={0x0, 0x405acf, 0x40, 0xffffffff, 0x0, 0x0, r3}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newspdinfo={0x1c, 0x24, 0x21, 0x70bd2d, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) setrlimit(0x7, &(0x7f0000000100)={0x4, 0x100}) socket$pppl2tp(0x18, 0x1, 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) r6 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) 1m12.686432612s ago: executing program 39 (id=2660): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x37324123}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0) 1m12.65350848s ago: executing program 1 (id=2682): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)={0x20, 0x1411, 0x1, 0x170bd2c, 0x4, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}}, 0x240440c4) 1m12.097184051s ago: executing program 1 (id=2683): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="5c0000000206010300000000040000000000000605000100070000000900020073797a310000000014000780080013000000006008001240000000020500050002000000050004000000000010000300686173683a6970"], 0x5c}}, 0x0) 1m6.671426934s ago: executing program 40 (id=2675): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x4084) 1m6.540200343s ago: executing program 41 (id=2676): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x0) 56.853550225s ago: executing program 42 (id=2683): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="5c0000000206010300000000040000000000000605000100070000000900020073797a310000000014000780080013000000006008001240000000020500050002000000050004000000000010000300686173683a6970"], 0x5c}}, 0x0) 44.018854917s ago: executing program 4 (id=2747): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000240)={0x44, &(0x7f00000002c0)=ANY=[@ANYBLOB="40000600000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 41.870554335s ago: executing program 0 (id=2753): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0x10, &(0x7f00000008c0)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa00}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 41.732961426s ago: executing program 4 (id=2754): r0 = socket(0x2d, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, &(0x7f0000000800)) 41.657975264s ago: executing program 4 (id=2755): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) accept(r0, 0x0, 0x0) 41.590127671s ago: executing program 4 (id=2756): r0 = syz_open_dev$dvb_frontend(&(0x7f0000019cc0), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000019d00)={0x4, &(0x7f0000019d40)=[{0x38, '\x00', @st={0x4, [{0x1, @svalue=0x3}, {0x3}, {0x0, @uvalue=0x1}, {0x0, @uvalue=0xa182}]}, 0x3}, {0x12, '\x00', @buffer={"32b555889142a41ed045b3c734c839ba999e105f8f20f05915a84e2763edb306", 0x20}, 0xfff}, {0x39, '\x00', @buffer={"cd5a585529647c60c5ccc64aca130e0f968982e34913b76bd9482a68561e7b05", 0x20}, 0x5}, {0x19, '\x00', @data=0x4, 0x45}]}) 41.541864903s ago: executing program 4 (id=2757): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x111, 0x4b4, 0x140, 0xd4feffff, 0x220, 0x20a, 0x278, 0x220, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @mcast1, [0xffffff00, 0xffffff00], [0x0, 0x0, 0xffffff00, 0xffffff00], 'dvmrp0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x100, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}, @common=@inet=@tcp={{0x30}, {[0x4e22, 0x2], [], 0x0, 0x0, 0x40, 0xc}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4, 0x2, "a8243030c835272db5f97eb39697926a96496b427900"}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x1}, {0x2, 0x5, 0x1}, {0x2, 0x0, 0x3}, 0x7, 0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) 41.446706085s ago: executing program 4 (id=2758): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="6800000002060500000d000000000000030001000500040000000000050005000200000005000100060000000900020073797a30000000001c00078008000640200004ac08000b4000000002080013400000ffff11000300686173683a69702c6d61726b"], 0x68}}, 0x0) 41.43895259s ago: executing program 0 (id=2759): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x10, 0x6, 0x6c0, 0x0, 0x3f0, 0x1e8, 0x1e8, 0x500, 0x5f0, 0x5f0, 0x5f0, 0x5f0, 0x500, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000000000000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private0, @ipv4=@empty, 0xe, 0x3f}}}, {{@ipv6={@dev, @loopback, [0x0, 0x0, 0xffffffff, 0xff], [], 'pimreg0\x00', 'veth1_macvtap\x00', {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [0x0, 0x922], 0x0, 0x20, 0x0, [@empty, @private2, @loopback, @mcast2, @local, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, @mcast1, @mcast2, @empty, @private1, @local, @loopback, @loopback]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0xa, 0x2, {0x8}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@empty, 0x0, 0x29}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x720) 41.371069771s ago: executing program 0 (id=2760): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000200)={&(0x7f0000000240)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f00000002c0)='\b\x00', 0x2}, {&(0x7f0000000300)="3c9c485bedd7", 0x6}], 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="1e000000000000000000000007000000830b040a1c01027f00000100000000001c000000000000000000000008000000", @ANYRES16], 0x40}, 0x40054) 41.277862709s ago: executing program 0 (id=2761): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r0, 0x89e2, &(0x7f0000000000)) 40.931855386s ago: executing program 0 (id=2763): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000007c0), 0x1) 40.669449066s ago: executing program 0 (id=2765): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e6574"], 0x60}}, 0x0) 40.003369586s ago: executing program 7 (id=2708): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/platform/devices/pcspkr/uevent\x00', 0x1, 0x0) write$vga_arbiter(r2, &(0x7f0000000180), 0xf) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000000280)=""/102392, 0x18ff8) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f000001b900)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x11812410, 0x0, 0x0, 0x81}}, 0x50) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f00000001c0)={0x87, 0x3, '\x00', [@enc_lim, @calipso={0x7, 0x10, {0x1, 0x2, 0xc2, 0xaab0, [0xee36]}}, @padn={0x1, 0x1, [0x0]}]}, 0x20) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, 0x0, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000020c40)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000020c80)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000020cc0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000020d00)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000020d40)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000020d80)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(r4, &(0x7f0000020dc0)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) 39.084148437s ago: executing program 7 (id=2769): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000008000000000000000d0000008500000097000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000012000085000000710000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fb090000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x2f, 0xe, 0x0, &(0x7f0000000300)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 35.131150566s ago: executing program 7 (id=2783): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000540), 0x1) keyctl$revoke(0x3, 0x0) mkdir(&(0x7f0000000440)='./sys_mount\x00', 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000480), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x14, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) mount(0x0, &(0x7f00000004c0)='./sys_mount\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000006c0)='fd/3\x00') r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys_mount/block/nullb0/queue/scheduler\x00', 0x2, 0x0) write(r5, &(0x7f0000000780)='bfq', 0x3) pread64(r4, &(0x7f00000007c0), 0x4, 0x1002) r6 = socket$alg(0x26, 0x5, 0x0) r7 = syz_open_dev$dvb_demux(&(0x7f0000000a80), 0x0, 0x2) ioctl$DVB_DEMUX_DMX_START(r7, 0x6f29) ioctl$DVB_DEMUX_DMX_START(r7, 0x6f29) bind$alg(r6, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r8 = accept4$alg(r6, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="b8", 0xfffffffffffffec7}], 0x1, 0x0, 0x0, 0x200088c0}], 0x1, 0x80001) sendmsg$can_bcm(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x5, 0xbf, 0x0, 0x0, @time, {}, {0x0, 0x81}, @connect={{0x6, 0x3}, {0xf9, 0x8}}}], 0x1c) r9 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x101041, 0x15) ioctl$OCFS2_IOC_RESVSP64(r9, 0x4030582a, &(0x7f0000000340)={0x1, 0x2, 0x8, 0xffffffff, 0xffffffff, 0x4}) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000380)) 33.824130868s ago: executing program 7 (id=2787): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x142000) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000140)={0x53, 0xfffffffffffffffe, 0x6, 0x2, @scatter={0x1, 0xdd, &(0x7f00000001c0)}, &(0x7f0000000200)="eded501ef663", 0x0, 0x840802, 0x10030, 0x1000, 0x0}) 33.513710147s ago: executing program 7 (id=2789): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r0, 0x0, 0x0, 0x0, &(0x7f0000000600), 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 33.322835913s ago: executing program 7 (id=2791): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000400000000000900020073797a30000000000500010007000000050005000a000000140007800800114000000000080012400000ffff12000300686173683a6e65742c706f7274"], 0x60}}, 0x0) 30.462082851s ago: executing program 6 (id=2800): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000180)={0x8038, 0x1, 0x9, 0x7, 0xfffffff8}) 30.419117152s ago: executing program 6 (id=2801): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x40) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000040)=""/237) 30.361283466s ago: executing program 6 (id=2802): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x9, [@type_tag={0x5, 0x0, 0x0, 0x12, 0x2}, @type_tag={0x3, 0x0, 0x0, 0x12, 0x4}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x1}, @fwd={0x4}]}, {0x0, [0x2e, 0x30, 0x5f, 0x5f, 0x30, 0x30, 0x5f]}}, 0x0, 0x51, 0x0, 0x1}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000013c0)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001480)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], &(0x7f00000014c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x1b, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001500)=[{0x0, 0x2, 0x2, 0x8}], 0x10, 0xfffffff8}, 0x94) 30.279286125s ago: executing program 6 (id=2803): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000300)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 30.184061638s ago: executing program 6 (id=2804): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/platform/devices/pcspkr/uevent\x00', 0x1, 0x0) write$vga_arbiter(r2, &(0x7f0000000180), 0xf) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000000280)=""/102392, 0x18ff8) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f000001b900)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x11812410, 0x0, 0x0, 0x81}}, 0x50) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f00000001c0)={0x87, 0x3, '\x00', [@enc_lim, @calipso={0x7, 0x10, {0x1, 0x2, 0xc2, 0xaab0, [0xee36]}}, @padn={0x1, 0x1, [0x0]}]}, 0x20) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, 0x0, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000020c40)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000020c80)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000020cc0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000020d00)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000020d40)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000020d80)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(r4, &(0x7f0000020dc0)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) 29.269648174s ago: executing program 6 (id=2805): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c000780080006400000040111000300686173683a6e65742c6e657400000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 26.368962844s ago: executing program 43 (id=2758): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="6800000002060500000d000000000000030001000500040000000000050005000200000005000100060000000900020073797a30000000001c00078008000640200004ac08000b4000000002080013400000ffff11000300686173683a69702c6d61726b"], 0x68}}, 0x0) 25.358237927s ago: executing program 44 (id=2765): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e6574"], 0x60}}, 0x0) 17.817913253s ago: executing program 45 (id=2791): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000400000000000900020073797a30000000000500010007000000050005000a000000140007800800114000000000080012400000ffff12000300686173683a6e65742c706f7274"], 0x60}}, 0x0) 13.335254981s ago: executing program 46 (id=2805): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c000780080006400000040111000300686173683a6e65742c6e657400000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 1.697696353s ago: executing program 8 (id=2857): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000540), 0x1) keyctl$revoke(0x3, 0x0) mkdir(&(0x7f0000000440)='./sys_mount\x00', 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000480), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{r3}, &(0x7f0000000a00), &(0x7f0000000a40)}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) mount(0x0, &(0x7f00000004c0)='./sys_mount\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000006c0)='fd/3\x00') r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./sys_mount/block/nullb0/queue/scheduler\x00', 0x2, 0x0) write(r5, &(0x7f0000000780)='bfq', 0x3) pread64(r4, &(0x7f00000007c0), 0x4, 0x1002) r6 = socket$alg(0x26, 0x5, 0x0) r7 = syz_open_dev$dvb_demux(&(0x7f0000000a80), 0x0, 0x2) ioctl$DVB_DEMUX_DMX_START(r7, 0x6f29) ioctl$DVB_DEMUX_DMX_START(r7, 0x6f29) bind$alg(r6, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fd831bbffac7569cc9a0f9b", 0x16) r8 = accept4$alg(r6, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="b8", 0xfffffffffffffec7}], 0x1, 0x0, 0x0, 0x200088c0}], 0x1, 0x80001) sendmsg$can_bcm(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x5, 0xbf, 0x0, 0x0, @time, {}, {0x0, 0x81}, @connect={{0x6, 0x3}, {0xf9, 0x8}}}], 0x1c) r9 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x101041, 0x15) ioctl$OCFS2_IOC_RESVSP64(r9, 0x4030582a, &(0x7f0000000340)={0x1, 0x2, 0x8, 0xffffffff, 0xffffffff, 0x4}) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000380)) 1.638294463s ago: executing program 5 (id=2858): r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000002c0)={"fc00", 0xffff, 0x5, 0x1, 0x200, 0xfffffffa, "0500", "00ad4a00", '\x00', "97ad3700", ["fdfbfdffffffffffffff0040", "84c9964f495c75cc1bffffff", "0000ef000200", "1c840007f0a7030000d60004"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000480)={0xe4a, 0x4e3bf1cf, 0x10, 0x10001, 0x0, 0x7d, "541b50ac00a4deff8f9a35bb00", 0x4, 0x4, 0x18, 0x0, 0x4, 0x7, 0x81}) 1.162730667s ago: executing program 5 (id=2859): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newsa={0x140, 0x10, 0x1, 0xfffffffd, 0x0, {{@in6=@remote, @in=@remote, 0x4e21, 0x7, 0xfffe, 0x1, 0x2}, {@in6=@mcast1, 0x0, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x64}, {0x0, 0x0, 0x0, 0x80000001}, {0xfffffffc, 0x2, 0x20000000}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @tfcpad={0x8, 0x16, 0xfe2}]}, 0x140}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.013799837s ago: executing program 5 (id=2860): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x406, r0) syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r1) 934.691806ms ago: executing program 8 (id=2861): capset(&(0x7f000000fa00)={0x19980330}, &(0x7f000000fa40)={0x200000, 0x200000}) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 612.464494ms ago: executing program 8 (id=2862): r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0x1, 0x2) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000340)={0x2, 0x1, 0x0, {0x4, 0x23, 0x0, 0x6}}) 574.008421ms ago: executing program 5 (id=2863): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000200)={0x1, "1003b4dd339dd0349f9e830a065051dd3a567cca3df7e3e962d2e38a86132a42", 0x2, 0x1}) 488.81701ms ago: executing program 8 (id=2864): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@private=0xa010101, @in=@remote, 0x0, 0x400, 0x1000, 0x0, 0x2, 0x20, 0x10, 0x84}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x1, 0x4000000000000}}}, 0xb8}}, 0x0) 375.667735ms ago: executing program 8 (id=2865): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180200000302000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000010b703000005000000850000007500000095"], &(0x7f0000000340)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1b75}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x2f, 0xe, 0x0, &(0x7f00000004c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 266.98224ms ago: executing program 5 (id=2866): r0 = syz_open_dev$video(&(0x7f0000000240), 0x8, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000000)={0xa, @output={0x0, 0x1, {0xfffffff9, 0x5}, 0x7e1, 0x89c}}) 50.286192ms ago: executing program 8 (id=2867): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x12, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xd422, r0}, 0x38) 0s ago: executing program 5 (id=2868): request_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000140)='\x00', 0x0) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f00000002c0)='G', 0x1, 0xfffffffffffffffb) kernel console output (not intermixed with test programs): found. [ 1513.977270][ T5760] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1514.207997][T15560] synth uevent: /devices/platform/pcspkr: unknown uevent action string [ 1514.208024][T15560] platform pcspkr: uevent: failed to send synthetic uevent: -22 [ 1515.177938][ T5760] usb 5-1: Using ep0 maxpacket: 32 [ 1515.181168][ T5760] usb 5-1: New USB device found: idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1515.182645][ T5760] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1515.182672][ T5760] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1515.182716][ T5760] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1515.182737][ T5760] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1515.182759][ T5760] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1515.229370][ T5760] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1515.229386][ T5760] usb 5-1: Product: syz [ 1515.229398][ T5760] usb 5-1: Manufacturer: syz [ 1515.229410][ T5760] usb 5-1: SerialNumber: syz [ 1515.236667][ T5760] usb 5-1: config 0 descriptor?? [ 1515.548003][T15569] exFAT-fs (nbd6): mounting with "discard" option, but the device does not support discard [ 1515.548900][T15569] exFAT-fs (nbd6): unable to read boot sector [ 1515.548980][T15569] exFAT-fs (nbd6): failed to read boot sector [ 1515.548989][T15569] exFAT-fs (nbd6): failed to recognize exfat type [ 1515.772458][ T5760] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1515.782672][ T5760] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1515.799403][ T5760] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1515.810632][ T5760] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1515.859935][ T5760] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1515.878967][ T5760] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1515.894034][ T5760] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1515.913924][ T5760] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1515.922821][ T5760] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1515.942767][ T5760] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1515.962252][ T5760] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1515.980930][ T5760] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1516.017909][ T5760] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1516.020814][ T5760] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1516.051201][ T5760] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1516.069182][ T5760] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1516.083438][ T5760] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1516.106806][ T5760] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1516.120666][ T5760] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 1516.120854][ T5760] input input19: Timeout waiting for response from device. [ 1516.377531][ T5760] usb 5-1: USB disconnect, device number 19 [ 1516.716476][T15574] dlm: non-version read from control device 36 [ 1516.732596][T15572] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2276'. [ 1517.948897][ T31] kauditd_printk_skb: 74 callbacks suppressed [ 1517.948910][ T31] audit: type=1400 audit(1794465571.684:1624): avc: denied { getopt } for pid=15588 comm="syz.4.2281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1519.323024][ C0] net_ratelimit: 93 callbacks suppressed [ 1519.737440][T15604] synth uevent: /devices/platform/pcspkr: unknown uevent action string [ 1519.737466][T15604] platform pcspkr: uevent: failed to send synthetic uevent: -22 [ 1522.143692][T15643] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2297'. [ 1522.934546][ T1193] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1523.183696][T15652] synth uevent: /devices/platform/pcspkr: unknown uevent action string [ 1523.183721][T15652] platform pcspkr: uevent: failed to send synthetic uevent: -22 [ 1523.727521][ T1193] usb 4-1: New USB device found: idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1523.747638][ T1193] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1523.777496][ T1193] usb 4-1: config 0 descriptor?? [ 1523.792510][ T1193] cp210x 4-1:0.0: cp210x converter detected [ 1524.078237][T15657] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2301'. [ 1524.187696][ T1193] cp210x 4-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 1524.187714][ T1193] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 1524.212548][ T1193] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1524.226337][ T1193] usb 4-1: USB disconnect, device number 15 [ 1524.248046][ T1193] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1524.250075][ T1193] cp210x 4-1:0.0: device disconnected [ 1524.475648][T15660] exFAT-fs (nbd4): mounting with "discard" option, but the device does not support discard [ 1524.475768][T15660] exFAT-fs (nbd4): unable to read boot sector [ 1524.475774][T15660] exFAT-fs (nbd4): failed to read boot sector [ 1524.475779][T15660] exFAT-fs (nbd4): failed to recognize exfat type [ 1524.684865][ T9227] net_ratelimit: 106 callbacks suppressed [ 1525.105977][T15670] synth uevent: /devices/platform/pcspkr: unknown uevent action string [ 1525.106004][T15670] platform pcspkr: uevent: failed to send synthetic uevent: -22 [ 1525.722358][T15675] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1525.778119][T15678] No such timeout policy "syz1" [ 1526.432837][T15683] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2310'. [ 1527.410136][T15690] synth uevent: /devices/platform/pcspkr: unknown uevent action string [ 1527.410162][T15690] platform pcspkr: uevent: failed to send synthetic uevent: -22 [ 1528.478027][T15696] exFAT-fs (nbd4): mounting with "discard" option, but the device does not support discard [ 1528.515409][T15696] exFAT-fs (nbd4): unable to read boot sector [ 1528.515420][T15696] exFAT-fs (nbd4): failed to read boot sector [ 1528.515424][T15696] exFAT-fs (nbd4): failed to recognize exfat type [ 1528.981235][T15710] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1529.039102][T15711] Timeout policy `syz1' can only be used by L3 protocol number 28 [ 1529.813205][ C0] net_ratelimit: 91 callbacks suppressed [ 1532.339596][T15725] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2325'. [ 1533.241243][T15729] hub 7-0:1.0: USB hub found [ 1533.261668][T15729] hub 7-0:1.0: 1 port detected [ 1533.415383][T15731] exFAT-fs (nbd3): mounting with "discard" option, but the device does not support discard [ 1533.415470][T15731] exFAT-fs (nbd3): unable to read boot sector [ 1533.415476][T15731] exFAT-fs (nbd3): failed to read boot sector [ 1533.415480][T15731] exFAT-fs (nbd3): failed to recognize exfat type [ 1533.890904][T15741] exFAT-fs (nbd3): unable to read boot sector [ 1533.890940][T15741] exFAT-fs (nbd3): failed to read boot sector [ 1533.890980][T15741] exFAT-fs (nbd3): failed to recognize exfat type [ 1534.923926][ T9227] net_ratelimit: 88 callbacks suppressed [ 1534.954404][T15750] exFAT-fs (nbd0): mounting with "discard" option, but the device does not support discard [ 1534.955315][T15750] exFAT-fs (nbd0): unable to read boot sector [ 1534.955333][T15750] exFAT-fs (nbd0): failed to read boot sector [ 1534.955341][T15750] exFAT-fs (nbd0): failed to recognize exfat type [ 1536.114527][T15752] synth uevent: /devices/platform/pcspkr: unknown uevent action string [ 1536.114576][T15752] platform pcspkr: uevent: failed to send synthetic uevent: -22 [ 1538.301787][T15773] exFAT-fs (nbd4): mounting with "discard" option, but the device does not support discard [ 1538.301886][T15773] exFAT-fs (nbd4): unable to read boot sector [ 1538.301893][T15773] exFAT-fs (nbd4): failed to read boot sector [ 1538.301901][T15773] exFAT-fs (nbd4): failed to recognize exfat type [ 1538.323086][T15774] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2342'. [ 1538.528660][T15777] netlink: 'syz.4.2344': attribute type 4 has an invalid length. [ 1538.528673][T15777] netlink: 5620 bytes leftover after parsing attributes in process `syz.4.2344'. [ 1538.664360][T15780] exFAT-fs (nbd2): mounting with "discard" option, but the device does not support discard [ 1538.664858][T15780] exFAT-fs (nbd2): unable to read boot sector [ 1538.664890][T15780] exFAT-fs (nbd2): failed to read boot sector [ 1538.664926][T15780] exFAT-fs (nbd2): failed to recognize exfat type [ 1539.780941][ T31] audit: type=1400 audit(1794465593.514:1625): avc: denied { connect } for pid=15788 comm="syz.4.2349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1540.044279][ C0] net_ratelimit: 85 callbacks suppressed [ 1540.051968][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1540.052018][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1541.323206][T15802] exFAT-fs (nbd2): mounting with "discard" option, but the device does not support discard [ 1541.323353][T15802] exFAT-fs (nbd2): unable to read boot sector [ 1541.323360][T15802] exFAT-fs (nbd2): failed to read boot sector [ 1541.323365][T15802] exFAT-fs (nbd2): failed to recognize exfat type [ 1541.505752][T15811] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2337'. [ 1542.841414][ T31] audit: type=1400 audit(1794465596.574:1626): avc: denied { getopt } for pid=15828 comm="syz.4.2363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1543.205189][T15838] No source specified [ 1543.283021][ T5715] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1544.280192][T15841] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2367'. [ 1544.397203][T15843] exFAT-fs (nbd2): mounting with "discard" option, but the device does not support discard [ 1544.397332][T15843] exFAT-fs (nbd2): unable to read boot sector [ 1544.397342][T15843] exFAT-fs (nbd2): failed to read boot sector [ 1544.397350][T15843] exFAT-fs (nbd2): failed to recognize exfat type [ 1544.417186][ T31] audit: type=1400 audit(1794465598.154:1627): avc: denied { getopt } for pid=15844 comm="syz.4.2368" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1544.625923][ T31] audit: type=1400 audit(1794465598.364:1628): avc: denied { ioctl } for pid=15850 comm="syz.4.2370" path="socket:[45316]" dev="sockfs" ino=45316 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1545.089453][ T6517] net_ratelimit: 91 callbacks suppressed [ 1545.231980][ T5844] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1545.449729][ T5844] usb 5-1: New USB device found: idVendor=15a4, idProduct=9035, bcdDevice=2.00 [ 1545.477364][ T5844] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1545.477664][ T5844] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1545.477697][ T5844] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1545.478275][ T5844] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1546.063395][T15873] No source specified [ 1546.456726][ T5844] usb 5-1: dvb_usb_v2: 2nd usb_bulk_msg() failed=-8 [ 1546.482129][ T5844] dvb_usb_af9035 5-1:1.0: probe with driver dvb_usb_af9035 failed with error -8 [ 1546.832796][ T5844] usb 5-1: USB disconnect, device number 20 [ 1547.194975][T15884] exFAT-fs (nbd0): mounting with "discard" option, but the device does not support discard [ 1547.195088][T15884] exFAT-fs (nbd0): unable to read boot sector [ 1547.195094][T15884] exFAT-fs (nbd0): failed to read boot sector [ 1547.195098][T15884] exFAT-fs (nbd0): failed to recognize exfat type [ 1550.066407][T15916] No source specified [ 1550.263283][ T5760] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1550.291429][ T225] net_ratelimit: 80 callbacks suppressed [ 1551.283424][ T31] audit: type=1400 audit(1794465605.024:1629): avc: denied { read append } for pid=15918 comm="syz.0.2396" name="macvtap0" dev="tmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1551.285930][ T31] audit: type=1400 audit(1794465605.024:1630): avc: denied { open } for pid=15918 comm="syz.0.2396" path="/macvtap0" dev="tmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1551.294671][ T31] audit: type=1400 audit(1794465605.034:1631): avc: denied { ioctl } for pid=15918 comm="syz.0.2396" path="/macvtap0" dev="tmpfs" ino=13 ioctlcmd=0x800454d2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1551.504186][T15923] exFAT-fs (nbd6): mounting with "discard" option, but the device does not support discard [ 1551.504317][T15923] exFAT-fs (nbd6): unable to read boot sector [ 1551.504324][T15923] exFAT-fs (nbd6): failed to read boot sector [ 1551.504328][T15923] exFAT-fs (nbd6): failed to recognize exfat type [ 1553.601107][T15941] synth uevent: /devices/platform/pcspkr: unknown uevent action string [ 1553.601133][T15941] platform pcspkr: uevent: failed to send synthetic uevent: -22 [ 1555.054612][T15961] exFAT-fs (nbd4): mounting with "discard" option, but the device does not support discard [ 1555.054747][T15961] exFAT-fs (nbd4): unable to read boot sector [ 1555.054753][T15961] exFAT-fs (nbd4): failed to read boot sector [ 1555.054758][T15961] exFAT-fs (nbd4): failed to recognize exfat type [ 1555.413434][ T62] net_ratelimit: 88 callbacks suppressed [ 1555.421036][T15965] Timeout policy `syz1' can only be used by L3 protocol number 28 [ 1555.872091][T15974] synth uevent: /devices/platform/pcspkr: unknown uevent action string [ 1555.872118][T15974] platform pcspkr: uevent: failed to send synthetic uevent: -22 [ 1557.426394][T15992] No source specified [ 1558.598562][T15997] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2421'. [ 1558.598582][T15997] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2421'. [ 1559.366965][T16007] netlink: 'syz.2.2425': attribute type 11 has an invalid length. [ 1559.634907][T16013] Mount JFS Failure: -5 [ 1559.634918][T16013] jfs_mount failed w/return code = -5 [ 1560.522977][ C0] net_ratelimit: 116 callbacks suppressed [ 1562.722830][T16034] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2418'. [ 1565.563019][ C0] net_ratelimit: 107 callbacks suppressed [ 1566.394305][T16067] No source specified [ 1569.540416][T16088] netlink: 'syz.3.2453': attribute type 1 has an invalid length. [ 1569.649938][T16090] netlink: 17 bytes leftover after parsing attributes in process `syz.6.2456'. [ 1571.002998][ C0] net_ratelimit: 99 callbacks suppressed [ 1572.393947][ T31] audit: type=1400 audit(1794465626.134:1632): avc: denied { bind } for pid=16116 comm="syz.0.2466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1572.394517][ T31] audit: type=1400 audit(1794465626.134:1633): avc: denied { name_bind } for pid=16116 comm="syz.0.2466" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 1572.402889][ T31] audit: type=1400 audit(1794465626.134:1634): avc: denied { node_bind } for pid=16116 comm="syz.0.2466" saddr=fe88::101 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 1573.020007][T16127] netlink: 'syz.0.2472': attribute type 1 has an invalid length. [ 1574.291950][T16139] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2468'. [ 1574.302613][T16139] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 1574.310173][T16139] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1574.310439][T16139] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2468'. [ 1576.033478][ T5766] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1576.038321][T12552] net_ratelimit: 85 callbacks suppressed [ 1579.044539][T16170] netlink: 'syz.3.2482': attribute type 1 has an invalid length. [ 1579.856778][ T31] audit: type=1400 audit(1794465633.594:1635): avc: denied { connect } for pid=16180 comm="syz.2.2487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1580.246606][ T31] audit: type=1400 audit(1794465633.984:1636): avc: denied { write } for pid=16188 comm="syz.2.2489" name="ipvtap0" dev="tmpfs" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1580.249806][T16189] Dropped outbound packet type=0 [ 1580.569308][ T5628] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1580.583783][ T5628] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1580.585626][ T5628] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1580.593859][ T5628] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1580.595143][ T5628] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1580.673268][ T8741] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1580.674027][ T8741] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1580.678260][ T8741] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1580.691121][ T8741] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1580.706117][ T5715] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1580.706384][ T8741] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1580.853717][ T5715] usb 3-1: New USB device found: idVendor=0a12, idProduct=0001, bcdDevice=0.00 [ 1580.854721][ T5715] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1580.854740][ T5715] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1580.857548][ T5715] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1580.857567][ T5715] usb 3-1: Product: syz [ 1580.857580][ T5715] usb 3-1: Manufacturer: syz [ 1580.857594][ T5715] usb 3-1: SerialNumber: syz [ 1581.240778][ C0] Bluetooth: hci6: corrupted ACL packet [ 1581.412956][ C1] net_ratelimit: 98 callbacks suppressed [ 1581.448703][ T8741] Bluetooth: hci6: CSR: Local version failed (-71) [ 1581.450739][ C0] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 1581.450829][ T5715] usb 3-1: USB disconnect, device number 25 [ 1581.708585][T16194] rxe_eth0 speed is unknown, defaulting to 1000 [ 1581.932448][T16194] lo speed is unknown, defaulting to 1000 [ 1582.676270][ T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1582.843045][ T8741] Bluetooth: hci5: command tx timeout [ 1584.923004][ T8741] Bluetooth: hci5: command tx timeout [ 1585.697153][T16194] bridge0: port 1(bridge_slave_0) entered blocking state [ 1585.708016][T16194] bridge0: port 1(bridge_slave_0) entered disabled state [ 1585.709930][T16194] bridge_slave_0: entered allmulticast mode [ 1585.710800][T16194] bridge_slave_0: entered promiscuous mode [ 1585.736452][T16194] bridge0: port 2(bridge_slave_1) entered blocking state [ 1585.736509][T16194] bridge0: port 2(bridge_slave_1) entered disabled state [ 1585.736587][T16194] bridge_slave_1: entered allmulticast mode [ 1585.740357][T16194] bridge_slave_1: entered promiscuous mode [ 1586.792374][ T5738] net_ratelimit: 119 callbacks suppressed [ 1586.924222][ T5628] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1586.938871][ T5628] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1586.940300][ T5628] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1586.971126][ T5628] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1586.972318][ T5628] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1586.981389][T16194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1587.012547][ T5628] Bluetooth: hci5: command tx timeout [ 1587.075542][T16194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1587.198688][T16194] team0: Port device team_slave_0 added [ 1587.209281][T16194] team0: Port device team_slave_1 added [ 1587.267016][T16194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1587.267028][T16194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1587.267047][T16194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1587.269111][T16194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1587.269120][T16194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1587.269139][T16194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1587.692146][T16194] hsr_slave_0: entered promiscuous mode [ 1587.710076][T16194] hsr_slave_1: entered promiscuous mode [ 1587.710571][T16194] debugfs: 'hsr0' already exists in 'hsr' [ 1587.710581][T16194] Cannot create hsr debugfs directory [ 1588.005134][T16238] rxe_eth0 speed is unknown, defaulting to 1000 [ 1588.817696][T16238] lo speed is unknown, defaulting to 1000 [ 1589.030009][T16195] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1589.047891][T16195] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1589.049510][T16195] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1589.051393][T16195] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1589.071801][T16195] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1589.083052][T16195] Bluetooth: hci6: command tx timeout [ 1589.083572][T16195] Bluetooth: hci5: command tx timeout [ 1589.174859][T16194] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1589.282393][T16194] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1589.296975][T16194] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1589.344076][T16194] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1589.388128][T16194] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1589.421153][T16194] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1589.430866][T16194] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1589.452011][T16194] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1590.032672][T16250] rxe_eth0 speed is unknown, defaulting to 1000 [ 1590.627935][T16194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1590.683795][T16194] 8021q: adding VLAN 0 to HW filter on device team0 [ 1590.717213][T16279] netlink: 316 bytes leftover after parsing attributes in process `syz.2.2503'. [ 1590.717235][T16279] netlink: 316 bytes leftover after parsing attributes in process `syz.2.2503'. [ 1590.745332][T14257] bridge0: port 1(bridge_slave_0) entered blocking state [ 1590.745419][T14257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1590.792541][ T323] bridge0: port 2(bridge_slave_1) entered blocking state [ 1590.792623][ T323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1591.054341][ T31] audit: type=1400 audit(1794465644.794:1637): avc: denied { getopt } for pid=16285 comm="syz.3.2505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1591.164471][T16195] Bluetooth: hci6: command tx timeout [ 1591.164668][T16240] Bluetooth: hci7: command tx timeout [ 1591.227264][T16250] lo speed is unknown, defaulting to 1000 [ 1592.042969][ C1] net_ratelimit: 159 callbacks suppressed [ 1592.137006][T16238] bridge0: port 1(bridge_slave_0) entered blocking state [ 1592.143463][T16238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1592.143614][T16238] bridge_slave_0: entered allmulticast mode [ 1592.167540][T16238] bridge_slave_0: entered promiscuous mode [ 1592.213279][T16238] bridge0: port 2(bridge_slave_1) entered blocking state [ 1592.213407][T16238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1592.213557][T16238] bridge_slave_1: entered allmulticast mode [ 1592.237721][T16238] bridge_slave_1: entered promiscuous mode [ 1592.389184][T16296] exFAT-fs (nbd2): mounting with "discard" option, but the device does not support discard [ 1592.389758][T16296] exFAT-fs (nbd2): unable to read boot sector [ 1592.389791][T16296] exFAT-fs (nbd2): failed to read boot sector [ 1592.389828][T16296] exFAT-fs (nbd2): failed to recognize exfat type [ 1593.243072][T16240] Bluetooth: hci7: command tx timeout [ 1593.243101][T16240] Bluetooth: hci6: command tx timeout [ 1593.313390][T16238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1593.331158][T16238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1593.609908][T16303] exFAT-fs (nbd2): mounting with "discard" option, but the device does not support discard [ 1593.610507][T16303] exFAT-fs (nbd2): unable to read boot sector [ 1593.610552][T16303] exFAT-fs (nbd2): failed to read boot sector [ 1593.610584][T16303] exFAT-fs (nbd2): failed to recognize exfat type [ 1594.372855][T16238] team0: Port device team_slave_0 added [ 1594.412206][T16238] team0: Port device team_slave_1 added [ 1594.638095][T16238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1594.638101][T16238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1594.638112][T16238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1594.695477][T16238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1594.695483][T16238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1594.695495][T16238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1595.140143][T16238] hsr_slave_0: entered promiscuous mode [ 1595.142149][T16238] hsr_slave_1: entered promiscuous mode [ 1595.142628][T16238] debugfs: 'hsr0' already exists in 'hsr' [ 1595.142638][T16238] Cannot create hsr debugfs directory [ 1595.324038][T16195] Bluetooth: hci6: command tx timeout [ 1595.324069][T16195] Bluetooth: hci7: command tx timeout [ 1597.403242][T16240] Bluetooth: hci7: command tx timeout [ 1597.482963][ C1] net_ratelimit: 99 callbacks suppressed [ 1597.638890][T16194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1597.957638][T16238] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1598.007608][T16238] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1598.224293][T16238] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1598.280941][T16238] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1598.306096][T16238] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1598.366944][T16238] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1598.370911][T16250] bridge0: port 1(bridge_slave_0) entered blocking state [ 1598.371020][T16250] bridge0: port 1(bridge_slave_0) entered disabled state [ 1598.371166][T16250] bridge_slave_0: entered allmulticast mode [ 1598.387344][T16250] bridge_slave_0: entered promiscuous mode [ 1598.409366][T16238] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1598.445521][T16238] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1598.447991][T16250] bridge0: port 2(bridge_slave_1) entered blocking state [ 1598.448090][T16250] bridge0: port 2(bridge_slave_1) entered disabled state [ 1598.448214][T16250] bridge_slave_1: entered allmulticast mode [ 1598.449975][T16250] bridge_slave_1: entered promiscuous mode [ 1598.651723][T16250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1598.670391][T16250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1598.851314][T16250] team0: Port device team_slave_0 added [ 1598.861754][T16356] nvme nvme0: failed to connect socket: -512 [ 1598.888199][T16250] team0: Port device team_slave_1 added [ 1598.973385][ T10] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 1599.140648][ T10] usb 4-1: New USB device found: idVendor=06cb, idProduct=0006, bcdDevice=0.06 [ 1599.249859][T16379] exFAT-fs (nbd2): mounting with "discard" option, but the device does not support discard [ 1599.250472][T16379] exFAT-fs (nbd2): unable to read boot sector [ 1599.250509][T16379] exFAT-fs (nbd2): failed to read boot sector [ 1599.250567][T16379] exFAT-fs (nbd2): failed to recognize exfat type [ 1599.345532][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1599.345565][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1599.346623][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1599.346641][ T10] usb 4-1: SerialNumber: syz [ 1599.388243][ T10] usb 4-1: config 0 descriptor?? [ 1599.410833][T16250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1599.410840][T16250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1599.410856][T16250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1599.489180][T16250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1599.489190][T16250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1599.489210][T16250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1600.048952][ T10] usb 4-1: USB disconnect, device number 17 [ 1600.139640][T16250] hsr_slave_0: entered promiscuous mode [ 1600.140251][T16250] hsr_slave_1: entered promiscuous mode [ 1600.159081][T16250] debugfs: 'hsr0' already exists in 'hsr' [ 1600.159087][T16250] Cannot create hsr debugfs directory [ 1600.176517][T16194] veth0_vlan: entered promiscuous mode [ 1600.354640][T16385] exFAT-fs (nbd2): mounting with "discard" option, but the device does not support discard [ 1600.355635][T16385] exFAT-fs (nbd2): unable to read boot sector [ 1600.355667][T16385] exFAT-fs (nbd2): failed to read boot sector [ 1600.355701][T16385] exFAT-fs (nbd2): failed to recognize exfat type [ 1601.186039][T16194] veth1_vlan: entered promiscuous mode [ 1601.366342][T16238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1601.486374][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1601.486415][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1601.528991][T16390] netlink: 'syz.2.2530': attribute type 11 has an invalid length. [ 1601.689814][T16393] nvme_fabrics: missing parameter 'traddr=%s' [ 1601.781792][T16194] veth0_macvtap: entered promiscuous mode [ 1601.880760][T16238] 8021q: adding VLAN 0 to HW filter on device team0 [ 1601.893506][ T31] audit: type=1400 audit(1794465655.634:1638): avc: denied { setopt } for pid=16395 comm="syz.2.2533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1601.936401][T16194] veth1_macvtap: entered promiscuous mode [ 1601.945231][ T256] bridge0: port 1(bridge_slave_0) entered blocking state [ 1601.945299][ T256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1601.998600][ T323] bridge0: port 2(bridge_slave_1) entered blocking state [ 1601.998639][ T323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1602.028957][ T31] audit: type=1400 audit(1794465655.764:1639): avc: denied { setopt } for pid=16399 comm="syz.3.2534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1602.134622][T16402] exFAT-fs (nbd2): mounting with "discard" option, but the device does not support discard [ 1602.135331][T16402] exFAT-fs (nbd2): unable to read boot sector [ 1602.135363][T16402] exFAT-fs (nbd2): failed to read boot sector [ 1602.135417][T16402] exFAT-fs (nbd2): failed to recognize exfat type [ 1602.641585][T16194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1602.843084][ C1] net_ratelimit: 108 callbacks suppressed [ 1603.072335][T16404] synth uevent: /devices/platform/pcspkr: unknown uevent action string [ 1603.072362][T16404] platform pcspkr: uevent: failed to send synthetic uevent: -22 [ 1603.732502][T16194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1603.858233][ T14] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.986960][T16408] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2538'. [ 1603.986981][T16408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2538'. [ 1604.265892][T16250] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1604.299590][T16250] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1604.301785][ T323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1604.301797][ T323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1604.329486][T16250] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1604.360629][T16250] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1604.361372][T16250] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1604.396792][T16250] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1604.415160][T16250] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1604.441518][T16250] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1604.444719][ T14] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1604.444755][ T14] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1604.444786][ T14] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1604.649512][ T323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1604.649525][ T323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1605.189025][T16250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1605.223175][T16238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1605.288498][T16250] 8021q: adding VLAN 0 to HW filter on device team0 [ 1605.322244][ T256] bridge0: port 1(bridge_slave_0) entered blocking state [ 1605.322338][ T256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1605.366421][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 1605.366509][ T373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1606.385993][T16449] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2544'. [ 1606.989254][T16250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1607.664184][T16238] veth0_vlan: entered promiscuous mode [ 1607.718846][T16238] veth1_vlan: entered promiscuous mode [ 1607.883569][ C0] net_ratelimit: 330 callbacks suppressed [ 1607.984630][T16238] veth0_macvtap: entered promiscuous mode [ 1608.029275][T16250] veth0_vlan: entered promiscuous mode [ 1608.030347][T16238] veth1_macvtap: entered promiscuous mode [ 1608.055636][T16250] veth1_vlan: entered promiscuous mode [ 1608.184585][T16250] veth0_macvtap: entered promiscuous mode [ 1608.232403][T16238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1608.266573][T16250] veth1_macvtap: entered promiscuous mode [ 1608.362488][T16238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1608.416211][T16250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1608.487969][T16250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1608.533079][ T14] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1608.533283][ T14] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1608.533426][ T14] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1608.634724][ T14] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1608.635324][ T14] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1608.635355][ T14] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1608.635389][ T14] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1608.635417][ T14] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1608.857324][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1608.857334][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1609.120935][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1609.120947][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1609.187573][ T6518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1609.187585][ T6518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1610.524260][ T323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1610.524274][ T323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1610.643861][T16502] synth uevent: /devices/platform/pcspkr: unknown uevent action string [ 1610.643887][T16502] platform pcspkr: uevent: failed to send synthetic uevent: -22 [ 1612.923253][ C0] ipvlan_process_outbound: 2 callbacks suppressed [ 1613.004980][ T9227] net_ratelimit: 546 callbacks suppressed [ 1613.046164][ T31] audit: type=1400 audit(1794465666.784:1640): avc: denied { bind } for pid=16515 comm="syz.9.2500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1614.770897][T16531] jffs2: notice: (16531) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 1615.303219][T16539] synth uevent: /devices/platform/pcspkr: unknown uevent action string [ 1615.303234][T16539] platform pcspkr: uevent: failed to send synthetic uevent: -22 [ 1616.229436][T16553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2572'. [ 1616.445351][T16561] syz.8.2575: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1616.445428][T16561] CPU: 0 UID: 0 PID: 16561 Comm: syz.8.2575 Tainted: G L syzkaller #0 PREEMPT(full) [ 1616.445455][T16561] Tainted: [L]=SOFTLOCKUP [ 1616.445463][T16561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1616.445475][T16561] Call Trace: [ 1616.445483][T16561] [ 1616.445491][T16561] dump_stack_lvl+0x100/0x190 [ 1616.445525][T16561] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 1616.445542][T16561] warn_alloc.cold+0x9e/0xb2 [ 1616.445563][T16561] ? __pfx_warn_alloc+0x10/0x10 [ 1616.445593][T16561] ? __lock_acquire+0x5c0/0x1f40 [ 1616.445618][T16561] ? avc_has_extended_perms+0x201/0x10b0 [ 1616.445641][T16561] ? find_held_lock+0x2b/0x80 [ 1616.445660][T16561] ? avc_has_extended_perms+0x33a/0x10b0 [ 1616.445682][T16561] ? avc_has_extended_perms+0x33a/0x10b0 [ 1616.445711][T16561] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 1616.445730][T16561] __vmalloc_node_range_noprof+0x11f2/0x1440 [ 1616.445765][T16561] ? rcu_is_watching+0x13/0xc0 [ 1616.445787][T16561] ? trace_contention_end+0x126/0x160 [ 1616.445818][T16561] ? __mutex_lock+0x267/0x1c10 [ 1616.445842][T16561] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 1616.445866][T16561] ? __pfx___mutex_lock+0x10/0x10 [ 1616.445889][T16561] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1616.445911][T16561] ? tomoyo_init_request_info+0x101/0x370 [ 1616.445939][T16561] ? tomoyo_path_number_perm+0x188/0x580 [ 1616.445972][T16561] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 1616.445990][T16561] __vmalloc_node_noprof+0xad/0xf0 [ 1616.446012][T16561] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 1616.446034][T16561] dvb_demux_do_ioctl+0x9e0/0x1200 [ 1616.446055][T16561] ? do_vfs_ioctl+0x241/0x13f0 [ 1616.446078][T16561] dvb_usercopy+0x167/0x340 [ 1616.446103][T16561] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1616.446123][T16561] ? __pfx_dvb_usercopy+0x10/0x10 [ 1616.446148][T16561] ? __fget_files+0x34/0x3d0 [ 1616.446185][T16561] ? selinux_file_ioctl+0x1e0/0x290 [ 1616.446209][T16561] dvb_demux_ioctl+0x29/0x40 [ 1616.446235][T16561] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1616.446261][T16561] __x64_sys_ioctl+0x18e/0x210 [ 1616.446282][T16561] do_syscall_64+0x123/0x7b0 [ 1616.446308][T16561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1616.446326][T16561] RIP: 0033:0x7f3a607a8fd9 [ 1616.446343][T16561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1616.446361][T16561] RSP: 002b:00007f3a61730028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1616.446380][T16561] RAX: ffffffffffffffda RBX: 00007f3a60a25fa0 RCX: 00007f3a607a8fd9 [ 1616.446392][T16561] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000003 [ 1616.446403][T16561] RBP: 00007f3a60837fed R08: 0000000000000000 R09: 0000000000000000 [ 1616.446415][T16561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1616.446426][T16561] R13: 00007f3a60a26038 R14: 00007f3a60a25fa0 R15: 00007ffc79db88b8 [ 1616.446454][T16561] [ 1616.446483][T16561] Mem-Info: [ 1616.446492][T16561] active_anon:22208 inactive_anon:22 isolated_anon:0 [ 1616.446492][T16561] active_file:23719 inactive_file:41671 isolated_file:0 [ 1616.446492][T16561] unevictable:0 dirty:235 writeback:0 [ 1616.446492][T16561] slab_reclaimable:11273 slab_unreclaimable:118937 [ 1616.446492][T16561] mapped:47629 shmem:14920 pagetables:1612 [ 1616.446492][T16561] sec_pagetables:0 bounce:0 [ 1616.446492][T16561] kernel_misc_reclaimable:0 [ 1616.446492][T16561] free:1180814 free_pcp:35328 free_cma:0 [ 1616.446537][T16561] Node 0 active_anon:88832kB inactive_anon:88kB active_file:94816kB inactive_file:166484kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:190504kB dirty:936kB writeback:0kB shmem:59680kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14512kB pagetables:6296kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1616.446586][T16561] Node 1 active_anon:0kB inactive_anon:0kB active_file:60kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:12kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1616.446628][T16561] Node 0 DMA free:15328kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:0kB free_cma:0kB [ 1616.446693][T16561] lowmem_reserve[]: 0 2447 2449 2449 2449 [ 1616.446725][T16561] Node 0 DMA32 free:767196kB boost:0kB min:33784kB low:42228kB high:50672kB reserved_highatomic:0kB free_highatomic:0kB active_anon:88836kB inactive_anon:88kB active_file:94816kB inactive_file:166484kB unevictable:0kB writepending:936kB zspages:0kB present:3129332kB managed:2506160kB mlocked:0kB bounce:0kB free_pcp:141088kB local_pcp:108972kB free_cma:0kB [ 1616.446780][T16561] lowmem_reserve[]: 0 0 1 1 1 [ 1616.446811][T16561] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1748kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1616.446859][T16561] lowmem_reserve[]: 0 0 0 0 0 [ 1616.446887][T16561] Node 1 Normal free:3940732kB boost:0kB min:56092kB low:70112kB high:84132kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:60kB inactive_file:200kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:192kB local_pcp:0kB free_cma:0kB [ 1616.446936][T16561] lowmem_reserve[]: 0 0 0 0 0 [ 1616.446965][T16561] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 1616.447112][T16561] Node 0 DMA32: 2114*4kB (UME) 1474*8kB (UME) 1487*16kB (UME) 1351*32kB (UME) 1396*64kB (UME) 559*128kB (UME) 145*256kB (UME) 61*512kB (UME) 24*1024kB (UM) 18*2048kB (UME) 95*4096kB (UM) = 767080kB [ 1616.447254][T16561] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1616.447338][T16561] Node 1 Normal: 1*4kB (M) 1*8kB (M) 3*16kB (U) 0*32kB 7*64kB (UM) 5*128kB (UM) 3*256kB (UM) 3*512kB (UM) 1*1024kB (M) 2*2048kB (U) 960*4096kB (M) = 3940732kB [ 1616.449209][T16561] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1616.449223][T16561] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 1616.449236][T16561] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1616.449250][T16561] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1616.449264][T16561] 80302 total pagecache pages [ 1616.449271][T16561] 0 pages in swap cache [ 1616.449278][T16561] Free swap = 124996kB [ 1616.449285][T16561] Total swap = 124996kB [ 1616.449292][T16561] 2097051 pages RAM [ 1616.449298][T16561] 0 pages HighMem/MovableOnly [ 1616.449304][T16561] 438458 pages reserved [ 1616.449310][T16561] 0 pages cma reserved [ 1618.123438][ C1] net_ratelimit: 202 callbacks suppressed [ 1618.963512][T16584] synth uevent: /devices/platform/pcspkr: unknown uevent action string [ 1618.963537][T16584] platform pcspkr: uevent: failed to send synthetic uevent: -22 [ 1619.309108][ T31] audit: type=1400 audit(1794465673.044:1641): avc: denied { write } for pid=16589 comm="syz.9.2566" dev="sockfs" ino=49416 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1619.334302][ T31] audit: type=1400 audit(1794465673.074:1642): avc: denied { setattr } for pid=16589 comm="syz.9.2566" name="RAW" dev="sockfs" ino=49416 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1623.211051][T12552] net_ratelimit: 162 callbacks suppressed [ 1623.375522][T16616] synth uevent: /devices/platform/pcspkr: unknown uevent action string [ 1623.375547][T16616] platform pcspkr: uevent: failed to send synthetic uevent: -22 [ 1624.187242][T16622] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2594'. [ 1627.934263][T16643] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2607'. [ 1628.682950][ C0] net_ratelimit: 809 callbacks suppressed [ 1628.717533][T16649] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2606'. [ 1628.986293][T16653] mmap: syz.9.2608 (16653): VmData 37597184 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 1629.429080][ T31] audit: type=1400 audit(1794465683.164:1643): avc: denied { write } for pid=16662 comm="syz.9.2615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1631.622304][T16701] jffs2: notice: (16701) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 1633.743437][ T5766] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1633.963297][ C0] net_ratelimit: 201 callbacks suppressed [ 1634.284635][T16195] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1634.286823][T16195] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1634.287933][T16195] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1634.289617][T16195] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1634.290687][T16195] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1634.858754][T16743] synth uevent: /devices/platform/pcspkr: unknown uevent action string [ 1634.858778][T16743] platform pcspkr: uevent: failed to send synthetic uevent: -22 [ 1635.079786][T16750] exFAT-fs (nbd2): mounting with "discard" option, but the device does not support discard [ 1635.080880][T16750] exFAT-fs (nbd2): unable to read boot sector [ 1635.080954][T16750] exFAT-fs (nbd2): failed to read boot sector [ 1635.081019][T16750] exFAT-fs (nbd2): failed to recognize exfat type [ 1636.136180][T16735] rxe_eth0 speed is unknown, defaulting to 1000 [ 1637.212146][T16240] Bluetooth: hci8: command tx timeout [ 1637.436527][T16763] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2649'. [ 1638.203658][T16777] jffs2: notice: (16777) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 1638.276925][T16735] lo speed is unknown, defaulting to 1000 [ 1639.244805][T16240] Bluetooth: hci8: command tx timeout [ 1639.247404][ T13] net_ratelimit: 213 callbacks suppressed [ 1639.677685][T16798] synth uevent: /devices/platform/pcspkr: unknown uevent action string [ 1639.677711][T16798] platform pcspkr: uevent: failed to send synthetic uevent: -22 [ 1641.322999][T16240] Bluetooth: hci8: command tx timeout [ 1641.871715][T16735] bridge0: port 1(bridge_slave_0) entered blocking state [ 1641.881128][T16735] bridge0: port 1(bridge_slave_0) entered disabled state [ 1641.882714][T16735] bridge_slave_0: entered allmulticast mode [ 1641.900935][T16735] bridge_slave_0: entered promiscuous mode [ 1641.925866][T16735] bridge0: port 2(bridge_slave_1) entered blocking state [ 1641.927320][T16735] bridge0: port 2(bridge_slave_1) entered disabled state [ 1641.927413][T16735] bridge_slave_1: entered allmulticast mode [ 1641.928243][T16735] bridge_slave_1: entered promiscuous mode [ 1642.168887][ T31] audit: type=1400 audit(1794465695.904:1644): avc: denied { read } for pid=16820 comm="syz.3.2664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1642.260314][T16735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1642.294003][T16735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1642.603973][T16735] team0: Port device team_slave_0 added [ 1642.639071][T16735] team0: Port device team_slave_1 added [ 1643.040636][T16735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1643.040646][T16735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1643.040666][T16735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1643.090519][T16735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1643.090549][T16735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1643.090570][T16735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1643.402983][T16240] Bluetooth: hci8: command tx timeout [ 1643.636106][T16735] hsr_slave_0: entered promiscuous mode [ 1643.656262][T16735] hsr_slave_1: entered promiscuous mode [ 1643.657090][T16735] debugfs: 'hsr0' already exists in 'hsr' [ 1643.673245][T16735] Cannot create hsr debugfs directory [ 1644.027561][T16836] exFAT-fs (nbd3): mounting with "discard" option, but the device does not support discard [ 1644.028661][T16836] exFAT-fs (nbd3): unable to read boot sector [ 1644.028691][T16836] exFAT-fs (nbd3): failed to read boot sector [ 1644.028738][T16836] exFAT-fs (nbd3): failed to recognize exfat type [ 1644.282996][ C1] net_ratelimit: 132 callbacks suppressed [ 1645.118184][T16195] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1645.132093][T16195] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1645.140625][T16195] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1645.158987][T16195] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1645.160703][T16195] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1645.881262][T16735] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1646.133791][T16735] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1646.349739][T16735] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1646.418334][T16842] rxe_eth0 speed is unknown, defaulting to 1000 [ 1646.492865][T16735] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1646.769213][T16842] lo speed is unknown, defaulting to 1000 [ 1647.167766][T16735] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1647.190003][T16735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1647.192347][T16735] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1647.221366][T16735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1647.222013][T16735] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1647.253668][T16240] Bluetooth: hci9: command tx timeout [ 1647.256300][T16735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1647.258370][T16735] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1647.271567][T16735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1647.729436][T16735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1647.759853][T16735] 8021q: adding VLAN 0 to HW filter on device team0 [ 1647.775073][ T323] bridge0: port 1(bridge_slave_0) entered blocking state [ 1647.775173][ T323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1647.830189][ T9227] bridge0: port 2(bridge_slave_1) entered blocking state [ 1647.830287][ T9227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1648.290320][T16842] bridge0: port 1(bridge_slave_0) entered blocking state [ 1648.290469][T16842] bridge0: port 1(bridge_slave_0) entered disabled state [ 1648.290616][T16842] bridge_slave_0: entered allmulticast mode [ 1648.308214][T16842] bridge_slave_0: entered promiscuous mode [ 1648.323704][T16842] bridge0: port 2(bridge_slave_1) entered blocking state [ 1648.323840][T16842] bridge0: port 2(bridge_slave_1) entered disabled state [ 1648.323962][T16842] bridge_slave_1: entered allmulticast mode [ 1648.329567][T16842] bridge_slave_1: entered promiscuous mode [ 1648.400600][T16842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1648.414568][T16842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1648.508487][T16842] team0: Port device team_slave_0 added [ 1648.518632][T16842] team0: Port device team_slave_1 added [ 1648.586578][T16842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1648.586588][T16842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1648.586608][T16842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1648.594024][T16842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1648.594032][T16842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1648.594049][T16842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1648.815820][T16842] hsr_slave_0: entered promiscuous mode [ 1648.816858][T16842] hsr_slave_1: entered promiscuous mode [ 1648.817581][T16842] debugfs: 'hsr0' already exists in 'hsr' [ 1648.817592][T16842] Cannot create hsr debugfs directory [ 1649.196933][T16735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1649.323423][T16240] Bluetooth: hci9: command tx timeout [ 1649.356015][T16735] veth0_vlan: entered promiscuous mode [ 1649.488536][ C0] net_ratelimit: 178 callbacks suppressed [ 1649.598685][T16735] veth1_vlan: entered promiscuous mode [ 1649.698762][ T31] audit: type=1400 audit(1794465703.434:1645): avc: denied { write } for pid=16880 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1649.802551][ T31] audit: type=1400 audit(1794465703.534:1646): avc: denied { write } for pid=16891 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1649.951052][T16735] veth0_macvtap: entered promiscuous mode [ 1649.956626][T16735] veth1_macvtap: entered promiscuous mode [ 1649.985673][T16735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1650.001553][T16735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1650.143744][ T44] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1650.143909][ T44] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1650.143938][ T44] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1650.143967][ T44] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1650.506899][ T31] audit: type=1400 audit(1794465704.244:1647): avc: denied { write } for pid=16893 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1650.575845][ T9227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1650.575857][ T9227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1650.820160][ T31] audit: type=1400 audit(1794465704.554:1648): avc: denied { write } for pid=16904 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1650.899758][ T6517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1650.899769][ T6517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1650.938647][T16842] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1650.961381][T16842] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1650.963343][T16842] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1651.006510][T16842] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1651.009373][T16842] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1651.059596][T16842] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1651.060252][T16842] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1651.086937][T16842] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1651.405174][T16240] Bluetooth: hci9: command tx timeout [ 1651.427058][T16922] No source specified [ 1651.899318][T16842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1652.269989][T16842] 8021q: adding VLAN 0 to HW filter on device team0 [ 1652.289303][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 1652.289381][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1652.309466][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 1652.309545][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1652.342648][ T31] audit: type=1400 audit(1794465706.074:1649): avc: denied { validate_trans } for pid=16926 comm="syz.1.2677" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1652.519734][ T31] audit: type=1400 audit(1794465706.254:1650): avc: denied { write } for pid=16907 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1652.775650][ T31] audit: type=1400 audit(1794465706.514:1651): avc: denied { write } for pid=16936 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1653.483644][T16240] Bluetooth: hci9: command tx timeout [ 1653.739291][ T31] audit: type=1400 audit(1794465707.474:1652): avc: denied { write } for pid=16942 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1653.792057][T16842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1653.859776][ T31] audit: type=1400 audit(1794465707.594:1653): avc: denied { write } for pid=16962 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1653.942620][T16964] exFAT-fs (nbd1): mounting with "discard" option, but the device does not support discard [ 1653.942749][T16964] exFAT-fs (nbd1): unable to read boot sector [ 1653.942758][T16964] exFAT-fs (nbd1): failed to read boot sector [ 1653.942763][T16964] exFAT-fs (nbd1): failed to recognize exfat type [ 1654.396752][T16842] veth0_vlan: entered promiscuous mode [ 1654.425996][T16842] veth1_vlan: entered promiscuous mode [ 1654.477204][T16842] veth0_macvtap: entered promiscuous mode [ 1654.524276][ T6517] net_ratelimit: 381 callbacks suppressed [ 1654.527258][T16842] veth1_macvtap: entered promiscuous mode [ 1654.559149][T16842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1654.582012][T16842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1654.697905][ T323] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1654.790206][ T256] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1654.790269][ T256] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1654.790280][ T256] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1654.853871][ T44] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1654.854594][ T44] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1654.970059][ T31] audit: type=1400 audit(1794465708.704:1654): avc: denied { write } for pid=16966 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1655.047190][T16195] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1655.048605][T16195] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1655.051043][T16195] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1655.052266][T16195] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1655.084713][T16195] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1655.205710][ T256] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1655.205722][ T256] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1655.328015][ T31] audit: type=1400 audit(1794465709.064:1655): avc: denied { write } for pid=16993 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1655.689741][T17007] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 1655.994752][ T31] audit: type=1400 audit(1794465709.734:1656): avc: denied { write } for pid=16998 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1656.319925][ T31] audit: type=1400 audit(1794465710.054:1657): avc: denied { write } for pid=17020 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1656.456717][T16987] rxe_eth0 speed is unknown, defaulting to 1000 [ 1656.911395][ T31] audit: type=1400 audit(1794465710.644:1658): avc: denied { write } for pid=17024 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1657.036464][ T31] audit: type=1400 audit(1794465710.774:1659): avc: denied { write } for pid=17035 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1657.169064][T16240] Bluetooth: hci10: command tx timeout [ 1657.452996][ T31] audit: type=1400 audit(1794465711.184:1660): avc: denied { write } for pid=17037 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1657.558446][ T31] audit: type=1400 audit(1794465711.294:1661): avc: denied { write } for pid=17048 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1657.640956][T16987] lo speed is unknown, defaulting to 1000 [ 1658.187303][ T31] audit: type=1400 audit(1794465711.924:1662): avc: denied { write } for pid=17052 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1658.310770][ T31] audit: type=1400 audit(1794465712.044:1663): avc: denied { write } for pid=17063 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1659.246062][T16240] Bluetooth: hci10: command tx timeout [ 1659.268912][T17091] No source specified [ 1659.562954][ C0] net_ratelimit: 421 callbacks suppressed [ 1660.165524][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 1660.165537][ T31] audit: type=1400 audit(1794465713.904:1666): avc: denied { write } for pid=17081 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1660.417704][ T31] audit: type=1400 audit(1794465714.154:1667): avc: denied { write } for pid=17097 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1660.502989][ T5725] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1660.530496][T16195] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1660.559882][T16195] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1660.568917][T16195] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1660.572065][T16195] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1660.572918][T16195] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1660.658024][ T5725] usb 6-1: Using ep0 maxpacket: 32 [ 1660.662967][ T5725] usb 6-1: New USB device found: idVendor=1770, idProduct=ff00, bcdDevice=0.40 [ 1660.681150][ T5725] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1660.683284][ T5725] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1660.683302][ T5725] usb 6-1: Product: syz [ 1660.683315][ T5725] usb 6-1: Manufacturer: syz [ 1660.683326][ T5725] usb 6-1: SerialNumber: syz [ 1661.060886][T16240] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1661.063061][T16240] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1661.078634][T16240] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1661.092450][T16240] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1661.103061][T16240] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1661.113090][ T5725] usbhid 6-1:1.0: can't add hid device: -71 [ 1661.113198][ T5725] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 1661.192358][ T5725] usb 6-1: USB disconnect, device number 10 [ 1661.220227][ T31] audit: type=1400 audit(1794465714.954:1668): avc: denied { write } for pid=17112 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1661.323375][T16240] Bluetooth: hci10: command tx timeout [ 1661.340481][T16987] bridge0: port 1(bridge_slave_0) entered blocking state [ 1661.352401][T16987] bridge0: port 1(bridge_slave_0) entered disabled state [ 1661.365511][T16987] bridge_slave_0: entered allmulticast mode [ 1661.366898][T16987] bridge_slave_0: entered promiscuous mode [ 1661.397724][T16987] bridge0: port 2(bridge_slave_1) entered blocking state [ 1661.397764][T16987] bridge0: port 2(bridge_slave_1) entered disabled state [ 1661.397875][T16987] bridge_slave_1: entered allmulticast mode [ 1661.402081][T16987] bridge_slave_1: entered promiscuous mode [ 1661.453538][ T31] audit: type=1400 audit(1794465715.194:1669): avc: denied { write } for pid=17128 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1661.814778][T16987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1661.857169][T16987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1662.192600][T16987] team0: Port device team_slave_0 added [ 1662.214393][T16987] team0: Port device team_slave_1 added [ 1662.251518][T17153] jffs2: notice: (17153) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 1662.371886][ T31] audit: type=1400 audit(1794465716.104:1670): avc: denied { write } for pid=17136 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1662.491958][T16987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1662.491964][T16987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1662.491976][T16987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1662.540378][T16987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1662.540389][T16987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1662.540408][T16987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1662.694281][T16240] Bluetooth: hci11: command tx timeout [ 1662.721685][ T31] audit: type=1400 audit(1794465716.454:1671): avc: denied { write } for pid=17162 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1662.929231][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1662.929256][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1662.964404][T16987] hsr_slave_0: entered promiscuous mode [ 1662.965525][T16987] hsr_slave_1: entered promiscuous mode [ 1662.967730][T16987] debugfs: 'hsr0' already exists in 'hsr' [ 1662.967741][T16987] Cannot create hsr debugfs directory [ 1663.163515][T16240] Bluetooth: hci12: command tx timeout [ 1663.282524][T17105] rxe_eth0 speed is unknown, defaulting to 1000 [ 1663.404806][T16240] Bluetooth: hci10: command tx timeout [ 1663.637622][T16987] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1663.764291][T17119] rxe_eth0 speed is unknown, defaulting to 1000 [ 1663.783996][T17105] lo speed is unknown, defaulting to 1000 [ 1663.828574][T16987] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1664.031634][T16987] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1664.244568][T16987] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode [ 1664.244587][T16987] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode [ 1664.246776][T16987] bridge0: port 3(netdevsim0) entered disabled state [ 1664.603290][ C0] net_ratelimit: 311 callbacks suppressed [ 1664.763122][T16240] Bluetooth: hci11: command tx timeout [ 1664.888454][T16987] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1665.124576][T17119] lo speed is unknown, defaulting to 1000 [ 1665.243751][T16240] Bluetooth: hci12: command tx timeout [ 1665.284021][ T31] audit: type=1400 audit(1794465719.014:1672): avc: denied { read append } for pid=17175 comm="syz.5.2698" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1665.284079][ T31] audit: type=1400 audit(1794465719.014:1673): avc: denied { open } for pid=17175 comm="syz.5.2698" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 ** 313 printk messages dropped ** ** 313 printk messages dropped ** [ 1666.807945][T16987] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1666.853822][T16240] Bluetooth: hci11: command tx timeout [ 1667.000486][T16987] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1667.002472][T16987] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1667.038324][T16987] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1667.068742][T16987] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1667.090146][T16987] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1667.146780][T16987] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1667.173913][T16987] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1667.323866][T16240] Bluetooth: hci12: command tx timeout [ 1667.691013][T17105] bridge0: port 1(bridge_slave_0) entered blocking state [ 1667.691194][T17105] bridge0: port 1(bridge_slave_0) entered disabled state [ 1667.691560][T17105] bridge_slave_0: entered allmulticast mode [ 1667.713757][T17105] bridge_slave_0: entered promiscuous mode [ 1667.739914][T17105] bridge0: port 2(bridge_slave_1) entered blocking state [ 1667.739993][T17105] bridge0: port 2(bridge_slave_1) entered disabled state [ 1667.740107][T17105] bridge_slave_1: entered allmulticast mode [ 1667.741166][T17105] bridge_slave_1: entered promiscuous mode [ 1667.881312][T17105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1667.931555][T17105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1668.115276][T17105] team0: Port device team_slave_0 added [ 1668.180563][T17105] team0: Port device team_slave_1 added [ 1668.383725][T17105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1668.383734][T17105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1668.383753][T17105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1668.391312][T17105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1668.391320][T17105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1668.391336][T17105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1668.419756][T16987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1668.578753][T17105] hsr_slave_0: entered promiscuous mode [ 1668.579845][T17105] hsr_slave_1: entered promiscuous mode [ 1668.580649][T17105] debugfs: 'hsr0' already exists in 'hsr' [ 1668.580660][T17105] Cannot create hsr debugfs directory [ 1668.804546][T16987] 8021q: adding VLAN 0 to HW filter on device team0 [ 1668.805300][T17119] bridge0: port 1(bridge_slave_0) entered blocking state [ 1668.805374][T17119] bridge0: port 1(bridge_slave_0) entered disabled state [ 1668.805646][T17119] bridge_slave_0: entered allmulticast mode [ 1668.807988][T17119] bridge_slave_0: entered promiscuous mode [ 1668.849151][T17119] bridge0: port 2(bridge_slave_1) entered blocking state [ 1668.849225][T17119] bridge0: port 2(bridge_slave_1) entered disabled state [ 1668.849361][T17119] bridge_slave_1: entered allmulticast mode [ 1668.855328][T17119] bridge_slave_1: entered promiscuous mode [ 1668.923358][T16240] Bluetooth: hci11: command tx timeout [ 1669.208276][ T6517] bridge0: port 1(bridge_slave_0) entered blocking state [ 1669.208369][ T6517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1669.227006][T17119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1669.238222][T17119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1669.329295][ T6517] bridge0: port 2(bridge_slave_1) entered blocking state [ 1669.329396][ T6517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1669.413642][T16240] Bluetooth: hci12: command tx timeout [ 1669.582153][T17119] team0: Port device team_slave_0 added [ 1669.603371][ T5746] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1669.632609][T17119] team0: Port device team_slave_1 added [ 1669.718304][T17119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1669.718311][T17119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1669.718326][T17119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1669.774130][ T5746] usb 6-1: Using ep0 maxpacket: 8 [ 1669.775738][ T5746] usb 6-1: New USB device found: idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1669.776864][T17119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1669.776874][T17119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1669.776895][T17119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1669.782697][ T5746] usb 6-1: config index 0 descriptor too short (expected 6427, got 27) [ 1669.782719][ T5746] usb 6-1: config 0 has an invalid interface number: 21 but max is 0 [ 1669.782734][ T5746] usb 6-1: config 0 has no interface number 0 [ 1669.782760][ T5746] usb 6-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1669.782779][ T5746] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1669.782799][ T5746] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1669.785272][ T5746] usb 6-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 1669.785287][ T5746] usb 6-1: Product: syz [ 1669.794087][ T5746] usb 6-1: config 0 descriptor?? [ 1669.816284][T16987] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1669.893442][ C0] net_ratelimit: 211 callbacks suppressed [ 1670.077272][ T5746] usb 6-1: USB disconnect, device number 11 [ 1670.184940][T16195] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1670.200335][T16195] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1670.209440][T16195] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1670.227506][T16195] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1670.228873][T16195] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1670.276489][T17105] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1670.276516][T17105] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1670.510095][T17119] hsr_slave_0: entered promiscuous mode [ 1670.511500][T17119] hsr_slave_1: entered promiscuous mode [ 1670.512221][T17119] debugfs: 'hsr0' already exists in 'hsr' [ 1670.512252][T17119] Cannot create hsr debugfs directory [ 1670.775944][T17105] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1670.775970][T17105] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1671.078800][T17105] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.078825][T17105] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1671.438209][T17105] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.438236][T17105] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1671.692544][T17247] exFAT-fs (nbd5): mounting with "discard" option, but the device does not support discard [ 1671.705067][T17247] exFAT-fs (nbd5): unable to read boot sector [ 1671.705101][T17247] exFAT-fs (nbd5): failed to read boot sector [ 1671.705163][T17247] exFAT-fs (nbd5): failed to recognize exfat type [ 1672.296130][T16195] Bluetooth: hci13: command tx timeout [ 1672.468554][T17222] rxe_eth0 speed is unknown, defaulting to 1000 [ 1672.785966][T17255] exFAT-fs (nbd5): mounting with "discard" option, but the device does not support discard [ 1672.786413][T17255] exFAT-fs (nbd5): unable to read boot sector [ 1672.786445][T17255] exFAT-fs (nbd5): failed to read boot sector [ 1672.786498][T17255] exFAT-fs (nbd5): failed to recognize exfat type [ 1673.118144][T16987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1674.357074][T17222] lo speed is unknown, defaulting to 1000 [ 1674.373197][T16195] Bluetooth: hci13: command tx timeout [ 1674.400185][T17105] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1674.471683][T17105] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1674.486856][T17105] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1674.543005][T17105] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1674.564257][T17105] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1674.627959][T17105] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1674.635816][T17105] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1674.683609][T17105] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1674.838341][T17119] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1675.003430][ C0] net_ratelimit: 207 callbacks suppressed [ 1675.101833][T17119] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1675.320989][T17119] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1675.658693][T17119] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1676.041994][T16987] veth0_vlan: entered promiscuous mode [ 1676.171526][T16987] veth1_vlan: entered promiscuous mode [ 1676.453207][T16195] Bluetooth: hci13: command tx timeout [ 1676.550233][T17105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1676.789763][T17119] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1676.806874][T17119] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1676.880489][T17119] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1676.893817][T17119] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1676.896156][T17119] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1676.912862][T17119] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1676.922777][T16987] veth0_macvtap: entered promiscuous mode [ 1676.939950][ T1193] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 1677.052276][T17119] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1677.084372][ T1193] usb 6-1: New USB device found: idVendor=06cb, idProduct=0006, bcdDevice=0.06 [ 1677.101232][ T1193] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1677.101257][ T1193] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 1677.101282][ T1193] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1677.101301][ T1193] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1677.113448][T17119] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1677.123084][T17105] 8021q: adding VLAN 0 to HW filter on device team0 [ 1677.123979][ T1193] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1677.123996][ T1193] usb 6-1: SerialNumber: syz [ 1677.133843][T16987] veth1_macvtap: entered promiscuous mode [ 1677.184377][ T1193] usb 6-1: config 0 descriptor?? [ 1677.228272][T17222] bridge0: port 1(bridge_slave_0) entered blocking state [ 1677.228405][T17222] bridge0: port 1(bridge_slave_0) entered disabled state [ 1677.228522][T17222] bridge_slave_0: entered allmulticast mode [ 1677.264023][T17222] bridge_slave_0: entered promiscuous mode [ 1677.282355][T17222] bridge0: port 2(bridge_slave_1) entered blocking state [ 1677.282430][T17222] bridge0: port 2(bridge_slave_1) entered disabled state [ 1677.282859][T17222] bridge_slave_1: entered allmulticast mode [ 1677.286527][T17222] bridge_slave_1: entered promiscuous mode [ 1677.340702][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1677.340792][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1677.405605][ T1193] input: USB Synaptics Device 06cb:0006 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input22 [ 1677.413265][ T4976] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1677.440340][ T4976] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1677.456680][T17222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1677.460349][ T4976] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1677.487741][ T4976] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1677.495855][ T323] bridge0: port 2(bridge_slave_1) entered blocking state [ 1677.495923][ T323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1677.524511][T17222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1677.616641][T17124] synaptics_usb 6-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1677.637072][ T1193] usb 6-1: USB disconnect, device number 12 [ 1677.696061][T17222] team0: Port device team_slave_0 added [ 1677.705238][T17222] team0: Port device team_slave_1 added [ 1677.708433][T16987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1677.851268][T17222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1677.851276][T17222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1677.851292][T17222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1677.860960][T17222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1677.860970][T17222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1677.860989][T17222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1677.877833][T16987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1678.074517][ T373] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1678.074646][ T373] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1678.074698][ T373] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1678.074729][ T373] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1678.082859][T17222] hsr_slave_0: entered promiscuous mode [ 1678.101234][T17222] hsr_slave_1: entered promiscuous mode [ 1678.127136][T17222] debugfs: 'hsr0' already exists in 'hsr' [ 1678.127146][T17222] Cannot create hsr debugfs directory [ 1678.450164][T17298] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1678.523550][T16195] Bluetooth: hci13: command tx timeout [ 1678.831582][T17305] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 1679.140900][ T6517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1679.140934][ T6517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1679.480823][ T31] audit: type=1400 audit(1794465733.214:1674): avc: denied { write } for pid=17316 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1679.605602][ T6517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1679.605613][ T6517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1679.673721][ T31] audit: type=1400 audit(1794465733.404:1675): avc: denied { write } for pid=17332 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1679.847513][T17222] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1679.960947][ T5286] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1679.983833][T17119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1680.043211][ C0] net_ratelimit: 323 callbacks suppressed [ 1680.060470][T17119] 8021q: adding VLAN 0 to HW filter on device team0 [ 1680.137549][T17222] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1680.196682][ T323] bridge0: port 1(bridge_slave_0) entered blocking state [ 1680.196743][ T323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1680.240696][ T323] bridge0: port 2(bridge_slave_1) entered blocking state [ 1680.240784][ T323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1680.317045][T17222] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1680.576790][T17222] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1680.687794][T17105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1680.992143][T17105] veth0_vlan: entered promiscuous mode [ 1681.067353][T17105] veth1_vlan: entered promiscuous mode [ 1681.450307][T17222] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1681.470921][T17222] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1681.505480][T17222] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1681.527567][T17222] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1681.528190][T17222] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1681.560359][T17222] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1681.561144][T17222] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1681.587834][T17222] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1681.666772][ T31] audit: type=1400 audit(1794465735.404:1676): avc: denied { create } for pid=17377 comm="syz.4.2739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1681.670726][ T31] audit: type=1400 audit(1794465735.404:1677): avc: denied { write } for pid=17377 comm="syz.4.2739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1681.670865][T17379] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2739'. [ 1681.684835][T17105] veth0_macvtap: entered promiscuous mode [ 1681.759424][T17105] veth1_macvtap: entered promiscuous mode [ 1681.940926][T17105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1682.042708][T17105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1682.127699][ T256] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1682.127975][ T256] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1682.128100][ T256] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1682.204200][ T6517] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1682.376787][T17402] netlink: 'syz.4.2746': attribute type 12 has an invalid length. [ 1682.405902][T17222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1682.516084][T17222] 8021q: adding VLAN 0 to HW filter on device team0 [ 1682.637032][ T323] bridge0: port 1(bridge_slave_0) entered blocking state [ 1682.637112][ T323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1682.651631][ T323] bridge0: port 2(bridge_slave_1) entered blocking state [ 1682.651701][ T323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1682.729292][T17119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1682.830758][ T9227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1682.830771][ T9227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1682.981137][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1682.981149][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1683.253149][T16411] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1683.413573][T16411] usb 5-1: Using ep0 maxpacket: 8 [ 1683.414148][T16411] usb 5-1: New USB device found: idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1683.415144][T16411] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1683.417777][T16411] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1683.417797][T16411] usb 5-1: Product: syz [ 1683.417810][T16411] usb 5-1: Manufacturer: syz [ 1683.417824][T16411] usb 5-1: SerialNumber: syz [ 1683.741280][T16411] usb 5-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1683.741301][T16411] usb 5-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1683.741316][T16411] usb 5-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1683.775662][T17429] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 1683.849485][T17119] veth0_vlan: entered promiscuous mode [ 1683.876382][T17119] veth1_vlan: entered promiscuous mode [ 1683.946982][T16411] usb 5-1: palm_os_3_probe - error -71 getting bytes available request [ 1683.947039][T16411] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 1683.977462][T16411] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1684.010957][ T13] ipvlan_process_outbound: 3 callbacks suppressed [ 1684.021907][T16411] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1684.049958][T16411] usb 5-1: USB disconnect, device number 21 [ 1684.059366][T16411] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1684.103135][T16411] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1684.108722][T16411] visor 5-1:1.0: device disconnected [ 1684.178535][T17119] veth0_macvtap: entered promiscuous mode [ 1684.212087][T17222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1684.252538][T17119] veth1_macvtap: entered promiscuous mode [ 1684.337417][T17119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1684.368912][T17119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1684.406055][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1684.427586][ T256] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1684.427812][ T256] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1684.540754][ T256] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1684.967387][T17447] UBIFS error (pid: 17447): cannot open "ubi:0", error -19 [ 1684.968526][ T31] audit: type=1400 audit(1794465738.704:1678): avc: denied { mounton } for pid=17446 comm="syz.0.2752" path="/3/file0" dev="tmpfs" ino=37 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 1685.030501][T17222] veth0_vlan: entered promiscuous mode [ 1685.047589][T17222] veth1_vlan: entered promiscuous mode [ 1685.083622][ C1] net_ratelimit: 590 callbacks suppressed [ 1685.110351][ T373] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1685.110364][ T373] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1685.191268][ T31] audit: type=1400 audit(1794465738.924:1679): avc: denied { getopt } for pid=17450 comm="syz.4.2754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1685.258434][ T31] audit: type=1400 audit(1794465738.994:1680): avc: denied { accept } for pid=17452 comm="syz.4.2755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1685.375828][T17457] --map-set only usable from mangle table [ 1685.544836][ T323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1685.544852][ T323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1685.597428][T17222] veth0_macvtap: entered promiscuous mode [ 1685.628390][T17222] veth1_macvtap: entered promiscuous mode [ 1685.698318][T17222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1685.717301][T17222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1685.785787][ T323] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1685.786053][ T323] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1685.786083][ T323] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1685.786134][ T323] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1686.398634][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1686.398648][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1686.613742][T17479] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2766'. [ 1686.669826][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1686.669839][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1687.054239][T17486] synth uevent: /devices/platform/pcspkr: unknown uevent action string [ 1687.054264][T17486] platform pcspkr: uevent: failed to send synthetic uevent: -22 [ 1688.655696][T17500] exFAT-fs (nbd6): mounting with "discard" option, but the device does not support discard [ 1688.656341][T17500] exFAT-fs (nbd6): unable to read boot sector [ 1688.656377][T17500] exFAT-fs (nbd6): failed to read boot sector [ 1688.656411][T17500] exFAT-fs (nbd6): failed to recognize exfat type [ 1689.163397][ C0] ipvlan_process_outbound: 7 callbacks suppressed [ 1690.374667][T14257] net_ratelimit: 641 callbacks suppressed [ 1691.217863][T17528] netlink: 'syz.5.2779': attribute type 1 has an invalid length. [ 1691.645244][T17534] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2782'. [ 1694.092973][T17296] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1694.253362][T17296] usb 7-1: Using ep0 maxpacket: 8 [ 1694.255501][T17296] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1694.255537][T17296] usb 7-1: New USB device found: idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1694.257505][T17296] usb 7-1: config 0 has an invalid interface number: 88 but max is 0 [ 1694.257551][T17296] usb 7-1: config 0 has no interface number 0 [ 1694.257591][T17296] usb 7-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1694.257615][T17296] usb 7-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1694.257637][T17296] usb 7-1: config 0 interface 88 has no altsetting 0 [ 1694.260824][T17296] usb 7-1: string descriptor 0 read error: -22 [ 1694.260969][T17296] usb 7-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1694.353661][T17296] usb 7-1: config 0 descriptor?? [ 1694.368554][T17296] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.88/input/input23 [ 1694.580650][ T31] audit: type=1400 audit(1794465748.314:1681): avc: denied { write } for pid=17556 comm="syz.6.2793" name="mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1694.670362][T17296] usb 7-1: USB disconnect, device number 3 [ 1694.690760][T17559] udevd[17559]: Error opening device "/dev/input/event4": Input/output error [ 1694.690822][T17559] udevd[17559]: Unable to EVIOCGABS device "/dev/input/event4" [ 1694.690856][T17559] udevd[17559]: Unable to EVIOCGABS device "/dev/input/event4" [ 1695.265239][T17566] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2795'. [ 1695.573782][ C1] net_ratelimit: 274 callbacks suppressed [ 1696.644787][ T31] audit: type=1400 audit(1794465750.374:1682): avc: denied { setcurrent } for pid=17582 comm="syz.6.2803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1696.644844][ T31] audit: type=1401 audit(1794465750.384:1683): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 1696.852386][T17585] synth uevent: /devices/platform/pcspkr: unknown uevent action string [ 1696.852411][T17585] platform pcspkr: uevent: failed to send synthetic uevent: -22 [ 1698.937466][T17603] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2809'. [ 1698.937497][T17603] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2809'. [ 1699.125029][T17607] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2811'. [ 1700.641721][T16240] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1700.658383][T16240] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1700.661791][T16240] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1700.670666][T16240] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1700.678538][T16240] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1700.693477][ C1] net_ratelimit: 284 callbacks suppressed [ 1701.673574][T17614] rxe_eth0 speed is unknown, defaulting to 1000 [ 1701.875579][T16240] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1701.889199][T16240] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1701.891332][T16240] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1701.892705][T16240] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1701.902800][T16240] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1702.255454][T17614] lo speed is unknown, defaulting to 1000 [ 1702.773665][T16195] Bluetooth: hci14: command tx timeout [ 1702.933037][ T5715] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1702.972286][T17634] rxe_eth0 speed is unknown, defaulting to 1000 [ 1703.084922][ T5715] usb 6-1: Using ep0 maxpacket: 16 [ 1703.085886][ T5715] usb 6-1: New USB device found: idVendor=05d1, idProduct=2001, bcdDevice=6.00 [ 1703.086810][ T5715] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1703.088692][ T5715] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1703.088708][ T5715] usb 6-1: Product: syz [ 1703.088719][ T5715] usb 6-1: Manufacturer: syz [ 1703.088731][ T5715] usb 6-1: SerialNumber: syz [ 1703.094659][ T5715] usb 6-1: config 0 descriptor?? [ 1703.104052][ T5715] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 1703.128280][ T5715] usb 6-1: Detected FT232R [ 1703.512516][T17634] lo speed is unknown, defaulting to 1000 [ 1703.535467][ T5715] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1703.535912][ T5715] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 1703.539439][ T5715] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1703.590734][ T5715] usb 6-1: USB disconnect, device number 13 [ 1703.605999][T17614] bridge0: port 1(bridge_slave_0) entered blocking state [ 1703.606088][T17614] bridge0: port 1(bridge_slave_0) entered disabled state [ 1703.606205][T17614] bridge_slave_0: entered allmulticast mode [ 1703.615939][T17614] bridge_slave_0: entered promiscuous mode [ 1703.622526][ T5715] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1703.626579][ T5715] ftdi_sio 6-1:0.0: device disconnected [ 1703.627118][T17614] bridge0: port 2(bridge_slave_1) entered blocking state [ 1703.627196][T17614] bridge0: port 2(bridge_slave_1) entered disabled state [ 1703.627500][T17614] bridge_slave_1: entered allmulticast mode [ 1703.635371][T17614] bridge_slave_1: entered promiscuous mode [ 1703.861624][T17614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1703.874297][T17614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1703.966007][T16195] Bluetooth: hci15: command tx timeout [ 1703.981986][T17614] team0: Port device team_slave_0 added [ 1703.996058][T17614] team0: Port device team_slave_1 added [ 1704.090243][T17614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1704.090253][T17614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1704.090274][T17614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1704.134451][T17614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1704.134459][T17614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1704.134475][T17614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1704.391883][T17661] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2820'. [ 1704.450740][T17663] netlink: 220 bytes leftover after parsing attributes in process `syz.5.2821'. [ 1704.450782][T17663] netlink: 220 bytes leftover after parsing attributes in process `syz.5.2821'. [ 1704.492408][T17614] hsr_slave_0: entered promiscuous mode [ 1704.502544][T17614] hsr_slave_1: entered promiscuous mode [ 1704.509917][T17614] debugfs: 'hsr0' already exists in 'hsr' [ 1704.509951][T17614] Cannot create hsr debugfs directory [ 1704.606668][T17666] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2822'. [ 1704.844340][T16195] Bluetooth: hci14: command tx timeout [ 1705.560898][T17674] bond0: entered promiscuous mode [ 1705.560914][T17674] bond_slave_0: entered promiscuous mode [ 1705.561167][T17674] bond_slave_1: entered promiscuous mode [ 1705.804514][ C0] net_ratelimit: 293 callbacks suppressed [ 1705.974610][T16195] Bluetooth: hci5: command 0x0406 tx timeout [ 1706.043272][T16195] Bluetooth: hci15: command tx timeout [ 1706.061815][T17682] exFAT-fs (nbd5): mounting with "discard" option, but the device does not support discard [ 1706.062376][T17682] exFAT-fs (nbd5): unable to read boot sector [ 1706.062432][T17682] exFAT-fs (nbd5): failed to read boot sector [ 1706.062468][T17682] exFAT-fs (nbd5): failed to recognize exfat type [ 1706.634730][T17614] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1706.846848][T17634] bridge0: port 1(bridge_slave_0) entered blocking state [ 1706.847925][T17634] bridge0: port 1(bridge_slave_0) entered disabled state [ 1706.848081][T17634] bridge_slave_0: entered allmulticast mode [ 1706.850994][T17634] bridge_slave_0: entered promiscuous mode [ 1706.891922][T17634] bridge0: port 2(bridge_slave_1) entered blocking state [ 1706.893672][T17634] bridge0: port 2(bridge_slave_1) entered disabled state [ 1706.893795][T17634] bridge_slave_1: entered allmulticast mode [ 1706.898899][T17634] bridge_slave_1: entered promiscuous mode [ 1706.933332][T16240] Bluetooth: hci14: command tx timeout [ 1707.119724][T17614] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1707.184157][T17634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1707.194733][T17634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1707.271549][T17634] team0: Port device team_slave_0 added [ 1707.282502][T17634] team0: Port device team_slave_1 added [ 1707.356367][T17614] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1707.438497][T17634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1707.438507][T17634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1707.438527][T17634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1707.555054][T17614] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1707.631755][T17634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1707.631764][T17634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1707.631784][T17634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1707.940177][T17634] hsr_slave_0: entered promiscuous mode [ 1707.947480][T17634] hsr_slave_1: entered promiscuous mode [ 1707.948094][T17634] debugfs: 'hsr0' already exists in 'hsr' [ 1707.948104][T17634] Cannot create hsr debugfs directory [ 1708.124246][T16240] Bluetooth: hci15: command tx timeout [ 1709.007773][T16195] Bluetooth: hci14: command tx timeout [ 1709.024202][T17614] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1709.055147][T17614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1709.055827][T17614] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1709.102430][T17614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1709.165377][T17614] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1709.227152][ T8741] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1709.241435][ T8741] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1709.242564][ T8741] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1709.245027][T17614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1709.258378][T17614] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1709.272762][ T8741] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1709.281701][ T8741] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1709.345314][T17614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1709.498418][T17634] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1709.791789][T17634] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1710.023154][T17634] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1710.134118][T17614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1710.208894][T16240] Bluetooth: hci15: command tx timeout [ 1710.227198][T17634] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1710.337882][T17614] 8021q: adding VLAN 0 to HW filter on device team0 [ 1710.358327][ T6518] bridge0: port 1(bridge_slave_0) entered blocking state [ 1710.358406][ T6518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1710.391656][ T256] bridge0: port 2(bridge_slave_1) entered blocking state [ 1710.391760][ T256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1710.611943][T17693] rxe_eth0 speed is unknown, defaulting to 1000 [ 1711.083268][T16240] Bluetooth: hci6: command 0x0406 tx timeout [ 1711.093032][ C1] net_ratelimit: 304 callbacks suppressed [ 1711.205855][T17634] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1711.325939][T17721] exFAT-fs (nbd5): mounting with "discard" option, but the device does not support discard [ 1711.326941][T17721] exFAT-fs (nbd5): unable to read boot sector [ 1711.326974][T17721] exFAT-fs (nbd5): failed to read boot sector [ 1711.326982][T17721] exFAT-fs (nbd5): failed to recognize exfat type [ 1711.403140][T16195] Bluetooth: hci16: command tx timeout [ 1711.661937][T17634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1711.700167][T17634] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1712.121503][T17634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1712.146540][T17634] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1712.177986][T17634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1712.192209][T17634] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1712.241348][T17634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1712.243559][T17693] lo speed is unknown, defaulting to 1000 [ 1712.342119][T17731] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2831'. [ 1712.829303][T17634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1712.909998][T17634] 8021q: adding VLAN 0 to HW filter on device team0 [ 1712.945774][T17614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1712.950718][ T9227] bridge0: port 1(bridge_slave_0) entered blocking state [ 1712.950793][ T9227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1712.976033][ T6517] bridge0: port 2(bridge_slave_1) entered blocking state [ 1712.976131][ T6517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1713.485668][T16195] Bluetooth: hci16: command tx timeout [ 1713.818811][T16240] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 1713.834693][T16240] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 1713.836494][T16240] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 1713.852378][T16240] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 1713.861261][T16240] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 1714.567702][T17614] veth0_vlan: entered promiscuous mode [ 1714.587662][T17614] veth1_vlan: entered promiscuous mode [ 1714.699250][T17614] veth0_macvtap: entered promiscuous mode [ 1714.724399][T17614] veth1_macvtap: entered promiscuous mode [ 1714.831517][T17614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1714.850181][T17614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1714.935981][ T323] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1714.936016][ T323] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1714.936046][ T323] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1714.936074][ T323] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1715.235657][T17634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1715.306903][T14257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1715.306915][T14257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1715.573531][T16195] Bluetooth: hci16: command tx timeout [ 1715.656194][T17693] bridge0: port 1(bridge_slave_0) entered blocking state [ 1715.656288][T17693] bridge0: port 1(bridge_slave_0) entered disabled state [ 1715.656432][T17693] bridge_slave_0: entered allmulticast mode [ 1715.661668][T17693] bridge_slave_0: entered promiscuous mode [ 1715.669013][T17693] bridge0: port 2(bridge_slave_1) entered blocking state [ 1715.669826][T17693] bridge0: port 2(bridge_slave_1) entered disabled state [ 1715.669944][T17693] bridge_slave_1: entered allmulticast mode [ 1715.675483][T17693] bridge_slave_1: entered promiscuous mode [ 1715.681189][T17749] rxe_eth0 speed is unknown, defaulting to 1000 [ 1715.686015][T14257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1715.686026][T14257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1715.802767][T17693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1715.830344][T17693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1715.973432][T16195] Bluetooth: hci17: command tx timeout [ 1716.106274][T17693] team0: Port device team_slave_0 added [ 1716.115140][T17693] team0: Port device team_slave_1 added [ 1716.123042][ C0] net_ratelimit: 491 callbacks suppressed [ 1716.203600][T16195] Bluetooth: hci7: command 0x0406 tx timeout [ 1716.227047][T17791] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2835'. [ 1716.415487][T17795] exFAT-fs (nbd5): unable to read boot sector [ 1716.415522][T17795] exFAT-fs (nbd5): failed to read boot sector [ 1716.415530][T17795] exFAT-fs (nbd5): failed to recognize exfat type [ 1717.209459][T17749] lo speed is unknown, defaulting to 1000 [ 1717.229544][T17693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1717.229553][T17693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1717.229573][T17693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1717.291248][T17693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1717.291254][T17693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1717.291265][T17693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1717.653172][T16240] Bluetooth: hci16: command tx timeout [ 1717.714538][T17805] exFAT-fs (nbd5): mounting with "discard" option, but the device does not support discard [ 1717.715135][T17805] exFAT-fs (nbd5): unable to read boot sector [ 1717.715151][T17805] exFAT-fs (nbd5): failed to read boot sector [ 1717.715159][T17805] exFAT-fs (nbd5): failed to recognize exfat type [ 1717.872241][T17807] exFAT-fs (nbd8): mounting with "discard" option, but the device does not support discard [ 1717.883489][T17807] exFAT-fs (nbd8): unable to read boot sector [ 1717.883558][T17807] exFAT-fs (nbd8): failed to read boot sector [ 1717.883633][T17807] exFAT-fs (nbd8): failed to recognize exfat type [ 1718.061277][T16240] Bluetooth: hci17: command tx timeout [ 1720.163630][T16240] Bluetooth: hci17: command tx timeout [ 1720.431177][T17693] hsr_slave_0: entered promiscuous mode [ 1720.468187][T17693] hsr_slave_1: entered promiscuous mode [ 1720.519336][T17693] debugfs: 'hsr0' already exists in 'hsr' [ 1720.520214][T17693] Cannot create hsr debugfs directory [ 1721.209746][T17634] veth0_vlan: entered promiscuous mode [ 1721.323252][ C0] net_ratelimit: 237 callbacks suppressed [ 1721.568793][T17634] veth1_vlan: entered promiscuous mode [ 1721.817238][T17829] exFAT-fs (nbd8): unable to read boot sector [ 1721.817276][T17829] exFAT-fs (nbd8): failed to read boot sector [ 1721.817308][T17829] exFAT-fs (nbd8): failed to recognize exfat type [ 1722.203506][T16240] Bluetooth: hci17: command tx timeout [ 1722.560328][T17693] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1723.128886][T17839] exFAT-fs (nbd8): mounting with "discard" option, but the device does not support discard [ 1723.129596][T17839] exFAT-fs (nbd8): unable to read boot sector [ 1723.129652][T17839] exFAT-fs (nbd8): failed to read boot sector [ 1723.129685][T17839] exFAT-fs (nbd8): failed to recognize exfat type [ 1723.453150][T17693] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1723.966297][T17693] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1724.119305][T17693] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1724.162578][T17634] veth0_macvtap: entered promiscuous mode [ 1724.180808][T17634] veth1_macvtap: entered promiscuous mode [ 1724.374595][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1724.374625][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1724.571528][T17634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1724.826897][T17749] bridge0: port 1(bridge_slave_0) entered blocking state [ 1724.829240][T17749] bridge0: port 1(bridge_slave_0) entered disabled state [ 1724.829366][T17749] bridge_slave_0: entered allmulticast mode [ 1724.842250][T17749] bridge_slave_0: entered promiscuous mode [ 1724.845792][T17634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1724.890200][T17749] bridge0: port 2(bridge_slave_1) entered blocking state [ 1724.890253][T17749] bridge0: port 2(bridge_slave_1) entered disabled state [ 1724.890335][T17749] bridge_slave_1: entered allmulticast mode [ 1724.891348][T17749] bridge_slave_1: entered promiscuous mode [ 1725.134197][T17749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1725.354878][T17749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1725.366816][T17813] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1725.514510][ T51] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1725.614550][T17749] team0: Port device team_slave_0 added [ 1725.658845][T17749] team0: Port device team_slave_1 added [ 1725.908796][ T51] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1726.050932][T17749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1726.050940][T17749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1726.050956][T17749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1726.152401][T17749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1726.152410][T17749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1726.152430][T17749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1726.153072][ T51] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1726.254038][T17693] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1726.288409][T17693] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1726.299378][ T85] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1726.299389][ T85] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1726.398352][T17693] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1726.436112][T17693] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1726.442922][ C0] net_ratelimit: 475 callbacks suppressed [ 1726.557467][T17693] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1726.607807][T17693] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1726.704955][T17749] hsr_slave_0: entered promiscuous mode [ 1726.707381][T17749] hsr_slave_1: entered promiscuous mode [ 1726.709512][T17749] debugfs: 'hsr0' already exists in 'hsr' [ 1726.709521][T17749] Cannot create hsr debugfs directory [ 1726.709654][T17693] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1726.758335][T17693] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1726.808070][T17813] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1726.808082][T17813] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1726.926920][T17749] procname=force_tllao mode=644 proc_handler=proc_dointvec data=ffff8880b0aec680 [ 1726.926943][T17749] procname=ndisc_notify mode=644 proc_handler=proc_dointvec data=ffff8880b0aec684 [ 1726.926963][T17749] procname=suppress_frag_ndisc mode=644 proc_handler=proc_dointvec data=ffff8880b0aec688 [ 1726.926982][T17749] procname=accept_ra_from_local mode=644 proc_handler=proc_dointvec data=ffff8880b0aec668 [ 1726.927001][T17749] procname=accept_ra_mtu mode=644 proc_handler=proc_dointvec data=ffff8880b0aec68c [ 1726.927018][T17749] procname=stable_secret mode=600 proc_ha ** replaying previous printk message ** [ 1726.927018][T17749] procname=stable_secret mode=600 proc_handler=addrconf_sysctl_stable_secret data=ffff8880b0aec698 [ 1726.927036][T17749] procname=use_oif_addrs_only mode=644 proc_handler=proc_dointvec data=ffff8880b0aec6ac [ 1726.927047][T17749] procname=ignore_routes_with_linkdown mode=644 proc_handler=addrconf_sysctl_ignore_routes_with_linkdown data=ffff8880b0aec650 [ 1726.927061][T17749] procname=drop_unicast_in_l2_multicast mode=644 proc_handler=proc_dointvec data=ffff8880b0aec678 [ 1726.927073][T17749] procname=drop_unsolicited_na mode=644 proc_handler=proc_dointvec data=ffff8880b0aec690 [ 1726.927090][T17749] procname=keep_addr_on_down mode=644 proc_handler=proc_dointvec data=ffff8880b0aec6b0 [ 1726.927109][T17749] procname=seg6_enabled mode=644 proc_handler=proc_dointvec data=ffff8880b0aec6b4 [ 1726.927127][T17749] procname=seg6_require_hmac mode=644 proc_handler=proc_dointvec data=ffff8880b0aec6b8 [ 1726.927145][T17749] procname=enhanced_dad mode=644 proc_handler=proc_dointvec data=ffff8880b0aec6bc [ 1726.927164][T17749] procname=addr_gen_mode mode=644 proc_handler=addrconf_sysctl_addr_gen_mode data=ffff8880b0aec6c0 [ 1726.927178][T17749] procname=disable_policy mode=644 proc_handler=addrconf_sysctl_disable_policy data=ffff8880b0aec5ec [ 1726.927196][T17749] procname=ndisc_tclass mode=644 proc_handler=proc_dointvec_minmax data=ffff8880b0aec6c4 [ 1726.927208][T17749] procname=rpl_seg_enabled mode=644 proc_handler=proc_dointvec_minmax data=ffff8880b0aec6c8 [ 1726.927220][T17749] procname=ioam6_enabled mode=644 proc_handler=proc_dou8vec_minmax data=ffff8880b0aec6d4 [ 1726.927237][T17749] procname=ioam6_id mode=644 proc_handler=proc_douintvec_minmax data=ffff8880b0aec6cc [ 1726.927257][T17749] procname=ioam6_id_wide mode=644 proc_handler=proc_douintvec data=ffff8880b0aec6d0 [ 1726.927276][T17749] procname=ndisc_evict_nocarrier mode=644 proc_handler=proc_dou8vec_minmax data=ffff8880b0aec6d5 [ 1726.927295][T17749] procname=accept_untracked_na mode=644 proc_handler=proc_dointvec_minmax data=ffff8880b0aec694 [ 1726.927314][T17749] procname=force_forwarding mode=644 proc_handler=addrconf_sysctl_force_forwarding data=ffff8880b0aec5e8 [ 1726.927611][T17749] veth0_virt_wifi: bond_netdev_event received NETDEV_REGISTER [ 1726.927626][T17749] net veth0_virt_wifi: siw: event 5 [ 1726.927695][T17749] Registering net sysctl (net ffff8880285427c0): net/mpls/conf/veth0_virt_wifi [ 1726.927708][T17749] procname=input mode=644 proc_handler=mpls_conf_proc data=ffff8880b0c26300 [ 1726.927800][T17749] kobject: 'veth0_virt_wifi' (ffff8880414cc7e0): kobject_uevent_env [ 1726.927824][T17749] kobject: 'veth0_virt_wifi' (ffff8880414cc7e0): fill_kobj_path: path = '/devices/virtual/net/veth0_virt_wifi' [ 1726.927949][T17749] veth0_virt_wifi: bond_netdev_event received NETDEV_XDP_FEAT_CHANGE [ 1726.927961][T17749] net veth0_virt_wifi: siw: event 40 [ 1726.927989][T17749] veth1_virt_wifi: bond_netdev_event received NETDEV_XDP_FEAT_CHANGE [ 1726.928005][T17749] net veth1_virt_wifi: siw: event 40 [ 1726.928661][ T33] INFO: task syz.6.2462:16100 blocked for more than 143 seconds. [ 1726.928679][ T33] Tainted: G L syzkaller #0 [ 1726.928689][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1726.928696][ T33] task:syz.6.2462 state:D stack:27768 pid:16100 tgid:16099 ppid:12259 task_flags:0x400140 flags:0x00080002 [ 1726.928752][ T33] Call Trace: [ 1726.928759][ T33] [ 1726.928770][ T33] __schedule+0x125e/0x6a40 [ 1726.928792][ T33] ? __lock_acquire+0x5c0/0x1f40 [ 1726.928828][ T33] ? __pfx___schedule+0x10/0x10 [ 1726.928844][ T33] ? find_held_lock+0x2b/0x80 [ 1726.928863][ T33] ? schedule+0x225/0x2c0 [ 1726.928885][ T33] schedule+0xdd/0x2c0 [ 1726.928902][ T33] schedule_preempt_disabled+0x13/0x30 [ 1726.928920][ T33] __mutex_lock+0xcca/0x1c10 [ 1726.928941][ T33] ? nfnetlink_rcv_msg+0x8ad/0x11e0 [ 1726.928966][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 1726.928984][ T33] ? __pfx___nla_validate_parse+0x10/0x10 [ 1726.928999][ T33] ? lock_acquire+0x1d1/0x380 [ 1726.929019][ T33] ? find_held_lock+0x2b/0x80 [ 1726.929030][ T33] ? nfnetlink_rcv_msg+0x87b/0x11e0 [ 1726.929043][ T33] ? nfnetlink_rcv_msg+0x87b/0x11e0 [ 1726.929065][ T33] ? nfnetlink_rcv_msg+0x8ad/0x11e0 [ 1726.929082][ T33] nfnetlink_rcv_msg+0x8ad/0x11e0 [ 1726.929108][ T33] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1726.929128][ T33] ? __lock_acquire+0x5c0/0x1f40 [ 1726.929155][ T33] ? avc_has_perm_noaudit+0x145/0x470 [ 1726.929173][ T33] netlink_rcv_skb+0x159/0x420 [ 1726.929188][ T33] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1726.929208][ T33] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1726.929243][ T33] ? ns_capable+0xcd/0xf0 [ 1726.929265][ T33] nfnetlink_rcv+0x1b3/0x440 [ 1726.929280][ T33] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1726.929291][ T33] ? netlink_deliver_tap+0x1ae/0xb50 [ 1726.929308][ T33] netlink_unicast+0x668/0x950 [ 1726.929324][ T33] ? __pfx_netlink_unicast+0x10/0x10 [ 1726.929349][ T33] netlink_sendmsg+0x9ac/0x10c0 [ 1726.929376][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1726.929405][ T33] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1726.929428][ T33] ? ____sys_sendmsg+0xa99/0xc30 [ 1726.929443][ T33] ____sys_sendmsg+0xa99/0xc30 [ 1726.929458][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1726.929474][ T33] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1726.929507][ T33] ___sys_sendmsg+0x190/0x1e0 [ 1726.929526][ T33] ? __pfx____sys_sendmsg+0x10/0x10 [ 1726.929543][ T33] ? futex_wait+0x11e/0x370 [ 1726.929572][ T33] ? find_held_lock+0x2b/0x80 [ 1726.929597][ T33] __sys_sendmsg+0x160/0x210 [ 1726.929611][ T33] ? __pfx___sys_sendmsg+0x10/0x10 [ 1726.929636][ T33] do_syscall_64+0x123/0x7b0 [ 1726.929659][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1726.929677][ T33] RIP: 0033:0x7f3f497a8fd9 [ 1726.929691][ T33] RSP: 002b:00007f3f4a730028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1726.929707][ T33] RAX: ffffffffffffffda RBX: 00007f3f49a25fa0 RCX: 00007f3f497a8fd9 [ 1726.929718][ T33] RDX: 0000000000000000 RSI: 0000200000002700 RDI: 0000000000000003 [ 1726.929724][ T33] RBP: 00007f3f49837fed R08: 0000000000000000 R09: 0000000000000000 [ 1726.929731][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1726.929737][ T33] R13: 00007f3f49a26038 R14: 00007f3f49a25fa0 R15: 00007ffe4da6fcd8 [ 1726.929751][ T33] [ 1726.929756][ T33] INFO: task syz.0.2473:16129 blocked for more than 143 seconds. [ 1726.929765][ T33] Tainted: G L syzkaller #0 [ 1726.929770][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1726.929774][ T33] task:syz.0.2473 state:D stack:28232 pid:16129 tgid:16128 ppid:5623 task_flags:0x400140 flags:0x00080002 [ 1726.929822][ T33] Call Trace: [ 1726.929828][ T33] [ 1726.929837][ T33] __schedule+0x125e/0x6a40 [ 1726.929856][ T33] ? __lock_acquire+0x5c0/0x1f40 [ 1726.929880][ T33] ? __pfx___schedule+0x10/0x10 [ 1726.929890][ T33] ? find_held_lock+0x2b/0x80 [ 1726.929902][ T33] ? schedule+0x225/0x2c0 [ 1726.929915][ T33] schedule+0xdd/0x2c0 [ 1726.929929][ T33] schedule_preempt_disabled+0x13/0x30 [ 1726.929947][ T33] __mutex_lock+0xcca/0x1c10 [ 1726.929967][ T33] ? nfnetlink_rcv_msg+0x8ad/0x11e0 [ 1726.929991][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 1726.930011][ T33] ? __pfx___nla_validate_parse+0x10/0x10 [ 1726.930025][ T33] ? lock_acquire+0x1d1/0x380 [ 1726.930042][ T33] ? find_held_lock+0x2b/0x80 [ 1726.930053][ T33] ? nfnetlink_rcv_msg+0x87b/0x11e0 [ 1726.930064][ T33] ? nfnetlink_rcv_msg+0x87b/0x11e0 [ 1726.930081][ T33] ? nfnetlink_rcv_msg+0x8ad/0x11e0 [ 1726.931814][T16064] cb->arg bucket: 1639834, t ffffc9001b600000 n 0000000000000000 [ 1726.931832][T16064] cb->arg bucket: 1639835, t ffffc9001b600000 n 0000000000000000 [ 1726.931847][T16064] cb->arg bucket: 1639836, t ffffc9001b600000 n 0000000000000000 [ 1726.931861][T16064] cb->arg bucket: 1639837, t ffffc9001b600000 n 0000000000000000 [ 1726.931874][T16064] cb->arg bucket: 1639838, t ffffc9001b600000 n 0000000000000000 [ 1726.931888][T16064] cb->arg bucket: 1639839, t ffffc9001b600000 n 0000000000000000 [ 1726.931900][T17693] wireguard: wg2: Peer 113 created [ 1726.931902][T16064] cb->arg bucket: 1639840, t ffffc9001b600000 n 0000000000000000 [ 1726.931918][T16064] cb->arg bucket: 1639841, t ffffc9001b600000 n 0000000000000000 [ 1726.931932][T16064] cb->arg bucket: 1639842, t ffffc9001b600000 n 0000000000000000 [ 1726.931946][T16064] cb->arg bucket: 1639843, t ffffc9001b600000 n 0000000000000000 [ 1726.931960][T16064] cb->arg bucket: 1639844, t ffffc9001b600000 n 0000000000000000 [ 1726.931974][T16064] cb->arg bucket: 1639845, t ffffc9001b600000 n 0000000000000000 [ 1726.931988][T16064] cb->arg bucket: 1639846, t ffffc9001b600000 n 0000000000000000 [ 1726.932002][T16064] cb->arg bucket: 1639847, t ffffc9001b600000 n 0000000000000000 [ 1726.932017][T16064] cb->arg bucket: 1639848, t ffffc9001b600000 n 0000000000000000 [ 1726.932031][T16064] cb->arg bucket: 1639849, t ffffc9001b600000 n 0000000000000000 [ 1726.932046][T16064] cb->arg bucket: 1639850, t ffffc9001b600000 n 0000000000000000 [ 1726.932060][T16064] cb->arg bucket: 1639851, t ffffc9001b600000 n 0000000000000000 [ 1726.932074][T16064] cb->arg bucket: 1639852, t ffffc9001b600000 n 0000000000000000 [ 1726.932088][T16064] cb->arg bucket: 1639853, t ffffc9001b600000 n 0000000000000000 [ 1726.932102][T16064] cb->arg bucket: 1639854, t ffffc9001b600000 n 0000000000000000 [ 1726.932116][T16064] cb->arg bucket: 1639855, t ffffc9001b600000 n 0000000000000000 [ 1726.932130][T16064] cb->arg bucket: 1639856, t ffffc9001b600000 n 0000000000000000 [ 1726.932145][T16064] cb->arg bucket: 1639857, t ffffc9001b600000 n 0000000000000000 [ 1726.932160][T16064] cb->arg bucket: 1639858, t ffffc9001b600000 n 0000000000000000 [ 1726.932174][T16064] cb->arg bucket: 1639859, t ffffc9001b600000 n 0000000000000000 [ 1726.932189][T16064] cb->arg bucket: 1639860, t ffffc9001b600000 n 0000000000000000 [ 1726.932203][T16064] cb->arg bucket: 1639861, t ffffc9001b600000 n 0000000000000000 [ 1726.932218][T16064] cb->arg bucket: 1639862, t ffffc9001b600000 n 0000000000000000 [ 1726.932233][T16064] cb->arg bucket: 1639863, t ffffc9001b600000 n 0000000000000000 [ 1726.932247][T16064] cb->arg bucket: 1639864, t ffffc9001b600000 n 0000000000000000 [ 1726.932261][T16064] cb->arg bucket: 1639865, t ffffc9001b600000 n 0000000000000000 [ 1726.932275][T16064] cb->arg bucket: 1639866, t ffffc9001b600000 n 0000000000000000 [ 1726.932288][T16064] cb->arg bucket: 1639867, t ffffc9001b600000 n 0000000000000000 [ 1726.932302][T16064] cb->arg bucket: 1639868, t ffffc9001b600000 n 0000000000000000 [ 1726.932316][T16064] cb->arg bucket: 1639869, t ffffc9001b600000 n 0000000000000000 [ 1726.932330][T16064] cb->arg bucket: 1639870, t ffffc9001b600000 n 0000000000000000 [ 1726.932343][T16064] cb->arg bucket: 1639871, t ffffc9001b600000 n 0000000000000000 [ 1726.932356][T16064] cb->arg bucket: 1639872, t ffffc9001b600000 n 0000000000000000 [ 1726.932369][T16064] cb->arg bucket: 1639873, t ffffc9001b600000 n 0000000000000000 [ 1726.932380][T16064] cb->arg bucket: 1639874, t ffffc9001b600000 n 0000000000000000 [ 1726.932388][T16064] cb->arg bucket: 1639875, t ffffc9001b600000 n 0000000000000000 [ 1726.932396][T16064] cb->arg bucket: 1639876, t ffffc9001b600000 n 0000000000000000 [ 1726.932404][T16064] cb->arg bucket: 1639877, t ffffc9001b600000 n 0000000000000000 [ 1726.932412][T16064] cb->arg bucket: 1639878, t ffffc9001b600000 n 0000000000000000 [ 1726.932419][T16064] cb->arg bucket: 1639879, t ffffc9001b600000 n 0000000000000000 [ 1726.932427][T16064] cb->arg bucket: 1639880, t ffffc9001b600000 n 0000000000000000 [ 1726.932435][T16064] cb->arg bucket: 1639881, t ffffc9001b600000 n 0000000000000000 [ 1726.932447][T16064] cb->arg bucket: 1639882, t ffffc9001b600000 n 0000000000000000 [ 1726.932461][T16064] cb->arg bucket: 1639883, t ffffc9001b600000 n 0000000000000000 [ 1726.932475][T16064] cb->arg bucket: 1639884, t ffffc9001b600000 n 0000000000000000 [ 1726.932489][T16064] cb->arg bucket: 1639885, t ffffc9001b600000 n 0000000000000000 [ 1726.932502][T16064] cb->arg bucket: 1639886, t ffffc9001b600000 n 0000000000000000 [ 1726.932516][T16064] cb->arg bucket: 1639887, t ffffc9001b600000 n 0000000000000000 [ 1726.932527][T16064] cb->arg bucket: 1639888, t ffffc9001b600000 n 0000000000000000 [ 1726.932535][T16064] cb->arg bucket: 1639889, t ffffc9001b600000 n 0000000000000000 [ 1726.932543][T16064] cb->arg bucket: 1639890, t ffffc9001b600000 n 0000000000000000 [ 1726.932551][T16064] cb->arg bucket: 1639891, t ffffc9001b600000 n 0000000000000000 [ 1726.932558][T16064] cb->arg bucket: 1639892, t ffffc9001b600000 n 0000000000000000 [ 1726.932566][T16064] cb->arg bucket: 1639893, t ffffc9001b600000 n 0000000000000000 [ 1726.932574][T16064] cb->arg bucket: 1639894, t ffffc9001b600000 n 0000000000000000 [ 1726.932588][T16064] cb->arg bucket: 1639895, t ffffc9001b600000 n 0000000000000000 [ 1726.932601][T16064] cb->arg bucket: 1639896, t ffffc9001b600000 n 0000000000000000 [ 1726.932615][T16064] cb->arg bucket: 1639897, t ffffc9001b600000 n 0000000000000000 [ 1726.932628][T16064] cb->arg bucket: 1639898, t ffffc9001b600000 n 0000000000000000 [ 1726.932641][T16064] cb->arg bucket: 1639899, t ffffc9001b600000 n 0000000000000000 [ 1726.932655][T16064] cb->arg bucket: 1639900, t ffffc9001b600000 n 0000000000000000 [ 1726.932669][T16064] cb->arg bucket: 1639901, t ffffc9001b600000 n 0000000000000000 [ 1726.932678][T16064] cb->arg bucket: 1639902, t ffffc9001b600000 n 0000000000000000 [ 1726.932686][T16064] cb->arg bucket: 1639903, t ffffc9001b600000 n 0000000000000000 [ 1726.932694][T16064] cb->arg bucket: 1639904, t ffffc9001b600000 n 0000000000000000 [ 1726.932702][T16064] cb->arg bucket: 1639905, t ffffc9001b600000 n 0000000000000000 [ 1726.932709][T16064] cb->arg bucket: 1639906, t ffffc9001b600000 n 0000000000000000 [ 1726.932717][T16064] cb->arg bucket: 1639907, t ffffc9001b600000 n 0000000000000000 [ 1726.932725][T16064] cb->arg bucket: 1639908, t ffffc9001b600000 n 0000000000000000 [ 1726.932733][T16064] cb->arg bucket: 1639909, t ffffc9001b600000 n 0000000000000000 [ 1726.932746][T16064] cb->arg bucket: 1639910, t ffffc9001b600000 n 0000000000000000 [ 1726.932760][T16064] cb->arg bucket: 1639911, t ffffc9001b600000 n 0000000000000000 [ 1726.932774][T16064] cb->arg bucket: 1639912, t ffffc9001b600000 n 0000000000000000 [ 1726.932787][T16064] cb->arg bucket: 1639913, t ffffc9001b600000 n 0000000000000000 [ 1726.932801][T16064] cb->arg bucket: 1639914, t ffffc9001b600000 n 0000000000000000 [ 1726.932814][T16064] cb->arg bucket: 1639915, t ffffc9001b600000 n 0000000000000000 [ 1726.932823][T16064] cb->arg bucket: 1639916, t ffffc9001b600000 n 0000000000000000 [ 1726.932831][T16064] cb->arg bucket: 1639917, t ffffc9001b600000 n 0000000000000000 [ 1726.932839][T16064] cb->arg bucket: 1639918, t ffffc9001b600000 n 0000000000000000 [ 1726.932846][T16064] cb->arg bucket: 1639919, t ffffc9001b600000 n 0000000000000000 [ 1726.937061][ T33] nfnetlink_rcv_msg+0x8ad/0x11e0 [ 1726.937092][ T33] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1726.937111][ T33] ? __lock_acquire+0x5c0/0x1f40 [ 1726.937153][ T33] ? avc_has_perm_noaudit+0x145/0x470 [ 1726.937179][ T33] netlink_rcv_skb+0x159/0x420 [ 1726.937199][ T33] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1726.937218][ T33] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1726.937249][ T33] ? ns_capable+0xcd/0xf0 [ 1726.937268][ T33] nfnetlink_rcv+0x1b3/0x440 [ 1726.937285][ T33] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1726.937301][ T33] ? netlink_deliver_tap+0x1ae/0xb50 [ 1726.937325][ T33] netlink_unicast+0x668/0x950 [ 1726.937349][ T33] ? __pfx_netlink_unicast+0x10/0x10 [ 1726.937375][ T33] netlink_sendmsg+0x9ac/0x10c0 [ 1726.937399][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1726.937425][ T33] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1726.937450][ T33] ? ____sys_sendmsg+0xa99/0xc30 [ 1726.937471][ T33] ____sys_sendmsg+0xa99/0xc30 [ 1726.937492][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1726.937514][ T33] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1726.937548][ T33] ___sys_sendmsg+0x190/0x1e0 [ 1726.937576][ T33] ? __pfx____sys_sendmsg+0x10/0x10 [ 1726.937597][ T33] ? futex_wait+0x11e/0x370 [ 1726.937626][ T33] ? find_held_lock+0x2b/0x80 [ 1726.937658][ T33] __sys_sendmsg+0x160/0x210 [ 1726.937678][ T33] ? __pfx___sys_sendmsg+0x10/0x10 [ 1726.937710][ T33] do_syscall_64+0x123/0x7b0 [ 1726.937731][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1726.937748][ T33] RIP: 0033:0x7fac9a9a8fd9 [ 1726.937761][ T33] RSP: 002b:00007fac9b7fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1726.937776][ T33] RAX: ffffffffffffffda RBX: 00007fac9ac25fa0 RCX: 00007fac9a9a8fd9 [ 1726.937786][ T33] RDX: 000000000000c010 RSI: 000020000000c740 RDI: 0000000000000003 [ 1726.937796][ T33] RBP: 00007fac9aa37fed R08: 0000000000000000 R09: 0000000000000000 [ 1726.937805][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1726.937815][ T33] R13: 00007fac9ac26038 R14: 00007fac9ac25fa0 R15: 00007fff11eb48b8 [ 1726.937837][ T33] [ 1726.937905][ T33] [ 1726.937905][ T33] Showing all locks held in the system: [ 1726.937912][ T33] locks held by kworker/u8:1/14: 3, last CPU#0: [ 1726.937924][ T33] #0: ffff88801fb43148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x1461/0x1b10 [ 1726.937963][ T33] #1: ffffc90000137d08 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1726.938000][ T33] #2: ffffffff91f32ca0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11f/0x1360 [ 1726.938038][ T33] locks held by pr/ttyS0/32: 2, on CPU#1: [ 1726.938049][ T33] #0: ffffffff8ffd91d8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x49/0x60 [ 1726.938091][ T33] #1: ffffffff9cf54f58 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x64/0xc0 [ 1726.938135][ T33] locks held by khungtaskd/33: 1, on CPU#0: [ 1726.938146][ T33] #0: ffffffff8ffed020 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1726.938211][ T33] locks held by getty/5378: 2, last CPU#1: [ 1726.938221][ T33] #0: ffff88803563c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1726.938262][ T33] #1: ffffc9000322e2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1540 [ 1726.938312][ T33] locks held by syz.4.2447/16064: 3, on CPU#0: [ 1726.938322][ T33] #0: ffffffff9d0e4280 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8ad/0x11e0 [ 1726.938357][ T33] #1: ffff8880580be6f0 (nlk_cb_mutex-NETFILTER){+.+.}-{4:4}, at: __netlink_dump_start+0x150/0x990 [ 1726.938395][ T33] #2: ffffffff8ffed020 (rcu_read_lock){....}-{1:3}, at: hash_ip6_list+0x2a1/0x1240 [ 1726.938430][ T33] locks held by syz.6.2462/16100: 1, last CPU#1: [ 1726.938441][ T33] #0: ffffffff9d0e4280 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8ad/0x11e0 [ 1726.938476][ T33] locks held by syz.0.2473/16129: 1, last CPU#1: [ 1726.938487][ T33] #0: ffffffff9d0e4280 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8ad/0x11e0 [ 1726.938524][ T33] locks held by syz.7.2583/16588: 1, last CPU#1: [ 1726.938535][ T33] #0: ffffffff9d0e4280 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8ad/0x11e0 [ 1726.938569][ T33] locks held by syz.8.2611/16665: 1, last CPU#1: [ 1726.938579][ T33] #0: ffffffff9d0e4280 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8ad/0x11e0 [ 1726.938618][ T33] locks held by syz.9.2660/16792: 1, last CPU#0: [ 1726.938629][ T33] #0: ffffffff9d0e4280 [ 1726.938667][T16064] cb->arg bucket: 1639920, t ffffc9001b600000 n 0000000000000000 [ 1726.938682][T16064] cb->arg bucket: 1639921, t ffffc9001b600000 n 0000000000000000 [ 1726.938696][T16064] cb->arg bucket: 1639922, t ffffc9001b600000 n 0000000000000000 [ 1726.938708][T16064] cb->arg bucket: 1639923, t ffffc9001b600000 n 0000000000000000 [ 1726.938721][T16064] cb->arg bucket: 1639924, t ffffc9001b600000 n 0000000000000000 [ 1726.938733][T16064] cb->arg bucket: 1639925, t ffffc9001b600000 n 0000000000000000 [ 1726.938746][T16064] cb->arg bucket: 1639926, t ffffc9001b600000 n 0000000000000000 [ 1726.938759][T16064] cb->arg bucket: 1639927, t ffffc9001b600000 n 0000000000000000 [ 1726.938772][T16064] cb->arg bucket: 1639928, t ffffc9001b600000 n 0000000000000000 [ 1726.938785][T16064] cb->arg bucket: 1639929, t ffffc9001b600000 n 0000000000000000 [ 1726.938797][T16064] cb->arg bucket: 1639930, t ffffc9001b600000 n 0000000000000000 [ 1726.938810][T16064] cb->arg bucket: 1639931, t ffffc9001b600000 n 0000000000000000 [ 1726.938822][T16064] cb->arg bucket: 1639932, t ffffc9001b600000 n 0000000000000000 [ 1726.938834][T16064] cb->arg bucket: 1639933, t ffffc9001b600000 n 0000000000000000 [ 1726.938847][T16064] cb->arg bucket: 1639934, t ffffc9001b600000 n 0000000000000000 [ 1726.938859][T16064] cb->arg bucket: 1639935, t ffffc9001b600000 n 0000000000000000 [ 1726.938872][T16064] cb->arg bucket: 1639936, t ffffc9001b600000 n 0000000000000000 [ 1726.938884][T16064] cb->arg bucket: 1639937, t ffffc9001b600000 n 0000000000000000 [ 1726.938897][T16064] cb->arg bucket: 1639938, t ffffc9001b600000 n 0000000000000000 [ 1726.938909][T16064] cb->arg bucket: 1639939, t ffffc9001b600000 n 0000000000000000 [ 1726.938921][T16064] cb->arg bucket: 1639940, t ffffc9001b600000 n 0000000000000000 [ 1726.938934][T16064] cb->arg bucket: 1639941, t ffffc9001b600000 n 0000000000000000 [ 1726.938946][T16064] cb->arg bucket: 1639942, t ffffc9001b600000 n 0000000000000000 [ 1726.938958][T16064] cb->arg bucket: 1639943, t ffffc9001b600000 n 0000000000000000 [ 1726.938970][T16064] cb->arg bucket: 1639944, t ffffc9001b600000 n 0000000000000000 [ 1726.938983][T16064] cb->arg bucket: 1639945, t ffffc9001b600000 n 0000000000000000 [ 1726.938995][T16064] cb->arg bucket: 1639946, t ffffc9001b600000 n 0000000000000000 [ 1726.939007][T16064] cb->arg bucket: 1639947, t ffffc9001b600000 n 0000000000000000 [ 1726.939024][T16064] cb->arg bucket: 1639948, t ffffc9001b600000 n 0000000000000000 [ 1726.939036][T16064] cb->arg bucket: 1639949, t ffffc9001b600000 n 0000000000000000 [ 1726.939048][T16064] cb->arg bucket: 1639950, t ffffc9001b600000 n 0000000000000000 [ 1726.939061][T16064] cb->arg bucket: 1639951, t ffffc9001b600000 n 0000000000000000 [ 1726.939073][T16064] cb->arg bucket: 1639952, t ffffc9001b600000 n 0000000000000000 [ 1726.939086][T16064] cb->arg bucket: 1639953, t ffffc9001b600000 n 0000000000000000 [ 1726.939098][T16064] cb->arg bucket: 1639954, t ffffc9001b600000 n 0000000000000000 [ 1726.939110][T16064] cb->arg bucket: 1639955, t ffffc9001b600000 n 0000000000000000 [ 1726.939122][T16064] cb->arg bucket: 1639956, t ffffc9001b600000 n 0000000000000000 [ 1726.939135][T16064] cb->arg bucket: 1639957, t ffffc9001b600000 n 0000000000000000 [ 1726.939147][T16064] cb->arg bucket: 1639958, t ffffc9001b600000 n 0000000000000000 [ 1726.939160][T16064] cb->arg bucket: 1639959, t ffffc9001b600000 n 0000000000000000 [ 1726.939172][T16064] cb->arg bucket: 1639960, t ffffc9001b600000 n 0000000000000000 [ 1726.939185][T16064] cb->arg bucket: 1639961, t ffffc9001b600000 n 0000000000000000 [ 1726.939198][T16064] cb->arg bucket: 1639962, t ffffc9001b600000 n 0000000000000000 [ 1726.939210][T16064] cb->arg bucket: 1639963, t ffffc9001b600000 n 0000000000000000 [ 1726.939222][T16064] cb->arg bucket: 1639964, t ffffc9001b600000 n 0000000000000000 [ 1726.939234][T16064] cb->arg bucket: 1639965, t ffffc9001b600000 n 0000000000000000 [ 1726.939247][T16064] cb->arg bucket: 1639966, t ffffc9001b600000 n 0000000000000000 [ 1726.939259][T16064] cb->arg bucket: 1639967, t ffffc9001b600000 n 0000000000000000 [ 1726.939271][T16064] cb->arg bucket: 1639968, t ffffc9001b600000 n 0000000000000000 [ 1726.939284][T16064] cb->arg bucket: 1639969, t ffffc9001b600000 n 0000000000000000 [ 1726.939296][T16064] cb->arg bucket: 1639970, t ffffc9001b600000 n 0000000000000000 [ 1726.939309][T16064] cb->arg bucket: 1639971, t ffffc9001b600000 n 0000000000000000 [ 1726.939321][T16064] cb->arg bucket: 1639972, t ffffc9001b600000 n 0000000000000000 [ 1726.939334][T16064] cb->arg bucket: 1639973, t ffffc9001b600000 n 0000000000000000 [ 1726.939346][T16064] cb->arg bucket: 1639974, t ffffc9001b600000 n 0000000000000000 [ 1726.939359][T16064] cb->arg bucket: 1639975, t ffffc9001b600000 n 0000000000000000 [ 1726.939372][T16064] cb->arg bucket: 1639976, t ffffc9001b600000 n 0000000000000000 [ 1726.939384][T16064] cb->arg bucket: 1639977, t ffffc9001b600000 n 0000000000000000 [ 1726.939396][T16064] cb->arg bucket: 1639978, t ffffc9001b600000 n 0000000000000000 [ 1726.939408][T16064] cb->arg bucket: 1639979, t ffffc9001b600000 n 0000000000000000 [ 1726.939420][T16064] cb->arg bucket: 1639980, t ffffc9001b600000 n 0000000000000000 [ 1726.939433][T16064] cb->arg bucket: 1639981, t ffffc9001b600000 n 0000000000000000 [ 1726.939445][T16064] cb->arg bucket: 1639982, t ffffc9001b600000 n 0000000000000000 [ 1726.939457][T16064] cb->arg bucket: 1639983, t ffffc9001b600000 n 0000000000000000 [ 1726.939470][T16064] cb->arg bucket: 1639984, t ffffc9001b600000 n 0000000000000000 [ 1726.939482][T16064] cb->arg bucket: 1639985, t ffffc9001b600000 n 0000000000000000 [ 1726.939494][T16064] cb->arg bucket: 1639986, t ffffc9001b600000 n 0000000000000000 [ 1726.939506][T16064] cb->arg bucket: 1639987, t ffffc9001b600000 n 0000000000000000 [ 1726.939519][T16064] cb->arg bucket: 1639988, t ffffc9001b600000 n 0000000000000000 [ 1726.939531][T16064] cb->arg bucket: 1639989, t ffffc9001b600000 n 0000000000000000 [ 1726.939543][T16064] cb->arg bucket: 1639990, t ffffc9001b600000 n 0000000000000000 [ 1726.939555][T16064] cb->arg bucket: 1639991, t ffffc9001b600000 n 0000000000000000 [ 1726.939568][T16064] cb->arg bucket: 1639992, t ffffc9001b600000 n 0000000000000000 [ 1726.939585][T16064] cb->arg bucket: 1639993, t ffffc9001b600000 n 0000000000000000 [ 1726.939597][T16064] cb->arg bucket: 1639994, t ffffc9001b600000 n 0000000000000000 [ 1726.939609][T16064] cb->arg bucket: 1639995, t ffffc9001b600000 n 0000000000000000 [ 1726.939622][T16064] cb->arg bucket: 1639996, t ffffc9001b600000 n 0000000000000000 [ 1726.939634][T16064] cb->arg bucket: 1639997, t ffffc9001b600000 n 0000000000000000 [ 1726.939646][T16064] cb->arg bucket: 1639998, t ffffc9001b600000 n 0000000000000000 [ 1726.939659][T16064] cb->arg bucket: 1639999, t ffffc9001b600000 n 0000000000000000 [ 1726.939671][T16064] cb->arg bucket: 1640000, t ffffc9001b600000 n 0000000000000000 [ 1726.939682][T16064] cb->arg bucket: 1640001, t ffffc9001b600000 n 0000000000000000 [ 1726.939695][T16064] cb->arg bucket: 1640002, t ffffc9001b600000 n 0000000000000000 [ 1726.939707][T16064] cb->arg bucket: 1640003, t ffffc9001b600000 n 0000000000000000 [ 1726.939719][T16064] cb->arg bucket: 1640004, t ffffc9001b600000 n 0000000000000000 [ 1726.939732][T16064] cb->arg bucket: 1640005, t ffffc9001b600000 n 0000000000000000 [ 1726.939745][T16064] cb->arg bucket: 1640006, t ffffc9001b600000 n 0000000000000000 [ 1726.939758][T16064] cb->arg bucket: 1640007, t ffffc9001b600000 n 0000000000000000 [ 1726.939770][T16064] cb->arg bucket: 1640008, t ffffc9001b600000 n 0000000000000000 [ 1726.939782][T16064] cb->arg bucket: 1640009, t ffffc9001b600000 n 0000000000000000 [ 1726.939795][T16064] cb->arg bucket: 1640010, t ffffc9001b600000 n 0000000000000000 [ 1726.939807][T16064] cb->arg bucket: 1640011, t ffffc9001b600000 n 0000000000000000 [ 1726.939819][T16064] cb->arg bucket: 1640012, t ffffc9001b600000 n 0000000000000000 [ 1726.939832][T16064] cb->arg bucket: 1640013, t ffffc9001b600000 n 0000000000000000 [ 1726.939844][T16064] cb->arg bucket: 1640014, t ffffc9001b600000 n 0000000000000000 [ 1726.939857][T16064] cb->arg bucket: 1640015, t ffffc9001b600000 n 0000000000000000 [ 1726.939869][T16064] cb->arg bucket: 1640016, t ffffc9001b600000 n 0000000000000000 [ 1726.939881][T16064] cb->arg bucket: 1640017, t ffffc9001b600000 n 0000000000000000 [ 1726.939893][T16064] cb->arg bucket: 1640018, t ffffc9001b600000 n 0000000000000000 [ 1726.939906][T16064] cb->arg bucket: 1640019, t ffffc9001b600000 n 0000000000000000 [ 1726.939919][T16064] cb->arg bucket: 1640020, t ffffc9001b600000 n 0000000000000000 [ 1726.939931][T16064] cb->arg bucket: 1640021, t ffffc9001b600000 n 0000000000000000 [ 1726.939943][T16064] cb->arg bucket: 1640022, t ffffc9001b600000 n 0000000000000000 [ 1726.939955][T16064] cb->arg bucket: 1640023, t ffffc9001b600000 n 0000000000000000 [ 1726.939967][T16064] cb->arg bucket: 1640024, t ffffc9001b600000 n 0000000000000000 [ 1726.939979][T16064] cb->arg bucket: 1640025, t ffffc9001b600000 n 0000000000000000 [ 1726.939992][T16064] cb->arg bucket: 1640026, t ffffc9001b600000 n 0000000000000000 [ 1726.940004][T16064] cb->arg bucket: 1640027, t ffffc9001b600000 n 0000000000000000 [ 1726.940017][T16064] cb->arg bucket: 1640028, t ffffc9001b600000 n 0000000000000000 [ 1726.940030][T16064] cb->arg bucket: 1640029, t ffffc9001b600000 n 0000000000000000 [ 1726.940042][T16064] cb->arg bucket: 1640030, t ffffc9001b600000 n 0000000000000000 [ 1726.940055][T16064] cb->arg bucket: 1640031, t ffffc9001b600000 n 0000000000000000 [ 1726.940067][T16064] cb->arg bucket: 1640032, t ffffc9001b600000 n 0000000000000000 [ 1726.940080][T16064] cb->arg bucket: 1640033, t ffffc9001b600000 n 0000000000000000 [ 1726.940093][T16064] cb->arg bucket: 1640034, t ffffc9001b600000 n 0000000000000000 [ 1726.940106][T16064] cb->arg bucket: 1640035, t ffffc9001b600000 n 0000000000000000 [ 1726.940118][T16064] cb->arg bucket: 1640036, t ffffc9001b600000 n 0000000000000000 [ 1726.940131][T16064] cb->arg bucket: 1640037, t ffffc9001b600000 n 0000000000000000 [ 1726.940143][T16064] cb->arg bucket: 1640038, t ffffc9001b600000 n 0000000000000000 [ 1726.940156][T16064] cb->arg bucket: 1640039, t ffffc9001b600000 n 0000000000000000 [ 1726.940169][T16064] cb->arg bucket: 1640040, t ffffc9001b600000 n 0000000000000000 [ 1726.940182][T16064] cb->arg bucket: 1640041, t ffffc9001b600000 n 0000000000000000 [ 1726.940194][T16064] cb->arg bucket: 1640042, t ffffc9001b600000 n 0000000000000000 [ 1726.940207][T16064] cb->arg bucket: 1640043, t ffffc9001b600000 n 0000000000000000 [ 1726.940219][T16064] cb->arg bucket: 1640044, t ffffc9001b600000 n 0000000000000000 [ 1726.944311][T17693] wireguard: wg2: Peer 114 created [ 1726.944502][T17693] nfc: nfc_genl_rcv_nl_event: NETLINK_URELEASE event from id 1 [ 1726.944564][ T5715] nfc: nfc_urelease_event_work: portid 1 [ 1726.945946][ T33] (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8ad/0x11e0 [ 1726.945981][ T33] locks held by syz.2.2675/16839: 1, last CPU#1: [ 1726.945993][ T33] #0: ffffffff9d0e4280 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8ad/0x11e0 [ 1726.946028][ T33] locks held by syz.3.2676/16841: 1, last CPU#1: [ 1726.946039][ T33] #0: ffffffff9d0e4280 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8ad/0x11e0 [ 1726.946074][ T33] locks held by syz-executor/16842: 4, on CPU#0: [ 1726.946085][ T33] #0: ffffffff9014bb70 (dup_mmap_sem){.+.+}-{0:0}, at: copy_process+0x7b73/0x88e0 [ 1726.946133][ T33] #1: ffff88808d488340 (&mm->mmap_lock){++++}-{4:4}, at: copy_process+0x7b99/0x88e0 [ 1726.946169][ T33] #2: ffff88808c500340 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x16e/0x2180 [ 1726.946222][ T33] #3: ffffffff8ffed020 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x9a/0x470 [ 1726.946266][ T33] locks held by syz.1.2683/16992: 1, last CPU#1: [ 1726.946276][ T33] #0: ffffffff9d0e4280 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8ad/0x11e0 [ 1726.946316][ T33] locks held by syz.4.2758/17459: 1, last CPU#1: [ 1726.946327][ T33] #0: ffffffff9d0e4280 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8ad/0x11e0 [ 1726.946361][ T33] locks held by syz.0.2765/17477: 1, last CPU#1: [ 1726.946372][ T33] #0: ffffffff9d0e4280 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8ad/0x11e0 [ 1726.946406][ T33] locks held by syz.7.2791/17553: 1, last CPU#1: [ 1726.946417][ T33] #0: ffffffff9d0e4280 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8ad/0x11e0 [ 1726.946452][ T33] locks held by syz.6.2805/17612: 1, last CPU#0: [ 1726.946462][ T33] #0: ffffffff9d0e4280 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0x8ad/0x11e0 [ 1726.946497][ T33] locks held by syz-executor/17614: 2, on CPU#0: [ 1726.946508][ T33] #0: ffffffff9014bb70 (dup_mmap_sem){.+.+}-{0:0}, at: copy_process+0x7b73/0x88e0 [ 1726.946544][ T33] #1: ffff88807d5c7180 (&mm->mmap_lock){++++}-{4:4}, at: copy_process+0x7b99/0x88e0 [ 1726.946588][ T33] locks held by syz-executor/17693: 1, on CPU#0: [ 1726.946598][ T33] #0: ffffffff91f32ca0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x31c/0x18c0 [ 1726.946635][ T33] locks held by syz-executor/17749: 2, last CPU#0: [ 1726.946645][ T33] #0: ffffffff91421068 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 1726.946687][ T33] #1: ffffffff91f32ca0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xac3/0x2620 [ 1726.946727][ T33] locks held by syz.5.2843/17831: 3, on CPU#0: [ 1726.946737][ T33] #0: ffff88807b5da478 (sb_writers#6){.+.+}-{0:0}, at: do_coredump.constprop.0+0x9bb/0x25e0 [ 1726.946777][ T33] #1: ffff888045905df0 (&sb->s_type->i_mutex_key#16){++++}-{4:4}, at: shmem_file_write_iter+0x86/0x140 [ 1726.946819][ T33] #2: ffffffff8ffed020 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 1726.946856][ T33] [ 1726.946860][ T33] ============================================= [ 1726.946860][ T33] [ 1726.946866][ T33] NMI backtrace for cpu 0 [ 1726.946878][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1726.946898][ T33] Tainted: [L]=SOFTLOCKUP [ 1726.946904][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1726.946912][ T33] Call Trace: [ 1726.946917][ T33] [ 1726.946923][ T33] dump_stack_lvl+0x100/0x190 [ 1726.946948][ T33] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1726.946966][ T33] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1726.946986][ T33] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 1726.947004][ T33] sys_info+0x141/0x190 [ 1726.947025][ T33] watchdog+0xd0f/0x10c0 [ 1726.947046][ T33] ? __pfx_watchdog+0x10/0x10 [ 1726.947062][ T33] ? __kthread_parkme+0x18f/0x230 [ 1726.947086][ T33] ? kthread+0x13a/0x450 [ 1726.947100][ T33] ? __pfx_watchdog+0x10/0x10 [ 1726.947113][ T33] kthread+0x373/0x450 [ 1726.947127][ T33] ? __pfx_kthread+0x10/0x10 [ 1726.947143][ T33] ret_from_fork+0x730/0xd60 [ 1726.947163][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 1726.947184][ T33] ? __switch_to+0x800/0x10e0 [ 1726.947199][ T33] ? __pfx_kthread+0x10/0x10 [ 1726.947216][ T33] ret_from_fork_asm+0x1a/0x30 [ 1726.947244][ T33] [ 1726.947250][ T33] Sending NMI from CPU 0 to CPUs 1: [ 1726.947268][ C1] NMI backtrace for cpu 1 [ 1726.947279][ C1] CPU: 1 UID: 0 PID: 32 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1726.947297][ C1] Tainted: [L]=SOFTLOCKUP [ 1726.947302][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1726.947309][ C1] RIP: 0010:io_serial_in+0x87/0xb0 [ 1726.947335][ C1] Code: 2d 4b fc 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 1a 66 03 5d 40 89 da ec <5b> 0f b6 c0 5d 41 5c c3 cc cc cc cc e8 68 86 c5 fc eb a2 e8 f1 86 [ 1726.947347][ C1] RSP: 0018:ffffc90000a87950 EFLAGS: 00000002 [ 1726.947358][ C1] RAX: dffffc0000000000 RBX: 00000000000003fd RCX: 0000000000000000 [ 1726.947368][ C1] RDX: 00000000000003fd RSI: ffffffff85c353d0 RDI: ffffffff9cf54f80 [ 1726.947377][ C1] RBP: ffffffff9cf54f40 R08: 000000000000001f R09: 0000000000000000 [ 1726.947386][ C1] R10: 0000000000000003 R11: 205d393437373154 R12: 0000000000000000 [ 1726.947394][ C1] R13: 0000000000000020 R14: fffffbfff39eaa45 R15: dffffc0000000000 [ 1726.947404][ C1] FS: 0000000000000000(0000) GS:ffff888122573000(0000) knlGS:0000000000000000 [ 1726.947418][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1726.947427][ C1] CR2: 00007f439a5556c8 CR3: 00000000a6adc000 CR4: 00000000003526f0 [ 1726.947436][ C1] Call Trace: [ 1726.947441][ C1] [ 1726.947447][ C1] wait_for_lsr+0x13a/0x210 [ 1726.947465][ C1] serial8250_fifo_wait_for_lsr_thre+0x5f/0xd0 [ 1726.947481][ C1] __serial8250_console_fifo_write+0xa5/0x290 [ 1726.947497][ C1] ? __pfx_io_serial_out+0x10/0x10 [ 1726.947513][ C1] serial8250_console_write+0x1108/0x14f0 [ 1726.947534][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 1726.947551][ C1] ? __nbcon_context_update_unsafe+0x1b6/0x220 [ 1726.947569][ C1] ? __pfx___nbcon_context_update_unsafe+0x10/0x10 [ 1726.947590][ C1] nbcon_emit_next_record+0x8f7/0xa70 [ 1726.947609][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 1726.947626][ C1] ? nbcon_context_try_acquire+0x3a6/0xc60 [ 1726.947642][ C1] ? do_raw_spin_lock+0xf0/0x260 [ 1726.947658][ C1] ? __pfx___cant_migrate+0x10/0x10 [ 1726.947671][ C1] ? _raw_spin_lock_irqsave+0x42/0x60 [ 1726.947686][ C1] nbcon_emit_one+0x1a8/0x2b0 [ 1726.947702][ C1] ? __pfx_nbcon_emit_one+0x10/0x10 [ 1726.947722][ C1] nbcon_kthread_func+0x5ef/0x7f0 [ 1726.947741][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1726.947761][ C1] ? __kthread_parkme+0x18f/0x230 [ 1726.947780][ C1] ? kthread+0x13a/0x450 [ 1726.947792][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1726.947808][ C1] kthread+0x373/0x450 [ 1726.947820][ C1] ? __pfx_kthread+0x10/0x10 [ 1726.947834][ C1] ret_from_fork+0x730/0xd60 [ 1726.947851][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1726.947869][ C1] ? __switch_to+0x800/0x10e0 [ 1726.947881][ C1] ? __pfx_kthread+0x10/0x10 [ 1726.947895][ C1] ret_from_fork_asm+0x1a/0x30 [ 1726.947917][ C1] [ 1726.948889][T17693] Insert table=255 ac14140a/32 [ 1726.948986][T17693] AT ffff8880b0bc2700 s=40 16 [ 1726.948999][T17693] In tnode_resize ffff8880b0bc2720 inflate_threshold=50 threshold=25 [ 1726.949015][T17693] In inflate [ 1726.949032][T17693] AT ffff8880344ed000 s=40 32 [ 1726.949058][T17693] In tnode_resize ffff888036fd5020 inflate_threshold=50 threshold=25 [ 1726.949163][T16064] cb->arg bucket: 1640045, t ffffc9001b600000 n 0000000000000000 [ 1726.949178][T16064] cb->arg bucket: 1640046, t ffffc9001b600000 n 0000000000000000 [ 1726.949191][T16064] cb->arg bucket: 1640047, t ffffc9001b600000 n 0000000000000000 [ 1726.949203][T16064] cb->arg bucket: 1640048, t ffffc9001b600000 n 0000000000000000 [ 1726.949216][T16064] cb->arg bucket: 1640049, t ffffc9001b600000 n 0000000000000000 [ 1726.949228][T16064] cb->arg bucket: 1640050, t ffffc9001b600000 n 0000000000000000 [ 1726.949251][T16064] cb->arg bucket: 1640051, t ffffc9001b600000 n 0000000000000000 [ 1726.949263][T16064] cb->arg bucket: 1640052, t ffffc9001b600000 n 0000000000000000 [ 1726.949275][T16064] cb->arg bucket: 1640053, t ffffc9001b600000 n 0000000000000000 [ 1726.949288][T16064] cb->arg bucket: 1640054, t ffffc9001b600000 n 0000000000000000 [ 1726.949299][T16064] cb->arg bucket: 1640055, t ffffc9001b600000 n 0000000000000000 [ 1726.949312][T16064] cb->arg bucket: 1640056, t ffffc9001b600000 n 0000000000000000 [ 1726.949324][T16064] cb->arg bucket: 1640057, t ffffc9001b600000 n 0000000000000000 [ 1726.949336][T16064] cb->arg bucket: 1640058, t ffffc9001b600000 n 0000000000000000 [ 1726.949349][T16064] cb->arg bucket: 1640059, t ffffc9001b600000 n 0000000000000000 [ 1726.949360][T16064] cb->arg bucket: 1640060, t ffffc9001b600000 n 0000000000000000 [ 1726.949373][T16064] cb->arg bucket: 1640061, t ffffc9001b600000 n 0000000000000000 [ 1726.949385][T16064] cb->arg bucket: 1640062, t ffffc9001b600000 n 0000000000000000 [ 1726.949397][T16064] cb->arg bucket: 1640063, t ffffc9001b600000 n 0000000000000000 [ 1726.949410][T16064] cb->arg bucket: 1640064, t ffffc9001b600000 n 0000000000000000 [ 1726.949423][T16064] cb->arg bucket: 1640065, t ffffc9001b600000 n 0000000000000000 [ 1726.949435][T16064] cb->arg bucket: 1640066, t ffffc9001b600000 n 0000000000000000 [ 1726.949448][T16064] cb->arg bucket: 1640067, t ffffc9001b600000 n 0000000000000000 [ 1726.949460][T16064] cb->arg bucket: 1640068, t ffffc9001b600000 n 0000000000000000 [ 1726.949472][T16064] cb->arg bucket: 1640069, t ffffc9001b600000 n 0000000000000000 [ 1726.949484][T16064] cb->arg bucket: 1640070, t ffffc9001b600000 n 0000000000000000 [ 1726.949497][T16064] cb->arg bucket: 1640071, t ffffc9001b600000 n 0000000000000000 [ 1726.949509][T16064] cb->arg bucket: 1640072, t ffffc9001b600000 n 0000000000000000 [ 1726.949521][T16064] cb->arg bucket: 1640073, t ffffc9001b600000 n 0000000000000000 [ 1726.949533][T16064] cb->arg bucket: 1640074, t ffffc9001b600000 n 0000000000000000 [ 1726.949545][T16064] cb->arg bucket: 1640075, t ffffc9001b600000 n 0000000000000000 [ 1726.949558][T16064] cb->arg bucket: 1640076, t ffffc9001b600000 n 0000000000000000 [ 1726.949570][T16064] cb->arg bucket: 1640077, t ffffc9001b600000 n 0000000000000000 [ 1726.949587][T16064] cb->arg bucket: 1640078, t ffffc9001b600000 n 0000000000000000 [ 1726.949599][T16064] cb->arg bucket: 1640079, t ffffc9001b600000 n 0000000000000000 [ 1726.949612][T16064] cb->arg bucket: 1640080, t ffffc9001b600000 n 0000000000000000 [ 1726.949624][T16064] cb->arg bucket: 1640081, t ffffc9001b600000 n 0000000000000000 [ 1726.949637][T16064] cb->arg bucket: 1640082, t ffffc9001b600000 n 0000000000000000 [ 1726.949650][T16064] cb->arg bucket: 1640083, t ffffc9001b600000 n 0000000000000000 [ 1726.949663][T16064] cb->arg bucket: 1640084, t ffffc9001b600000 n 0000000000000000 [ 1726.949675][T16064] cb->arg bucket: 1640085, t ffffc9001b600000 n 0000000000000000 [ 1726.949688][T16064] cb->arg bucket: 1640086, t ffffc9001b600000 n 0000000000000000 [ 1726.949700][T16064] cb->arg bucket: 1640087, t ffffc9001b600000 n 0000000000000000 [ 1726.949713][T16064] cb->arg bucket: 1640088, t ffffc9001b600000 n 0000000000000000 [ 1726.949725][T16064] cb->arg bucket: 1640089, t ffffc9001b600000 n 0000000000000000 [ 1726.949737][T16064] cb->arg bucket: 1640090, t ffffc9001b600000 n 0000000000000000 [ 1726.949749][T16064] cb->arg bucket: 1640091, t ffffc9001b600000 n 0000000000000000 [ 1726.949762][T16064] cb->arg bucket: 1640092, t ffffc9001b600000 n 0000000000000000 [ 1726.949774][T16064] cb->arg bucket: 1640093, t ffffc9001b600000 n 0000000000000000 [ 1726.949786][T16064] cb->arg bucket: 1640094, t ffffc9001b600000 n 0000000000000000 [ 1726.949798][T16064] cb->arg bucket: 1640095, t ffffc9001b600000 n 0000000000000000 [ 1726.949810][T16064] cb->arg bucket: 1640096, t ffffc9001b600000 n 0000000000000000 [ 1726.949823][T16064] cb->arg bucket: 1640097, t ffffc9001b600000 n 0000000000000000 [ 1726.949835][T16064] cb->arg bucket: 1640098, t ffffc9001b600000 n 0000000000000000 [ 1726.949847][T16064] cb->arg bucket: 1640099, t ffffc9001b600000 n 0000000000000000 [ 1726.949860][T16064] cb->arg bucket: 1640100, t ffffc9001b600000 n 0000000000000000 [ 1726.949872][T16064] cb->arg bucket: 1640101, t ffffc9001b600000 n 0000000000000000 [ 1726.949884][T16064] cb->arg bucket: 1640102, t ffffc9001b600000 n 0000000000000000 [ 1726.949896][T16064] cb->arg bucket: 1640103, t ffffc9001b600000 n 0000000000000000 [ 1726.949909][T16064] cb->arg bucket: 1640104, t ffffc9001b600000 n 0000000000000000 [ 1726.949921][T16064] cb->arg bucket: 1640105, t ffffc9001b600000 n 0000000000000000 [ 1726.949933][T16064] cb->arg bucket: 1640106, t ffffc9001b600000 n 0000000000000000 [ 1726.949946][T16064] cb->arg bucket: 1640107, t ffffc9001b600000 n 0000000000000000 [ 1726.949958][T16064] cb->arg bucket: 1640108, t ffffc9001b600000 n 0000000000000000 [ 1726.949970][T16064] cb->arg bucket: 1640109, t ffffc9001b600000 n 0000000000000000 [ 1726.949982][T16064] cb->arg bucket: 1640110, t ffffc9001b600000 n 0000000000000000 [ 1726.949995][T16064] cb->arg bucket: 1640111, t ffffc9001b600000 n 0000000000000000 [ 1726.950007][T16064] cb->arg bucket: 1640112, t ffffc9001b600000 n 0000000000000000 [ 1726.950019][T16064] cb->arg bucket: 1640113, t ffffc9001b600000 n 0000000000000000 [ 1726.950032][T16064] cb->arg bucket: 1640114, t ffffc9001b600000 n 0000000000000000 [ 1726.950044][T16064] cb->arg bucket: 1640115, t ffffc9001b600000 n 0000000000000000 [ 1726.950056][T16064] cb->arg bucket: 1640116, t ffffc9001b600000 n 0000000000000000 [ 1726.950068][T16064] cb->arg bucket: 1640117, t ffffc9001b600000 n 0000000000000000 [ 1726.950080][T16064] cb->arg bucket: 1640118, t ffffc9001b600000 n 0000000000000000 [ 1726.950093][T16064] cb->arg bucket: 1640119, t ffffc9001b600000 n 0000000000000000 [ 1726.950105][T16064] cb->arg bucket: 1640120, t ffffc9001b600000 n 0000000000000000 [ 1726.950117][T16064] cb->arg bucket: 1640121, t ffffc9001b600000 n 0000000000000000 [ 1726.950129][T16064] cb->arg bucket: 1640122, t ffffc9001b600000 n 0000000000000000 [ 1726.950142][T16064] cb->arg bucket: 1640123, t ffffc9001b600000 n 0000000000000000 [ 1726.950154][T16064] cb->arg bucket: 1640124, t ffffc9001b600000 n 0000000000000000 [ 1726.950166][T16064] cb->arg bucket: 1640125, t ffffc9001b600000 n 0000000000000000 [ 1726.950178][T16064] cb->arg bucket: 1640126, t ffffc9001b600000 n 0000000000000000 [ 1726.950190][T16064] cb->arg bucket: 1640127, t ffffc9001b600000 n 0000000000000000 [ 1726.950203][T16064] cb->arg bucket: 1640128, t ffffc9001b600000 n 0000000000000000 [ 1726.950215][T16064] cb->arg bucket: 1640129, t ffffc9001b600000 n 0000000000000000 [ 1726.950228][T16064] cb->arg bucket: 1640130, t ffffc9001b600000 n 0000000000000000 [ 1726.950240][T16064] cb->arg bucket: 1640131, t ffffc9001b600000 n 0000000000000000 [ 1726.950253][T16064] cb->arg bucket: 1640132, t ffffc9001b600000 n 0000000000000000 [ 1726.950265][T16064] cb->arg bucket: 1640133, t ffffc9001b600000 n 0000000000000000 [ 1726.950277][T16064] cb->arg bucket: 1640134, t ffffc9001b600000 n 0000000000000000 [ 1726.950290][T16064] cb->arg bucket: 1640135, t ffffc9001b600000 n 0000000000000000 [ 1726.950302][T16064] cb->arg bucket: 1640136, t ffffc9001b600000 n 0000000000000000 [ 1726.950314][T16064] cb->arg bucket: 1640137, t ffffc9001b600000 n 0000000000000000 [ 1726.950327][T16064] cb->arg bucket: 1640138, t ffffc9001b600000 n 0000000000000000 [ 1726.950339][T16064] cb->arg bucket: 1640139, t ffffc9001b600000 n 0000000000000000 [ 1726.950351][T16064] cb->arg bucket: 1640140, t ffffc9001b600000 n 0000000000000000 [ 1726.950364][T16064] cb->arg bucket: 1640141, t ffffc9001b600000 n 0000000000000000 [ 1726.950376][T16064] cb->arg bucket: 1640142, t ffffc9001b600000 n 0000000000000000 [ 1726.950389][T16064] cb->arg bucket: 1640143, t ffffc9001b600000 n 0000000000000000 [ 1726.950401][T16064] cb->arg bucket: 1640144, t ffffc9001b600000 n 0000000000000000 [ 1726.950413][T16064] cb->arg bucket: 1640145, t ffffc9001b600000 n 0000000000000000 [ 1726.950425][T16064] cb->arg bucket: 1640146, t ffffc9001b600000 n 0000000000000000 [ 1726.950437][T16064] cb->arg bucket: 1640147, t ffffc9001b600000 n 0000000000000000 [ 1726.950450][T16064] cb->arg bucket: 1640148, t ffffc9001b600000 n 0000000000000000 [ 1726.950462][T16064] cb->arg bucket: 1640149, t ffffc9001b600000 n 0000000000000000 [ 1726.950475][T16064] cb->arg bucket: 1640150, t ffffc9001b600000 n 0000000000000000 [ 1726.950487][T16064] cb->arg bucket: 1640151, t ffffc9001b600000 n 0000000000000000 [ 1726.950499][T16064] cb->arg bucket: 1640152, t ffffc9001b600000 n 0000000000000000 [ 1726.950512][T16064] cb->arg bucket: 1640153, t ffffc9001b600000 n 0000000000000000 [ 1726.950524][T16064] cb->arg bucket: 1640154, t ffffc9001b600000 n 0000000000000000 [ 1726.950537][T16064] cb->arg bucket: 1640155, t ffffc9001b600000 n 0000000000000000 [ 1726.950549][T16064] cb->arg bucket: 1640156, t ffffc9001b600000 n 0000000000000000 [ 1726.950562][T16064] cb->arg bucket: 1640157, t ffffc9001b600000 n 0000000000000000 [ 1726.950574][T16064] cb->arg bucket: 1640158, t ffffc9001b600000 n 0000000000000000 [ 1726.950591][T16064] cb->arg bucket: 1640159, t ffffc9001b600000 n 0000000000000000 [ 1726.950604][T16064] cb->arg bucket: 1640160, t ffffc9001b600000 n 0000000000000000 [ 1726.950616][T16064] cb->arg bucket: 1640161, t ffffc9001b600000 n 0000000000000000 [ 1726.950628][T16064] cb->arg bucket: 1640162, t ffffc9001b600000 n 0000000000000000 [ 1726.950640][T16064] cb->arg bucket: 1640163, t ffffc9001b600000 n 0000000000000000 [ 1726.950653][T16064] cb->arg bucket: 1640164, t ffffc9001b600000 n 0000000000000000 [ 1726.950666][T16064] cb->arg bucket: 1640165, t ffffc9001b600000 n 0000000000000000 [ 1726.950678][T16064] cb->arg bucket: 1640166, t ffffc9001b600000 n 0000000000000000 [ 1726.950691][T16064] cb->arg bucket: 1640167, t ffffc9001b600000 n 0000000000000000 [ 1726.950941][ T14] ieee80211 phy41: mac80211_hwsim_configure_filter [ 1726.986361][T17693] IPv6: now = 4295109894, schedule = 4295121900, rounded schedule = 4295122000 => 4295121900 [ 1726.986415][T17749] debugfs: creating file 'netdev@ffff8880b2916720' [ 1726.986645][T17749] virt_wifi0 (uninitialized): bond_netdev_event received NETDEV_POST_INIT [ 1726.986663][T17749] (null): siw: event 17 [ 1726.986720][T17749] device: 'virt_wifi0': device_add [ 1726.986736][T17749] kobject: 'virt_wifi0' (ffff8880b29167e0): kobject_add_internal: parent: 'net', set: 'devices' [ 1726.988919][T16064] cb->arg bucket: 1640168, t ffffc9001b600000 n 0000000000000000 [ 1726.988936][T16064] cb->arg bucket: 1640169, t ffffc9001b600000 n 0000000000000000 [ 1726.988948][T16064] cb->arg bucket: 1640170, t ffffc9001b600000 n 0000000000000000 [ 1726.988961][T16064] cb->arg bucket: 1640171, t ffffc9001b600000 n 0000000000000000 [ 1726.988974][T16064] cb->arg bucket: 1640172, t ffffc9001b600000 n 0000000000000000 [ 1726.988986][T16064] cb->arg bucket: 1640173, t ffffc9001b600000 n 0000000000000000 [ 1726.988999][T16064] cb->arg bucket: 1640174, t ffffc9001b600000 n 0000000000000000 [ 1726.989011][T16064] cb->arg bucket: 1640175, t ffffc9001b600000 n 0000000000000000 [ 1726.989027][T16064] cb->arg bucket: 1640176, t ffffc9001b600000 n 0000000000000000 [ 1726.989039][T16064] cb->arg bucket: 1640177, t ffffc9001b600000 n 0000000000000000 [ 1726.989051][T16064] cb->arg bucket: 1640178, t ffffc9001b600000 n 0000000000000000 [ 1726.989064][T16064] cb->arg bucket: 1640179, t ffffc9001b600000 n 0000000000000000 [ 1726.989076][T16064] cb->arg bucket: 1640180, t ffffc9001b600000 n 0000000000000000 [ 1726.989088][T16064] cb->arg bucket: 1640181, t ffffc9001b600000 n 0000000000000000 [ 1726.989100][T16064] cb->arg bucket: 1640182, t ffffc9001b600000 n 0000000000000000 [ 1726.989113][T16064] cb->arg bucket: 1640183, t ffffc9001b600000 n 0000000000000000 [ 1726.989125][T16064] cb->arg bucket: 1640184, t ffffc9001b600000 n 0000000000000000 [ 1726.989137][T16064] cb->arg bucket: 1640185, t ffffc9001b600000 n 0000000000000000 [ 1726.989149][T16064] cb->arg bucket: 1640186, t ffffc9001b600000 n 0000000000000000 [ 1726.989162][T16064] cb->arg bucket: 1640187, t ffffc9001b600000 n 0000000000000000 [ 1726.989174][T16064] cb->arg bucket: 1640188, t ffffc9001b600000 n 0000000000000000 [ 1726.989186][T16064] cb->arg bucket: 1640189, t ffffc9001b600000 n 0000000000000000 [ 1726.989198][T16064] cb->arg bucket: 1640190, t ffffc9001b600000 n 0000000000000000 [ 1726.989221][T16064] cb->arg bucket: 1640191, t ffffc9001b600000 n 0000000000000000 [ 1726.989234][T16064] cb->arg bucket: 1640192, t ffffc9001b600000 n 0000000000000000 [ 1726.989246][T16064] cb->arg bucket: 1640193, t ffffc9001b600000 n 0000000000000000 [ 1726.989259][T16064] cb->arg bucket: 1640194, t ffffc9001b600000 n 0000000000000000 [ 1726.989271][T16064] cb->arg bucket: 1640195, t ffffc9001b600000 n 0000000000000000 [ 1726.989283][T16064] cb->arg bucket: 1640196, t ffffc9001b600000 n 0000000000000000 [ 1726.989296][T16064] cb->arg bucket: 1640197, t ffffc9001b600000 n 0000000000000000 [ 1726.989308][T16064] cb->arg bucket: 1640198, t ffffc9001b600000 n 0000000000000000 [ 1726.989320][T16064] cb->arg bucket: 1640199, t ffffc9001b600000 n 0000000000000000 [ 1726.989332][T16064] cb->arg bucket: 1640200, t ffffc9001b600000 n 0000000000000000 [ 1726.989345][T16064] cb->arg bucket: 1640201, t ffffc9001b600000 n 0000000000000000 [ 1726.989357][T16064] cb->arg bucket: 1640202, t ffffc9001b600000 n 0000000000000000 [ 1726.989370][T16064] cb->arg bucket: 1640203, t ffffc9001b600000 n 0000000000000000 [ 1726.989382][T16064] cb->arg bucket: 1640204, t ffffc9001b600000 n 0000000000000000 [ 1726.989395][T16064] cb->arg bucket: 1640205, t ffffc9001b600000 n 0000000000000000 [ 1726.989407][T16064] cb->arg bucket: 1640206, t ffffc9001b600000 n 0000000000000000 [ 1726.989419][T16064] cb->arg bucket: 1640207, t ffffc9001b600000 n 0000000000000000 [ 1726.989431][T16064] cb->arg bucket: 1640208, t ffffc9001b600000 n 0000000000000000 [ 1726.989444][T16064] cb->arg bucket: 1640209, t ffffc9001b600000 n 0000000000000000 [ 1726.989456][T16064] cb->arg bucket: 1640210, t ffffc9001b600000 n 0000000000000000 [ 1726.989468][T16064] cb->arg bucket: 1640211, t ffffc9001b600000 n 0000000000000000 [ 1726.989480][T16064] cb->arg bucket: 1640212, t ffffc9001b600000 n 0000000000000000 [ 1726.989492][T16064] cb->arg bucket: 1640213, t ffffc9001b600000 n 0000000000000000 [ 1726.989505][T16064] cb->arg bucket: 1640214, t ffffc9001b600000 n 0000000000000000 [ 1726.989517][T16064] cb->arg bucket: 1640215, t ffffc9001b600000 n 0000000000000000 [ 1726.989530][T16064] cb->arg bucket: 1640216, t ffffc9001b600000 n 0000000000000000 [ 1726.989542][T16064] cb->arg bucket: 1640217, t ffffc9001b600000 n 0000000000000000 [ 1726.989555][T16064] cb->arg bucket: 1640218, t ffffc9001b600000 n 0000000000000000 [ 1726.989567][T16064] cb->arg bucket: 1640219, t ffffc9001b600000 n 0000000000000000 [ 1726.989583][T16064] cb->arg bucket: 1640220, t ffffc9001b600000 n 0000000000000000 [ 1726.989596][T16064] cb->arg bucket: 1640221, t ffffc9001b600000 n 0000000000000000 [ 1726.989608][T16064] cb->arg bucket: 1640222, t ffffc9001b600000 n 0000000000000000 [ 1726.989621][T16064] cb->arg bucket: 1640223, t ffffc9001b600000 n 0000000000000000 [ 1726.989634][T16064] cb->arg bucket: 1640224, t ffffc9001b600000 n 0000000000000000 [ 1726.989647][T16064] cb->arg bucket: 1640225, t ffffc9001b600000 n 0000000000000000 [ 1726.989659][T16064] cb->arg bucket: 1640226, t ffffc9001b600000 n 0000000000000000 [ 1726.989671][T16064] cb->arg bucket: 1640227, t ffffc9001b600000 n 0000000000000000 [ 1726.989684][T16064] cb->arg bucket: 1640228, t ffffc9001b600000 n 0000000000000000 [ 1726.989697][T16064] cb->arg bucket: 1640229, t ffffc9001b600000 n 0000000000000000 [ 1726.989709][T16064] cb->arg bucket: 1640230, t ffffc9001b600000 n 0000000000000000 [ 1726.989722][T16064] cb->arg bucket: 1640231, t ffffc9001b600000 n 0000000000000000 [ 1726.989735][T16064] cb->arg bucket: 1640232, t ffffc9001b600000 n 0000000000000000 [ 1726.989747][T16064] cb->arg bucket: 1640233, t ffffc9001b600000 n 0000000000000000 [ 1726.989760][T16064] cb->arg bucket: 1640234, t ffffc9001b600000 n 0000000000000000 [ 1726.989773][T16064] cb->arg bucket: 1640235, t ffffc9001b600000 n 0000000000000000 [ 1726.989785][T16064] cb->arg bucket: 1640236, t ffffc9001b600000 n 0000000000000000 [ 1726.989798][T16064] cb->arg bucket: 1640237, t ffffc9001b600000 n 0000000000000000 [ 1726.989810][T16064] cb->arg bucket: 1640238, t ffffc9001b600000 n 0000000000000000 [ 1726.989823][T16064] cb->arg bucket: 1640239, t ffffc9001b600000 n 0000000000000000 [ 1726.989836][T16064] cb->arg bucket: 1640240, t ffffc9001b600000 n 0000000000000000 [ 1726.989848][T16064] cb->arg bucket: 1640241, t ffffc9001b600000 n 0000000000000000 [ 1726.989861][T16064] cb->arg bucket: 1640242, t ffffc9001b600000 n 0000000000000000 [ 1726.989873][T16064] cb->arg bucket: 1640243, t ffffc9001b600000 n 0000000000000000 [ 1726.989885][T16064] cb->arg bucket: 1640244, t ffffc9001b600000 n 0000000000000000 [ 1726.989898][T16064] cb->arg bucket: 1640245, t ffffc9001b600000 n 0000000000000000 [ 1726.989910][T16064] cb->arg bucket: 1640246, t ffffc9001b600000 n 0000000000000000 [ 1726.989923][T16064] cb->arg bucket: 1640247, t ffffc9001b600000 n 0000000000000000 [ 1726.989935][T16064] cb->arg bucket: 1640248, t ffffc9001b600000 n 0000000000000000 [ 1726.989948][T16064] cb->arg bucket: 1640249, t ffffc9001b600000 n 0000000000000000 [ 1726.989960][T16064] cb->arg bucket: 1640250, t ffffc9001b600000 n 0000000000000000 [ 1726.989973][T16064] cb->arg bucket: 1640251, t ffffc9001b600000 n 0000000000000000 [ 1726.989985][T16064] cb->arg bucket: 1640252, t ffffc9001b600000 n 0000000000000000 [ 1726.989997][T16064] cb->arg bucket: 1640253, t ffffc9001b600000 n 0000000000000000 [ 1726.990010][T16064] cb->arg bucket: 1640254, t ffffc9001b600000 n 0000000000000000 [ 1726.990022][T16064] cb->arg bucket: 1640255, t ffffc9001b600000 n 0000000000000000 [ 1726.990034][T16064] cb->arg bucket: 1640256, t ffffc9001b600000 n 0000000000000000 [ 1726.990047][T16064] cb->arg bucket: 1640257, t ffffc9001b600000 n 0000000000000000 [ 1726.990060][T16064] cb->arg bucket: 1640258, t ffffc9001b600000 n 0000000000000000 [ 1726.990072][T16064] cb->arg bucket: 1640259, t ffffc9001b600000 n 0000000000000000 [ 1726.990085][T16064] cb->arg bucket: 1640260, t ffffc9001b600000 n 0000000000000000 [ 1726.990098][T16064] cb->arg bucket: 1640261, t ffffc9001b600000 n 0000000000000000 [ 1726.990110][T16064] cb->arg bucket: 1640262, t ffffc9001b600000 n 0000000000000000 [ 1726.990123][T16064] cb->arg bucket: 1640263, t ffffc9001b600000 n 0000000000000000 [ 1726.990135][T16064] cb->arg bucket: 1640264, t ffffc9001b600000 n 0000000000000000 [ 1726.990147][T16064] cb->arg bucket: 1640265, t ffffc9001b600000 n 0000000000000000 [ 1726.990160][T16064] cb->arg bucket: 1640266, t ffffc9001b600000 n 0000000000000000 [ 1726.990172][T16064] cb->arg bucket: 1640267, t ffffc9001b600000 n 0000000000000000 [ 1726.990184][T16064] cb->arg bucket: 1640268, t ffffc9001b600000 n 0000000000000000 [ 1726.990196][T16064] cb->arg bucket: 1640269, t ffffc9001b600000 n 0000000000000000 [ 1726.990208][T16064] cb->arg bucket: 1640270, t ffffc9001b600000 n 0000000000000000 [ 1726.990221][T16064] cb->arg bucket: 1640271, t ffffc9001b600000 n 0000000000000000 [ 1726.990234][T16064] cb->arg bucket: 1640272, t ffffc9001b600000 n 0000000000000000 [ 1726.990246][T16064] cb->arg bucket: 1640273, t ffffc9001b600000 n 0000000000000000 [ 1726.990259][T16064] cb->arg bucket: 1640274, t ffffc9001b600000 n 0000000000000000 [ 1726.990271][T16064] cb->arg bucket: 1640275, t ffffc9001b600000 n 0000000000000000 [ 1726.990283][T16064] cb->arg bucket: 1640276, t ffffc9001b600000 n 0000000000000000 [ 1726.990296][T16064] cb->arg bucket: 1640277, t ffffc9001b600000 n 0000000000000000 [ 1726.990309][T16064] cb->arg bucket: 1640278, t ffffc9001b600000 n 0000000000000000 [ 1726.990321][T16064] cb->arg bucket: 1640279, t ffffc9001b600000 n 0000000000000000 [ 1726.990333][T16064] cb->arg bucket: 1640280, t ffffc9001b600000 n 0000000000000000 [ 1726.990346][T16064] cb->arg bucket: 1640281, t ffffc9001b600000 n 0000000000000000 [ 1726.990358][T16064] cb->arg bucket: 1640282, t ffffc9001b600000 n 0000000000000000 [ 1726.990370][T16064] cb->arg bucket: 1640283, t ffffc9001b600000 n 0000000000000000 [ 1726.990382][T16064] cb->arg bucket: 1640284, t ffffc9001b600000 n 0000000000000000 [ 1726.990395][T16064] cb->arg bucket: 1640285, t ffffc9001b600000 n 0000000000000000 [ 1726.990456][ T33] Kernel panic - not syncing: hung_task: blocked tasks [ 1732.388122][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1732.398785][ T33] Tainted: [L]=SOFTLOCKUP [ 1732.403084][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1732.413120][ T33] Call Trace: [ 1732.416376][ T33] [ 1732.419288][ T33] dump_stack_lvl+0x100/0x190 [ 1732.423951][ T33] vpanic+0x2dc/0x6f8 [ 1732.427931][ T33] panic+0xd1/0xe0 [ 1732.431649][ T33] ? __pfx_panic+0x10/0x10 [ 1732.436068][ T33] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 1732.442217][ T33] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 1732.448356][ T33] ? watchdog.cold+0x20/0x26d [ 1732.453026][ T33] watchdog.cold+0x31/0x26d [ 1732.457518][ T33] ? __pfx_watchdog+0x10/0x10 [ 1732.462182][ T33] ? __kthread_parkme+0x18f/0x230 [ 1732.467206][ T33] ? kthread+0x13a/0x450 [ 1732.471442][ T33] ? __pfx_watchdog+0x10/0x10 [ 1732.476100][ T33] kthread+0x373/0x450 [ 1732.480167][ T33] ? __pfx_kthread+0x10/0x10 [ 1732.484740][ T33] ret_from_fork+0x730/0xd60 [ 1732.489326][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 1732.494424][ T33] ? __switch_to+0x800/0x10e0 [ 1732.499074][ T33] ? __pfx_kthread+0x10/0x10 [ 1732.503652][ T33] ret_from_fork_asm+0x1a/0x30 [ 1732.508411][ T33] [ 1732.511517][ T33] Kernel Offset: disabled [ 1732.515822][ T33] Rebooting in 86400 seconds..