last executing test programs: 14m4.970754996s ago: executing program 32 (id=333): r0 = gettid() r1 = epoll_create(0x3fc) r2 = eventfd(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r2, &(0x7f0000000080)={r1, r2, 0x1000000}) 11m29.597679619s ago: executing program 33 (id=2134): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x18, &(0x7f0000000000)=0xc, 0xff0a) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100), 0xda4917b22985da93, 0x400c885, &(0x7f00000003c0)={0x11, 0x11, r2, 0x1, 0xe8, 0x6, @random="c0f424a1f50d"}, 0x14) 10m56.474638601s ago: executing program 34 (id=2393): r0 = open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x84) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32=r0], 0x2b) sendfile(r2, r0, 0x0, 0x4000000053d2) 9m9.314783751s ago: executing program 35 (id=3367): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000100)=0x4, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x11, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r1, &(0x7f0000000440), &(0x7f0000000480)=@udp=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000540), &(0x7f0000000580)=r0}, 0x20) 7m34.867848789s ago: executing program 6 (id=4111): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001680)={r2, r1, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002180)=ANY=[], 0x0}, 0x94) syz_emit_ethernet(0x11dc0, &(0x7f0000000080)=ANY=[], 0x0) 7m34.562792104s ago: executing program 6 (id=4117): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0x10}, {0xb, 0x7}}}, 0x24}}, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x4, [@fwd={0x2}, @typedef={0x1}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x5, [{0x1, 0x2}]}]}, {0x0, [0x5f, 0x4f]}}, &(0x7f0000000500)=""/4096, 0x4c, 0x1000, 0xa}, 0x28) 7m34.339099386s ago: executing program 6 (id=4120): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x1000007, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_128={{0x304}, "a4c51a4d1bc77a24", "245586e7cae61db3a53c3b701d5a3efe", "0a1ad2f4", "63fd2e1ecc22a424"}, 0x28) setsockopt$inet6_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f0000000200)=@gcm_128={{0x304}, "3b4ab2c1144068b2", "963e11e0be5f9fd4fa47d22055202c7b", "9df00001", "b327c6e40e868fa2"}, 0x28) 7m33.814749528s ago: executing program 6 (id=4122): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x1b9047, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mkdir(&(0x7f00000003c0)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x6000, 0x0) 7m33.695684598s ago: executing program 6 (id=4124): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000100)='./file0\x00', 0x6000068d) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200018"], 0x69) close(r0) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 7m32.257657419s ago: executing program 6 (id=4134): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 7m31.956772639s ago: executing program 36 (id=4134): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 7m4.828497188s ago: executing program 8 (id=4297): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 7m4.345567228s ago: executing program 8 (id=4300): r0 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) 7m3.271811346s ago: executing program 8 (id=4303): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000030000000200000002"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800) 7m2.915042829s ago: executing program 8 (id=4306): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x0, &(0x7f0000000540)='./file0/../file0\x00', 0x0, 0x24000, 0x0) 7m2.27787828s ago: executing program 8 (id=4310): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@deltfilter={0x24, 0x2d, 0x300, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x10, 0x7}, {0x2, 0x5}, {0xfffc, 0x9}}}, 0x24}}, 0x4000004) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="90000000000101060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c000280050001000600000006000200001500000600030004d20000080007000000012c0c0005800800010066747000"], 0x90}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="c8000000000201060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c00028005000100060000000600020000140000060003009c400000340003801400018008000100ffffffff08000200ffffffff1c00028005000100ff000000060002000000000006000300ffff000016000b006e61742d666f6c6c6f772d6d6173746572000000"], 0xc8}}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x1, 0x2, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_EXPECT_NAT={0xc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_HELP_NAME={0xa, 0x6, 'H.245\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004090}, 0x90) 6m59.539594692s ago: executing program 8 (id=4320): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@empty, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 6m59.126353129s ago: executing program 37 (id=4320): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@empty, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 6m40.590323507s ago: executing program 5 (id=4431): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000009, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x8031, 0xffffffffffffffff, 0xffffd000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x700}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 6m39.362354118s ago: executing program 5 (id=4436): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r1, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 6m38.051848464s ago: executing program 5 (id=4442): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6m37.462785215s ago: executing program 5 (id=4446): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0) 6m37.40235013s ago: executing program 7 (id=4447): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$getflags(r2, 0x401) 6m37.38017381s ago: executing program 5 (id=4448): r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0xf08, &(0x7f0000000300)={0x0, 0xfefffffe, 0x10, 0x3, 0x200003ca}, &(0x7f0000000580)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x2, 0x4001, @remote}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(r0, 0x1) 6m37.262533673s ago: executing program 7 (id=4449): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x1000) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000440)) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x4000) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x25) 6m36.824167591s ago: executing program 7 (id=4452): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xc8}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 6m36.691982452s ago: executing program 7 (id=4453): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 6m36.616748153s ago: executing program 7 (id=4454): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) 6m35.786259617s ago: executing program 7 (id=4459): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) add_key(0x0, 0x0, &(0x7f0000000200)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f323132343033", 0x84, 0xfffffffffffffffd) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/12/smp_affinity\x00', 0x1, 0x6) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000280)=ANY=[], 0x8) 6m35.499195149s ago: executing program 38 (id=4459): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) add_key(0x0, 0x0, &(0x7f0000000200)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f323132343033", 0x84, 0xfffffffffffffffd) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/12/smp_affinity\x00', 0x1, 0x6) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000280)=ANY=[], 0x8) 6m35.209874668s ago: executing program 5 (id=4462): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 6m34.901456378s ago: executing program 39 (id=4462): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 6m16.320717021s ago: executing program 9 (id=4523): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc0010140}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a"], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x8}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x8, 0x4) write(r0, &(0x7f0000000040)="a9", 0x1) 6m15.906047944s ago: executing program 9 (id=4524): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) set_mempolicy(0x3, &(0x7f0000000280)=0x13, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x78bd30, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x6, 0xfff3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0xc) 6m12.348300004s ago: executing program 9 (id=4537): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80042, 0x0) io_setup(0x3, &(0x7f0000000600)=0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000340)='./file0\x00', 0x20000700) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000080)={0x0, 0x0, 0x10, 0x7, 0x0, r0, 0x0, 0x0, 0x6fa, 0x0, 0x2, r0}]) 6m11.74867057s ago: executing program 9 (id=4538): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x185093, 0x0) 6m11.591777727s ago: executing program 9 (id=4539): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6m10.02592262s ago: executing program 9 (id=4544): r0 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000300)={0x1}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 6m9.476062656s ago: executing program 40 (id=4544): r0 = syz_open_dev$video(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000300)={0x1}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 5m14.386622541s ago: executing program 0 (id=4734): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000600)={0x0, 0x30b5, 0x0, 0x3, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x65}}}, &(0x7f0000000540)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x181}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x92e0, 0x2, 0x0, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x2, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x2000, 0xffffffff, 0x801f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x10002, 0x367, 0x0, r6}}], 0x1, &(0x7f0000000340)={0x2e, 0x55, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x1, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xa, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) 5m13.273967344s ago: executing program 0 (id=4742): capset(&(0x7f00000020c0)={0x20071026}, &(0x7f0000002100)={0x8, 0xc, 0x0, 0x0, 0x80000000, 0x4}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001400add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 5m13.005766315s ago: executing program 0 (id=4745): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000080)=0x40006, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540), 0xff59, 0x4004040, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/27, 0x1b}, 0x3c5a}], 0x1, 0xe1fd83b03efc5f3e, 0x0) 5m12.825188937s ago: executing program 0 (id=4749): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r2, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x89, 0x0, 0x80000}, 0x20) 5m12.651844988s ago: executing program 0 (id=4751): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd2c, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xcb, r2}, [@IFA_BROADCAST={0x8, 0x4, @multicast2}, @IFA_ADDRESS={0x8, 0x1, @local}, @IFA_LOCAL={0x8, 0x2, @local}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_RT_PRIORITY={0x8, 0x9, 0x4}, @IFA_RT_PRIORITY={0x8, 0x9, 0x107}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040095}, 0xc000044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 5m10.748387617s ago: executing program 0 (id=4768): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000400)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2180, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8597, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x2, 0x2e9, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2000000d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 5m2.013688467s ago: executing program 2 (id=4817): mount(0x0, 0x0, 0x0, 0x100800c, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c000000020601020000000000000000000000000c000780080012400000000616000300686173683a6e65742c706f72742c6e6574000000050005000a00000005000400020000000900020073797a31000000000500010007000000072b1de4d1a4edb2644c5cdaa9b7bbb7b5904accca27"], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 4m56.143995813s ago: executing program 2 (id=4835): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c0002800500010000000000080007"], 0x138}}, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="d4000000000101040000000000000000020000002400018014000180080001007f00000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000030000080008400000000a0400164008001540000000030400170058000d"], 0xd4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 4m55.569638974s ago: executing program 2 (id=4837): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 4m55.28825204s ago: executing program 2 (id=4839): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x3000096, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0\x00') 4m54.169838524s ago: executing program 2 (id=4845): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000380)={0x2, 0x84, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x6) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0xfff}, &(0x7f0000000080)=0x8) 4m50.493121043s ago: executing program 2 (id=4864): r0 = socket$inet(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000100)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1fa) mount$nfs4(&(0x7f0000000440)='127.0.0.1:/\x00', &(0x7f0000000480)='./mnt\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,proto=tcp']) accept(r0, &(0x7f0000000140)=@ieee802154={0x24, @long}, 0x0) 4m50.277705613s ago: executing program 41 (id=4864): r0 = socket$inet(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000100)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1fa) mount$nfs4(&(0x7f0000000440)='127.0.0.1:/\x00', &(0x7f0000000480)='./mnt\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,proto=tcp']) accept(r0, &(0x7f0000000140)=@ieee802154={0x24, @long}, 0x0) 2m28.599536382s ago: executing program 4 (id=5364): r0 = io_uring_setup(0x3bda, &(0x7f0000000300)={0x0, 0xbbc7, 0x10, 0x2, 0x20000c}) close(r0) r1 = msgget$private(0x0, 0x193) msgsnd(r1, &(0x7f0000000240)=ANY=[@ANYRES16], 0x8, 0x0) msgsnd(r1, &(0x7f0000000d40)=ANY=[@ANYBLOB="03"], 0x3f9, 0x0) msgrcv(r1, &(0x7f0000000180)={0x0, ""/152}, 0xa0, 0x3, 0x2000) 2m28.034754264s ago: executing program 4 (id=5367): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="8e"], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) 2m27.099075671s ago: executing program 4 (id=5370): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000000)={0x48, 0x1, r1, 0x0, 0x1, 0x3ff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x1, r1, 0x0, 0x0, 0x200000000000008}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000079c0)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x40}) 2m26.788062801s ago: executing program 4 (id=5372): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) setns(0xc9, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c000) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}, @rights={{0x10}}], 0x20, 0x4}, 0x4000004) 2m24.739709122s ago: executing program 4 (id=5375): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x400e1, &(0x7f000005ffe4)={0xa, 0xffff, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000480)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x0, 0x0) 2m23.678604611s ago: executing program 4 (id=5378): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='udp 2049\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='0\n', 0x2) 2m8.243451177s ago: executing program 42 (id=5378): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='udp 2049\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='0\n', 0x2) 5.333399386s ago: executing program 1 (id=5792): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49dd, 0xfeff, 0x9, 0x1, 0xb, "fa3d76170000001b"}) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x5000000d, 0x244, 0x9, '\x00=\x00'}) r1 = syz_open_pts(r0, 0x400) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 3.927651566s ago: executing program 1 (id=5794): r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r3, r1, 0x25, 0x2, @val=@netfilter={0x0, 0x3, 0x2018}}, 0x20) syz_emit_ethernet(0x16, &(0x7f00000000c0)=ANY=[], 0x0) 3.440991055s ago: executing program 1 (id=5796): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r1 = syz_clone(0x20100000, 0x0, 0xffffffffffffffcc, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000400)='status\x00') pread64(r2, &(0x7f0000000440)=""/59, 0x3b, 0x40000000009) 2.77536824s ago: executing program 1 (id=5798): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.376353478s ago: executing program 1 (id=5799): socket$tipc(0x1e, 0x2, 0x0) r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x2, 0xc07, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x180}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000400)={0x0, 0xab79, 0x800, 0x11, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9f92, 0x200, 0x1006, 0x15a, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcbdd, 0x800, 0x0, 0x146, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x488de, 0x200, 0x3, 0x139}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x44, 0x800, 0x0, 0x800bd}}], 0x1, &(0x7f0000000340)={0x2e, 0x2c, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x1, {}, 0x1f, r4, '\x00', {0x0, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 1.653473212s ago: executing program 1 (id=5800): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ncm(0x4, 0x75, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100102fbff402505a1a44000010203010902630002014020090904000001f10c0000052406000105240010000d240f01ff000000030002000806241a60252807240aa69b050509058103ff03f0020e0904010800000000000904010102020d000009058202ff030578000905030289cc012020db43f94df8cbbb29af001b4e11cd92f264f74e659502"], 0x0) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x4c040) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.440010823s ago: executing program 3 (id=5802): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000003440)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) bind$rds(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x5, 0x0}}, 0x10, &(0x7f0000001540)=[{&(0x7f0000000300)=""/98, 0x62}], 0x1, &(0x7f0000000180)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x1}, @rdma_dest={0x18, 0x114, 0x2, {0x3, 0x9}}], 0x30}, 0x4000000) 1.260910603s ago: executing program 3 (id=5803): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0x1, 0x4) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x4040004) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000040), 0x10, &(0x7f0000000480)=""/230}}], 0x2, 0x0, 0x0) 1.119049319s ago: executing program 3 (id=5804): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) preadv2(r0, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x2) 893.989691ms ago: executing program 3 (id=5805): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x80080, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r1, &(0x7f0000000100), 0x0}, 0x20) 679.770485ms ago: executing program 3 (id=5806): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x8000000c}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x20000014}) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=5807): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006000000000005"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x10, 0x0, 0xfe, r2}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010104}, @IFA_LOCAL={0x8, 0x2, @local}, @IFA_LOCAL={0x8, 0x2, @local}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_RT_PRIORITY={0x8, 0x9, 0x107}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) kernel console output (not intermixed with test programs): n=granted subject="_" object="_" requested=x pid=17967 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 818.097858][ T37] audit: type=1400 audit(1791172453.208:119605): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17967 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 818.097880][ T37] audit: type=1400 audit(1791172453.208:119606): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=17967 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 818.097899][ T37] audit: type=1400 audit(1791172453.208:119607): lsm=SMACK fn=smack_inode_rmdir action=granted subject="_" object="_" requested=w pid=17967 comm="syz-executor" name="208" dev="tmpfs" ino=1095 [ 818.097921][ T37] audit: type=1400 audit(1791172453.208:119608): lsm=SMACK fn=smack_inode_rmdir action=granted subject="_" object="_" requested=w pid=17967 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 818.097940][ T37] audit: type=1400 audit(1791172453.208:119609): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17967 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 818.097960][ T37] audit: type=1400 audit(1791172453.208:119610): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17967 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 818.319776][T21019] team0: Port device team_slave_1 added [ 818.704677][T21220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5356'. [ 819.085982][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 819.493736][T21019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 819.493760][T21019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 819.493775][T21019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 819.503065][T21019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 819.503075][T21019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 819.503090][T21019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 820.137058][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 820.935224][T21019] hsr_slave_0: entered promiscuous mode [ 820.941428][T21019] hsr_slave_1: entered promiscuous mode [ 820.942528][T21019] debugfs: 'hsr0' already exists in 'hsr' [ 820.942546][T21019] Cannot create hsr debugfs directory [ 821.065999][ T9] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 821.170251][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 821.219652][ T9] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 821.222909][ T9] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 821.222926][ T9] usb 5-1: config 0 has no interface number 0 [ 821.222953][ T9] usb 5-1: config 0 interface 41 has no altsetting 0 [ 821.238510][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.238528][ T9] usb 5-1: Product: syz [ 821.238536][ T9] usb 5-1: Manufacturer: syz [ 821.238544][ T9] usb 5-1: SerialNumber: syz [ 821.348235][ T9] usb 5-1: config 0 descriptor?? [ 821.750158][ T5691] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 821.897521][ T5691] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 821.921817][ T5691] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.206051][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 822.401040][ T9] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 822.642006][ T9] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 822.642083][ T9] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 822.642240][ T9] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 822.699444][ T9] usb 5-1: USB disconnect, device number 10 [ 823.094626][ T5691] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 823.111280][ T37] kauditd_printk_skb: 4891 callbacks suppressed [ 823.111294][ T37] audit: type=1400 audit(1791172458.218:124477): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4950 comm="udevd" name="/" dev="sda1" ino=2 [ 823.111319][ T37] audit: type=1400 audit(1791172458.218:124478): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4950 comm="udevd" name="/" dev="sysfs" ino=1 [ 823.111340][ T37] audit: type=1400 audit(1791172458.218:124479): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4950 comm="udevd" name="devices" dev="sysfs" ino=18 [ 823.111360][ T37] audit: type=1400 audit(1791172458.218:124480): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4950 comm="udevd" name="platform" dev="sysfs" ino=48 [ 823.111380][ T37] audit: type=1400 audit(1791172458.218:124481): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4950 comm="udevd" name="dummy_hcd.1" dev="sysfs" ino=26127 [ 823.111400][ T37] audit: type=1400 audit(1791172458.218:124482): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4950 comm="udevd" name="usb2" dev="sysfs" ino=26156 [ 823.111421][ T37] audit: type=1400 audit(1791172458.218:124483): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4950 comm="udevd" name="2-1" dev="sysfs" ino=255522 [ 823.111441][ T37] audit: type=1400 audit(1791172458.218:124484): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4950 comm="udevd" name="2-1:1.0" dev="sysfs" ino=255571 [ 823.111462][ T37] audit: type=1400 audit(1791172458.218:124485): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4950 comm="udevd" name="tty" dev="sysfs" ino=255608 [ 823.111484][ T37] audit: type=1400 audit(1791172458.218:124486): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4950 comm="udevd" name="ttyACM0" dev="sysfs" ino=255686 [ 823.245968][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 823.260173][ T5691] usb 2-1: USB disconnect, device number 17 [ 823.466296][T20951] udevd[20951]: setting mode of /dev/ttyACM0 to 020660 failed: No such file or directory [ 823.468475][T20951] udevd[20951]: setting owner of /dev/ttyACM0 to uid=0, gid=18 failed: No such file or directory [ 823.744203][T21261] overlayfs: failed to clone lowerpath [ 824.291941][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 824.937906][T21280] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 825.326294][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 825.514364][T21286] infiniband syz0: set down [ 825.514379][T21286] infiniband syz0: added bond0 [ 825.559761][T21286] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 825.559788][T21286] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 825.559809][T21286] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 825.593266][T21286] RDS/IB: syz0: added [ 825.594120][T21286] smc: adding ib device syz0 with port count 1 [ 825.594382][T21286] smc: ib device syz0 port 1 has no pnetid [ 826.782468][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 827.806150][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 828.130131][ T37] kauditd_printk_skb: 5099 callbacks suppressed [ 828.130147][ T37] audit: type=1400 audit(1791172463.238:129584): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21306 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 [ 828.130173][ T37] audit: type=1400 audit(1791172463.238:129585): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21306 comm="dhcpcd-run-hook" name="var" dev="sda1" ino=2001 [ 828.130195][ T37] audit: type=1400 audit(1791172463.238:129586): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21306 comm="dhcpcd-run-hook" name="var" dev="sda1" ino=2001 [ 828.130216][ T37] audit: type=1400 audit(1791172463.238:129587): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21306 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 [ 828.130236][ T37] audit: type=1400 audit(1791172463.238:129588): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21306 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 [ 828.130257][ T37] audit: type=1400 audit(1791172463.238:129589): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21306 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1771 [ 828.130279][ T37] audit: type=1400 audit(1791172463.238:129590): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21306 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1775 [ 828.130300][ T37] audit: type=1400 audit(1791172463.238:129591): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=21306 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1776 [ 828.130321][ T37] audit: type=1400 audit(1791172463.238:129592): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=21306 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1776 [ 828.130343][ T37] audit: type=1400 audit(1791172463.238:129593): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=21306 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1776 [ 828.846408][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 829.886034][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 830.926384][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 831.450032][T20815] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 831.478862][T20815] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 831.493741][T20815] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 831.655760][T20815] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 831.729793][T20815] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 831.839636][T20815] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 831.857911][T20815] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 831.969866][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 832.160679][T20815] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 832.171872][ T9134] bridge_slave_1: left allmulticast mode [ 832.171898][ T9134] bridge_slave_1: left promiscuous mode [ 832.172063][ T9134] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.192424][ T9134] bridge_slave_0: left allmulticast mode [ 832.192449][ T9134] bridge_slave_0: left promiscuous mode [ 832.192611][ T9134] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.006447][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 833.138672][ T37] kauditd_printk_skb: 5517 callbacks suppressed [ 833.138686][ T37] audit: type=1400 audit(1791172468.238:135027): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=21367 comm="cmp" path="/proc/filesystems" dev="proc" ino=4026532108 [ 833.140556][ T37] audit: type=1400 audit(1791172468.248:135028): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=21367 comm="cmp" path="/proc/filesystems" dev="proc" ino=4026532108 [ 833.140851][ T37] audit: type=1400 audit(1791172468.248:135029): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21367 comm="cmp" name="/" dev="sda1" ino=2 [ 833.140874][ T37] audit: type=1400 audit(1791172468.248:135030): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21367 comm="cmp" name="etc" dev="sda1" ino=116 [ 833.140982][ T37] audit: type=1400 audit(1791172468.248:135031): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21367 comm="cmp" name="selinux" dev="sda1" ino=196 [ 833.141923][ T37] audit: type=1400 audit(1791172468.248:135032): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21367 comm="cmp" name="/" dev="sda1" ino=2 [ 833.141947][ T37] audit: type=1400 audit(1791172468.248:135033): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21367 comm="cmp" name="etc" dev="sda1" ino=116 [ 833.141968][ T37] audit: type=1400 audit(1791172468.248:135034): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21367 comm="cmp" name="etc" dev="sda1" ino=116 [ 833.141988][ T37] audit: type=1400 audit(1791172468.248:135035): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21367 comm="cmp" name="/" dev="sda1" ino=2 [ 833.142007][ T37] audit: type=1400 audit(1791172468.248:135036): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21367 comm="cmp" name="/" dev="tmpfs" ino=1 [ 833.164069][ T9134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 833.167735][ T9134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 833.169641][ T9134] bond0 (unregistering): Released all slaves [ 834.094942][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 834.438338][T21388] netlink: 9 bytes leftover after parsing attributes in process `syz.3.5396'. [ 834.567275][T21392] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5396'. [ 835.166482][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 835.758941][T21386] netlink: 'syz.1.5393': attribute type 12 has an invalid length. [ 835.758957][T21386] netlink: 'syz.1.5393': attribute type 29 has an invalid length. [ 835.758965][T21386] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5393'. [ 835.758977][T21386] netlink: 'syz.1.5393': attribute type 1 has an invalid length. [ 835.758993][T21386] netlink: 'syz.1.5393': attribute type 2 has an invalid length. [ 835.759012][T21386] netlink: 'syz.1.5393': attribute type 3 has an invalid length. [ 835.759019][T21386] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5393'. [ 835.786581][T21388] gretap0: entered promiscuous mode [ 835.933409][T21392] 0ªî{X¹¦: renamed from gretap0 [ 836.005202][T21392] 0ªî{X¹¦: left promiscuous mode [ 836.005220][T21392] 0ªî{X¹¦: entered allmulticast mode [ 836.015845][T21392] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 836.177378][T21405] netlink: 'syz.1.5397': attribute type 19 has an invalid length. [ 836.177393][T21405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5397'. [ 836.208691][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 836.379329][T21405] netlink: 'syz.1.5397': attribute type 19 has an invalid length. [ 836.384624][T21405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5397'. [ 837.251319][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 837.370146][ T9134] hsr_slave_0: left promiscuous mode [ 837.374936][ T9134] hsr_slave_1: left promiscuous mode [ 837.375612][ T9134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 837.376591][ T9134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 837.416025][T18343] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 837.576658][T18343] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 837.606994][T18343] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.607013][T18343] usb 2-1: Product: syz [ 837.607021][T18343] usb 2-1: Manufacturer: syz [ 837.607028][T18343] usb 2-1: SerialNumber: syz [ 837.651046][T18343] usb 2-1: config 0 descriptor?? [ 837.930148][T18343] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 838.273258][ T37] kauditd_printk_skb: 5417 callbacks suppressed [ 838.273271][ T37] audit: type=1400 audit(1791172473.378:139983): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21400 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 [ 838.273297][ T37] audit: type=1400 audit(1791172473.378:139984): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21400 comm="dhcpcd-run-hook" name="sbin" dev="sda1" ino=1267 [ 838.273318][ T37] audit: type=1400 audit(1791172473.378:139985): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21400 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 [ 838.273372][ T37] audit: type=1400 audit(1791172473.378:139986): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21400 comm="dhcpcd-run-hook" name="usr" dev="sda1" ino=1480 [ 838.273395][ T37] audit: type=1400 audit(1791172473.378:139987): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21400 comm="dhcpcd-run-hook" name="sbin" dev="sda1" ino=1863 [ 838.273415][ T37] audit: type=1400 audit(1791172473.378:139988): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21400 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 [ 838.273436][ T37] audit: type=1400 audit(1791172473.378:139989): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21400 comm="dhcpcd-run-hook" name="bin" dev="sda1" ino=13 [ 838.273456][ T37] audit: type=1400 audit(1791172473.378:139990): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=21400 comm="dhcpcd-run-hook" path="/bin/rm" dev="sda1" ino=83 [ 838.282131][ T37] audit: type=1400 audit(1791172473.378:139991): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=21414 comm="syz.1.5401" path="/dev/raw-gadget" dev="devtmpfs" ino=814 [ 838.282325][ T37] audit: type=1400 audit(1791172473.388:139992): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=21414 comm="syz.1.5401" path="/dev/raw-gadget" dev="devtmpfs" ino=814 [ 838.286086][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 838.523139][ T9134] team0 (unregistering): Port device team_slave_1 removed [ 838.831195][ T9134] team0 (unregistering): Port device team_slave_0 removed [ 839.133349][T18343] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 839.148587][T18343] usb 2-1: USB disconnect, device number 18 [ 839.326484][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 840.038595][T21437] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5407'. [ 840.366075][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 840.569837][T20815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 840.725049][T20815] 8021q: adding VLAN 0 to HW filter on device team0 [ 840.777712][T17428] bridge0: port 1(bridge_slave_0) entered blocking state [ 840.777788][T17428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 841.014373][T17444] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.014448][T17444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 842.493812][T20815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 843.259175][T21469] uprobe: syz.1.5413:21469 failed to unregister, leaking uprobe [ 843.277457][ T37] kauditd_printk_skb: 4723 callbacks suppressed [ 843.277469][ T37] audit: type=1400 audit(1791172478.388:144029): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21484 comm="rm" name="/" dev="sda1" ino=2 [ 843.283518][ T37] audit: type=1400 audit(1791172478.388:144030): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21484 comm="rm" name="/" dev="sda1" ino=2 [ 843.283550][ T37] audit: type=1400 audit(1791172478.388:144031): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21484 comm="rm" name="lib" dev="sda1" ino=264 [ 843.283571][ T37] audit: type=1400 audit(1791172478.388:144032): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21484 comm="rm" name="lib" dev="sda1" ino=264 [ 843.283592][ T37] audit: type=1400 audit(1791172478.388:144033): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=21484 comm="rm" name="libatomic.so.1.2.0" dev="sda1" ino=1108 [ 843.283613][ T37] audit: type=1400 audit(1791172478.388:144034): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=21484 comm="rm" path="/lib/libatomic.so.1.2.0" dev="sda1" ino=1108 [ 843.283635][ T37] audit: type=1400 audit(1791172478.388:144035): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=21484 comm="rm" path="/lib/libatomic.so.1.2.0" dev="sda1" ino=1108 [ 843.285122][ T37] audit: type=1400 audit(1791172478.388:144036): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21484 comm="rm" name="/" dev="sda1" ino=2 [ 843.285149][ T37] audit: type=1400 audit(1791172478.388:144037): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21484 comm="rm" name="/" dev="sda1" ino=2 [ 843.285169][ T37] audit: type=1400 audit(1791172478.388:144038): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21484 comm="rm" name="lib" dev="sda1" ino=264 [ 843.414982][T21469] uprobe: syz.1.5413:21469 failed to unregister, leaking uprobe [ 844.428405][ T4898] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 844.480595][ T4898] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 844.490495][ T4898] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 844.492606][ T4898] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 844.501063][ T4898] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 844.891763][T16424] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 844.961016][T16424] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 844.972290][T16424] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 844.973540][T16424] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 844.983393][T16424] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 845.276314][T21512] netlink: zone id is out of range [ 845.276581][T21512] netlink: zone id is out of range [ 845.276928][T21512] netlink: zone id is out of range [ 845.277238][T21512] netlink: zone id is out of range [ 845.277403][T21512] netlink: zone id is out of range [ 845.304411][T21512] netlink: zone id is out of range [ 845.304617][T21512] netlink: zone id is out of range [ 845.304662][T21512] netlink: zone id is out of range [ 845.304985][T21512] netlink: zone id is out of range [ 845.305101][T21512] netlink: zone id is out of range [ 846.573746][ T4898] Bluetooth: hci1: unexpected subevent 0x18 length: 30 > 19 [ 846.573784][ T4898] Bluetooth: hci1: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 846.610412][ T4898] Bluetooth: hci2: command tx timeout [ 847.257792][ T4898] Bluetooth: hci6: command tx timeout [ 848.303105][ T37] kauditd_printk_skb: 5609 callbacks suppressed [ 848.303119][ T37] audit: type=1400 audit(1791172483.408:149435): lsm=SMACK fn=smack_uring_cmd action=granted subject="_" object="*" requested=r pid=21547 comm="syz.3.5427" path="socket:[71022]" dev="sockfs" ino=71022 [ 848.303147][ T37] audit: type=1400 audit(1791172483.408:149436): lsm=SMACK fn=smack_uring_cmd action=granted subject="_" object="*" requested=r pid=21547 comm="syz.3.5427" path="socket:[71022]" dev="sockfs" ino=71022 [ 848.303167][ T37] audit: type=1400 audit(1791172483.408:149437): lsm=SMACK fn=smack_uring_cmd action=granted subject="_" object="*" requested=r pid=21547 comm="syz.3.5427" path="socket:[71022]" dev="sockfs" ino=71022 [ 848.303188][ T37] audit: type=1400 audit(1791172483.408:149438): lsm=SMACK fn=smack_uring_cmd action=granted subject="_" object="*" requested=r pid=21547 comm="syz.3.5427" path="socket:[71022]" dev="sockfs" ino=71022 [ 848.303209][ T37] audit: type=1400 audit(1791172483.408:149439): lsm=SMACK fn=smack_uring_cmd action=granted subject="_" object="*" requested=r pid=21547 comm="syz.3.5427" path="socket:[71022]" dev="sockfs" ino=71022 [ 848.303230][ T37] audit: type=1400 audit(1791172483.408:149440): lsm=SMACK fn=smack_uring_cmd action=granted subject="_" object="*" requested=r pid=21547 comm="syz.3.5427" path="socket:[71022]" dev="sockfs" ino=71022 [ 848.303251][ T37] audit: type=1400 audit(1791172483.408:149441): lsm=SMACK fn=smack_uring_cmd action=granted subject="_" object="*" requested=r pid=21547 comm="syz.3.5427" path="socket:[71022]" dev="sockfs" ino=71022 [ 848.303272][ T37] audit: type=1400 audit(1791172483.408:149442): lsm=SMACK fn=smack_uring_cmd action=granted subject="_" object="*" requested=r pid=21547 comm="syz.3.5427" path="socket:[71022]" dev="sockfs" ino=71022 [ 848.303292][ T37] audit: type=1400 audit(1791172483.408:149443): lsm=SMACK fn=smack_uring_cmd action=granted subject="_" object="*" requested=r pid=21547 comm="syz.3.5427" path="socket:[71022]" dev="sockfs" ino=71022 [ 848.303312][ T37] audit: type=1400 audit(1791172483.408:149444): lsm=SMACK fn=smack_uring_cmd action=granted subject="_" object="*" requested=r pid=21547 comm="syz.3.5427" path="socket:[71022]" dev="sockfs" ino=71022 [ 848.532690][T21019] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 848.692793][ T4898] Bluetooth: hci2: command tx timeout [ 848.729087][T21019] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 848.737649][T21019] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 848.913251][T21019] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 849.000560][T21019] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 849.052950][T21019] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 849.122515][T21019] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 849.332505][ T4898] Bluetooth: hci6: command tx timeout [ 849.743567][T21019] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 850.790688][ T4898] Bluetooth: hci2: command tx timeout [ 851.406395][ T4898] Bluetooth: hci6: command tx timeout [ 852.141238][T21609] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 852.874699][ T4898] Bluetooth: hci2: command tx timeout [ 853.309735][ T37] kauditd_printk_skb: 3644 callbacks suppressed [ 853.309748][ T37] audit: type=1400 audit(1791172488.418:153089): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21635 comm="syz.3.5450" name="1219" dev="tmpfs" ino=6378 [ 853.309775][ T37] audit: type=1400 audit(1791172488.418:153090): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21635 comm="syz.3.5450" name="1219" dev="tmpfs" ino=6378 [ 853.311726][ T37] audit: type=1400 audit(1791172488.418:153091): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=21635 comm="syz.3.5450" name="1219" dev="tmpfs" ino=6378 [ 853.342534][ T37] audit: type=1400 audit(1791172488.448:153092): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21635 comm="syz.3.5450" name="1219" dev="tmpfs" ino=6378 [ 853.342567][ T37] audit: type=1400 audit(1791172488.448:153093): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21635 comm="syz.3.5450" name="1219" dev="tmpfs" ino=6378 [ 853.350791][ T37] audit: type=1400 audit(1791172488.458:153094): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21635 comm="syz.3.5450" name="1219" dev="tmpfs" ino=6378 [ 853.350822][ T37] audit: type=1400 audit(1791172488.458:153095): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21635 comm="syz.3.5450" name="1219" dev="tmpfs" ino=6378 [ 853.350845][ T37] audit: type=1400 audit(1791172488.458:153096): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21635 comm="syz.3.5450" name="proc_mnt" dev="tmpfs" ino=6383 [ 853.414068][ T37] audit: type=1400 audit(1791172488.518:153097): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5581 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 853.414100][ T37] audit: type=1400 audit(1791172488.518:153098): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5581 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 853.494126][ T4898] Bluetooth: hci6: command tx timeout [ 855.491695][T21499] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.491766][T21499] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.491897][T21499] bridge_slave_0: entered allmulticast mode [ 855.494821][T21499] bridge_slave_0: entered promiscuous mode [ 855.650832][T21499] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.650901][T21499] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.651018][T21499] bridge_slave_1: entered allmulticast mode [ 855.652977][T21499] bridge_slave_1: entered promiscuous mode [ 855.657124][T21505] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.657192][T21505] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.657292][T21505] bridge_slave_0: entered allmulticast mode [ 855.659764][T21505] bridge_slave_0: entered promiscuous mode [ 855.737979][T21505] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.738057][T21505] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.738186][T21505] bridge_slave_1: entered allmulticast mode [ 855.753722][T21505] bridge_slave_1: entered promiscuous mode [ 855.938488][T21499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 856.119048][T21499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 856.130830][T21505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 856.140740][T21019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 856.156777][T21699] vcan0: tx address claim with broadcast sa [ 856.227270][T21505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 856.381786][T21499] team0: Port device team_slave_0 added [ 856.557458][T21499] team0: Port device team_slave_1 added [ 856.986162][T18259] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 857.145995][T18259] usb 2-1: Using ep0 maxpacket: 16 [ 857.147569][T18259] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 857.151067][T18259] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 857.151086][T18259] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 857.151108][T18259] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.260593][T18259] usb 2-1: config 0 descriptor?? [ 858.353378][ T37] kauditd_printk_skb: 5967 callbacks suppressed [ 858.353394][ T37] audit: type=1400 audit(1791172493.468:159066): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21729 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 858.353419][ T37] audit: type=1400 audit(1791172493.468:159067): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21729 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 858.353439][ T37] audit: type=1400 audit(1791172493.468:159068): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21729 comm="syz-executor" name="1237" dev="tmpfs" ino=6470 [ 858.353459][ T37] audit: type=1400 audit(1791172493.468:159069): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=21729 comm="syz-executor" opid=21729 ocomm="syz-executor" [ 858.353514][ T37] audit: type=1400 audit(1791172493.468:159070): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21729 comm="syz-executor" name="1237" dev="tmpfs" ino=6470 [ 858.353537][ T37] audit: type=1400 audit(1791172493.468:159071): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21729 comm="syz-executor" name="1237" dev="tmpfs" ino=6470 [ 858.356174][ T37] audit: type=1400 audit(1791172493.468:159072): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=21729 comm="syz-executor" name="1237" dev="tmpfs" ino=6470 [ 858.356203][ T37] audit: type=1400 audit(1791172493.468:159073): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21729 comm="syz-executor" name="1237" dev="tmpfs" ino=6470 [ 858.356223][ T37] audit: type=1400 audit(1791172493.468:159074): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21729 comm="syz-executor" name="1237" dev="tmpfs" ino=6470 [ 858.356243][ T37] audit: type=1400 audit(1791172493.468:159075): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=21729 comm="syz-executor" name="1237" dev="tmpfs" ino=6470 [ 858.457335][T18259] letsketch 0003:6161:4D15.0018: Device info: ï“¿ [ 858.766931][T21732] overlayfs: failed to clone upperpath [ 858.797993][T18259] usb 2-1: Max retries (5) exceeded reading string descriptor 201 [ 858.798046][T18259] letsketch 0003:6161:4D15.0018: probe with driver letsketch failed with error -71 [ 858.808031][T18259] usb 2-1: USB disconnect, device number 19 [ 858.961927][T21505] team0: Port device team_slave_0 added [ 859.057779][ T5245] 8021q: adding VLAN 0 to HW filter on device eth9 [ 859.071966][T21505] team0: Port device team_slave_1 added [ 859.235596][T21499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 859.235608][T21499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 859.235623][T21499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 859.355134][T21499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 859.355146][T21499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 859.355161][T21499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 859.624478][ T5691] libceph: connect (1)127.0.0.1:6789 error -22 [ 859.624976][ T5691] libceph: mon0 (1)127.0.0.1:6789 connect error [ 859.639425][ T5691] libceph: connect (1)0.0.0.0:6789 error -22 [ 859.639552][ T5691] libceph: mon0 (1)0.0.0.0:6789 connect error [ 859.768921][T21505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 859.768934][T21505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 859.768948][T21505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 859.878190][ T5691] libceph: connect (1)127.0.0.1:6789 error -22 [ 859.878319][ T5691] libceph: mon0 (1)127.0.0.1:6789 connect error [ 859.896160][ T5691] libceph: connect (1)0.0.0.0:6789 error -22 [ 859.913278][T21019] 8021q: adding VLAN 0 to HW filter on device team0 [ 859.913801][ T5691] libceph: mon0 (1)0.0.0.0:6789 connect error [ 859.921718][T21505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 859.921729][T21505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 859.921743][T21505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 860.159712][T21744] ceph: No mds server is up or the cluster is laggy [ 860.164553][T21738] ceph: No mds server is up or the cluster is laggy [ 860.265109][T17440] bridge_slave_1: left allmulticast mode [ 860.265136][T17440] bridge_slave_1: left promiscuous mode [ 860.265299][T17440] bridge0: port 2(bridge_slave_1) entered disabled state [ 860.389953][T18343] libceph: connect (1)127.0.0.1:6789 error -22 [ 860.390093][T18343] libceph: mon0 (1)127.0.0.1:6789 connect error [ 860.448157][T18343] libceph: connect (1)0.0.0.0:6789 error -22 [ 860.448299][T18343] libceph: mon0 (1)0.0.0.0:6789 connect error [ 860.493144][T17440] bridge_slave_0: left allmulticast mode [ 860.493168][T17440] bridge_slave_0: left promiscuous mode [ 860.493346][T17440] bridge0: port 1(bridge_slave_0) entered disabled state [ 860.832891][T21766] net_ratelimit: 32 callbacks suppressed [ 860.832907][T21766] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 862.102565][T17440] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 862.160798][T17440] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 862.165511][T17440] bond0 (unregistering): Released all slaves [ 862.392668][ T5245] 8021q: adding VLAN 0 to HW filter on device eth10 [ 862.527542][T21499] hsr_slave_0: entered promiscuous mode [ 862.538573][T21499] hsr_slave_1: entered promiscuous mode [ 862.539133][T21499] debugfs: 'hsr0' already exists in 'hsr' [ 862.539148][T21499] Cannot create hsr debugfs directory [ 862.540479][T17449] bridge0: port 1(bridge_slave_0) entered blocking state [ 862.540551][T17449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 862.662875][T16424] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 862.732229][T16424] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 862.758208][T16424] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 862.761553][T16424] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 862.762377][T16424] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 863.366786][ T37] kauditd_printk_skb: 6170 callbacks suppressed [ 863.366800][ T37] audit: type=1400 audit(1791172498.468:165246): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21794 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 [ 863.366825][ T37] audit: type=1400 audit(1791172498.468:165247): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21794 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 [ 863.366847][ T37] audit: type=1400 audit(1791172498.468:165248): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21794 comm="dhcpcd-run-hook" name="lib" dev="sda1" ino=264 [ 863.366868][ T37] audit: type=1400 audit(1791172498.468:165249): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21794 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 [ 863.366888][ T37] audit: type=1400 audit(1791172498.468:165250): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21794 comm="dhcpcd-run-hook" name="usr" dev="sda1" ino=1480 [ 863.366910][ T37] audit: type=1400 audit(1791172498.468:165251): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21794 comm="dhcpcd-run-hook" name="usr" dev="sda1" ino=1480 [ 863.366938][ T37] audit: type=1400 audit(1791172498.468:165252): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21794 comm="dhcpcd-run-hook" name="lib" dev="sda1" ino=1642 [ 863.366959][ T37] audit: type=1400 audit(1791172498.468:165253): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21794 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 [ 863.366980][ T37] audit: type=1400 audit(1791172498.468:165254): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21794 comm="dhcpcd-run-hook" name="usr" dev="sda1" ino=1480 [ 863.367001][ T37] audit: type=1400 audit(1791172498.468:165255): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21794 comm="dhcpcd-run-hook" name="usr" dev="sda1" ino=1480 [ 863.563605][T21505] hsr_slave_0: entered promiscuous mode [ 863.580108][T21505] hsr_slave_1: entered promiscuous mode [ 863.585171][T21505] debugfs: 'hsr0' already exists in 'hsr' [ 863.585191][T21505] Cannot create hsr debugfs directory [ 864.728190][T17440] hsr_slave_0: left promiscuous mode [ 864.728741][T17440] hsr_slave_1: left promiscuous mode [ 864.729349][T17440] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 864.729810][T17440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 864.850742][ T4898] Bluetooth: hci4: command tx timeout [ 865.904558][T17440] team0 (unregistering): Port device team_slave_1 removed [ 865.960540][T17440] team0 (unregistering): Port device team_slave_0 removed [ 866.274788][T21833] Process accounting resumed [ 866.926939][ T4898] Bluetooth: hci4: command tx timeout [ 868.468491][ T37] kauditd_printk_skb: 3346 callbacks suppressed [ 868.468505][ T37] audit: type=1400 audit(1791172503.578:168590): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=1193 comm="irq/31-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.1.169 dest=53452 netif=eth0 [ 868.968633][ T37] audit: type=1400 audit(1791172504.078:168591): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=1193 comm="irq/31-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.1.169 dest=53452 netif=eth0 [ 869.006305][ T4898] Bluetooth: hci4: command tx timeout [ 869.267182][ T37] audit: type=1400 audit(1791172504.378:168592): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=17552 comm="syz-executor" opid=21837 ocomm="syz.1.5504" [ 869.267211][ T37] audit: type=1400 audit(1791172504.378:168593): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=17552 comm="syz-executor" opid=21837 ocomm="syz.1.5504" [ 869.317977][ T5245] 8021q: adding VLAN 0 to HW filter on device eth11 [ 869.319820][ T37] audit: type=1400 audit(1791172504.428:168594): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21864 comm="dhcpcd" name="/" dev="sda1" ino=2 [ 869.320352][ T37] audit: type=1400 audit(1791172504.428:168595): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21864 comm="dhcpcd" name="lib" dev="sda1" ino=264 [ 869.320377][ T37] audit: type=1400 audit(1791172504.428:168596): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21864 comm="dhcpcd" name="dhcpcd" dev="sda1" ino=265 [ 869.320399][ T37] audit: type=1400 audit(1791172504.428:168597): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21864 comm="dhcpcd" name="dhcpcd-run-hooks" dev="sda1" ino=273 [ 869.320420][ T37] audit: type=1400 audit(1791172504.428:168598): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=21864 comm="dhcpcd" path="/lib/dhcpcd/dhcpcd-run-hooks" dev="sda1" ino=273 [ 869.322358][ T37] audit: type=1400 audit(1791172504.428:168599): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21864 comm="dhcpcd" name="/" dev="sda1" ino=2 [ 869.591297][T21866] veth0: entered promiscuous mode [ 869.623770][T21868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5511'. [ 869.902062][T21865] veth0: left promiscuous mode [ 870.762897][ T5691] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 870.959140][ T5691] usb 2-1: Using ep0 maxpacket: 16 [ 870.959862][ T5691] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 870.961215][ T5691] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 870.961229][ T5691] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 870.994989][ T5691] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.995007][ T5691] usb 2-1: Product: syz [ 870.995014][ T5691] usb 2-1: Manufacturer: syz [ 870.995022][ T5691] usb 2-1: SerialNumber: syz [ 871.033504][ T5691] usb 2-1: 0:2 : does not exist [ 871.091235][ T4898] Bluetooth: hci4: command tx timeout [ 871.307640][ T5691] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 871.852785][ T5691] usb 2-1: USB disconnect, device number 20 [ 871.859825][T21891] overlayfs: failed to clone lowerpath [ 872.990248][T21882] udevd[21882]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 873.508529][ T37] kauditd_printk_skb: 4906 callbacks suppressed [ 873.508545][ T37] audit: type=1400 audit(1791172508.598:173284): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=1193 comm="irq/31-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.1.169 dest=53452 netif=eth0 [ 873.549546][ T37] audit: type=1400 audit(1791172508.658:173285): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4950 comm="udevd" name="/" dev="sda1" ino=2 [ 873.549578][ T37] audit: type=1400 audit(1791172508.658:173286): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4950 comm="udevd" name="/" dev="sysfs" ino=1 [ 873.549598][ T37] audit: type=1400 audit(1791172508.658:173287): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4950 comm="udevd" name="devices" dev="sysfs" ino=18 [ 873.549619][ T37] audit: type=1400 audit(1791172508.658:173288): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4950 comm="udevd" name="netdevsim0" dev="sysfs" ino=255449 [ 873.549640][ T37] audit: type=1400 audit(1791172508.658:173289): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4950 comm="udevd" name="net" dev="sysfs" ino=296407 [ 873.549661][ T37] audit: type=1400 audit(1791172508.658:173290): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4950 comm="udevd" name="eth16" dev="sysfs" ino=297524 [ 873.549680][ T37] audit: type=1400 audit(1791172508.658:173291): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4950 comm="udevd" name="/" dev="sda1" ino=2 [ 873.550644][ T37] audit: type=1400 audit(1791172508.658:173292): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21882 comm="udevd" name="/" dev="sda1" ino=2 [ 873.550669][ T37] audit: type=1400 audit(1791172508.658:173293): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21882 comm="udevd" name="/" dev="tmpfs" ino=1 [ 873.914572][T17440] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.995556][ T5245] 8021q: adding VLAN 0 to HW filter on device eth12 [ 874.998900][T17440] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.971733][T17440] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.053140][T21934] netlink: 'syz.1.5528': attribute type 4 has an invalid length. [ 876.105679][T21935] netlink: 'syz.1.5528': attribute type 4 has an invalid length. [ 876.941587][T17440] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.269447][T21961] netlink: 'syz.1.5536': attribute type 12 has an invalid length. [ 878.269464][T21961] netlink: 'syz.1.5536': attribute type 29 has an invalid length. [ 878.269473][T21961] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5536'. [ 878.269485][T21961] netlink: 'syz.1.5536': attribute type 1 has an invalid length. [ 878.269492][T21961] netlink: 'syz.1.5536': attribute type 2 has an invalid length. [ 878.269499][T21961] netlink: 11 bytes leftover after parsing attributes in process `syz.1.5536'. [ 878.321238][T21961] netlink: 'syz.1.5536': attribute type 12 has an invalid length. [ 878.321254][T21961] netlink: 'syz.1.5536': attribute type 29 has an invalid length. [ 878.321261][T21961] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5536'. [ 878.321285][T21961] netlink: 'syz.1.5536': attribute type 1 has an invalid length. [ 878.321292][T21961] netlink: 'syz.1.5536': attribute type 2 has an invalid length. [ 878.321299][T21961] netlink: 11 bytes leftover after parsing attributes in process `syz.1.5536'. [ 878.352552][T21785] bridge0: port 1(bridge_slave_0) entered blocking state [ 878.352621][T21785] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.352752][T21785] bridge_slave_0: entered allmulticast mode [ 878.356688][T21785] bridge_slave_0: entered promiscuous mode [ 878.370169][T21785] bridge0: port 2(bridge_slave_1) entered blocking state [ 878.370235][T21785] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.370350][T21785] bridge_slave_1: entered allmulticast mode [ 878.374254][T21785] bridge_slave_1: entered promiscuous mode [ 878.514382][T21951] uprobe: syz.3.5532:21951 failed to unregister, leaking uprobe [ 878.553384][T21785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 878.563728][ T37] kauditd_printk_skb: 3056 callbacks suppressed [ 878.563740][ T37] audit: type=1400 audit(1791172513.668:176275): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5245 comm="dhcpcd" name="/" dev="sda1" ino=2 [ 878.563765][ T37] audit: type=1400 audit(1791172513.668:176276): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5245 comm="dhcpcd" name="/" dev="sysfs" ino=1 [ 878.563785][ T37] audit: type=1400 audit(1791172513.668:176277): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5245 comm="dhcpcd" name="/" dev="sda1" ino=2 [ 878.563806][ T37] audit: type=1400 audit(1791172513.668:176278): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5245 comm="dhcpcd" name="/" dev="sysfs" ino=1 [ 878.563827][ T37] audit: type=1400 audit(1791172513.668:176279): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5245 comm="dhcpcd" name="bus" dev="sysfs" ino=22 [ 878.563847][ T37] audit: type=1400 audit(1791172513.668:176280): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5245 comm="dhcpcd" name="/" dev="sda1" ino=2 [ 878.563867][ T37] audit: type=1400 audit(1791172513.668:176281): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5245 comm="dhcpcd" name="/" dev="sysfs" ino=1 [ 878.563887][ T37] audit: type=1400 audit(1791172513.668:176282): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5245 comm="dhcpcd" name="class" dev="sysfs" ino=24 [ 878.563906][ T37] audit: type=1400 audit(1791172513.668:176283): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5245 comm="dhcpcd" name="net" dev="sysfs" ino=3316 [ 878.563926][ T37] audit: type=1400 audit(1791172513.668:176284): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5245 comm="dhcpcd" name="net" dev="sysfs" ino=3316 [ 878.581309][T21785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 878.746430][T21951] uprobe: syz.3.5532:21951 failed to unregister, leaking uprobe [ 881.870076][T21966] ieee80211 phy36: Selected rate control algorithm 'minstrel_ht' [ 881.871717][T21785] team0: Port device team_slave_0 added [ 881.915252][T21785] team0: Port device team_slave_1 added [ 882.483893][T21785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 882.483905][T21785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 882.483927][T21785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 882.497658][T21785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 882.497671][T21785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 882.497686][T21785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 883.568015][ T37] kauditd_printk_skb: 3386 callbacks suppressed [ 883.568029][ T37] audit: type=1400 audit(1791172518.678:179671): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=21999 comm="sed" name="libatomic.so.1.2.0" dev="sda1" ino=1108 [ 883.569766][ T37] audit: type=1400 audit(1791172518.678:179672): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=21999 comm="sed" path="/lib/libatomic.so.1.2.0" dev="sda1" ino=1108 [ 883.569955][ T37] audit: type=1400 audit(1791172518.678:179673): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=21999 comm="sed" path="/lib/libatomic.so.1.2.0" dev="sda1" ino=1108 [ 883.572419][ T37] audit: type=1400 audit(1791172518.678:179674): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21999 comm="sed" name="/" dev="sda1" ino=2 [ 883.572446][ T37] audit: type=1400 audit(1791172518.678:179675): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21999 comm="sed" name="/" dev="sda1" ino=2 [ 883.572466][ T37] audit: type=1400 audit(1791172518.678:179676): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21999 comm="sed" name="lib" dev="sda1" ino=264 [ 883.573084][ T37] audit: type=1400 audit(1791172518.678:179677): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21999 comm="sed" name="/" dev="sda1" ino=2 [ 883.573107][ T37] audit: type=1400 audit(1791172518.678:179678): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21999 comm="sed" name="usr" dev="sda1" ino=1480 [ 883.573127][ T37] audit: type=1400 audit(1791172518.678:179679): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21999 comm="sed" name="usr" dev="sda1" ino=1480 [ 883.573148][ T37] audit: type=1400 audit(1791172518.678:179680): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21999 comm="sed" name="lib" dev="sda1" ino=1642 [ 883.795405][T21785] hsr_slave_0: entered promiscuous mode [ 883.798183][T21785] hsr_slave_1: entered promiscuous mode [ 883.800375][T21785] debugfs: 'hsr0' already exists in 'hsr' [ 883.800393][T21785] Cannot create hsr debugfs directory [ 884.462402][T22007] fuse: fd is not a fuse device [ 884.570000][T22010] FAULT_INJECTION: forcing a failure. [ 884.570000][T22010] name failslab, interval 1, probability 0, space 0, times 0 [ 884.570025][T22010] CPU: 0 UID: 0 PID: 22010 Comm: syz.1.5548 Tainted: G L syzkaller #0 PREEMPT_{RT,(lazy)} [ 884.570042][T22010] Tainted: [L]=SOFTLOCKUP [ 884.570046][T22010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 884.570054][T22010] Call Trace: [ 884.570058][T22010] [ 884.570065][T22010] dump_stack_lvl+0xe8/0x150 [ 884.570088][T22010] should_fail_ex+0x46b/0x600 [ 884.570109][T22010] should_failslab+0xa8/0x100 [ 884.570123][T22010] __kmalloc_cache_noprof+0xa1/0x680 [ 884.570140][T22010] ? loopback_open+0x298/0xaa0 [ 884.570244][T22010] ? loopback_open+0x298/0xaa0 [ 884.570263][T22010] loopback_open+0x298/0xaa0 [ 884.570293][T22010] snd_pcm_open_substream+0xff1/0x24f0 [ 884.570315][T22010] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 884.570327][T22010] ? __kmalloc_cache_noprof+0x3d5/0x680 [ 884.570344][T22010] ? snd_pcm_oss_open+0xa3d/0x1c10 [ 884.570395][T22010] ? snd_pcm_oss_open+0xa3d/0x1c10 [ 884.570413][T22010] snd_pcm_oss_open+0xf48/0x1c10 [ 884.570438][T22010] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 884.570460][T22010] ? rt_spin_unlock+0x159/0x200 [ 884.570480][T22010] ? __pfx_default_wake_function+0x10/0x10 [ 884.570495][T22010] ? rt_spin_unlock+0x165/0x200 [ 884.570516][T22010] chrdev_open+0x4dc/0x600 [ 884.570533][T22010] ? __pfx_chrdev_open+0x10/0x10 [ 884.570549][T22010] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 884.570569][T22010] ? __pfx_chrdev_open+0x10/0x10 [ 884.570584][T22010] do_dentry_open+0x849/0x1420 [ 884.570601][T22010] vfs_open+0x3b/0x350 [ 884.570610][T22010] ? path_openat+0x142d/0x1d60 [ 884.570627][T22010] path_openat+0x1448/0x1d60 [ 884.570651][T22010] do_file_open+0x23e/0x4a0 [ 884.570668][T22010] ? __pfx_do_file_open+0x10/0x10 [ 884.570695][T22010] ? alloc_fd+0x654/0x6d0 [ 884.570715][T22010] do_sys_openat2+0x115/0x200 [ 884.570726][T22010] ? __se_sys_futex+0x3a8/0x450 [ 884.570739][T22010] ? __pfx_do_sys_openat2+0x10/0x10 [ 884.570753][T22010] ? rcu_is_watching+0x16/0xb0 [ 884.570773][T22010] __x64_sys_openat+0x138/0x170 [ 884.570787][T22010] do_syscall_64+0x166/0x520 [ 884.570798][T22010] ? trace_irq_disable+0x3b/0x140 [ 884.570813][T22010] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.570825][T22010] ? clear_bhb_loop+0x70/0xc0 [ 884.570838][T22010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.570849][T22010] RIP: 0033:0x7fe4edb5e159 [ 884.570862][T22010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 884.570871][T22010] RSP: 002b:00007fe4ebdb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 884.570884][T22010] RAX: ffffffffffffffda RBX: 00007fe4edde5fa0 RCX: 00007fe4edb5e159 [ 884.570893][T22010] RDX: 0000000000000000 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 884.570902][T22010] RBP: 00007fe4edbf506b R08: 0000000000000000 R09: 0000000000000000 [ 884.570909][T22010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 884.570916][T22010] R13: 00007fe4edde6038 R14: 00007fe4edde5fa0 R15: 00007ffdaeb93258 [ 884.570933][T22010] [ 885.488130][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 888.579805][ T37] kauditd_printk_skb: 6247 callbacks suppressed [ 888.579820][ T37] audit: type=1400 audit(1791172523.688:185508): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22059 comm="rm" name="/" dev="sda1" ino=2 [ 888.580613][ T37] audit: type=1400 audit(1791172523.688:185509): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22059 comm="rm" name="/" dev="sda1" ino=2 [ 888.580642][ T37] audit: type=1400 audit(1791172523.688:185510): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22059 comm="rm" name="lib" dev="sda1" ino=264 [ 888.580663][ T37] audit: type=1400 audit(1791172523.688:185511): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22059 comm="rm" name="lib" dev="sda1" ino=264 [ 888.580683][ T37] audit: type=1400 audit(1791172523.688:185512): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=22059 comm="rm" name="libpam_misc.so.0.82.1" dev="sda1" ino=1125 [ 888.580825][ T37] audit: type=1400 audit(1791172523.688:185513): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=22059 comm="rm" path="/lib/libpam_misc.so.0.82.1" dev="sda1" ino=1125 [ 888.580847][ T37] audit: type=1400 audit(1791172523.688:185514): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=22059 comm="rm" path="/lib/libpam_misc.so.0.82.1" dev="sda1" ino=1125 [ 888.583844][ T37] audit: type=1400 audit(1791172523.688:185515): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22059 comm="rm" name="/" dev="sda1" ino=2 [ 888.583873][ T37] audit: type=1400 audit(1791172523.688:185516): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22059 comm="rm" name="/" dev="sda1" ino=2 [ 888.583893][ T37] audit: type=1400 audit(1791172523.688:185517): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22059 comm="rm" name="lib" dev="sda1" ino=264 [ 889.964405][T22043] veth3: entered promiscuous mode [ 891.974553][T21499] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 892.041324][T21499] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 892.050380][T21499] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 892.152830][T21499] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 892.184528][T21499] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 892.359900][T21499] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 892.372330][T21499] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 892.380116][T21499] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 892.791810][T22126] netlink: 92 bytes leftover after parsing attributes in process `syz.3.5576'. [ 893.601841][ T37] kauditd_printk_skb: 5739 callbacks suppressed [ 893.601857][ T37] audit: type=1400 audit(1791172528.708:190453): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22157 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 [ 893.601883][ T37] audit: type=1400 audit(1791172528.708:190454): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22157 comm="dhcpcd-run-hook" name="var" dev="sda1" ino=2001 [ 893.601904][ T37] audit: type=1400 audit(1791172528.708:190455): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22157 comm="dhcpcd-run-hook" name="var" dev="sda1" ino=2001 [ 893.601924][ T37] audit: type=1400 audit(1791172528.708:190456): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22157 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 [ 893.601945][ T37] audit: type=1400 audit(1791172528.708:190457): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22157 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 [ 893.602213][ T37] audit: type=1400 audit(1791172528.708:190458): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22157 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1771 [ 893.602237][ T37] audit: type=1400 audit(1791172528.708:190459): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22157 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1775 [ 893.602257][ T37] audit: type=1400 audit(1791172528.708:190460): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22157 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1776 [ 893.606039][ T37] audit: type=1400 audit(1791172528.708:190461): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22157 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 [ 893.606071][ T37] audit: type=1400 audit(1791172528.708:190462): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22157 comm="dhcpcd-run-hook" name="/" dev="devtmpfs" ino=1 [ 894.587882][T22204] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5581'. [ 894.826867][ T5700] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 894.829802][T22204] 0ªî{X¹¦: entered promiscuous mode [ 894.829956][T22204] macvtap0: entered promiscuous mode [ 894.830217][T22204] macvtap0: entered allmulticast mode [ 894.853517][T22208] 0ªî{X¹¦: left promiscuous mode [ 894.853575][T22208] macvtap0: left promiscuous mode [ 894.853586][T22208] macvtap0: left allmulticast mode [ 894.981709][ T5700] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 894.996699][ T5700] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.005246][ T5700] usb 2-1: config 0 descriptor?? [ 895.278231][ T5700] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 895.518292][ T5700] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1 [ 895.518309][ T5700] [drm] Initialized udl on minor 1 [ 898.660985][ T37] kauditd_printk_skb: 3122 callbacks suppressed [ 898.660997][ T37] audit: type=1400 audit(1791172533.768:193585): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5581 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 898.661129][ T37] audit: type=1400 audit(1791172533.768:193586): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5581 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 898.661420][ T37] audit: type=1400 audit(1791172533.768:193587): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5581 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 898.661570][ T37] audit: type=1400 audit(1791172533.768:193588): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5581 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 898.661593][ T37] audit: type=1400 audit(1791172533.768:193589): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=5581 comm="syz-executor" name="1307" dev="tmpfs" ino=6851 [ 898.661866][ T37] audit: type=1400 audit(1791172533.768:193590): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=5581 comm="syz-executor" path="/1307" dev="tmpfs" ino=6851 [ 898.662172][ T37] audit: type=1400 audit(1791172533.768:193591): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=5581 comm="syz-executor" path="/1307" dev="tmpfs" ino=6851 [ 898.662465][ T37] audit: type=1400 audit(1791172533.768:193592): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5581 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 898.662502][ T37] audit: type=1400 audit(1791172533.768:193593): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5581 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 898.663298][ T37] audit: type=1400 audit(1791172533.768:193595): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=1193 comm="irq/31-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.1.169 dest=53452 netif=eth0 [ 900.080479][T21499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 900.614215][ T5700] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 900.680659][ T5700] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 900.757800][ T5700] usb 2-1: USB disconnect, device number 21 [ 901.077354][T21499] 8021q: adding VLAN 0 to HW filter on device team0 [ 901.101944][T22176] bridge0: port 1(bridge_slave_0) entered blocking state [ 901.102020][T22176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 901.155014][T22179] bridge0: port 2(bridge_slave_1) entered blocking state [ 901.155089][T22179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 902.268752][T17440] bridge_slave_1: left allmulticast mode [ 902.268837][T17440] bridge_slave_1: left promiscuous mode [ 902.296202][T17440] bridge0: port 2(bridge_slave_1) entered disabled state [ 902.411907][T17440] bridge_slave_0: left allmulticast mode [ 902.411932][T17440] bridge_slave_0: left promiscuous mode [ 902.412082][T17440] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.712320][T17440] bridge_slave_1: left allmulticast mode [ 902.712345][T17440] bridge_slave_1: left promiscuous mode [ 902.712529][T17440] bridge0: port 2(bridge_slave_1) entered disabled state [ 902.717731][T17440] bridge_slave_0: left allmulticast mode [ 902.717754][T17440] bridge_slave_0: left promiscuous mode [ 902.717901][T17440] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.752847][T17440] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 903.226622][T17440] batman_adv: batadv0: Removing interface: ip6gretap1 [ 903.668899][T17440] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 903.675578][ T37] kauditd_printk_skb: 4958 callbacks suppressed [ 903.675590][ T37] audit: type=1400 audit(1791172538.778:198160): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5581 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 903.675615][ T37] audit: type=1400 audit(1791172538.778:198161): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5581 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 903.675636][ T37] audit: type=1400 audit(1791172538.778:198162): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5581 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 903.675657][ T37] audit: type=1400 audit(1791172538.778:198163): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5581 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 903.675679][ T37] audit: type=1400 audit(1791172538.778:198164): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=5581 comm="syz-executor" name="1317" dev="tmpfs" ino=6904 [ 903.675700][ T37] audit: type=1400 audit(1791172538.778:198165): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=5581 comm="syz-executor" path="/1317" dev="tmpfs" ino=6904 [ 903.675721][ T37] audit: type=1400 audit(1791172538.778:198166): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=5581 comm="syz-executor" path="/1317" dev="tmpfs" ino=6904 [ 903.675741][ T37] audit: type=1400 audit(1791172538.778:198167): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5581 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 903.675762][ T37] audit: type=1400 audit(1791172538.778:198168): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5581 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 903.675782][ T37] audit: type=1400 audit(1791172538.778:198169): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5581 comm="syz-executor" name="1317" dev="tmpfs" ino=6904 [ 903.685034][T17440] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 903.695561][T17440] bond0 (unregistering): Released all slaves [ 904.061717][T17440] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 904.070848][T17440] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 904.078165][T17440] bond0 (unregistering): Released all slaves [ 904.092330][T21505] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 904.282568][T21505] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 905.074709][T17440] tipc: Disabling bearer [ 905.074919][T17440] tipc: Left network mode [ 905.374152][ T5591] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 905.431692][ T5591] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 905.513450][ T5591] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 905.523328][ T5591] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 905.523949][ T5591] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 905.541585][ T5591] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 905.659052][ T5591] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 905.714749][T22300] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 905.751652][ T4898] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 905.775815][ T4898] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 907.105997][ T5691] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 907.256904][ T5691] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 907.258231][ T5691] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 907.258246][ T5691] usb 2-1: config 1 has no interface number 0 [ 907.261807][ T5691] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.261822][ T5691] usb 2-1: Product: syz [ 907.261829][ T5691] usb 2-1: Manufacturer: syz [ 907.261837][ T5691] usb 2-1: SerialNumber: syz [ 907.338778][ T5691] usb 2-1: 3:0 : does not exist [ 907.338794][ T5691] usb 2-1: 3:0 : does not exist [ 907.815804][T16424] Bluetooth: hci5: command tx timeout [ 908.004106][T16424] Bluetooth: hci7: command tx timeout [ 908.124651][ T5691] usb 2-1: USB disconnect, device number 22 [ 908.677604][ T37] kauditd_printk_skb: 4051 callbacks suppressed [ 908.677617][ T37] audit: type=1400 audit(1791172543.788:202209): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22337 comm="syz-executor" name="325" dev="tmpfs" ino=1715 [ 908.677643][ T37] audit: type=1400 audit(1791172543.788:202210): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22337 comm="syz-executor" name="325" dev="tmpfs" ino=1715 [ 908.677665][ T37] audit: type=1400 audit(1791172543.788:202211): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=22337 comm="syz-executor" name="325" dev="tmpfs" ino=1715 [ 908.678701][ T37] audit: type=1400 audit(1791172543.788:202212): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22337 comm="syz-executor" name="325" dev="tmpfs" ino=1715 [ 908.678729][ T37] audit: type=1400 audit(1791172543.788:202213): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22337 comm="syz-executor" name="325" dev="tmpfs" ino=1715 [ 908.678750][ T37] audit: type=1400 audit(1791172543.788:202214): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=22337 comm="syz-executor" name="325" dev="tmpfs" ino=1715 [ 908.678770][ T37] audit: type=1400 audit(1791172543.788:202215): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22337 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 908.678790][ T37] audit: type=1400 audit(1791172543.788:202216): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22337 comm="syz-executor" name="/" dev="proc" ino=1 [ 908.678811][ T37] audit: type=1400 audit(1791172543.788:202217): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22337 comm="syz-executor" name="/" dev="proc" ino=1 [ 908.678832][ T37] audit: type=1400 audit(1791172543.788:202218): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22337 comm="syz-executor" name="844" dev="proc" ino=74001 [ 909.389289][T22112] udevd[22112]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 909.914360][T16424] Bluetooth: hci5: command tx timeout [ 910.064384][T16424] Bluetooth: hci7: command tx timeout [ 911.966164][T16424] Bluetooth: hci5: command tx timeout [ 912.128625][T16424] Bluetooth: hci7: command tx timeout [ 913.562874][T22397] FAULT_INJECTION: forcing a failure. [ 913.562874][T22397] name failslab, interval 1, probability 0, space 0, times 0 [ 913.562898][T22397] CPU: 0 UID: 0 PID: 22397 Comm: syz.1.5622 Tainted: G L syzkaller #0 PREEMPT_{RT,(lazy)} [ 913.562914][T22397] Tainted: [L]=SOFTLOCKUP [ 913.562919][T22397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 913.562927][T22397] Call Trace: [ 913.562931][T22397] [ 913.562937][T22397] dump_stack_lvl+0xe8/0x150 [ 913.562969][T22397] should_fail_ex+0x46b/0x600 [ 913.562989][T22397] should_failslab+0xa8/0x100 [ 913.563002][T22397] ? __pfx_nci_transceive+0x10/0x10 [ 913.563110][T22397] __kmalloc_cache_noprof+0xa1/0x680 [ 913.563127][T22397] ? nfc_allocate_device+0x129/0x560 [ 913.563167][T22397] ? nfc_allocate_device+0x129/0x560 [ 913.563182][T22397] ? __pfx_nci_transceive+0x10/0x10 [ 913.563197][T22397] nfc_allocate_device+0x129/0x560 [ 913.563209][T22397] ? __init_swait_queue_head+0xa8/0x150 [ 913.563225][T22397] nci_allocate_device+0x1da/0x380 [ 913.563240][T22397] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 913.563289][T22397] virtual_ncidev_open+0x75/0x190 [ 913.563303][T22397] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 913.563314][T22397] misc_open+0x2de/0x350 [ 913.563331][T22397] chrdev_open+0x4dc/0x600 [ 913.563349][T22397] ? __pfx_chrdev_open+0x10/0x10 [ 913.563365][T22397] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 913.563383][T22397] ? __pfx_chrdev_open+0x10/0x10 [ 913.563398][T22397] do_dentry_open+0x849/0x1420 [ 913.563415][T22397] vfs_open+0x3b/0x350 [ 913.563426][T22397] ? path_openat+0x142d/0x1d60 [ 913.563442][T22397] path_openat+0x1448/0x1d60 [ 913.563466][T22397] do_file_open+0x23e/0x4a0 [ 913.563483][T22397] ? __pfx_do_file_open+0x10/0x10 [ 913.563510][T22397] ? alloc_fd+0x654/0x6d0 [ 913.563527][T22397] do_sys_openat2+0x115/0x200 [ 913.563538][T22397] ? __se_sys_futex+0x3a8/0x450 [ 913.563550][T22397] ? __pfx_do_sys_openat2+0x10/0x10 [ 913.563564][T22397] ? rcu_is_watching+0x16/0xb0 [ 913.563583][T22397] __x64_sys_openat+0x138/0x170 [ 913.563597][T22397] do_syscall_64+0x166/0x520 [ 913.563609][T22397] ? trace_irq_disable+0x3b/0x140 [ 913.563623][T22397] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.563634][T22397] ? clear_bhb_loop+0x70/0xc0 [ 913.563647][T22397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.563658][T22397] RIP: 0033:0x7fe4edb5e159 [ 913.563670][T22397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 913.563680][T22397] RSP: 002b:00007fe4ebdb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 913.563693][T22397] RAX: ffffffffffffffda RBX: 00007fe4edde5fa0 RCX: 00007fe4edb5e159 [ 913.563701][T22397] RDX: 0000000000000002 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 913.563708][T22397] RBP: 00007fe4edbf506b R08: 0000000000000000 R09: 0000000000000000 [ 913.563715][T22397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 913.563722][T22397] R13: 00007fe4edde6038 R14: 00007fe4edde5fa0 R15: 00007ffdaeb93258 [ 913.563741][T22397] [ 913.691180][ T37] kauditd_printk_skb: 5741 callbacks suppressed [ 913.691194][ T37] audit: type=1400 audit(1791172548.788:207951): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22396 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 [ 913.691217][ T37] audit: type=1400 audit(1791172548.798:207952): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22396 comm="dhcpcd-run-hook" name="var" dev="sda1" ino=2001 [ 913.691240][ T37] audit: type=1400 audit(1791172548.798:207953): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22396 comm="dhcpcd-run-hook" name="var" dev="sda1" ino=2001 [ 913.691262][ T37] audit: type=1400 audit(1791172548.798:207954): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22396 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 [ 913.691282][ T37] audit: type=1400 audit(1791172548.798:207955): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22396 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 [ 913.691303][ T37] audit: type=1400 audit(1791172548.798:207956): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22396 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1771 [ 913.691324][ T37] audit: type=1400 audit(1791172548.798:207957): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22396 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1775 [ 913.691343][ T37] audit: type=1400 audit(1791172548.798:207958): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22396 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1776 [ 913.692082][ T37] audit: type=1400 audit(1791172548.798:207959): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22396 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 [ 913.692105][ T37] audit: type=1400 audit(1791172548.798:207960): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22396 comm="dhcpcd-run-hook" name="var" dev="sda1" ino=2001 [ 914.051203][T16424] Bluetooth: hci5: command tx timeout [ 914.206290][T16424] Bluetooth: hci7: command tx timeout [ 916.203476][T22428] vlan2: entered promiscuous mode [ 916.203496][T22428] macvtap0: entered promiscuous mode [ 916.210447][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.624884][T17440] hsr_slave_0: left promiscuous mode [ 916.629587][T17440] hsr_slave_1: left promiscuous mode [ 916.630286][T17440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 916.630302][T17440] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 916.632305][T17440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 916.632320][T17440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 916.644508][T17440] hsr_slave_0: left promiscuous mode [ 916.645053][T17440] hsr_slave_1: left promiscuous mode [ 916.645647][T17440] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 916.647951][T17440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 916.763572][T17440] veth1_macvtap: left promiscuous mode [ 916.763640][T17440] veth0_macvtap: left promiscuous mode [ 916.763929][T17440] veth1_vlan: left promiscuous mode [ 916.764032][T17440] veth0_vlan: left promiscuous mode [ 917.311268][ T5594] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 917.496044][ T5594] usb 2-1: Using ep0 maxpacket: 32 [ 917.496722][ T5594] usb 2-1: New USB device found, idVendor=0582, idProduct=0050, bcdDevice= 0.40 [ 917.498426][ T5594] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 39, changing to 7 [ 917.506964][ T5594] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.506984][ T5594] usb 2-1: Product: syz [ 917.506992][ T5594] usb 2-1: Manufacturer: syz [ 917.507000][ T5594] usb 2-1: SerialNumber: syz [ 917.869317][ T5594] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 917.923956][ T5594] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 918.384343][ T5594] usb 2-1: USB disconnect, device number 23 [ 918.658277][T22451] udevd[22451]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 918.750195][ T37] kauditd_printk_skb: 4432 callbacks suppressed [ 918.750208][ T37] audit: type=1400 audit(1791172553.858:212391): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22460 comm="syz-executor" name="341" dev="tmpfs" ino=1798 [ 918.750234][ T37] audit: type=1400 audit(1791172553.858:212392): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22460 comm="syz-executor" name="341" dev="tmpfs" ino=1798 [ 918.750256][ T37] audit: type=1400 audit(1791172553.858:212393): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=22460 comm="syz-executor" name="341" dev="tmpfs" ino=1798 [ 918.750278][ T37] audit: type=1400 audit(1791172553.858:212394): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22460 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 918.750298][ T37] audit: type=1400 audit(1791172553.858:212395): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22460 comm="syz-executor" name="/" dev="proc" ino=1 [ 918.750319][ T37] audit: type=1400 audit(1791172553.858:212396): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22460 comm="syz-executor" name="/" dev="proc" ino=1 [ 918.750339][ T37] audit: type=1400 audit(1791172553.858:212397): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22460 comm="syz-executor" name="882" dev="proc" ino=74552 [ 918.750363][ T37] audit: type=1400 audit(1791172553.858:212398): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=w pid=22460 comm="syz-executor" name="oom_score_adj" dev="proc" ino=74553 [ 918.750385][ T37] audit: type=1400 audit(1791172553.858:212399): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=22460 comm="syz-executor" path="/proc/882/oom_score_adj" dev="proc" ino=74553 [ 918.750406][ T37] audit: type=1400 audit(1791172553.858:212400): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22460 comm="syz-executor" name="341" dev="tmpfs" ino=1798 [ 919.983479][T17440] team0 (unregistering): Port device team_slave_1 removed [ 919.999667][T17440] team0 (unregistering): Port device team_slave_0 removed [ 921.419464][T21785] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 921.449637][T21785] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 921.463788][T21785] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 921.481071][T21785] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 921.595638][T21785] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 921.692913][T21785] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 921.736748][T21785] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 921.759987][T21785] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 922.717611][T22295] bridge0: port 1(bridge_slave_0) entered blocking state [ 922.717680][T22295] bridge0: port 1(bridge_slave_0) entered disabled state [ 922.717786][T22295] bridge_slave_0: entered allmulticast mode [ 922.720769][T22295] bridge_slave_0: entered promiscuous mode [ 922.763691][T22295] bridge0: port 2(bridge_slave_1) entered blocking state [ 922.763771][T22295] bridge0: port 2(bridge_slave_1) entered disabled state [ 922.763905][T22295] bridge_slave_1: entered allmulticast mode [ 922.785518][T22295] bridge_slave_1: entered promiscuous mode [ 922.830985][T17440] IPVS: stop unused estimator thread 0... [ 923.581743][ T4898] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 923.625483][ T4898] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 923.637471][ T4898] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 923.638122][ T4898] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 923.640856][ T4898] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 923.845066][ T37] kauditd_printk_skb: 3385 callbacks suppressed [ 923.845080][ T37] audit: type=1400 audit(1791172558.918:215786): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22527 comm="syz-executor" name="/" dev="sda1" ino=2 [ 923.845105][ T37] audit: type=1400 audit(1791172558.948:215787): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=4950 comm="udevd" name="/" dev="sda1" ino=2 [ 923.845126][ T37] audit: type=1400 audit(1791172558.948:215788): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22451 comm="udevd" name="/" dev="sda1" ino=2 [ 923.845147][ T37] audit: type=1400 audit(1791172558.948:215789): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5581 comm="syz-executor" name="1344" dev="tmpfs" ino=7047 [ 923.845168][ T37] audit: type=1400 audit(1791172558.948:215790): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22527 comm="syz-executor" name="/" dev="proc" ino=1 [ 923.845189][ T37] audit: type=1400 audit(1791172558.948:215791): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22527 comm="syz-executor" name="sys" dev="proc" ino=4026531854 [ 923.845211][ T37] audit: type=1400 audit(1791172558.948:215792): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22527 comm="syz-executor" name="kernel" dev="proc" ino=3899 [ 923.845232][ T37] audit: type=1400 audit(1791172558.948:215793): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=w pid=22527 comm="syz-executor" name="shmmax" dev="proc" ino=74858 [ 923.845253][ T37] audit: type=1400 audit(1791172558.948:215794): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=22527 comm="syz-executor" path="/proc/sys/kernel/shmmax" dev="proc" ino=74858 [ 923.845274][ T37] audit: type=1400 audit(1791172558.948:215795): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22527 comm="syz-executor" name="/" dev="sda1" ino=2 [ 924.040940][T22295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 924.177292][T22295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 924.525153][T22296] bridge0: port 1(bridge_slave_0) entered blocking state [ 924.646942][T22296] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.647286][T22296] bridge_slave_0: entered allmulticast mode [ 924.652161][T22296] bridge_slave_0: entered promiscuous mode [ 924.662414][T22295] team0: Port device team_slave_0 added [ 924.677835][T22295] team0: Port device team_slave_1 added [ 924.808330][T22296] bridge0: port 2(bridge_slave_1) entered blocking state [ 924.808400][T22296] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.808501][T22296] bridge_slave_1: entered allmulticast mode [ 924.809997][T22296] bridge_slave_1: entered promiscuous mode [ 925.535565][T22295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 925.535577][T22295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 925.535592][T22295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 925.667570][T22295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 925.667583][T22295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 925.667598][T22295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 925.733481][T22296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 925.791958][T22296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 925.956522][T16424] Bluetooth: hci2: command tx timeout [ 926.829041][T22562] netlink: 15 bytes leftover after parsing attributes in process `syz.1.5665'. [ 927.348458][T22296] team0: Port device team_slave_0 added [ 927.377398][T22296] team0: Port device team_slave_1 added [ 927.466671][T22295] hsr_slave_0: entered promiscuous mode [ 927.467449][T22295] hsr_slave_1: entered promiscuous mode [ 927.494000][T22295] debugfs: 'hsr0' already exists in 'hsr' [ 927.494020][T22295] Cannot create hsr debugfs directory [ 927.508008][T22569] FAULT_INJECTION: forcing a failure. [ 927.508008][T22569] name failslab, interval 1, probability 0, space 0, times 0 [ 927.508032][T22569] CPU: 0 UID: 0 PID: 22569 Comm: syz.1.5667 Tainted: G L syzkaller #0 PREEMPT_{RT,(lazy)} [ 927.508048][T22569] Tainted: [L]=SOFTLOCKUP [ 927.508052][T22569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 927.508059][T22569] Call Trace: [ 927.508064][T22569] [ 927.508069][T22569] dump_stack_lvl+0xe8/0x150 [ 927.508091][T22569] should_fail_ex+0x46b/0x600 [ 927.508110][T22569] should_failslab+0xa8/0x100 [ 927.508123][T22569] __kmalloc_cache_noprof+0xa1/0x680 [ 927.508140][T22569] ? snd_pcm_oss_change_params_locked+0x1e4/0x3c80 [ 927.508164][T22569] ? snd_pcm_oss_change_params_locked+0x1e4/0x3c80 [ 927.508184][T22569] snd_pcm_oss_change_params_locked+0x1e4/0x3c80 [ 927.508200][T22569] ? __lock_acquire+0x747/0x2de0 [ 927.508221][T22569] ? futex_unqueue+0x211/0x240 [ 927.508237][T22569] ? __futex_wait+0x1e3/0x410 [ 927.508251][T22569] ? __futex_wait+0x35a/0x410 [ 927.508267][T22569] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 927.508281][T22569] ? do_raw_spin_lock+0x12b/0x2f0 [ 927.508300][T22569] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 927.508315][T22569] ? mutex_lock_interruptible_nested+0x152/0x1d0 [ 927.508331][T22569] ? snd_pcm_oss_write+0x207/0xb40 [ 927.508346][T22569] snd_pcm_oss_write+0x274/0xb40 [ 927.508368][T22569] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 927.508382][T22569] vfs_write+0x29f/0xbb0 [ 927.508401][T22569] ? __pfx_vfs_write+0x10/0x10 [ 927.508416][T22569] ? __fget_files+0x2a/0x420 [ 927.508430][T22569] ? __fget_files+0x2a/0x420 [ 927.508441][T22569] ? __fget_files+0x3a8/0x420 [ 927.508452][T22569] ? __fget_files+0x2a/0x420 [ 927.508469][T22569] ksys_write+0x156/0x270 [ 927.508483][T22569] ? __pfx_ksys_write+0x10/0x10 [ 927.508502][T22569] do_syscall_64+0x166/0x520 [ 927.508514][T22569] ? trace_irq_disable+0x3b/0x140 [ 927.508528][T22569] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.508540][T22569] ? clear_bhb_loop+0x70/0xc0 [ 927.508553][T22569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.508566][T22569] RIP: 0033:0x7fe4edb5e159 [ 927.508578][T22569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 927.508587][T22569] RSP: 002b:00007fe4ebdb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 927.508600][T22569] RAX: ffffffffffffffda RBX: 00007fe4edde5fa0 RCX: 00007fe4edb5e159 [ 927.508608][T22569] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000004 [ 927.508615][T22569] RBP: 00007fe4edbf506b R08: 0000000000000000 R09: 0000000000000000 [ 927.508621][T22569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 927.508628][T22569] R13: 00007fe4edde6038 R14: 00007fe4edde5fa0 R15: 00007ffdaeb93258 [ 927.508645][T22569] [ 927.542223][T22296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 927.542235][T22296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 927.542249][T22296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 927.966094][T16424] Bluetooth: hci2: command tx timeout [ 928.124909][T22296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 928.124922][T22296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 928.124937][T22296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 928.942234][ T37] kauditd_printk_skb: 2967 callbacks suppressed [ 928.942249][ T37] audit: type=1400 audit(1791172564.048:218757): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22527 comm="syz-executor" name="/" dev="sda1" ino=2 [ 928.942284][ T37] audit: type=1400 audit(1791172564.048:218758): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22527 comm="syz-executor" name="/" dev="proc" ino=1 [ 928.942306][ T37] audit: type=1400 audit(1791172564.048:218759): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22527 comm="syz-executor" name="sys" dev="proc" ino=4026531854 [ 928.942328][ T37] audit: type=1400 audit(1791172564.048:218760): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22527 comm="syz-executor" name="net" dev="proc" ino=4185 [ 928.942349][ T37] audit: type=1400 audit(1791172564.048:218761): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22527 comm="syz-executor" name="ipv4" dev="proc" ino=75099 [ 928.942370][ T37] audit: type=1400 audit(1791172564.048:218762): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=w pid=22527 comm="syz-executor" name="ping_group_range" dev="proc" ino=75100 [ 928.942392][ T37] audit: type=1400 audit(1791172564.048:218763): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=22527 comm="syz-executor" path="/proc/sys/net/ipv4/ping_group_range" dev="proc" ino=75100 [ 928.969090][ T37] audit: type=1400 audit(1791172564.078:218764): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22527 comm="syz-executor" name="/" dev="sda1" ino=2 [ 928.969121][ T37] audit: type=1400 audit(1791172564.078:218765): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22527 comm="syz-executor" name="/" dev="devtmpfs" ino=1 [ 928.969141][ T37] audit: type=1400 audit(1791172564.078:218766): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22527 comm="syz-executor" name="net" dev="devtmpfs" ino=706 [ 929.093596][T22296] hsr_slave_0: entered promiscuous mode [ 929.098306][T22296] hsr_slave_1: entered promiscuous mode [ 929.098931][T22296] debugfs: 'hsr0' already exists in 'hsr' [ 929.098954][T22296] Cannot create hsr debugfs directory [ 930.046055][T16424] Bluetooth: hci2: command tx timeout [ 932.126215][T16424] Bluetooth: hci2: command tx timeout [ 933.953903][ T37] kauditd_printk_skb: 4951 callbacks suppressed [ 933.953917][ T37] audit: type=1400 audit(1791172569.058:223382): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22667 comm="rm" name="/" dev="sda1" ino=2 [ 933.953944][ T37] audit: type=1400 audit(1791172569.058:223383): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22667 comm="rm" name="/" dev="sda1" ino=2 [ 933.954029][ T37] audit: type=1400 audit(1791172569.058:223384): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22667 comm="rm" name="lib" dev="sda1" ino=264 [ 933.954051][ T37] audit: type=1400 audit(1791172569.058:223385): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22667 comm="rm" name="lib" dev="sda1" ino=264 [ 933.954080][ T37] audit: type=1400 audit(1791172569.058:223386): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=22667 comm="rm" name="libatomic.so.1.2.0" dev="sda1" ino=1108 [ 933.954100][ T37] audit: type=1400 audit(1791172569.058:223387): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=22667 comm="rm" path="/lib/libatomic.so.1.2.0" dev="sda1" ino=1108 [ 933.954121][ T37] audit: type=1400 audit(1791172569.058:223388): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=22667 comm="rm" path="/lib/libatomic.so.1.2.0" dev="sda1" ino=1108 [ 933.961468][ T37] audit: type=1400 audit(1791172569.068:223389): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22667 comm="rm" name="/" dev="sda1" ino=2 [ 933.961497][ T37] audit: type=1400 audit(1791172569.068:223390): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22667 comm="rm" name="/" dev="sda1" ino=2 [ 933.961517][ T37] audit: type=1400 audit(1791172569.068:223391): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22667 comm="rm" name="lib" dev="sda1" ino=264 [ 934.913378][T22527] bridge0: port 1(bridge_slave_0) entered blocking state [ 934.913446][T22527] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.913567][T22527] bridge_slave_0: entered allmulticast mode [ 934.919981][T22527] bridge_slave_0: entered promiscuous mode [ 934.939957][T22527] bridge0: port 2(bridge_slave_1) entered blocking state [ 934.940040][T22527] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.952105][T22527] bridge_slave_1: entered allmulticast mode [ 934.969922][T22527] bridge_slave_1: entered promiscuous mode [ 935.810346][T22527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 936.012865][T22527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 936.059800][T18259] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 936.131312][T22527] team0: Port device team_slave_0 added [ 936.183927][T22527] team0: Port device team_slave_1 added [ 936.216256][T18259] usb 2-1: Using ep0 maxpacket: 16 [ 936.218814][T18259] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 936.220027][T18259] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 936.220042][T18259] usb 2-1: config 1 has no interface number 0 [ 936.220067][T18259] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 936.220081][T18259] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 936.220094][T18259] usb 2-1: config 1 interface 105 has no altsetting 0 [ 936.231180][T18259] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 936.231205][T18259] usb 2-1: Product: syz [ 936.231218][T18259] usb 2-1: Manufacturer: syz [ 936.231226][T18259] usb 2-1: SerialNumber: syz [ 936.254045][T22686] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 936.254343][T22686] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 936.686553][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 936.723268][T22686] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 936.723481][T22686] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 936.828928][T18259] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 936.829218][T18259] aqc111 2-1:1.105: probe with driver aqc111 failed with error -71 [ 936.866358][T18259] usb 2-1: USB disconnect, device number 24 [ 937.936159][T22716] Invalid auth_tok structure returned from key query [ 937.936172][T22716] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 937.936180][T22716] One or more global auth toks could not properly register; rc = [-22] [ 937.936202][T22716] Error validating options; rc = [-22] [ 938.573312][T22725] netlink: 'syz.1.5702': attribute type 1 has an invalid length. [ 938.817353][T22527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 938.817365][T22527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 938.817380][T22527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 938.959380][ T37] kauditd_printk_skb: 6397 callbacks suppressed [ 938.959394][ T37] audit: type=1400 audit(1791172574.068:229225): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22729 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 [ 938.959421][ T37] audit: type=1400 audit(1791172574.068:229226): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22729 comm="dhcpcd-run-hook" name="bin" dev="sda1" ino=13 [ 938.959442][ T37] audit: type=1400 audit(1791172574.068:229227): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22729 comm="dhcpcd-run-hook" name="rm" dev="sda1" ino=83 [ 938.959462][ T37] audit: type=1400 audit(1791172574.068:229228): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=22729 comm="dhcpcd-run-hook" path="/bin/rm" dev="sda1" ino=83 [ 938.960885][ T37] audit: type=1400 audit(1791172574.068:229229): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22729 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 [ 938.960913][ T37] audit: type=1400 audit(1791172574.068:229230): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22729 comm="dhcpcd-run-hook" name="bin" dev="sda1" ino=13 [ 938.966080][ T37] audit: type=1400 audit(1791172574.068:229231): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22729 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 [ 938.966108][ T37] audit: type=1400 audit(1791172574.068:229232): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22729 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 [ 938.966129][ T37] audit: type=1400 audit(1791172574.068:229233): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22729 comm="dhcpcd-run-hook" name="lib" dev="sda1" ino=264 [ 938.966150][ T37] audit: type=1400 audit(1791172574.068:229234): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22729 comm="dhcpcd-run-hook" name="ld-linux-x86-64.so.2" dev="sda1" ino=1104 [ 939.031062][T22726] gretap1: entered allmulticast mode [ 939.048736][T22726] bond1: (slave gretap1): making interface the new active one [ 939.057944][T22726] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 939.058635][T22527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 939.058644][T22527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 939.058659][T22527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 940.073742][T22527] hsr_slave_0: entered promiscuous mode [ 940.103332][T22527] hsr_slave_1: entered promiscuous mode [ 940.103902][T22527] debugfs: 'hsr0' already exists in 'hsr' [ 940.103919][T22527] Cannot create hsr debugfs directory [ 940.276336][T22748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5710'. [ 942.382798][T22777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5715'. [ 943.396143][ T5691] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 943.560365][ T5691] usb 2-1: Using ep0 maxpacket: 16 [ 943.562109][ T5691] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 943.590770][ T5691] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.590787][ T5691] usb 2-1: Product: syz [ 943.590795][ T5691] usb 2-1: Manufacturer: syz [ 943.590803][ T5691] usb 2-1: SerialNumber: syz [ 943.968925][ T37] kauditd_printk_skb: 6524 callbacks suppressed [ 943.968938][ T37] audit: type=1400 audit(1791172579.078:234697): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5581 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 943.969000][ T37] audit: type=1400 audit(1791172579.078:234698): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5581 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 943.969022][ T37] audit: type=1400 audit(1791172579.078:234699): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5581 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 943.969043][ T37] audit: type=1400 audit(1791172579.078:234700): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5581 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 943.969064][ T37] audit: type=1400 audit(1791172579.078:234701): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=5581 comm="syz-executor" name="1380" dev="tmpfs" ino=7238 [ 943.969085][ T37] audit: type=1400 audit(1791172579.078:234702): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=5581 comm="syz-executor" path="/1380" dev="tmpfs" ino=7238 [ 943.969147][ T37] audit: type=1400 audit(1791172579.078:234703): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=5581 comm="syz-executor" path="/1380" dev="tmpfs" ino=7238 [ 943.969167][ T37] audit: type=1400 audit(1791172579.078:234704): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5581 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 943.969189][ T37] audit: type=1400 audit(1791172579.078:234705): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5581 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 943.969210][ T37] audit: type=1400 audit(1791172579.078:234706): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5581 comm="syz-executor" name="1380" dev="tmpfs" ino=7238 [ 945.075867][ T5691] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 945.080538][ T5691] usb 2-1: USB disconnect, device number 25 [ 945.747458][T18259] libceph: connect (1)0.0.0.0:6789 error -22 [ 945.747601][T18259] libceph: mon0 (1)0.0.0.0:6789 connect error [ 946.006181][T18259] libceph: connect (1)0.0.0.0:6789 error -22 [ 946.006314][T18259] libceph: mon0 (1)0.0.0.0:6789 connect error [ 946.440121][T22822] ceph: No mds server is up or the cluster is laggy [ 946.518816][T18259] libceph: connect (1)0.0.0.0:6789 error -22 [ 946.518959][T18259] libceph: mon0 (1)0.0.0.0:6789 connect error [ 946.641888][T17440] bridge_slave_1: left allmulticast mode [ 946.641914][T17440] bridge_slave_1: left promiscuous mode [ 946.642085][T17440] bridge0: port 2(bridge_slave_1) entered disabled state [ 946.643767][T17440] bridge_slave_0: left allmulticast mode [ 946.643786][T17440] bridge_slave_0: left promiscuous mode [ 946.643931][T17440] bridge0: port 1(bridge_slave_0) entered disabled state [ 946.748491][T17440] bridge_slave_1: left allmulticast mode [ 946.748516][T17440] bridge_slave_1: left promiscuous mode [ 946.748665][T17440] bridge0: port 2(bridge_slave_1) entered disabled state [ 946.794183][T17440] bridge_slave_0: left allmulticast mode [ 946.794207][T17440] bridge_slave_0: left promiscuous mode [ 946.794350][T17440] bridge0: port 1(bridge_slave_0) entered disabled state [ 946.908635][T17440] bridge_slave_1: left allmulticast mode [ 946.908660][T17440] bridge_slave_1: left promiscuous mode [ 946.908806][T17440] bridge0: port 2(bridge_slave_1) entered disabled state [ 946.910538][T17440] bridge_slave_0: left allmulticast mode [ 946.910555][T17440] bridge_slave_0: left promiscuous mode [ 946.910682][T17440] bridge0: port 1(bridge_slave_0) entered disabled state [ 947.988159][T17440] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 948.013026][T17440] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 948.094690][T17440] bond0 (unregistering): Released all slaves [ 948.095111][T16424] Bluetooth: hci1: unexpected event for opcode 0x041b [ 948.694451][T17440] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 948.700347][T17440] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 948.702377][T17440] bond0 (unregistering): Released all slaves [ 948.796292][T17440] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 948.798838][T17440] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 948.801991][T17440] bond0 (unregistering): Released all slaves [ 948.976396][ T37] kauditd_printk_skb: 5519 callbacks suppressed [ 948.976409][ T37] audit: type=1400 audit(1791172584.088:240226): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22863 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 [ 948.976434][ T37] audit: type=1400 audit(1791172584.088:240227): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22863 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 [ 948.976461][ T37] audit: type=1400 audit(1791172584.088:240228): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22863 comm="dhcpcd-run-hook" name="lib" dev="sda1" ino=264 [ 948.976879][ T37] audit: type=1400 audit(1791172584.088:240229): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=22863 comm="dhcpcd-run-hook" name="libresolv.so.2" dev="sda1" ino=1130 [ 948.976903][ T37] audit: type=1400 audit(1791172584.088:240230): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=22863 comm="dhcpcd-run-hook" path="/lib/libresolv.so.2" dev="sda1" ino=1130 [ 948.976925][ T37] audit: type=1400 audit(1791172584.088:240231): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=22863 comm="dhcpcd-run-hook" path="/lib/libresolv.so.2" dev="sda1" ino=1130 [ 948.983166][ T37] audit: type=1400 audit(1791172584.088:240232): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22863 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 [ 948.983205][ T37] audit: type=1400 audit(1791172584.088:240233): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22863 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 [ 948.983227][ T37] audit: type=1400 audit(1791172584.088:240234): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22863 comm="dhcpcd-run-hook" name="lib" dev="sda1" ino=264 [ 948.983881][ T37] audit: type=1400 audit(1791172584.088:240235): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22863 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 [ 949.502795][T22851] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 952.577906][T22908] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5749'. [ 953.996953][ T37] kauditd_printk_skb: 4726 callbacks suppressed [ 953.996967][ T37] audit: type=1400 audit(1791172589.108:244962): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22922 comm="cmp" name="/" dev="sda1" ino=2 [ 953.996991][ T37] audit: type=1400 audit(1791172589.108:244963): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22922 comm="cmp" name="/" dev="sda1" ino=2 [ 953.997011][ T37] audit: type=1400 audit(1791172589.108:244964): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22922 comm="cmp" name="lib" dev="sda1" ino=264 [ 953.997357][ T37] audit: type=1400 audit(1791172589.108:244965): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22922 comm="cmp" name="lib" dev="sda1" ino=264 [ 953.997380][ T37] audit: type=1400 audit(1791172589.108:244966): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=22922 comm="cmp" name="libpam.so.0.85.1" dev="sda1" ino=1122 [ 953.997403][ T37] audit: type=1400 audit(1791172589.108:244967): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=22922 comm="cmp" path="/lib/libpam.so.0.85.1" dev="sda1" ino=1122 [ 953.997589][ T37] audit: type=1400 audit(1791172589.108:244968): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=22922 comm="cmp" path="/lib/libpam.so.0.85.1" dev="sda1" ino=1122 [ 954.018936][ T37] audit: type=1400 audit(1791172589.118:244969): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22922 comm="cmp" name="/" dev="sda1" ino=2 [ 954.018968][ T37] audit: type=1400 audit(1791172589.118:244970): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22922 comm="cmp" name="/" dev="sda1" ino=2 [ 954.018990][ T37] audit: type=1400 audit(1791172589.118:244971): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22922 comm="cmp" name="lib" dev="sda1" ino=264 [ 954.811995][T17440] hsr_slave_0: left promiscuous mode [ 954.841811][T17440] hsr_slave_1: left promiscuous mode [ 954.842683][T17440] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 954.854722][T17440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 954.884447][T17440] hsr_slave_0: left promiscuous mode [ 954.885116][T17440] hsr_slave_1: left promiscuous mode [ 954.885724][T17440] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 954.899170][T17440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 954.909176][T17440] hsr_slave_0: left promiscuous mode [ 954.909676][T17440] hsr_slave_1: left promiscuous mode [ 954.913121][T17440] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 954.913591][T17440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 955.544446][T22937] input: PS/2 BYD TouchPad as /devices/platform/i8042/serio1/input/input42 [ 956.191329][T17440] team0 (unregistering): Port device team_slave_1 removed [ 956.268931][T17440] team0 (unregistering): Port device team_slave_0 removed [ 957.384445][T17440] team0 (unregistering): Port device team_slave_1 removed [ 957.408493][T17440] team0 (unregistering): Port device team_slave_0 removed [ 958.001151][T17440] team0 (unregistering): Port device team_slave_1 removed [ 958.012134][T17440] team0 (unregistering): Port device team_slave_0 removed [ 959.030556][ T37] kauditd_printk_skb: 6032 callbacks suppressed [ 959.030569][ T37] audit: type=1400 audit(1791172594.138:251004): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22988 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 959.030597][ T37] audit: type=1400 audit(1791172594.138:251005): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22988 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 959.030619][ T37] audit: type=1400 audit(1791172594.138:251006): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22988 comm="syz-executor" name="1416" dev="tmpfs" ino=7424 [ 959.030771][ T37] audit: type=1400 audit(1791172594.138:251007): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=22988 comm="syz-executor" opid=22988 ocomm="syz-executor" [ 959.031410][ T37] audit: type=1400 audit(1791172594.138:251008): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22988 comm="syz-executor" name="1416" dev="tmpfs" ino=7424 [ 959.031435][ T37] audit: type=1400 audit(1791172594.138:251009): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22988 comm="syz-executor" name="1416" dev="tmpfs" ino=7424 [ 959.031456][ T37] audit: type=1400 audit(1791172594.138:251010): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=22988 comm="syz-executor" name="1416" dev="tmpfs" ino=7424 [ 959.032051][ T37] audit: type=1400 audit(1791172594.138:251011): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22988 comm="syz-executor" name="1416" dev="tmpfs" ino=7424 [ 959.032075][ T37] audit: type=1400 audit(1791172594.138:251012): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22988 comm="syz-executor" name="1416" dev="tmpfs" ino=7424 [ 959.032100][ T37] audit: type=1400 audit(1791172594.138:251013): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=22988 comm="syz-executor" name="1416" dev="tmpfs" ino=7424 [ 960.308017][T22295] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 960.319806][T22295] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 960.326443][T22295] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 960.341124][T22295] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 960.355323][T22295] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 960.519375][T22295] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 960.522511][T22295] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 960.572426][T22295] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 962.236436][T23026] netlink: 'syz.3.5783': attribute type 5 has an invalid length. [ 963.994914][T22295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 964.066266][ T5245] audit_log_start: 4629 callbacks suppressed [ 964.066278][ T5245] audit: audit_backlog=65 > audit_backlog_limit=64 [ 964.066285][ T5245] audit: audit_lost=3498 audit_rate_limit=0 audit_backlog_limit=64 [ 964.066293][ T5245] audit: backlog limit exceeded [ 964.066326][ T5245] audit: audit_backlog=65 > audit_backlog_limit=64 [ 964.066333][ T5245] audit: audit_lost=3499 audit_rate_limit=0 audit_backlog_limit=64 [ 964.066341][ T5245] audit: backlog limit exceeded [ 964.066356][ T5245] audit: audit_backlog=65 > audit_backlog_limit=64 [ 964.066363][ T5245] audit: audit_lost=3500 audit_rate_limit=0 audit_backlog_limit=64 [ 964.066370][ T5245] audit: backlog limit exceeded [ 964.066390][ T5245] audit: audit_backlog=65 > audit_backlog_limit=64 [ 964.113213][T22295] 8021q: adding VLAN 0 to HW filter on device team0 [ 964.314011][T22180] bridge0: port 1(bridge_slave_0) entered blocking state [ 964.314087][T22180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 964.321300][T22180] bridge0: port 2(bridge_slave_1) entered blocking state [ 964.321388][T22180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 965.141046][T23057] 0ªî{X¹¦: entered promiscuous mode [ 965.171803][T23057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5788'. [ 965.171852][T23057] 0ªî{X¹¦: left promiscuous mode [ 965.804515][ T4898] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 965.922362][ T4898] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 965.923966][ T4898] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 965.924948][ T4898] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 965.925390][ T4898] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 966.368266][ T4898] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 966.530665][ T4898] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 966.549842][ T4898] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 966.567482][ T4898] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 966.589631][ T4898] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 968.181835][T16424] Bluetooth: hci4: command tx timeout [ 968.930622][T16424] Bluetooth: hci6: command tx timeout [ 969.083387][ T37] kauditd_printk_skb: 5561 callbacks suppressed [ 969.083400][ T37] audit: type=1400 audit(1791172604.178:261040): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23119 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 [ 969.083425][ T37] audit: type=1400 audit(1791172604.178:261041): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23119 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1771 [ 969.083446][ T37] audit: type=1400 audit(1791172604.178:261042): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=23119 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1775 [ 969.083468][ T37] audit: type=1400 audit(1791172604.178:261043): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=23119 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1776 [ 969.083490][ T37] audit: type=1400 audit(1791172604.178:261044): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=23119 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1776 [ 969.083512][ T37] audit: type=1400 audit(1791172604.178:261045): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17552 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 969.083536][ T37] audit: type=1400 audit(1791172604.188:261046): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=1193 comm="irq/31-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.1.169 dest=53452 netif=eth0 [ 969.083560][ T37] audit: type=1400 audit(1791172604.188:261047): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=1193 comm="irq/31-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.1.169 dest=53452 netif=eth0 [ 969.083582][ T37] audit: type=1400 audit(1791172604.188:261048): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=1193 comm="irq/31-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.1.169 dest=53452 netif=eth0 [ 969.083604][ T37] audit: type=1400 audit(1791172604.188:261049): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=1193 comm="irq/31-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.1.169 dest=53452 netif=eth0 [ 970.206078][T16424] Bluetooth: hci4: command tx timeout [ 970.626083][ T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 970.836428][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 970.908645][T23139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5800'. [ 971.011408][T16424] Bluetooth: hci6: command tx timeout [ 972.041167][T23161] netlink: 7 bytes leftover after parsing attributes in process `syz.3.5807'. [ 972.286063][T16424] Bluetooth: hci4: command tx timeout [ 973.089992][T16424] Bluetooth: hci6: command tx timeout [ 973.167108][ T38] INFO: task syz.4.5378:21313 blocked for more than 143 seconds. [ 973.167128][ T38] Tainted: G L syzkaller #0 [ 973.167135][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 973.167141][ T38] task:syz.4.5378 state:D stack:28176 pid:21313 tgid:21309 ppid:17967 task_flags:0x400040 flags:0x00080002 [ 973.167211][ T38] Call Trace: [ 973.167216][ T38] [ 973.167225][ T38] __schedule+0x16d9/0x5700 [ 973.167252][ T38] ? __pfx___schedule+0x10/0x10 [ 973.167264][ T38] ? trace_irq_disable+0x3b/0x140 [ 973.167280][ T38] ? __pfx___schedule+0x10/0x10 [ 973.167299][ T38] rt_mutex_schedule+0x76/0xf0 [ 973.167314][ T38] rt_mutex_slowlock_block+0x55e/0x690 [ 973.167366][ T38] ? rt_mutex_slowlock_block+0x33c/0x690 [ 973.167383][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 973.167399][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 973.167414][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 973.167437][ T38] ? write_threads+0x3b4/0x610 [ 973.167514][ T38] ? write_threads+0x3b4/0x610 [ 973.167525][ T38] mutex_lock_nested+0x168/0x1d0 [ 973.167542][ T38] write_threads+0x3b4/0x610 [ 973.167556][ T38] ? __pfx_write_threads+0x10/0x10 [ 973.167578][ T38] ? _copy_from_user+0x94/0xb0 [ 973.167595][ T38] ? simple_transaction_get+0x130/0x170 [ 973.167609][ T38] nfsctl_transaction_write+0x112/0x160 [ 973.167655][ T38] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 973.167669][ T38] vfs_write+0x29f/0xbb0 [ 973.167687][ T38] ? __pfx_vfs_write+0x10/0x10 [ 973.167701][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 973.167714][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 973.167726][ T38] ? mutex_lock_nested+0x152/0x1d0 [ 973.167739][ T38] ? fdget_pos+0x252/0x320 [ 973.167756][ T38] ksys_write+0x156/0x270 [ 973.189851][ T38] ? __pfx_ksys_write+0x10/0x10 [ 973.189884][ T38] do_syscall_64+0x166/0x520 [ 973.189907][ T38] ? trace_irq_disable+0x3b/0x140 [ 973.189922][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.189934][ T38] ? clear_bhb_loop+0x70/0xc0 [ 973.189947][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.189994][ T38] RIP: 0033:0x7f2e8c18e159 [ 973.190006][ T38] RSP: 002b:00007f2e8a3c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 973.190019][ T38] RAX: ffffffffffffffda RBX: 00007f2e8c416090 RCX: 00007f2e8c18e159 [ 973.190027][ T38] RDX: 0000000000000002 RSI: 00002000000001c0 RDI: 0000000000000004 [ 973.190034][ T38] RBP: 00007f2e8c22506b R08: 0000000000000000 R09: 0000000000000000 [ 973.190041][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 973.190048][ T38] R13: 00007f2e8c416128 R14: 00007f2e8c416090 R15: 00007ffc712052f8 [ 973.190065][ T38] [ 973.190156][ T38] [ 973.190156][ T38] Showing all locks held in the system: [ 973.190166][ T38] locks held by kworker/0:0/9: 5, on CPU#0: [ 973.190175][ T38] #0: ffff8880216a4538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 973.190207][ T38] #1: ffffc900000e7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 973.190235][ T38] #2: ffff8880213ec210 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4cf0 [ 973.190377][ T38] #3: ffff88802a033658 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20ad/0x4cf0 [ 973.190438][ T38] #4: ffff8880295dea58 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20e1/0x4cf0 [ 973.190466][ T38] locks held by khungtaskd/38: 1, last CPU#0: [ 973.190474][ T38] #0: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 973.190509][ T38] locks held by kworker/u8:9/1155: 2, on CPU#0: [ 973.190517][ T38] #0: ffff88801bbb0138 ((wq_completion)xprtiod){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 973.190544][ T38] #1: ffffc90006a7fc40 ((work_completion)(&(&transport->connect_worker)->work)#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 973.190621][ T38] locks held by dhcpcd/5245: 1, on CPU#0: [ 973.190628][ T38] #0: ffffffff8f5d5978 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_deladdr+0x249/0x390 [ 973.190693][ T38] locks held by kworker/u8:33/9132: 2, on CPU#0: [ 973.190737][ T38] #0: ffff88801bbb0138 ((wq_completion)xprtiod){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 973.190766][ T38] #1: ffffc90006fefc40 ((work_completion)(&(&transport->connect_worker)->work)#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 973.190796][ T38] locks held by getty/13525: 2, on CPU#1: [ 973.190804][ T38] #0: ffff888036c100a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 973.190950][ T38] #1: ffffc9000498b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 973.190989][ T38] locks held by syz.4.5378/21310: 3, on CPU#0: [ 973.190997][ T38] #0: ffff888035b6af28 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 973.191023][ T38] #1: ffff88806d306510 (sb_writers#28){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 973.191086][ T38] #2: ffffffff8e4f8778 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd20 [ 973.191112][ T38] locks held by syz.4.5378/21313: 3, on CPU#0: [ 973.191120][ T38] #0: ffff8880355f4728 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 973.191145][ T38] #1: ffff88806d306510 (sb_writers#28){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 973.191173][ T38] #2: ffffffff8e4f8778 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b4/0x610 [ 973.191230][ T38] locks held by kworker/u8:21/22146: 3, on CPU#0: [ 973.191238][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 973.191266][ T38] #1: ffffc900046d7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 973.191293][ T38] #2: ffffffff8f5d5978 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 973.191324][ T38] locks held by kworker/u8:48/22170: 8, last CPU#0: [ 973.191361][ T38] #0: ffff88801aeb0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 973.191390][ T38] #1: ffffc90005427c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 973.191416][ T38] #2: ffffffff8f5c7140 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 973.191440][ T38] #3: ffff88806412f160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 973.191811][ T38] #4: ffff8880609da310 (&devlink->lock_key#25){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 973.191880][ T38] #5: ffffffff8f5d5978 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x173/0x800 [ 973.191964][ T38] #6: ffffffff8eb8d1f8 (dev_hotplug_mutex){+.+.}-{4:4}, at: pm_runtime_set_memalloc_noio+0x31/0x260 [ 973.192094][ T38] #7: ffff88805b913458 (&k->k_lock){+.+.}-{3:3}, at: klist_next+0x8d/0x2f0 [ 973.192186][ T38] locks held by kworker/u8:57/22179: 6, last CPU#0: [ 973.192195][ T38] #0: ffff888033bff938 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 973.192224][ T38] #1: ffffc90005507c40 ((work_completion)(&(&bat_priv->bla.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 973.192251][ T38] #2: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: batadv_bla_periodic_work+0x32b/0xb70 [ 973.192335][ T38] #3: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 973.192364][ T38] #4: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x261/0xc50 [ 973.192416][ T38] #5: ffff88813ffbcb58 (&n->list_lock){+.+.}-{3:3}, at: __refill_objects_node+0x89/0x580 [ 973.192444][ T38] locks held by kworker/u8:58/22180: 3, on CPU#0: [ 973.192487][ T38] #0: ffff88803375b138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 973.192515][ T38] #1: ffffc90005937c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 973.192542][ T38] #2: ffffffff8f5d5978 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x123/0x16e0 [ 973.192568][ T38] locks held by kworker/u8:60/22182: 2, on CPU#0: [ 973.192575][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 973.192633][ T38] #1: ffffc900059b7c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 973.192665][ T38] locks held by syz-executor/22296: 7, on CPU#0: [ 973.192672][ T38] #0: ffff88803584c510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 973.192700][ T38] #1: ffff88805b911c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 973.192725][ T38] #2: ffff888029c721e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 973.192782][ T38] #3: ffffffff8ee45df8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x13c/0x6d0 [ 973.192835][ T38] #4: ffff88805e8d9160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 973.192882][ T38] #5: ffff888026f66310 (&devlink->lock_key#26){+.+.}-{4:4}, at: nsim_drv_probe+0xfb/0xbc0 [ 973.192953][ T38] #6: ffffffff8f5d5978 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 [ 973.193003][ T38] locks held by syz-executor/22527: 4, on CPU#0: [ 973.193012][ T38] #0: ffff88803584c510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 973.193039][ T38] #1: ffff88803bb1b078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 973.193124][ T38] #2: ffff888029c721e8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 973.193150][ T38] #3: ffffffff8ee45df8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x13c/0x6d0 [ 973.193180][ T38] locks held by syz-executor/23065: 2, on CPU#0: [ 973.193188][ T38] #0: ffffffff8f5c7140 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x524/0x780 [ 973.193245][ T38] #1: ffffffff8f5d5978 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2d5/0x820 [ 973.193298][ T38] locks held by syz-executor/23071: 2, on CPU#0: [ 973.193306][ T38] #0: ffffffff8f5c7140 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x524/0x780 [ 973.193329][ T38] #1: ffffffff8f5d5978 (rtnl_mutex){+.+.}-{4:4}, at: register_nexthop_notifier+0x8b/0x290 [ 973.193390][ T38] locks held by syz.1.5800/23139: 2, on CPU#0: [ 973.193398][ T38] #0: ffffffff8f647400 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 973.193422][ T38] #1: ffffffff8f5d5978 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5e/0x890 [ 973.193482][ T38] locks held by syz.3.5807/23160: 1, on CPU#0: [ 973.193522][ T38] #0: ffffffff8f5d5978 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 973.193550][ T38] locks held by syz.3.5807/23161: 1, on CPU#0: [ 973.193567][ T38] #0: ffffffff8f5d5978 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x470/0x19f0 [ 973.202384][ T38] [ 973.202388][ T38] ============================================= [ 973.202388][ T38] [ 973.202394][ T38] NMI backtrace for cpu 0 [ 973.202407][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(lazy)} [ 973.202432][ T38] Tainted: [L]=SOFTLOCKUP [ 973.202436][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 973.202443][ T38] Call Trace: [ 973.202448][ T38] [ 973.202453][ T38] dump_stack_lvl+0xe8/0x150 [ 973.202471][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 973.202487][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 973.202500][ T38] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 973.202516][ T38] sys_info+0x135/0x170 [ 973.202529][ T38] watchdog+0xfd7/0x1030 [ 973.202546][ T38] ? watchdog+0x1c7/0x1030 [ 973.202562][ T38] kthread+0x38b/0x470 [ 973.202574][ T38] ? __pfx_watchdog+0x10/0x10 [ 973.202585][ T38] ? __pfx_kthread+0x10/0x10 [ 973.202596][ T38] ret_from_fork+0x514/0xb70 [ 973.202608][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 973.202619][ T38] ? __switch_to+0xc89/0x1420 [ 973.202662][ T38] ? __pfx_kthread+0x10/0x10 [ 973.202673][ T38] ret_from_fork_asm+0x1a/0x30 [ 973.202690][ T38] [ 973.202739][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 999.050795][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(lazy)} [ 999.061993][ T38] Tainted: [L]=SOFTLOCKUP [ 999.066299][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 999.076350][ T38] Call Trace: [ 999.079626][ T38] [ 999.082556][ T38] vpanic+0x56d/0xa60 [ 999.086524][ T38] ? __pfx___schedule+0x10/0x10 [ 999.091357][ T38] ? __pfx_vpanic+0x10/0x10 [ 999.095849][ T38] panic+0xc5/0xd0 [ 999.099549][ T38] ? __pfx_panic+0x10/0x10 [ 999.103947][ T38] ? preempt_schedule_common+0x7f/0xd0 [ 999.109389][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 999.114763][ T38] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 999.120903][ T38] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 999.127041][ T38] watchdog+0x1030/0x1030 [ 999.131385][ T38] ? watchdog+0x1c7/0x1030 [ 999.135801][ T38] kthread+0x38b/0x470 [ 999.139857][ T38] ? __pfx_watchdog+0x10/0x10 [ 999.144517][ T38] ? __pfx_kthread+0x10/0x10 [ 999.149103][ T38] ret_from_fork+0x514/0xb70 [ 999.153673][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 999.158766][ T38] ? __switch_to+0xc89/0x1420 [ 999.163426][ T38] ? __pfx_kthread+0x10/0x10 [ 999.167993][ T38] ret_from_fork_asm+0x1a/0x30 [ 999.172743][ T38] [ 999.175817][ T38] Kernel Offset: disabled [ 999.180132][ T38] Rebooting in 86400 seconds..