last executing test programs: 1m23.13184069s ago: executing program 1 (id=681): r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) openat$fb0(0xffffff9c, 0x0, 0x109282, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) sendmsg$alg(r1, 0x0, 0x40) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) setsockopt$inet6_group_source_req(r1, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x4000040) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = io_uring_setup(0x1691, &(0x7f0000000400)={0x0, 0x631d, 0x2, 0x2, 0x2d8}) io_uring_register$IORING_REGISTER_BUFFERS2(r6, 0xf, &(0x7f0000002700)={0x119f, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0xf9}, {&(0x7f00000015c0)=""/4096, 0x400400}, {&(0x7f0000002a00)=""/88, 0x8}], 0x0}, 0x20) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) shmget(0x1, 0xc000, 0xa30, &(0x7f0000ff2000/0xc000)=nil) 1m9.650404424s ago: executing program 1 (id=681): r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) openat$fb0(0xffffff9c, 0x0, 0x109282, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) sendmsg$alg(r1, 0x0, 0x40) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) setsockopt$inet6_group_source_req(r1, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x4000040) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = io_uring_setup(0x1691, &(0x7f0000000400)={0x0, 0x631d, 0x2, 0x2, 0x2d8}) io_uring_register$IORING_REGISTER_BUFFERS2(r6, 0xf, &(0x7f0000002700)={0x119f, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0xf9}, {&(0x7f00000015c0)=""/4096, 0x400400}, {&(0x7f0000002a00)=""/88, 0x8}], 0x0}, 0x20) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) shmget(0x1, 0xc000, 0xa30, &(0x7f0000ff2000/0xc000)=nil) 1m0.3470432s ago: executing program 1 (id=681): r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) openat$fb0(0xffffff9c, 0x0, 0x109282, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) sendmsg$alg(r1, 0x0, 0x40) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) setsockopt$inet6_group_source_req(r1, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x4000040) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = io_uring_setup(0x1691, &(0x7f0000000400)={0x0, 0x631d, 0x2, 0x2, 0x2d8}) io_uring_register$IORING_REGISTER_BUFFERS2(r6, 0xf, &(0x7f0000002700)={0x119f, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0xf9}, {&(0x7f00000015c0)=""/4096, 0x400400}, {&(0x7f0000002a00)=""/88, 0x8}], 0x0}, 0x20) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) shmget(0x1, 0xc000, 0xa30, &(0x7f0000ff2000/0xc000)=nil) 48.699743032s ago: executing program 1 (id=681): r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) openat$fb0(0xffffff9c, 0x0, 0x109282, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) sendmsg$alg(r1, 0x0, 0x40) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) setsockopt$inet6_group_source_req(r1, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x4000040) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = io_uring_setup(0x1691, &(0x7f0000000400)={0x0, 0x631d, 0x2, 0x2, 0x2d8}) io_uring_register$IORING_REGISTER_BUFFERS2(r6, 0xf, &(0x7f0000002700)={0x119f, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0xf9}, {&(0x7f00000015c0)=""/4096, 0x400400}, {&(0x7f0000002a00)=""/88, 0x8}], 0x0}, 0x20) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) shmget(0x1, 0xc000, 0xa30, &(0x7f0000ff2000/0xc000)=nil) 43.906610633s ago: executing program 4 (id=986): mkdir(&(0x7f0000000280)='./file0\x00', 0x51) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x4047b013}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x78, 0x0, 0x35a74, {0x2, 0x42, 0x0, {0x0, 0x68, 0xfffffffffffffff7, 0x6, 0x8, 0x0, 0x200, 0xe81d, 0xfffffff9, 0x4000, 0xd, r2, 0x0, 0x6, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents(r3, 0x0, 0x0) 42.49435543s ago: executing program 4 (id=995): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x8090) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x12, r0, 0x55247000) r2 = accept4$unix(r1, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000440)=""/293, 0x125, 0x0, 0x0, 0x0) 42.374323819s ago: executing program 4 (id=998): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x204000, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r3, r4, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000480)={0x28, 0x4, r4, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r4, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5}) close_range(r0, 0xffffffffffffffff, 0x0) 42.102960689s ago: executing program 4 (id=1000): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$RTC_AIE_OFF(r0, 0x7002) ioctl$RTC_SET_TIME(r0, 0x4024700a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 41.991802599s ago: executing program 4 (id=1001): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f00000000c0)={[{@dyn}]}) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 41.715389305s ago: executing program 4 (id=1002): r0 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) rt_sigqueueinfo(r0, 0x21, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, 0x0, 0x4000040) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000000000000791090000000000063000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0xe, 0x0, &(0x7f0000000200)="61df712bc884fed5722780b6c2a7", 0x0, 0x5, 0x0, 0x3, 0x0, &(0x7f0000000380)="fd97a6", 0x0}, 0x50) 37.002498155s ago: executing program 1 (id=681): r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) openat$fb0(0xffffff9c, 0x0, 0x109282, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) sendmsg$alg(r1, 0x0, 0x40) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) setsockopt$inet6_group_source_req(r1, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x4000040) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = io_uring_setup(0x1691, &(0x7f0000000400)={0x0, 0x631d, 0x2, 0x2, 0x2d8}) io_uring_register$IORING_REGISTER_BUFFERS2(r6, 0xf, &(0x7f0000002700)={0x119f, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0xf9}, {&(0x7f00000015c0)=""/4096, 0x400400}, {&(0x7f0000002a00)=""/88, 0x8}], 0x0}, 0x20) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) shmget(0x1, 0xc000, 0xa30, &(0x7f0000ff2000/0xc000)=nil) 26.050826688s ago: executing program 1 (id=681): r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) openat$fb0(0xffffff9c, 0x0, 0x109282, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) sendmsg$alg(r1, 0x0, 0x40) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) setsockopt$inet6_group_source_req(r1, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x4000040) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = io_uring_setup(0x1691, &(0x7f0000000400)={0x0, 0x631d, 0x2, 0x2, 0x2d8}) io_uring_register$IORING_REGISTER_BUFFERS2(r6, 0xf, &(0x7f0000002700)={0x119f, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0xf9}, {&(0x7f00000015c0)=""/4096, 0x400400}, {&(0x7f0000002a00)=""/88, 0x8}], 0x0}, 0x20) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) shmget(0x1, 0xc000, 0xa30, &(0x7f0000ff2000/0xc000)=nil) 25.132739745s ago: executing program 32 (id=1002): r0 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) rt_sigqueueinfo(r0, 0x21, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, 0x0, 0x4000040) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000000000000791090000000000063000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0xe, 0x0, &(0x7f0000000200)="61df712bc884fed5722780b6c2a7", 0x0, 0x5, 0x0, 0x3, 0x0, &(0x7f0000000380)="fd97a6", 0x0}, 0x50) 22.535747134s ago: executing program 2 (id=1089): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$media(0x0, 0x1, 0x8000) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000480)={0x1ff, 0x200, 0x2, {0x4, @pix={0x1000007, 0x8, 0x51424752, 0x5, 0x0, 0xfffffff3, 0x5, 0x983e, 0x1, 0x3}}, 0x100}) 22.060791298s ago: executing program 2 (id=1092): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffc}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MATCH_NAME={0xb, 0x1, 'socket\x00'}, @NFTA_MATCH_INFO={0x5, 0x3, "d6"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}, 0x1, 0x0, 0x0, 0x40480e0}, 0x4008014) 21.767754462s ago: executing program 3 (id=1093): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000140)={0x1d, r4, 0x2, {0x0, 0xff, 0x1}, 0xff}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfffd, 0x10}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x840) 21.554298287s ago: executing program 2 (id=1094): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x1, 0x7fffffff}, 0x0, 0x0) 20.680091343s ago: executing program 0 (id=1096): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x7d}}, {{0x5, 0x0, 0x3}}, [], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket(0x1, 0x3, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x14, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) syz_fuse_handle_req(r2, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a3312779a", 0x0, 0x0, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_connect$uac1(0x3, 0xac, 0x0, 0x0) 20.643072486s ago: executing program 3 (id=1097): openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, {0x40, 0x4, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x120, 0x6000, 0x0, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1) ioctl$TIOCGPTPEER(r2, 0x40140921, 0x8) 20.522615806s ago: executing program 2 (id=1098): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0x8, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000001c0)={0x1fb, 0x0, 0x0, 0x0, 0x0, 0x80, 0xfffffffffffffffc, 0xffffffffffffffff}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 20.404540631s ago: executing program 3 (id=1099): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x58, 0xa, 0xdf7b7a5625e873de, "d9c2955351f9acb1ee54ecc4b00f11f11867b5302c11500e8b8152682b7afe20"}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaa"], 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 20.1909708s ago: executing program 3 (id=1100): openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x185042, 0x120) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x2c, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x68}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="e2060400000037"], 0x0, 0x0, 0x0, 0x0}) 20.058223106s ago: executing program 0 (id=1101): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r2, 0x3, 0x0, @val=@iter={0x0}}, 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 20.029133613s ago: executing program 0 (id=1102): r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xcb, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, 0x0) io_uring_setup(0x7fc5, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_REAPURB(r3, 0x4004550c, 0x0) 19.943026284s ago: executing program 0 (id=1103): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x880, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(r1, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x4}, 0x8) sendto$inet6(r1, &(0x7f0000000180)="93", 0x1, 0x8840, 0x0, 0x0) close(r1) 19.939882583s ago: executing program 0 (id=1104): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r2, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x5, 0x1, 0x2, '\x00', 0x8}}, 0x2a) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="b00000000000000000000000000000000000000000200000000000000000000000000000000000000200000000000000000020000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000c0000000000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0021000000000000467700000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) 19.900586473s ago: executing program 0 (id=1105): mount(&(0x7f0000000040)=@nullb, 0x0, &(0x7f0000000180)='sysv\x00', 0x8000, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x208, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000008500000007000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/tcp6\x00') pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000040)={'netdevsim0\x00', @random="0e00"}) writev(r0, &(0x7f0000000440)=[{0x0}, {&(0x7f00000003c0)="2263f009d13e6d95f0698db4114ad74b1b9d6016c439c7eed1fb19ae40a5cedb80d32873f8e1497aa580c7f05f18b7b663242ebe3bedfe3a997637131b35139f66e63e00219a467f9ac5b35eaf477e5d845ee4e67ff68a45162b78740944f10b94deaccb7e141d1a63e685", 0x6b}], 0x2) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r7 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_PEC(r7, 0x708, 0x11) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000000300)={0x1, 0x0, 0x3, 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r8, 0x0, 0xfffffffffffffeef, 0x0, &(0x7f0000000100)="65c5469400344a6020a493000000", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$inet6(0xa, 0x5, 0x0) 17.248361337s ago: executing program 2 (id=1106): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) 17.183091784s ago: executing program 2 (id=1107): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r3, @ANYRES32=r3], 0x44}}, 0x0) 16.971497079s ago: executing program 3 (id=1108): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @timestamp, @sack_perm, @window, @window={0x3, 0x2, 0xe}, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 16.056203049s ago: executing program 3 (id=1109): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 3.506623295s ago: executing program 33 (id=1105): mount(&(0x7f0000000040)=@nullb, 0x0, &(0x7f0000000180)='sysv\x00', 0x8000, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x208, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000008500000007000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/tcp6\x00') pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000040)={'netdevsim0\x00', @random="0e00"}) writev(r0, &(0x7f0000000440)=[{0x0}, {&(0x7f00000003c0)="2263f009d13e6d95f0698db4114ad74b1b9d6016c439c7eed1fb19ae40a5cedb80d32873f8e1497aa580c7f05f18b7b663242ebe3bedfe3a997637131b35139f66e63e00219a467f9ac5b35eaf477e5d845ee4e67ff68a45162b78740944f10b94deaccb7e141d1a63e685", 0x6b}], 0x2) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r7 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_PEC(r7, 0x708, 0x11) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000000300)={0x1, 0x0, 0x3, 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r8, 0x0, 0xfffffffffffffeef, 0x0, &(0x7f0000000100)="65c5469400344a6020a493000000", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$inet6(0xa, 0x5, 0x0) 501.505987ms ago: executing program 34 (id=1107): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r3, @ANYRES32=r3], 0x44}}, 0x0) 0s ago: executing program 35 (id=1109): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) kernel console output (not intermixed with test programs): changing to 7 [ 151.414539][ T5876] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 151.815556][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.880713][ T5876] usb 5-1: config 0 descriptor?? [ 152.106434][ T30] audit: type=1400 audit(1745134932.551:338): avc: denied { cmd } for pid=7530 comm="syz.2.523" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 152.363647][ T5876] keytouch 0003:0926:3333.000E: fixing up Keytouch IEC report descriptor [ 152.397626][ T5876] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.000E/input/input15 [ 152.553418][ T5876] keytouch 0003:0926:3333.000E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 152.813696][ T7555] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.528'. [ 152.881078][ T7555] netlink: 24 bytes leftover after parsing attributes in process `syz.1.528'. [ 153.225094][ T5877] usb 5-1: USB disconnect, device number 11 [ 153.284196][ T7562] ref_ctr_offset mismatch. inode: 0x1df offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x7110110900006800 [ 153.985685][ T7593] syz_tun: entered allmulticast mode [ 154.019708][ T7593] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 154.028438][ T7593] mroute: pending queue full, dropping entries [ 154.058249][ T7593] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 154.066837][ T7593] mroute: pending queue full, dropping entries [ 154.076962][ T7592] syz_tun: left allmulticast mode [ 154.156755][ T7598] loop0: detected capacity change from 0 to 7 [ 154.158695][ T30] audit: type=1400 audit(1745134934.611:339): avc: denied { unmount } for pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 154.167366][ T7598] Dev loop0: unable to read RDB block 7 [ 154.195968][ T7598] loop0: unable to read partition table [ 154.203251][ T7598] loop0: partition table beyond EOD, truncated [ 154.222061][ T7598] loop_reread_partitions: partition scan of loop0 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 154.222061][ T7598] ) failed (rc=-5) [ 154.405840][ T30] audit: type=1400 audit(1745134934.851:340): avc: denied { unlink } for pid=7605 comm="syz.4.541" name="#1" dev="tmpfs" ino=501 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 154.430942][ T30] audit: type=1400 audit(1745134934.851:341): avc: denied { mount } for pid=7605 comm="syz.4.541" name="/" dev="overlay" ino=495 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 155.025101][ T30] audit: type=1400 audit(1745134935.471:342): avc: denied { ioctl } for pid=7618 comm="syz.4.545" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 155.049476][ C1] vkms_vblank_simulate: vblank timer overrun [ 155.095201][ T7620] nullb0: AHDI p1 p3 [ 155.405987][ T30] audit: type=1400 audit(1745134935.851:343): avc: denied { write } for pid=7621 comm="syz.0.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 155.429767][ T30] audit: type=1400 audit(1745134935.851:344): avc: denied { nlmsg_read } for pid=7621 comm="syz.0.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 155.824102][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 155.839046][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 155.857362][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 155.865504][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 155.872823][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 155.879670][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 155.887256][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 155.895455][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 156.068144][ T30] audit: type=1400 audit(1745134936.521:345): avc: denied { read } for pid=7632 comm="syz.4.550" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 156.097695][ T30] audit: type=1400 audit(1745134936.521:346): avc: denied { open } for pid=7632 comm="syz.4.550" path="/100/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 158.000829][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 158.000846][ T30] audit: type=1400 audit(1745134938.451:348): avc: denied { mounton } for pid=7662 comm="syz.1.559" path="/proc/293/task" dev="proc" ino=14828 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 158.256539][ T5921] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 158.406544][ T5921] usb 2-1: Using ep0 maxpacket: 8 [ 158.415503][ T5921] usb 2-1: config 0 has no interfaces? [ 158.429188][ T5921] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 158.443351][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.451653][ T5921] usb 2-1: Product: syz [ 158.455950][ T5921] usb 2-1: Manufacturer: syz [ 158.462886][ T5921] usb 2-1: SerialNumber: syz [ 158.470323][ T5921] usb 2-1: config 0 descriptor?? [ 158.711774][ T5877] usb 2-1: USB disconnect, device number 11 [ 158.840997][ T30] audit: type=1400 audit(1745134939.291:349): avc: denied { ioctl } for pid=7678 comm="syz.3.563" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 158.869624][ T7679] input: syz1 as /devices/virtual/input/input16 [ 160.955064][ T7709] process 'syz.3.572' launched '/dev/fd/3/./file0' with NULL argv: empty string added [ 160.972673][ T30] audit: type=1400 audit(1745134941.421:350): avc: denied { execute_no_trans } for pid=7708 comm="syz.3.572" path="/130/file0" dev="tmpfs" ino=677 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 160.995880][ C0] vkms_vblank_simulate: vblank timer overrun [ 161.270923][ T7714] netlink: 'syz.2.574': attribute type 10 has an invalid length. [ 161.442624][ T7719] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 161.550868][ T30] audit: type=1400 audit(1745134941.991:351): avc: denied { create } for pid=7722 comm="syz.4.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 161.636855][ T30] audit: type=1400 audit(1745134942.061:352): avc: denied { cmd } for pid=7722 comm="syz.4.578" path="socket:[15498]" dev="sockfs" ino=15498 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 161.659532][ C0] vkms_vblank_simulate: vblank timer overrun [ 161.668611][ T7728] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 161.705001][ T7730] netlink: 'syz.1.581': attribute type 1 has an invalid length. [ 161.860758][ T7730] 8021q: adding VLAN 0 to HW filter on device bond1 [ 161.895625][ T30] audit: type=1400 audit(1745134942.341:353): avc: denied { name_connect } for pid=7738 comm="syz.2.583" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 162.016806][ T30] audit: type=1400 audit(1745134942.371:354): avc: denied { write } for pid=7738 comm="syz.2.583" path="socket:[15508]" dev="sockfs" ino=15508 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 162.041074][ T30] audit: type=1400 audit(1745134942.371:355): avc: denied { setopt } for pid=7738 comm="syz.2.583" lport=47819 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 162.072434][ T7732] bond1: (slave veth3): Enslaving as an active interface with a down link [ 162.100511][ T7733] netlink: 'syz.3.582': attribute type 1 has an invalid length. [ 162.534773][ T7735] bond1: (slave dummy0): making interface the new active one [ 162.543318][ T7735] dummy0: entered promiscuous mode [ 162.549015][ T7735] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 162.571543][ T7735] syz.1.581 (7735) used greatest stack depth: 21288 bytes left [ 162.656701][ T5921] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 162.768962][ T7751] netlink: 'syz.3.587': attribute type 10 has an invalid length. [ 162.888368][ T5921] usb 3-1: unable to get BOS descriptor or descriptor too short [ 162.904333][ T5921] usb 3-1: config 9 has an invalid interface number: 246 but max is 0 [ 162.947135][ T5921] usb 3-1: config 9 has no interface number 0 [ 162.973929][ T5921] usb 3-1: config 9 interface 246 has no altsetting 0 [ 162.998317][ T5921] usb 3-1: string descriptor 0 read error: -22 [ 163.020011][ T5921] usb 3-1: New USB device found, idVendor=2040, idProduct=7501, bcdDevice= a.08 [ 163.055348][ T7761] netlink: 24 bytes leftover after parsing attributes in process `syz.3.592'. [ 163.066142][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.119300][ T5921] pvrusb2: Hardware description: WinTV HVR-1950 Model 751xx [ 163.148208][ T5921] usb 3-1: selecting invalid altsetting 0 [ 163.162493][ T2327] usb 3-1: Direct firmware load for v4l-pvrusb2-73xxx-01.fw failed with error -2 [ 163.204151][ T2327] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-73xxx-01.fw [ 163.213364][ T30] audit: type=1400 audit(1745134943.651:356): avc: denied { firmware_load } for pid=2327 comm="pvrusb2-context" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 163.367525][ T5921] usb 3-1: USB disconnect, device number 16 [ 164.710904][ T7791] kvm: MONITOR instruction emulated as NOP! [ 166.036771][ T30] audit: type=1400 audit(1745134946.470:357): avc: denied { create } for pid=7813 comm="syz.0.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 166.126540][ T30] audit: type=1400 audit(1745134946.480:358): avc: denied { write } for pid=7813 comm="syz.0.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 166.191983][ T30] audit: type=1400 audit(1745134946.560:359): avc: denied { read } for pid=7813 comm="syz.0.609" path="socket:[15622]" dev="sockfs" ino=15622 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 166.995441][ T7822] netlink: 28 bytes leftover after parsing attributes in process `syz.1.611'. [ 167.100517][ T7828] syzkaller0: entered promiscuous mode [ 167.106078][ T7828] syzkaller0: entered allmulticast mode [ 169.629225][ T30] audit: type=1400 audit(1745134950.080:360): avc: denied { read } for pid=7866 comm="syz.0.626" path="socket:[15859]" dev="sockfs" ino=15859 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 169.706250][ T30] audit: type=1326 audit(1745134950.150:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7866 comm="syz.0.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd759785127 code=0x7ffc0000 [ 169.731397][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 169.739238][ T30] audit: type=1326 audit(1745134950.150:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7866 comm="syz.0.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd75972a359 code=0x7ffc0000 [ 169.774416][ T30] audit: type=1326 audit(1745134950.160:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7866 comm="syz.0.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd759785127 code=0x7ffc0000 [ 169.800870][ T30] audit: type=1326 audit(1745134950.160:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7866 comm="syz.0.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd75972a359 code=0x7ffc0000 [ 169.829566][ T30] audit: type=1326 audit(1745134950.160:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7866 comm="syz.0.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd759785127 code=0x7ffc0000 [ 169.855378][ T30] audit: type=1326 audit(1745134950.160:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7866 comm="syz.0.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd75972a359 code=0x7ffc0000 [ 169.880774][ T30] audit: type=1326 audit(1745134950.160:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7866 comm="syz.0.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd759785127 code=0x7ffc0000 [ 169.906488][ T30] audit: type=1326 audit(1745134950.160:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7866 comm="syz.0.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd75972a359 code=0x7ffc0000 [ 169.930686][ T30] audit: type=1326 audit(1745134950.160:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7866 comm="syz.0.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd759785127 code=0x7ffc0000 [ 169.999472][ T7876] netlink: 24 bytes leftover after parsing attributes in process `syz.0.629'. [ 171.260176][ T7908] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 171.572581][ T7923] kvm: emulating exchange as write [ 172.228943][ T7939] kvm: vcpu 0: requested 1152 ns lapic timer period limited to 200000 ns [ 173.397051][ T7956] sd 0:0:1:0: PR command failed: 1026 [ 173.416561][ T7956] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 173.443167][ T7956] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 173.766703][ T5907] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 173.917845][ T5907] usb 2-1: config 4 has an invalid interface number: 44 but max is 0 [ 173.929957][ T5907] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 173.940249][ T5907] usb 2-1: config 4 has no interface number 0 [ 173.946380][ T5907] usb 2-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 173.961700][ T5907] usb 2-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 173.974546][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.982725][ T5907] usb 2-1: Product: syz [ 173.990512][ T5907] usb 2-1: Manufacturer: syz [ 173.995223][ T5907] usb 2-1: SerialNumber: syz [ 174.064308][ T7972] netlink: 12 bytes leftover after parsing attributes in process `syz.3.662'. [ 174.727492][ T5907] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 174.741907][ T5907] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 174.752516][ T5907] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 174.759603][ T5907] usb 2-1: media controller created [ 174.766003][ T5907] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 174.801928][ T5907] DVB: Unable to find symbol dib7000p_attach() [ 174.824408][ T5907] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 174.996717][ T5907] rc_core: IR keymap rc-dib0700-rc5 not found [ 175.471365][ T5907] Registered IR keymap rc-empty [ 175.476789][ T5907] dvb-usb: could not initialize remote control. [ 175.483068][ T5907] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 176.020703][ T10] usb 2-1: USB disconnect, device number 12 [ 176.035081][ T30] kauditd_printk_skb: 79 callbacks suppressed [ 176.035097][ T30] audit: type=1400 audit(1745134956.480:449): avc: denied { name_bind } for pid=7997 comm="syz.0.670" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 176.140721][ T10] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 176.396500][ T76] dummy0: left promiscuous mode [ 176.891878][ T8012] netlink: 'syz.3.675': attribute type 10 has an invalid length. [ 177.124705][ T30] audit: type=1400 audit(1745134957.570:450): avc: denied { getopt } for pid=8010 comm="syz.1.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 177.442462][ T76] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.043781][ T76] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.197611][ T76] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.326061][ T30] audit: type=1400 audit(1745134958.770:451): avc: denied { mount } for pid=8031 comm="syz.0.683" name="/" dev="9p" ino=17889801302421081418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 178.352680][ T76] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.393672][ T30] audit: type=1400 audit(1745134958.840:452): avc: denied { unmount } for pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 178.451005][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 178.459911][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 178.469696][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 178.479186][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 178.497223][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 178.519955][ T30] audit: type=1400 audit(1745134958.970:453): avc: denied { mounton } for pid=8037 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 178.633576][ T76] bridge_slave_1: left allmulticast mode [ 178.646230][ T76] bridge_slave_1: left promiscuous mode [ 178.653905][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.685208][ T76] bridge_slave_0: left allmulticast mode [ 178.691911][ T76] bridge_slave_0: left promiscuous mode [ 178.700846][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.879933][ T8058] netlink: 'syz.0.689': attribute type 10 has an invalid length. [ 179.109844][ T30] audit: type=1400 audit(1745134959.560:454): avc: denied { create } for pid=8062 comm="syz.2.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 179.216511][ T30] audit: type=1400 audit(1745134959.560:455): avc: denied { setopt } for pid=8062 comm="syz.2.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 179.560084][ T30] audit: type=1400 audit(1745134959.980:456): avc: denied { write } for pid=8079 comm="syz.4.693" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 179.616443][ T30] audit: type=1400 audit(1745134960.040:457): avc: denied { open } for pid=8079 comm="syz.4.693" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 180.144407][ T76] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.165670][ T76] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.192040][ T76] bond0 (unregistering): Released all slaves [ 180.259544][ T76] bond1 (unregistering): (slave veth3): Releasing active interface [ 180.267680][ T76] dummy0: entered promiscuous mode [ 180.274523][ T76] bond1 (unregistering): (slave dummy0): Releasing active interface [ 180.284436][ T76] bond1 (unregistering): Released all slaves [ 180.567835][ T5834] Bluetooth: hci0: command tx timeout [ 180.575077][ T5834] Bluetooth: hci4: command 0x0405 tx timeout [ 180.581760][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 180.588405][ T5834] Bluetooth: hci3: command 0x0406 tx timeout [ 180.589515][ T5833] Bluetooth: hci1: command 0x0401 tx timeout [ 180.643424][ T30] audit: type=1400 audit(1745134961.090:458): avc: denied { create } for pid=8100 comm="syz.4.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 181.402628][ T76] hsr_slave_0: left promiscuous mode [ 181.552874][ T76] hsr_slave_1: left promiscuous mode [ 181.569603][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.645213][ T76] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.653309][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 181.653321][ T30] audit: type=1400 audit(1745134962.040:462): avc: denied { accept } for pid=8134 comm="syz.4.705" lport=36435 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 181.688786][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.696260][ T76] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.740297][ T76] veth1_macvtap: left promiscuous mode [ 181.746001][ T76] veth0_macvtap: left promiscuous mode [ 181.753229][ T76] veth1_vlan: left promiscuous mode [ 181.762334][ T76] veth0_vlan: left promiscuous mode [ 182.288883][ T30] audit: type=1400 audit(1745134962.740:463): avc: denied { create } for pid=8148 comm="syz.0.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 182.308559][ T30] audit: type=1400 audit(1745134962.740:464): avc: denied { bind } for pid=8148 comm="syz.0.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 182.332487][ T30] audit: type=1400 audit(1745134962.740:465): avc: denied { listen } for pid=8148 comm="syz.0.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 182.361308][ T30] audit: type=1400 audit(1745134962.740:466): avc: denied { connect } for pid=8148 comm="syz.0.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 182.381556][ T30] audit: type=1400 audit(1745134962.760:467): avc: denied { accept } for pid=8148 comm="syz.0.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 182.402395][ T30] audit: type=1400 audit(1745134962.760:468): avc: denied { write } for pid=8148 comm="syz.0.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 182.421992][ T30] audit: type=1400 audit(1745134962.760:469): avc: denied { read } for pid=8148 comm="syz.0.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 182.545378][ T76] team0 (unregistering): Port device team_slave_1 removed [ 182.562968][ T8152] netlink: 2128 bytes leftover after parsing attributes in process `syz.0.710'. [ 182.580535][ T76] team0 (unregistering): Port device team_slave_0 removed [ 182.646875][ T5822] Bluetooth: hci0: command tx timeout [ 182.774374][ T8037] chnl_net:caif_netlink_parms(): no params data found [ 182.971697][ T8037] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.986039][ T8037] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.994999][ T8037] bridge_slave_0: entered allmulticast mode [ 183.005512][ T8037] bridge_slave_0: entered promiscuous mode [ 183.030037][ T8037] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.041882][ T8166] netlink: 'syz.0.711': attribute type 10 has an invalid length. [ 183.061921][ T8037] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.074669][ T8037] bridge_slave_1: entered allmulticast mode [ 183.083877][ T8037] bridge_slave_1: entered promiscuous mode [ 183.176670][ T8037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.204270][ T8037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.227600][ T76] IPVS: stop unused estimator thread 0... [ 183.313068][ T8037] team0: Port device team_slave_0 added [ 183.329160][ T8037] team0: Port device team_slave_1 added [ 183.417780][ T8037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.431406][ T8037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.460890][ T8037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.482654][ T8037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.494041][ T8037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.519963][ C1] vkms_vblank_simulate: vblank timer overrun [ 183.545396][ T8037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.704821][ T8037] hsr_slave_0: entered promiscuous mode [ 183.721010][ T8037] hsr_slave_1: entered promiscuous mode [ 183.727823][ T8037] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 183.735410][ T8037] Cannot create hsr debugfs directory [ 183.877368][ T8194] netlink: 24 bytes leftover after parsing attributes in process `syz.2.717'. [ 183.936555][ T5876] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 184.054057][ T30] audit: type=1400 audit(1745134964.500:470): avc: denied { relabelfrom } for pid=8199 comm="syz.2.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 184.096064][ T30] audit: type=1400 audit(1745134964.500:471): avc: denied { relabelto } for pid=8199 comm="syz.2.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 184.116012][ T5876] usb 1-1: Using ep0 maxpacket: 16 [ 184.122968][ T5876] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 184.131591][ T5876] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 184.142484][ T5876] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 184.152023][ T5876] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 184.160264][ T5876] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 184.174333][ T5876] usb 1-1: config 0 has no interface number 0 [ 184.181628][ T5876] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 184.193552][ T5876] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 184.204337][ T5876] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 184.219240][ T5876] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 184.232554][ T5876] usb 1-1: config 0 interface 125 has no altsetting 0 [ 184.239511][ T5876] usb 1-1: config 0 interface 125 has no altsetting 2 [ 184.261444][ T5876] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 184.273170][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.285497][ T5876] usb 1-1: Product: syz [ 184.294443][ T5876] usb 1-1: Manufacturer: syz [ 184.301308][ T5876] usb 1-1: SerialNumber: syz [ 184.315084][ T5876] usb 1-1: config 0 descriptor?? [ 184.331038][ T5876] usb 1-1: selecting invalid altsetting 2 [ 184.750329][ T5822] Bluetooth: hci0: command tx timeout [ 185.243026][ T8220] Bluetooth: MGMT ver 1.23 [ 185.354490][ T5907] usb 1-1: USB disconnect, device number 12 [ 185.523255][ T8228] input: syz0 as /devices/virtual/input/input18 [ 186.005801][ T8243] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input19 [ 186.297785][ T8252] block device autoloading is deprecated and will be removed. [ 186.811640][ T5822] Bluetooth: hci0: command tx timeout [ 186.905386][ T8261] netlink: 'syz.3.738': attribute type 10 has an invalid length. [ 187.187693][ T8037] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 187.225869][ T8037] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 187.258192][ T8280] netlink: 2048 bytes leftover after parsing attributes in process `syz.3.741'. [ 187.258581][ T8037] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 187.304203][ T8280] netlink: 4 bytes leftover after parsing attributes in process `syz.3.741'. [ 187.308801][ T8037] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 187.911814][ T8037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.930776][ T8292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.745'. [ 187.960004][ T8037] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.028164][ T8292] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.159898][ T8292] bridge_slave_1 (unregistering): left allmulticast mode [ 188.183630][ T8292] bridge_slave_1 (unregistering): left promiscuous mode [ 188.199288][ T8292] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.311716][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.318888][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.328905][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 188.328919][ T30] audit: type=1400 audit(1745134968.780:478): avc: denied { bind } for pid=8301 comm="syz.3.746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 188.336541][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.361270][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.519367][ T30] audit: type=1400 audit(1745134968.870:479): avc: denied { listen } for pid=8301 comm="syz.3.746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 188.631456][ T30] audit: type=1400 audit(1745134969.000:480): avc: denied { map } for pid=8304 comm="syz.2.748" path="/dev/sg0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 188.708098][ T8312] SELinux: syz.3.749 (8312) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 188.911547][ T8037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.016988][ T8037] veth0_vlan: entered promiscuous mode [ 189.060975][ T8327] netlink: 16 bytes leftover after parsing attributes in process `syz.3.750'. [ 189.171159][ T8037] veth1_vlan: entered promiscuous mode [ 189.227111][ T8037] veth0_macvtap: entered promiscuous mode [ 189.234869][ T8037] veth1_macvtap: entered promiscuous mode [ 189.252172][ T8037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.279216][ T8037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.292636][ T8037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.348948][ T8037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.379243][ T8037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.415672][ T8037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.438579][ T8037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.451516][ T8037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.465988][ T8037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.495169][ T8037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.517812][ T8037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.549203][ T8037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.593165][ T8037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.633600][ T8037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.644730][ T8037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.658263][ T8037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.671410][ T8037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.714158][ T8037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.840205][ T8037] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.881185][ T8037] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.915682][ T8037] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.926110][ T8037] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.290023][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.319340][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.445935][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.454794][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.481001][ T30] audit: type=1400 audit(1745134970.930:481): avc: denied { mounton } for pid=8037 comm="syz-executor" path="/root/syzkaller.RxGaBX/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 190.520000][ T8362] sd 0:0:1:0: PR command failed: 1026 [ 190.525400][ T8362] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 190.533739][ T8362] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 190.730167][ T8371] netlink: 'syz.3.757': attribute type 4 has an invalid length. [ 190.783820][ T8371] netlink: 'syz.3.757': attribute type 4 has an invalid length. [ 191.021066][ T30] audit: type=1400 audit(1745134971.470:482): avc: denied { bind } for pid=8372 comm="syz.0.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 191.465312][ T8401] netlink: 'syz.2.763': attribute type 10 has an invalid length. [ 191.535924][ T1152] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.557029][ T30] audit: type=1326 audit(1745134972.010:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8396 comm="syz.3.762" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f05b078e169 code=0x0 [ 191.722520][ T1152] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.944427][ T1152] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.079160][ T1152] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.105830][ T30] audit: type=1400 audit(1745134972.540:484): avc: denied { connect } for pid=8421 comm="syz.0.766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 192.423159][ T1152] bridge_slave_1: left allmulticast mode [ 192.442010][ T1152] bridge_slave_1: left promiscuous mode [ 192.455664][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.484187][ T1152] bridge_slave_0: left allmulticast mode [ 192.497688][ T1152] bridge_slave_0: left promiscuous mode [ 192.510328][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.570653][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 192.581364][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 192.593665][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 192.602378][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 192.610615][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 192.796479][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 192.954750][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 192.965890][ T10] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 192.976830][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.984881][ T10] usb 4-1: Product: syz [ 192.992455][ T10] usb 4-1: Manufacturer: syz [ 193.003245][ T10] usb 4-1: SerialNumber: syz [ 193.054837][ T10] usb 4-1: config 0 descriptor?? [ 193.062537][ T8437] netlink: 12 bytes leftover after parsing attributes in process `syz.0.769'. [ 193.069612][ T10] radio-usb-si4713 4-1:0.0: Si4713 development board discovered: (10C4:8244) [ 193.192680][ T1152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.205561][ T1152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.215981][ T1152] bond0 (unregistering): Released all slaves [ 193.336570][ T5879] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 193.612006][ T5879] usb 5-1: Using ep0 maxpacket: 8 [ 193.642348][ T5879] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 193.677632][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.703259][ T5879] usb 5-1: Product: syz [ 193.748950][ T10] radio-usb-si4713 4-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 193.756842][ T5879] usb 5-1: Manufacturer: syz [ 193.759961][ T10] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 193.820721][ T10] usb 4-1: USB disconnect, device number 14 [ 193.829291][ T5879] usb 5-1: SerialNumber: syz [ 193.889938][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.896205][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.949691][ T5879] usb 5-1: config 0 descriptor?? [ 194.060089][ T1152] hsr_slave_0: left promiscuous mode [ 194.088275][ T1152] hsr_slave_1: left promiscuous mode [ 194.100221][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.109066][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.118812][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.131727][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.177106][ T1152] veth1_macvtap: left promiscuous mode [ 194.183824][ T1152] veth0_macvtap: left promiscuous mode [ 194.191214][ T1152] veth1_vlan: left promiscuous mode [ 194.196724][ T1152] veth0_vlan: left promiscuous mode [ 194.242043][ T5879] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 194.586970][ T8469] netlink: 'syz.3.775': attribute type 10 has an invalid length. [ 194.739565][ T5836] Bluetooth: hci0: command tx timeout [ 195.099532][ T30] audit: type=1400 audit(1745134975.439:485): avc: denied { mount } for pid=8474 comm="syz.0.776" name="/" dev="autofs" ino=19345 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 195.143121][ T30] audit: type=1400 audit(1745134975.467:486): avc: denied { watch watch_reads } for pid=8474 comm="syz.0.776" path="/145/file1" dev="autofs" ino=19345 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 195.183063][ T30] audit: type=1400 audit(1745134975.505:487): avc: denied { unmount } for pid=5830 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 195.432154][ T5879] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 195.450883][ T5879] usb 5-1: USB disconnect, device number 12 [ 196.219027][ T1152] team0 (unregistering): Port device team_slave_1 removed [ 196.268247][ T8492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.782'. [ 196.277988][ T8492] netlink: 4 bytes leftover after parsing attributes in process `syz.0.782'. [ 196.287089][ T8492] netlink: 'syz.0.782': attribute type 7 has an invalid length. [ 196.294897][ T8492] netlink: 'syz.0.782': attribute type 12 has an invalid length. [ 196.295424][ T1152] team0 (unregistering): Port device team_slave_0 removed [ 196.835743][ T8429] chnl_net:caif_netlink_parms(): no params data found [ 196.958311][ T5836] Bluetooth: hci0: command tx timeout [ 197.201753][ T30] audit: type=1326 audit(1745134977.394:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8527 comm="syz.4.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f789338e169 code=0x7ffc0000 [ 197.241432][ T8429] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.268539][ T30] audit: type=1326 audit(1745134977.394:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8527 comm="syz.4.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f789338e169 code=0x7ffc0000 [ 197.271976][ T8429] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.291683][ C1] vkms_vblank_simulate: vblank timer overrun [ 197.311865][ T8429] bridge_slave_0: entered allmulticast mode [ 197.320510][ T8429] bridge_slave_0: entered promiscuous mode [ 197.326159][ T30] audit: type=1326 audit(1745134977.394:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8527 comm="syz.4.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f789338e169 code=0x7ffc0000 [ 197.338156][ T8429] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.388498][ T30] audit: type=1326 audit(1745134977.394:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8527 comm="syz.4.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f789338e169 code=0x7ffc0000 [ 197.409801][ T8429] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.431151][ T8429] bridge_slave_1: entered allmulticast mode [ 197.453632][ T8429] bridge_slave_1: entered promiscuous mode [ 197.542451][ T8429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.566320][ T8429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.679718][ T8429] team0: Port device team_slave_0 added [ 197.711083][ T8429] team0: Port device team_slave_1 added [ 197.882351][ T8429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.893772][ T8429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.965946][ T8429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.997331][ T8429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.142133][ T8429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.168455][ T8429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.442280][ T8429] hsr_slave_0: entered promiscuous mode [ 198.455329][ T8429] hsr_slave_1: entered promiscuous mode [ 198.470319][ T8429] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.505512][ T8429] Cannot create hsr debugfs directory [ 198.512043][ T30] audit: type=1400 audit(1745134978.629:492): avc: denied { setopt } for pid=8547 comm="syz.4.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 198.650865][ T30] audit: type=1400 audit(1745134978.760:493): avc: denied { mount } for pid=8552 comm="syz.4.797" name="/" dev="ramfs" ino=20192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 198.746719][ T30] audit: type=1400 audit(1745134978.788:494): avc: denied { watch } for pid=8552 comm="syz.4.797" path="/156/file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=20194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 198.950553][ T8562] syz_tun: entered allmulticast mode [ 199.023035][ T8561] dvmrp1: entered allmulticast mode [ 199.042743][ T8561] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 199.051284][ T8561] net_ratelimit: 24 callbacks suppressed [ 199.051298][ T8561] mroute: pending queue full, dropping entries [ 199.152919][ T8556] syz_tun: left allmulticast mode [ 199.192260][ T5836] Bluetooth: hci0: command tx timeout [ 199.325106][ T8578] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 200.584144][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 200.584160][ T30] audit: type=1400 audit(1745134980.565:503): avc: denied { allowed } for pid=8610 comm="syz.3.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 200.648569][ T8429] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 200.686308][ T8429] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 200.734722][ T8429] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 200.760422][ T8429] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 201.181174][ T8429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.365802][ T8429] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.408735][ T5836] Bluetooth: hci0: command tx timeout [ 201.436640][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.443821][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.479440][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.486591][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.126990][ T8429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.209316][ T8659] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 202.235638][ T8429] veth0_vlan: entered promiscuous mode [ 202.248608][ T8429] veth1_vlan: entered promiscuous mode [ 202.291001][ T8429] veth0_macvtap: entered promiscuous mode [ 202.319553][ T8429] veth1_macvtap: entered promiscuous mode [ 202.380597][ T8429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.407323][ T8429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.417793][ T8429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.430767][ T8429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.440805][ T8429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.463725][ T8429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.481745][ T8429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.509856][ T8429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.523651][ T8429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.548621][ T8429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.573596][ T8429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.588730][ T8429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.609980][ T8429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.630418][ T8429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.653708][ T8429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.664418][ T8429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.675286][ T8429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.686921][ T8429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.717428][ T8429] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.729132][ T8429] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.739563][ T8429] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.754697][ T8429] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.908056][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.925628][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.976206][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.996500][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.143807][ T30] audit: type=1400 audit(1745134982.960:504): avc: denied { getopt } for pid=8691 comm="syz.0.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 203.167720][ T8696] netlink: 'syz.4.823': attribute type 1 has an invalid length. [ 203.335677][ T8696] 8021q: adding VLAN 0 to HW filter on device bond1 [ 204.334615][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 204.528573][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 204.541054][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 204.580358][ T10] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 204.589428][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.617972][ T10] usb 4-1: config 0 descriptor?? [ 204.802412][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.822207][ T8744] bridge: RTM_NEWNEIGH with invalid ether address [ 204.880539][ T10] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 205.076186][ T30] audit: type=1400 audit(1745134984.765:505): avc: denied { shutdown } for pid=8746 comm="syz.2.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 205.245991][ T5822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 205.257914][ T5822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 205.265847][ T5822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 205.274567][ T5822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 205.283692][ T5822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 205.337576][ T5832] usb 4-1: USB disconnect, device number 15 [ 205.629671][ T8754] chnl_net:caif_netlink_parms(): no params data found [ 205.801912][ T8754] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.809086][ T8754] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.816320][ T8754] bridge_slave_0: entered allmulticast mode [ 205.823463][ T8754] bridge_slave_0: entered promiscuous mode [ 205.830601][ T8754] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.837972][ T8754] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.845319][ T8754] bridge_slave_1: entered allmulticast mode [ 205.852047][ T8754] bridge_slave_1: entered promiscuous mode [ 205.875206][ T8754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.887301][ T8754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.924876][ T8754] team0: Port device team_slave_0 added [ 205.936726][ T8754] team0: Port device team_slave_1 added [ 205.982790][ T8754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.999255][ T8754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.028742][ T8754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.042970][ T8754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.050798][ T8754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.088910][ T8754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.163721][ T8754] hsr_slave_0: entered promiscuous mode [ 206.176433][ T8754] hsr_slave_1: entered promiscuous mode [ 206.193619][ T8754] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.208301][ T8754] Cannot create hsr debugfs directory [ 206.291096][ T30] audit: type=1400 audit(1745134985.897:506): avc: denied { unmount } for pid=5828 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 206.815905][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.948032][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.008308][ T8785] tipc: Failed to remove unknown binding: 66,1,1/0:868297933/868297935 [ 207.058884][ T8789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.847'. [ 207.075160][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.095543][ T30] audit: type=1400 audit(1745134986.655:507): avc: denied { read } for pid=8792 comm="syz.4.848" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 207.118675][ T30] audit: type=1400 audit(1745134986.655:508): avc: denied { open } for pid=8792 comm="syz.4.848" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 207.227410][ T30] audit: type=1400 audit(1745134986.655:509): avc: denied { ioctl } for pid=8792 comm="syz.4.848" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 207.541311][ T5836] Bluetooth: hci0: command tx timeout [ 207.575727][ T36] bridge_slave_1: left allmulticast mode [ 207.583707][ T36] bridge_slave_1: left promiscuous mode [ 207.595395][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.683240][ T36] bridge_slave_0: left allmulticast mode [ 207.690641][ T36] bridge_slave_0: left promiscuous mode [ 208.205158][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.445775][ T8815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.855'. [ 208.688381][ T30] audit: type=1400 audit(1745134988.132:510): avc: denied { sqpoll } for pid=8810 comm="syz.0.854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 208.842611][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.852865][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.862391][ T36] bond0 (unregistering): Released all slaves [ 209.016994][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 209.071171][ T24] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 209.285520][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.308652][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.352249][ T24] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 209.754757][ T5822] Bluetooth: hci0: command tx timeout [ 209.775237][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.793347][ T24] usb 4-1: config 0 descriptor?? [ 209.923119][ T36] hsr_slave_0: left promiscuous mode [ 209.934494][ T36] hsr_slave_1: left promiscuous mode [ 209.946376][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.961968][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.980387][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.994262][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.081023][ T36] veth1_macvtap: left promiscuous mode [ 210.096889][ T30] audit: type=1800 audit(1745134989.451:511): pid=8850 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.862" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 210.176552][ T36] veth0_macvtap: left promiscuous mode [ 210.201438][ T36] veth1_vlan: left promiscuous mode [ 210.209167][ T36] veth0_vlan: left promiscuous mode [ 210.288099][ T24] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 210.317928][ T24] cp2112 0003:10C4:EA90.000F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 210.382827][ T8858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.865'. [ 210.500509][ T24] cp2112 0003:10C4:EA90.000F: Part Number: 0x82 Device Version: 0xFE [ 210.668300][ T36] team0 (unregistering): Port device team_slave_1 removed [ 210.699796][ T36] team0 (unregistering): Port device team_slave_0 removed [ 210.719399][ T24] cp2112 0003:10C4:EA90.000F: error requesting SMBus config [ 210.731736][ T24] cp2112 0003:10C4:EA90.000F: probe with driver cp2112 failed with error -32 [ 210.748331][ T24] usb 4-1: USB disconnect, device number 16 [ 211.214324][ T8754] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 211.255558][ T8754] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 211.326513][ T8754] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 211.357857][ T8754] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 211.603819][ T8754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.714067][ T8754] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.752874][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.760324][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.887055][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.894194][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.925644][ T5822] Bluetooth: hci0: command tx timeout [ 212.199575][ T8754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.214277][ T5876] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 212.247464][ T30] audit: type=1400 audit(1745134991.472:512): avc: denied { getopt } for pid=8924 comm="syz.4.884" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 212.247681][ T8925] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.276566][ T8754] veth0_vlan: entered promiscuous mode [ 212.289444][ T8754] veth1_vlan: entered promiscuous mode [ 212.312819][ T8925] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 212.318220][ T8754] veth0_macvtap: entered promiscuous mode [ 212.331840][ T8754] veth1_macvtap: entered promiscuous mode [ 212.339071][ T8925] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 212.348444][ T8754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.362780][ T8754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.373429][ T8754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.384618][ T5876] usb 4-1: Using ep0 maxpacket: 8 [ 212.386126][ T8754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.401555][ T8754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.412621][ T5876] usb 4-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 212.414964][ T8754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.436081][ T8754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.438048][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 212.446949][ T8754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.468351][ T8754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.473610][ T5876] usb 4-1: Product: syz [ 212.479778][ T5876] usb 4-1: Manufacturer: syz [ 212.482584][ T8754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.494975][ T5876] usb 4-1: SerialNumber: syz [ 212.498146][ T8754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.504566][ T5876] usb 4-1: config 0 descriptor?? [ 212.511138][ T8754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.529655][ T8754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.540711][ T8754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.587630][ T8754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.608384][ T8754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.628529][ T8754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.654889][ T8754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.678768][ T8754] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.688112][ T8754] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.697894][ T8754] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.713763][ T8754] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.813424][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.830521][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.880653][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.895564][ T30] audit: type=1400 audit(1745134992.080:513): avc: denied { read } for pid=8934 comm="syz.4.888" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 212.928685][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.111081][ T8942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.892'. [ 213.202450][ T8944] smc: net device bond0 applied user defined pnetid SYZ0 [ 213.560155][ T8911] syz.3.879 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 213.575011][ T30] audit: type=1400 audit(1745134992.716:514): avc: denied { setattr } for pid=8956 comm="syz.4.896" name="/" dev="9p" ino=17889801302421081418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 213.635443][ T5875] usb 4-1: USB disconnect, device number 17 [ 213.814613][ T5877] IPVS: starting estimator thread 0... [ 213.822834][ T30] audit: type=1400 audit(1745134992.940:515): avc: denied { setopt } for pid=8962 comm="syz.4.899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 213.935072][ T8966] IPVS: using max 82 ests per chain, 196800 per kthread [ 213.938760][ T30] audit: type=1400 audit(1745134993.043:516): avc: denied { accept } for pid=8969 comm="syz.2.901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 213.961274][ C1] vkms_vblank_simulate: vblank timer overrun [ 214.045514][ T30] audit: type=1400 audit(1745134993.156:517): avc: denied { mount } for pid=8971 comm="syz.2.902" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 214.067565][ C1] vkms_vblank_simulate: vblank timer overrun [ 214.085464][ T30] audit: type=1400 audit(1745134993.184:518): avc: denied { watch } for pid=8971 comm="syz.2.902" path="/196/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 214.200377][ T3495] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.349894][ T30] audit: type=1400 audit(1745134993.436:519): avc: denied { unmount } for pid=5823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 215.086418][ T3495] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.128436][ T30] audit: type=1400 audit(1745134994.166:520): avc: denied { read } for pid=9000 comm="syz.0.904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 215.419739][ T30] audit: type=1400 audit(1745134994.437:521): avc: denied { connect } for pid=9013 comm="syz.4.911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 215.439156][ C1] vkms_vblank_simulate: vblank timer overrun [ 215.468113][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 215.478140][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 215.492989][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 215.501352][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 215.511246][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 215.538381][ T5879] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 215.732099][ T5879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.740151][ T3495] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.743203][ T5879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.743240][ T5879] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 215.804902][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.820181][ T5879] usb 1-1: config 0 descriptor?? [ 215.869304][ T3495] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.975980][ T9024] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 216.169721][ T9016] chnl_net:caif_netlink_parms(): no params data found [ 216.755658][ T3495] bridge_slave_1: left allmulticast mode [ 216.870400][ T3495] bridge_slave_1: left promiscuous mode [ 216.885404][ T3495] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.909741][ T3495] bridge_slave_0: left allmulticast mode [ 216.915432][ T3495] bridge_slave_0: left promiscuous mode [ 216.928684][ T3495] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.178146][ T9050] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 217.192620][ T9050] overlayfs: overlapping lowerdir path [ 217.351818][ T5879] uclogic 0003:256C:006D.0010: v1 frame probing failed: -71 [ 217.372089][ T5879] uclogic 0003:256C:006D.0010: failed probing parameters: -71 [ 217.384037][ T5879] uclogic 0003:256C:006D.0010: probe with driver uclogic failed with error -71 [ 217.405084][ T5879] usb 1-1: USB disconnect, device number 13 [ 217.613744][ T3495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.635103][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 217.635118][ T30] audit: type=1400 audit(1745134996.514:524): avc: denied { read } for pid=9063 comm="syz.4.921" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 217.676810][ T3495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.691336][ T30] audit: type=1400 audit(1745134996.514:525): avc: denied { open } for pid=9063 comm="syz.4.921" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 217.692515][ T3495] bond0 (unregistering): Released all slaves [ 217.718671][ T30] audit: type=1400 audit(1745134996.514:526): avc: denied { ioctl } for pid=9063 comm="syz.4.921" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d0f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 217.751954][ T5836] Bluetooth: hci0: command tx timeout [ 217.801307][ T9016] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.810599][ T9016] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.820322][ T9016] bridge_slave_0: entered allmulticast mode [ 217.828659][ T9016] bridge_slave_0: entered promiscuous mode [ 217.854617][ T9016] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.863235][ T9016] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.870816][ T9016] bridge_slave_1: entered allmulticast mode [ 217.877490][ T9016] bridge_slave_1: entered promiscuous mode [ 217.905072][ T30] audit: type=1400 audit(1745134996.766:527): avc: denied { map } for pid=9066 comm="syz.3.922" path="socket:[24055]" dev="sockfs" ino=24055 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 217.941900][ T9016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.959296][ T9016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.055806][ T9016] team0: Port device team_slave_0 added [ 218.105688][ T3495] hsr_slave_0: left promiscuous mode [ 218.111700][ T3495] hsr_slave_1: left promiscuous mode [ 218.117550][ T3495] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.127976][ T3495] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.136268][ T3495] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.143723][ T3495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.183172][ T3495] veth1_macvtap: left promiscuous mode [ 218.188717][ T3495] veth0_macvtap: left promiscuous mode [ 218.216313][ T3495] veth1_vlan: left promiscuous mode [ 218.238511][ T3495] veth0_vlan: left promiscuous mode [ 218.327349][ T9084] mmap: syz.3.925 (9084) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 218.439512][ T30] audit: type=1804 audit(1745134997.262:528): pid=9092 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.927" name="/newroot/204/file0" dev="tmpfs" ino=1133 res=1 errno=0 [ 218.471300][ T9092] ref_ctr_offset mismatch. inode: 0x46d offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 218.494856][ T9092] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: 0, delta: -1 [ 218.504485][ T9092] ref_ctr decrement failed for inode: 0x46d offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888028b76e00 [ 218.546465][ T9092] uprobe: syz.4.927:9092 failed to unregister, leaking uprobe [ 218.615519][ T9098] netlink: 12 bytes leftover after parsing attributes in process `syz.3.929'. [ 218.655542][ T9100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.930'. [ 218.776598][ T3495] team0 (unregistering): Port device team_slave_1 removed [ 218.804702][ T3495] team0 (unregistering): Port device team_slave_0 removed [ 219.045643][ T9016] team0: Port device team_slave_1 added [ 219.055738][ T9071] bridge1: entered promiscuous mode [ 219.060940][ T9071] bridge1: entered allmulticast mode [ 219.074649][ T9071] team0: Port device bridge1 added [ 219.266117][ T9016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.285955][ T9016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.319482][ T9016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.338677][ T9016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.346692][ T9016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.394601][ T9016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.554034][ T9016] hsr_slave_0: entered promiscuous mode [ 219.581483][ T9016] hsr_slave_1: entered promiscuous mode [ 219.588048][ T9016] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.598061][ T9016] Cannot create hsr debugfs directory [ 219.609383][ T9117] netlink: 12 bytes leftover after parsing attributes in process `syz.3.935'. [ 219.953524][ T30] audit: type=1804 audit(1745134998.656:529): pid=9122 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.936" name="/newroot/222/file0" dev="tmpfs" ino=1188 res=1 errno=0 [ 219.979945][ T5836] Bluetooth: hci0: command tx timeout [ 220.097774][ T9128] netlink: 12 bytes leftover after parsing attributes in process `syz.3.937'. [ 220.334718][ T30] audit: type=1400 audit(1745134999.039:530): avc: denied { ioctl } for pid=9131 comm="syz.3.938" path="socket:[24168]" dev="sockfs" ino=24168 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 220.592293][ T30] audit: type=1400 audit(1745134999.273:531): avc: denied { getopt } for pid=9145 comm="syz.0.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 220.645108][ T9016] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 220.673236][ T9151] netlink: 12 bytes leftover after parsing attributes in process `syz.4.942'. [ 222.189448][ T5836] Bluetooth: hci0: command tx timeout [ 222.341780][ T9016] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 222.429460][ T9169] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 222.446855][ T9016] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 222.487627][ T9016] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 222.693475][ T9016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.748445][ T9016] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.754409][ T3164] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 222.784843][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.791996][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.922810][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.930008][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.942746][ T3164] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 222.983210][ T3164] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 223.217722][ T9016] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 223.256080][ T9016] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 223.342572][ T3164] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 223.352594][ T3164] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 223.449300][ T3164] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 223.458371][ T3164] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.526138][ T3164] usb 4-1: config 0 descriptor?? [ 223.792416][ T9016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.849414][ T9016] veth0_vlan: entered promiscuous mode [ 223.863998][ T9016] veth1_vlan: entered promiscuous mode [ 223.897688][ T9016] veth0_macvtap: entered promiscuous mode [ 223.910243][ T9016] veth1_macvtap: entered promiscuous mode [ 223.937771][ T9016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.948780][ T9016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.958660][ T9016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.969258][ T9016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.979136][ T9016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.990214][ T9016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.998997][ T3164] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 224.005396][ T9016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.021447][ T9016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.031842][ T5877] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 224.032632][ T3164] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 224.052396][ T9016] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.086524][ T9016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.100610][ T9016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.126516][ T9016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.141216][ T9016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.152559][ T9016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.165266][ T9016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.175730][ T9016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.189138][ T9016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.201034][ T9016] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.209742][ T5877] usb 5-1: Using ep0 maxpacket: 16 [ 224.226753][ T5877] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 224.243584][ T9016] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.253415][ T5877] usb 5-1: config 0 has no interface number 0 [ 224.260271][ T5877] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 224.273087][ T9016] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.281823][ T9016] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.290845][ T5877] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 224.300878][ T9016] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.312821][ T5877] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 224.325219][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 224.342568][ T5877] usb 5-1: Product: syz [ 224.360674][ T5877] usb 5-1: SerialNumber: syz [ 224.390905][ T5877] usb 5-1: config 0 descriptor?? [ 224.411457][ T5836] Bluetooth: hci0: command tx timeout [ 224.418916][ T5877] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 224.442314][ T5877] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input21 [ 224.458959][ T3495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.485065][ T3495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.547170][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.557758][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.676342][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 225.017747][ T5875] usb 4-1: USB disconnect, device number 18 [ 225.108167][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 225.116040][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 225.123221][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 225.130334][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 225.137392][ T5907] usb 5-1: USB disconnect, device number 13 [ 225.143322][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 225.143345][ C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 225.162602][ T5907] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 225.742524][ T76] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.518449][ T5822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 226.528365][ T5822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 226.540464][ T5822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 226.557076][ T5822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 226.591405][ T5822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 226.744509][ T2327] pvrusb2: request_firmware fatal error with code=-110 [ 226.751410][ T2327] pvrusb2: Failure uploading firmware1 [ 226.802722][ T2327] pvrusb2: Device initialization was not successful. [ 226.847407][ T2327] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 226.925280][ T2327] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 226.938018][ T5921] pvrusb2: Device being rendered inoperable [ 227.178172][ T76] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.251942][ T76] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.314620][ T9283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.969'. [ 227.392714][ T76] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.509550][ T9265] chnl_net:caif_netlink_parms(): no params data found [ 228.085874][ T30] audit: type=1400 audit(1745135006.289:532): avc: denied { block_suspend } for pid=9297 comm="syz.0.972" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 228.157106][ T9265] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.164427][ T9265] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.171642][ T9265] bridge_slave_0: entered allmulticast mode [ 228.178978][ T9265] bridge_slave_0: entered promiscuous mode [ 228.187479][ T9265] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.194610][ T9265] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.201885][ T9265] bridge_slave_1: entered allmulticast mode [ 228.208739][ T9265] bridge_slave_1: entered promiscuous mode [ 228.223538][ T76] bridge_slave_1: left allmulticast mode [ 228.231838][ T76] bridge_slave_1: left promiscuous mode [ 228.238051][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.263449][ T76] bridge_slave_0: left allmulticast mode [ 228.275752][ T76] bridge_slave_0: left promiscuous mode [ 228.281581][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.576564][ T76] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.586635][ T76] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.597226][ T76] bond0 (unregistering): Released all slaves [ 228.649914][ T9265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.682656][ T9265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.754126][ T9265] team0: Port device team_slave_0 added [ 228.778576][ T9265] team0: Port device team_slave_1 added [ 228.824446][ T9265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.834442][ T9265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.860329][ C0] vkms_vblank_simulate: vblank timer overrun [ 228.867547][ T5836] Bluetooth: hci0: command tx timeout [ 228.880510][ T9265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.898700][ T9265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.906979][ T9265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.936340][ T9265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.087757][ T76] hsr_slave_0: left promiscuous mode [ 229.113154][ T76] hsr_slave_1: left promiscuous mode [ 229.151817][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.167506][ T76] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.188639][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.203611][ T76] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.275978][ T76] veth1_macvtap: left promiscuous mode [ 229.298208][ T76] veth0_macvtap: left promiscuous mode [ 229.314807][ T76] veth1_vlan: left promiscuous mode [ 229.320271][ T76] veth0_vlan: left promiscuous mode [ 229.424415][ T9332] netlink: 12 bytes leftover after parsing attributes in process `syz.0.980'. [ 229.711703][ T9337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.982'. [ 229.862550][ T30] audit: type=1400 audit(1745135007.944:533): avc: denied { setopt } for pid=9339 comm="syz.3.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 229.927446][ T76] team0 (unregistering): Port device team_slave_1 removed [ 229.962031][ T76] team0 (unregistering): Port device team_slave_0 removed [ 230.316483][ T9265] hsr_slave_0: entered promiscuous mode [ 230.337025][ T9265] hsr_slave_1: entered promiscuous mode [ 230.343853][ T9265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 230.353529][ T9265] Cannot create hsr debugfs directory [ 231.054795][ T9363] vlan2: entered allmulticast mode [ 231.082461][ T5836] Bluetooth: hci0: command tx timeout [ 232.054108][ T30] audit: type=1400 audit(1745135009.974:534): avc: denied { map } for pid=9395 comm="syz.4.995" path="socket:[26872]" dev="sockfs" ino=26872 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 232.141732][ T9404] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 232.469158][ T9265] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 232.502073][ T9265] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 232.555000][ T30] audit: type=1400 audit(1745135010.470:535): avc: denied { mounton } for pid=9418 comm="syz.4.1001" path="/220/file1/file0" dev="autofs" ino=27126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 232.602287][ T9265] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 232.646250][ T9265] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 232.649006][ T30] audit: type=1400 audit(1745135010.507:536): avc: denied { mounton } for pid=9418 comm="syz.4.1001" path="/220/file1/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 232.728031][ T30] audit: type=1400 audit(1745135010.507:537): avc: denied { mount } for pid=9418 comm="syz.4.1001" name="/" dev="configfs" ino=1130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 232.786449][ T30] audit: type=1400 audit(1745135010.610:538): avc: denied { unmount } for pid=5829 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 233.317749][ T5836] Bluetooth: hci0: command tx timeout [ 233.520247][ T9265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.585418][ T9441] tipc: Failed to remove unknown binding: 66,1,1/0:3307876591/3307876593 [ 233.598946][ T9441] tipc: Failed to remove unknown binding: 66,1,1/0:3307876591/3307876593 [ 233.607854][ T9441] tipc: Failed to remove unknown binding: 66,1,1/0:3307876591/3307876593 [ 233.661530][ T9265] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.682301][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.689438][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.761002][ T1080] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.768169][ T1080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.270722][ T9265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.389667][ T9265] veth0_vlan: entered promiscuous mode [ 234.408767][ T9265] veth1_vlan: entered promiscuous mode [ 234.488874][ T9265] veth0_macvtap: entered promiscuous mode [ 235.488110][ T9265] veth1_macvtap: entered promiscuous mode [ 235.514640][ T9265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.529957][ T5836] Bluetooth: hci0: command tx timeout [ 235.540084][ T9265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.550192][ T9265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.560775][ T9265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.570717][ T9265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.581201][ T9265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.591132][ T9265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.601713][ T9265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.612851][ T9265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.721550][ T9265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.743010][ T9265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.777066][ T9265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.788497][ T9265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.799923][ T9265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.810382][ T9265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.827093][ T9265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.837792][ T9265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.870705][ T9265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.978634][ T30] audit: type=1400 audit(1745135013.650:539): avc: denied { read } for pid=9488 comm="syz.2.1018" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 236.023515][ T9265] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.082374][ T9265] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.101986][ T30] audit: type=1400 audit(1745135013.650:540): avc: denied { open } for pid=9488 comm="syz.2.1018" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 236.127718][ T9491] loop6: detected capacity change from 0 to 524287999 [ 236.138261][ T9265] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.192542][ T9265] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.195008][ T30] audit: type=1400 audit(1745135013.650:541): avc: denied { ioctl } for pid=9488 comm="syz.2.1018" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 236.292781][ T30] audit: type=1400 audit(1745135013.781:542): avc: denied { open } for pid=9490 comm="syz.3.1019" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 236.496176][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.510422][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.510780][ T3573] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.557972][ T3573] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.595359][ T9503] tipc: Started in network mode [ 236.604612][ T9503] tipc: Node identity ca62bc11b0ba, cluster identity 4711 [ 236.628958][ T9503] tipc: Enabled bearer , priority 0 [ 236.704139][ T9503] syzkaller0: entered promiscuous mode [ 236.740378][ T9503] syzkaller0: entered allmulticast mode [ 236.740914][ T9506] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1025'. [ 236.746480][ T9503] tipc: Resetting bearer [ 236.939445][ T9502] tipc: Resetting bearer [ 237.691378][ T5907] tipc: Node number set to 2061024273 [ 238.455708][ T9502] tipc: Disabling bearer [ 238.644557][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 238.658148][ T5836] block nbd2: Receive control failed (result -32) [ 238.666245][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 238.670539][ T9521] block nbd2: shutting down sockets [ 238.682037][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 238.690325][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 238.695285][ T3428] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.711919][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 239.029780][ T5875] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 239.190266][ T3428] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.213692][ T9525] chnl_net:caif_netlink_parms(): no params data found [ 239.239338][ T5875] usb 1-1: Using ep0 maxpacket: 16 [ 239.246300][ T5875] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 239.263929][ T5875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 239.278562][ T5875] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 239.291399][ T5875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.299612][ T5875] usb 1-1: Product: syz [ 239.304169][ T5875] usb 1-1: Manufacturer: syz [ 239.308835][ T5875] usb 1-1: SerialNumber: syz [ 239.316925][ T3428] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.335243][ T5875] usb 1-1: config 0 descriptor?? [ 239.349426][ T5875] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 239.364660][ T5875] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 239.386003][ T9525] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.393825][ T9525] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.401409][ T9525] bridge_slave_0: entered allmulticast mode [ 239.408410][ T9525] bridge_slave_0: entered promiscuous mode [ 239.431210][ T3428] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.450566][ T9525] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.458476][ T9525] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.465950][ T9525] bridge_slave_1: entered allmulticast mode [ 239.497055][ T9525] bridge_slave_1: entered promiscuous mode [ 239.576979][ T9525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.631121][ T9525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.822625][ T3428] bridge_slave_1: left allmulticast mode [ 239.828378][ T3428] bridge_slave_1: left promiscuous mode [ 239.834384][ T3428] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.855746][ T3428] bridge_slave_0: left allmulticast mode [ 239.862947][ T3428] bridge_slave_0: left promiscuous mode [ 239.892240][ T3428] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.988489][ T9551] 9pnet_fd: Insufficient options for proto=fd [ 239.997158][ T5875] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 240.007808][ T5875] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 240.415035][ T3428] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.430886][ T3428] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.442386][ T3428] bond0 (unregistering): Released all slaves [ 240.467728][ T9525] team0: Port device team_slave_0 added [ 240.492579][ T9525] team0: Port device team_slave_1 added [ 240.560954][ T9525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.574549][ T9525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.615499][ T9525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.712913][ T9525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.728754][ T9525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.777991][ T9525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.901348][ T5875] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 240.922164][ T5839] Bluetooth: hci0: command tx timeout [ 240.940311][ T5875] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 240.948542][ T5875] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 240.956301][ T5875] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 240.977548][ T5875] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 240.990191][ T5875] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 240.995657][ T9525] hsr_slave_0: entered promiscuous mode [ 241.002107][ T5875] usb 1-1: USB disconnect, device number 14 [ 241.009686][ T9525] hsr_slave_1: entered promiscuous mode [ 241.017328][ T9525] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 241.026947][ T9525] Cannot create hsr debugfs directory [ 241.137304][ T3428] hsr_slave_0: left promiscuous mode [ 241.144115][ T3428] hsr_slave_1: left promiscuous mode [ 241.149731][ T3428] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.185682][ T3428] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.193910][ T3428] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.211886][ T3428] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.249331][ T3428] veth1_macvtap: left promiscuous mode [ 241.254885][ T3428] veth0_macvtap: left promiscuous mode [ 241.265652][ T3428] veth1_vlan: left promiscuous mode [ 241.284083][ T3428] veth0_vlan: left promiscuous mode [ 241.765709][ T3428] team0 (unregistering): Port device team_slave_1 removed [ 241.797398][ T5907] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 241.801371][ T9606] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input22 [ 241.853865][ T3428] team0 (unregistering): Port device team_slave_0 removed [ 241.977984][ T5907] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 241.992751][ T5907] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 242.004252][ T5907] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 242.013947][ T5907] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 242.025049][ T5907] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 242.042248][ T5907] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 242.063249][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 242.071305][ T5907] usb 4-1: Product: syz [ 242.075621][ T5907] usb 4-1: Manufacturer: syz [ 242.085869][ T5907] cdc_wdm 4-1:1.0: skipping garbage [ 242.099151][ T5907] cdc_wdm 4-1:1.0: skipping garbage [ 242.118511][ T5907] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 242.124746][ T5907] cdc_wdm 4-1:1.0: Unknown control protocol [ 242.367132][ T9601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.386770][ T9601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.402712][ T5875] usb 4-1: USB disconnect, device number 19 [ 242.521096][ T9616] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1049'. [ 242.674222][ T9616] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1049'. [ 242.890775][ T30] audit: type=1400 audit(1745135020.133:543): avc: denied { create } for pid=9633 comm="syz.2.1051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 242.936446][ T30] audit: type=1400 audit(1745135020.133:544): avc: denied { ioctl } for pid=9633 comm="syz.2.1051" path="socket:[29005]" dev="sockfs" ino=29005 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 243.150899][ T9525] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 243.164710][ T5839] Bluetooth: hci0: command tx timeout [ 243.186442][ T9525] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 243.198937][ T9525] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 243.246424][ T9525] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 243.918078][ T9525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.956628][ T9525] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.981977][ T3495] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.989148][ T3495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.014537][ T3495] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.021730][ T3495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.326680][ T9674] netlink: 'syz.2.1058': attribute type 10 has an invalid length. [ 244.545948][ T9685] netlink: 'syz.3.1059': attribute type 10 has an invalid length. [ 244.698924][ T9525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.714398][ T9691] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 244.729701][ T30] audit: type=1804 audit(1745135021.844:545): pid=9691 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1060" name="/newroot/237/file0" dev="tmpfs" ino=1244 res=1 errno=0 [ 244.752987][ T9691] ref_ctr increment failed for inode: 0x4dc offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88801b472800 [ 244.763351][ T9525] veth0_vlan: entered promiscuous mode [ 244.789134][ T9525] veth1_vlan: entered promiscuous mode [ 244.837583][ T9525] veth0_macvtap: entered promiscuous mode [ 244.880566][ T9525] veth1_macvtap: entered promiscuous mode [ 244.897966][ T9694] kvm: pic: non byte read [ 244.902548][ T9694] kvm: pic: level sensitive irq not supported [ 244.902607][ T9694] kvm: pic: non byte read [ 244.913954][ T9694] kvm: pic: level sensitive irq not supported [ 244.914009][ T9694] kvm: pic: non byte read [ 244.936007][ T9694] kvm: pic: level sensitive irq not supported [ 244.936067][ T9694] kvm: pic: non byte read [ 244.960947][ T9525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.978002][ T9525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.004036][ T9525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.026337][ T9525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.038543][ T9525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.049655][ T9525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.061652][ T9525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.072829][ T9525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.083951][ T9525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.126588][ T9525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.153376][ T9525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.170288][ T9525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.191206][ T9525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.207604][ T9525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.218430][ T9525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.228564][ T9525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.265182][ T9525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.285438][ T9525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.316868][ T9525] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.339149][ T9525] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.350984][ T9525] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.360144][ T9525] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.377501][ T5839] Bluetooth: hci0: command tx timeout [ 245.448025][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.467844][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.501231][ T3428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.509407][ T3428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.614014][ T30] audit: type=1400 audit(1745135022.686:546): avc: denied { kexec_image_load } for pid=9719 comm="syz.3.1065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 246.606686][ T30] audit: type=1400 audit(1745135022.770:547): avc: denied { write } for pid=9719 comm="syz.3.1065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 248.180429][ T30] audit: type=1400 audit(1745135025.090:548): avc: denied { read } for pid=9742 comm="syz.0.1073" name="mouse0" dev="devtmpfs" ino=998 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 248.205502][ T30] audit: type=1400 audit(1745135025.090:549): avc: denied { open } for pid=9742 comm="syz.0.1073" path="/dev/input/mouse0" dev="devtmpfs" ino=998 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 248.395445][ T76] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.684975][ T5822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 249.694843][ T5822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 249.702570][ T5822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 249.711220][ T5822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 249.718742][ T5822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 249.773917][ T30] audit: type=1400 audit(1745135026.577:550): avc: denied { read write } for pid=9764 comm="syz.2.1080" name="file0" dev="fuse" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 249.848540][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 249.857473][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 249.865184][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 249.873868][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 249.881451][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 249.901840][ T30] audit: type=1400 audit(1745135026.577:551): avc: denied { open } for pid=9764 comm="syz.2.1080" path="/243/file0/file0" dev="fuse" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 250.712372][ T76] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.837992][ T76] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.907558][ T9765] chnl_net:caif_netlink_parms(): no params data found [ 250.955631][ T76] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.180300][ T9769] chnl_net:caif_netlink_parms(): no params data found [ 251.217661][ T9765] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.236424][ T9765] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.247609][ T9765] bridge_slave_0: entered allmulticast mode [ 251.261564][ T9765] bridge_slave_0: entered promiscuous mode [ 251.372224][ T9765] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.380692][ T9765] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.397532][ T9765] bridge_slave_1: entered allmulticast mode [ 251.414980][ T9765] bridge_slave_1: entered promiscuous mode [ 251.692005][ T9812] netlink: 'syz.2.1088': attribute type 10 has an invalid length. [ 251.926668][ T9765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.951435][ T9765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.961978][ T5822] Bluetooth: hci0: command tx timeout [ 252.048071][ T5822] Bluetooth: hci5: command tx timeout [ 252.308070][ T9769] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.320093][ T9769] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.327422][ T9769] bridge_slave_0: entered allmulticast mode [ 252.353826][ T30] audit: type=1400 audit(1745135028.963:552): avc: denied { watch watch_reads } for pid=9823 comm="syz.0.1090" path="/220/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 252.386257][ T9769] bridge_slave_0: entered promiscuous mode [ 252.667044][ T9769] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.676786][ T9769] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.687030][ T9769] bridge_slave_1: entered allmulticast mode [ 252.696574][ T9769] bridge_slave_1: entered promiscuous mode [ 252.755616][ T76] bridge_slave_1: left allmulticast mode [ 252.761461][ T9833] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1093'. [ 252.771367][ T76] bridge_slave_1: left promiscuous mode [ 252.777241][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.787336][ T76] bridge_slave_0: left allmulticast mode [ 252.793053][ T76] bridge_slave_0: left promiscuous mode [ 252.814325][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.259578][ T76] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.269990][ T76] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.280399][ T76] bond0 (unregistering): Released all slaves [ 253.304266][ T9765] team0: Port device team_slave_0 added [ 253.351941][ T9769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.368034][ T9765] team0: Port device team_slave_1 added [ 253.396763][ T9769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.450534][ T9765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.463017][ T9765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.494898][ T9765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.507369][ T9765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.514609][ T9765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.540551][ T9765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.557902][ T9769] team0: Port device team_slave_0 added [ 253.633455][ T9769] team0: Port device team_slave_1 added [ 253.818552][ T9769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.839879][ T9769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.879689][ T9769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.909446][ T9765] hsr_slave_0: entered promiscuous mode [ 253.921472][ T9765] hsr_slave_1: entered promiscuous mode [ 253.946198][ T9765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.957093][ T9765] Cannot create hsr debugfs directory [ 253.981268][ T9769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.992115][ T9769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.047587][ T9769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.093743][ T76] hsr_slave_0: left promiscuous mode [ 254.103373][ T76] hsr_slave_1: left promiscuous mode [ 254.109286][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.134713][ T76] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.146286][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.153822][ T76] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.174287][ T5822] Bluetooth: hci0: command tx timeout [ 254.192019][ T76] veth1_macvtap: left promiscuous mode [ 254.206768][ T76] veth0_macvtap: left promiscuous mode [ 254.212419][ T76] veth1_vlan: left promiscuous mode [ 254.225198][ T76] veth0_vlan: left promiscuous mode [ 254.242114][ T5921] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 254.262567][ T5822] Bluetooth: hci5: command tx timeout [ 254.410999][ T5921] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 254.428034][ T5921] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 254.439071][ T5921] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 254.448898][ T5921] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 254.460008][ T5921] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 254.472837][ T5921] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 254.483455][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 254.491523][ T5921] usb 3-1: Product: syz [ 254.495806][ T24] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 254.503485][ T5921] usb 3-1: Manufacturer: syz [ 254.687362][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 254.698467][ T24] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.712964][ T24] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.725965][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 254.742025][ T24] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 254.750441][ T24] usb 4-1: Product: syz [ 254.757588][ T24] usb 4-1: Manufacturer: syz [ 256.409301][ T5822] Bluetooth: hci0: command tx timeout [ 256.493978][ T5822] Bluetooth: hci5: command tx timeout [ 258.381891][ T9888] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1109'. [ 258.548114][ T9891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1109'. [ 258.621437][ T5822] Bluetooth: hci0: command tx timeout [ 258.706950][ T5822] Bluetooth: hci5: command tx timeout [ 259.563683][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 259.570043][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 271.036444][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 271.045852][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 271.054260][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 271.062013][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 271.069500][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 273.246226][ T5822] Bluetooth: hci2: command tx timeout [ 274.057096][ T5839] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 274.066408][ T5839] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 274.075128][ T5839] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 274.085050][ T5839] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 274.092573][ T5839] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 274.543659][ T5839] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 274.553406][ T5839] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 274.561084][ T5839] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 274.568814][ T5839] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 274.577080][ T5839] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 275.480578][ T5839] Bluetooth: hci2: command tx timeout [ 276.325084][ T5839] Bluetooth: hci6: command tx timeout [ 276.752670][ T5839] Bluetooth: hci7: command tx timeout [ 277.704164][ T5839] Bluetooth: hci2: command tx timeout [ 278.548726][ T5839] Bluetooth: hci6: command tx timeout [ 278.987081][ T5839] Bluetooth: hci7: command tx timeout [ 279.917231][ T5839] Bluetooth: hci2: command tx timeout [ 280.772513][ T5839] Bluetooth: hci6: command tx timeout [ 281.199991][ T5839] Bluetooth: hci7: command tx timeout [ 282.996036][ T5839] Bluetooth: hci6: command tx timeout [ 283.423611][ T5839] Bluetooth: hci7: command tx timeout [ 314.525693][ T5822] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 314.544839][ T5822] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 314.554900][ T5822] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 314.564928][ T5822] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 314.572436][ T5822] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 314.588298][ T5822] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 314.603253][ T5836] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 314.612791][ T5836] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 314.621250][ T5836] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 314.630988][ T5836] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 316.778477][ T5836] Bluetooth: hci8: command tx timeout [ 316.874702][ T5836] Bluetooth: hci9: command tx timeout [ 319.002469][ T5836] Bluetooth: hci8: command tx timeout [ 319.087582][ T5836] Bluetooth: hci9: command tx timeout [ 321.225650][ T5836] Bluetooth: hci8: command tx timeout [ 321.311206][ T5836] Bluetooth: hci9: command tx timeout [ 323.449418][ T5836] Bluetooth: hci8: command tx timeout [ 323.534925][ T5836] Bluetooth: hci9: command tx timeout [ 325.249508][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 325.255809][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 335.631117][ T5839] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 335.640165][ T5839] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 335.648322][ T5839] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 335.656760][ T5839] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 335.664294][ T5839] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 337.817489][ T5836] Bluetooth: hci10: command tx timeout [ 338.635605][ T5839] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 338.643396][ T5839] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 338.651077][ T5839] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 338.660421][ T5839] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 338.669235][ T5839] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 339.138461][ T5839] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 339.148437][ T5839] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 339.157237][ T5839] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 339.165707][ T5839] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 339.173298][ T5839] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 340.041151][ T5836] Bluetooth: hci10: command tx timeout [ 340.896388][ T5836] Bluetooth: hci11: command tx timeout [ 341.409693][ T5836] Bluetooth: hci12: command tx timeout [ 342.264754][ T5836] Bluetooth: hci10: command tx timeout [ 343.120125][ T5836] Bluetooth: hci11: command tx timeout [ 343.634002][ T5836] Bluetooth: hci12: command tx timeout [ 344.488604][ T5836] Bluetooth: hci10: command tx timeout [ 345.343668][ T5836] Bluetooth: hci11: command tx timeout [ 345.867506][ T5836] Bluetooth: hci12: command tx timeout [ 347.567287][ T5836] Bluetooth: hci11: command tx timeout [ 348.080754][ T5836] Bluetooth: hci12: command tx timeout [ 352.556111][ T30] audit: type=1400 audit(1745135122.718:553): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=37470 daddr=10.128.1.108 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 379.789112][ T5839] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 379.799578][ T5839] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 379.807835][ T5839] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 379.819211][ T5827] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 379.821664][ T5839] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 379.833510][ T5827] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 379.834212][ T5827] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 379.849668][ T5827] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 379.857222][ T5839] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 379.858691][ T5827] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 382.033870][ T5836] Bluetooth: hci14: command tx timeout [ 382.033875][ T5839] Bluetooth: hci13: command tx timeout [ 382.215586][ T5839] Bluetooth: hci5: command 0x0406 tx timeout [ 382.215662][ T5836] Bluetooth: hci0: command 0x0406 tx timeout [ 384.257553][ T5836] Bluetooth: hci13: command tx timeout [ 384.268123][ T5836] Bluetooth: hci14: command tx timeout [ 386.481267][ T5836] Bluetooth: hci14: command tx timeout [ 386.481324][ T5822] Bluetooth: hci13: command tx timeout [ 388.704725][ T5822] Bluetooth: hci13: command tx timeout [ 388.715535][ T5822] Bluetooth: hci14: command tx timeout [ 390.941597][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 390.947890][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 400.252853][ T5836] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 400.262507][ T5836] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 400.271336][ T5836] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 400.279216][ T5836] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 400.289360][ T5836] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 402.485197][ T5822] Bluetooth: hci15: command tx timeout [ 403.259808][ T5827] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 403.268898][ T5827] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 403.277469][ T5827] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 403.285230][ T5827] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 403.294926][ T5827] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 403.761545][ T5827] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 403.770389][ T5827] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 403.779856][ T5827] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 403.787935][ T5827] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 403.795927][ T5827] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 404.102313][ T5822] Bluetooth: hci2: command 0x0406 tx timeout [ 404.697943][ T5836] Bluetooth: hci15: command tx timeout [ 405.467660][ T5836] Bluetooth: hci16: command tx timeout [ 405.981010][ T5836] Bluetooth: hci17: command tx timeout [ 406.932454][ T5836] Bluetooth: hci15: command tx timeout [ 407.691349][ T5827] Bluetooth: hci16: command tx timeout [ 408.215218][ T5827] Bluetooth: hci17: command tx timeout [ 409.145378][ T5827] Bluetooth: hci15: command tx timeout [ 409.572952][ T5827] Bluetooth: hci7: command 0x0406 tx timeout [ 409.579012][ T5839] Bluetooth: hci6: command 0x0406 tx timeout [ 409.914973][ T5836] Bluetooth: hci16: command tx timeout [ 410.428181][ T5836] Bluetooth: hci17: command tx timeout [ 412.138666][ T5836] Bluetooth: hci16: command tx timeout [ 412.651917][ T5836] Bluetooth: hci17: command tx timeout [ 414.886122][ T31] INFO: task kworker/1:0:24 blocked for more than 143 seconds. [ 414.893703][ T31] Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 [ 414.904183][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 414.912886][ T31] task:kworker/1:0 state:D stack:22600 pid:24 tgid:24 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 414.925731][ T31] Workqueue: usb_hub_wq hub_event [ 414.930794][ T31] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 414.934049][ T31] [ 414.936956][ T31] __schedule+0x116f/0x5de0 [ 414.941706][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 414.947698][ T31] ? __pfx___schedule+0x10/0x10 [ 414.969532][ T31] ? find_held_lock+0x2b/0x80 [ 414.990565][ T31] ? schedule+0x2d7/0x3a0 [ 415.003581][ T31] schedule+0xe7/0x3a0 [ 415.007682][ T31] schedule_timeout+0x257/0x290 [ 415.015310][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 415.020707][ T31] ? mark_held_locks+0x49/0x80 [ 415.025490][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 415.030666][ T31] __wait_for_common+0x2fc/0x4e0 [ 415.035590][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 415.041153][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 415.046901][ T31] ? devtmpfs_submit_req+0x94/0x100 [ 415.052109][ T31] devtmpfs_submit_req+0xa8/0x100 [ 415.057174][ T31] devtmpfs_create_node+0x18a/0x230 [ 415.062350][ T31] ? __pfx_devtmpfs_create_node+0x10/0x10 [ 415.068339][ T31] ? up_write+0x1b2/0x520 [ 415.072681][ T31] ? kernfs_create_link+0x1bd/0x240 [ 415.078038][ T31] ? kernfs_put+0x35/0x60 [ 415.082448][ T31] ? sysfs_do_create_link_sd+0xbb/0x140 [ 415.087995][ T31] device_add+0x10bd/0x1a70 [ 415.092532][ T31] ? __pfx_device_add+0x10/0x10 [ 415.097363][ T31] ? add_device_randomness+0xb7/0xf0 [ 415.102699][ T31] usb_new_device+0xd07/0x1a20 [ 415.107448][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 415.112504][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 415.117698][ T31] ? mark_held_locks+0x49/0x80 [ 415.122547][ T31] hub_event+0x2eb7/0x4fa0 [ 415.126970][ T31] ? __pfx_hub_event+0x10/0x10 [ 415.132043][ T31] ? debug_object_deactivate+0x1ec/0x3a0 [ 415.137675][ T31] ? rcu_is_watching+0x12/0xc0 [ 415.142429][ T31] process_one_work+0x9cc/0x1b70 [ 415.147405][ T31] ? __pfx_vmstat_update+0x10/0x10 [ 415.152497][ T31] ? __pfx_process_one_work+0x10/0x10 [ 415.157950][ T31] ? assign_work+0x1a0/0x250 [ 415.162515][ T31] worker_thread+0x6c8/0xf10 [ 415.167171][ T31] ? __pfx_worker_thread+0x10/0x10 [ 415.172273][ T31] kthread+0x3c2/0x780 [ 415.176364][ T31] ? __pfx_kthread+0x10/0x10 [ 415.180938][ T31] ? __pfx_kthread+0x10/0x10 [ 415.185772][ T31] ? __pfx_kthread+0x10/0x10 [ 415.190348][ T31] ? __pfx_kthread+0x10/0x10 [ 415.194913][ T31] ? rcu_is_watching+0x12/0xc0 [ 415.199681][ T31] ? __pfx_kthread+0x10/0x10 [ 415.204242][ T31] ret_from_fork+0x45/0x80 [ 415.208679][ T31] ? __pfx_kthread+0x10/0x10 [ 415.213243][ T31] ret_from_fork_asm+0x1a/0x30 [ 415.218047][ T31] [ 415.221064][ T31] INFO: task kdevtmpfs:26 blocked for more than 143 seconds. [ 415.229687][ T31] Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 [ 415.237290][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 415.245987][ T31] task:kdevtmpfs state:D stack:25688 pid:26 tgid:26 ppid:2 task_flags:0x208140 flags:0x00004000 [ 415.257941][ T31] Call Trace: [ 415.261230][ T31] [ 415.264148][ T31] __schedule+0x116f/0x5de0 [ 415.268630][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 415.273653][ T31] ? __pfx___schedule+0x10/0x10 [ 415.278484][ T31] ? find_held_lock+0x2b/0x80 [ 415.283194][ T31] ? schedule+0x2d7/0x3a0 [ 415.287515][ T31] schedule+0xe7/0x3a0 [ 415.291558][ T31] schedule_timeout+0x257/0x290 [ 415.296438][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 415.301789][ T31] ? mark_held_locks+0x49/0x80 [ 415.306694][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 415.311871][ T31] __wait_for_common+0x2fc/0x4e0 [ 415.316902][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 415.322275][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 415.327748][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 415.332932][ T31] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 415.338774][ T31] ? check_flush_dependency.part.0+0x114/0x340 [ 415.344915][ T31] __flush_workqueue+0x3e2/0x1230 [ 415.349955][ T31] ? rcu_is_watching+0x12/0xc0 [ 415.354705][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 415.360191][ T31] ? __mutex_lock+0x1ca/0xb90 [ 415.364868][ T31] md_alloc+0x30/0x1080 [ 415.369036][ T31] md_probe+0x6e/0xd0 [ 415.372992][ T31] ? __pfx_md_probe+0x10/0x10 [ 415.377644][ T31] blk_probe_dev+0x116/0x1a0 [ 415.382269][ T31] blk_request_module+0x16/0xb0 [ 415.387094][ T31] blkdev_get_no_open+0x7a/0xe0 [ 415.392021][ T31] bdev_statx+0x98/0x5c0 [ 415.396239][ T31] vfs_getattr_nosec+0x38d/0x430 [ 415.401226][ T31] ? __pfx_shmem_getattr+0x10/0x10 [ 415.406327][ T31] vfs_getattr+0x4a/0x60 [ 415.410591][ T31] handle_remove+0x12e/0x6f0 [ 415.415186][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 415.420387][ T31] ? __pfx_handle_remove+0x10/0x10 [ 415.425680][ T31] ? trace_sched_exit_tp+0xde/0x130 [ 415.430864][ T31] ? __schedule+0x1186/0x5de0 [ 415.435548][ T31] ? __lock_acquire+0xaa4/0x1ba0 [ 415.440465][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 415.445566][ T31] ? find_held_lock+0x2b/0x80 [ 415.450237][ T31] ? devtmpfs_work_loop+0xe1/0x900 [ 415.455353][ T31] devtmpfs_work_loop+0x350/0x900 [ 415.460372][ T31] ? __pfx_devtmpfs_work_loop+0x10/0x10 [ 415.465956][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 415.471738][ T31] ? try_to_wake_up+0x157/0x1680 [ 415.476725][ T31] ? rcu_is_watching+0x12/0xc0 [ 415.481481][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 415.487328][ T31] ? __pfx_devtmpfsd+0x10/0x10 [ 415.492069][ T31] devtmpfsd+0x4c/0x50 [ 415.496167][ T31] kthread+0x3c2/0x780 [ 415.500228][ T31] ? __pfx_kthread+0x10/0x10 [ 415.504792][ T31] ? __pfx_kthread+0x10/0x10 [ 415.509459][ T31] ? __pfx_kthread+0x10/0x10 [ 415.514023][ T31] ? __pfx_kthread+0x10/0x10 [ 415.518609][ T31] ? rcu_is_watching+0x12/0xc0 [ 415.523352][ T31] ? __pfx_kthread+0x10/0x10 [ 415.528000][ T31] ret_from_fork+0x45/0x80 [ 415.532406][ T31] ? __pfx_kthread+0x10/0x10 [ 415.536967][ T31] ret_from_fork_asm+0x1a/0x30 [ 415.541916][ T31] [ 415.544933][ T31] INFO: task kworker/u8:4:76 blocked for more than 143 seconds. [ 415.553007][ T31] Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 [ 415.561063][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 415.569723][ T31] task:kworker/u8:4 state:D stack:23512 pid:76 tgid:76 ppid:2 task_flags:0x4288060 flags:0x00004000 [ 415.581803][ T31] Workqueue: netns cleanup_net [ 415.586565][ T31] Call Trace: [ 415.589817][ T31] [ 415.592768][ T31] __schedule+0x116f/0x5de0 [ 415.597523][ T31] ? find_held_lock+0x2b/0x80 [ 415.602190][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 415.607180][ T31] ? __pfx___schedule+0x10/0x10 [ 415.612023][ T31] ? find_held_lock+0x2b/0x80 [ 415.616703][ T31] ? schedule+0x2d7/0x3a0 [ 415.621008][ T31] schedule+0xe7/0x3a0 [ 415.625239][ T31] schedule_timeout+0x257/0x290 [ 415.630080][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 415.635460][ T31] ? mark_held_locks+0x49/0x80 [ 415.640196][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 415.645471][ T31] __wait_for_common+0x2fc/0x4e0 [ 415.650409][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 415.655999][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 415.661456][ T31] ? devtmpfs_submit_req+0x94/0x100 [ 415.666697][ T31] devtmpfs_submit_req+0xa8/0x100 [ 415.671701][ T31] devtmpfs_delete_node+0xf6/0x160 [ 415.676805][ T31] ? __pfx_devtmpfs_delete_node+0x10/0x10 [ 415.682536][ T31] ? kobject_put+0xab/0x5a0 [ 415.687017][ T31] ? __pfx_klist_children_put+0x10/0x10 [ 415.692601][ T31] ? klist_children_put+0x44/0x60 [ 415.697601][ T31] ? klist_put+0xf9/0x1b0 [ 415.702022][ T31] device_del+0x734/0x9f0 [ 415.706354][ T31] ? __pfx_device_del+0x10/0x10 [ 415.711315][ T31] ? find_held_lock+0x2b/0x80 [ 415.715995][ T31] device_unregister+0x1d/0xc0 [ 415.720777][ T31] device_destroy+0x99/0xe0 [ 415.725273][ T31] ? __pfx_device_destroy+0x10/0x10 [ 415.730461][ T31] ? kernfs_remove_by_name_ns+0x9f/0x110 [ 415.736149][ T31] macvtap_device_event+0x288/0x3e0 [ 415.741482][ T31] ? __pfx_macvtap_device_event+0x10/0x10 [ 415.747199][ T31] ? bond_netdev_event+0xe7/0xd30 [ 415.752281][ T31] notifier_call_chain+0xb9/0x410 [ 415.757316][ T31] ? __pfx_macvtap_device_event+0x10/0x10 [ 415.763073][ T31] call_netdevice_notifiers_info+0xbe/0x140 [ 415.768962][ T31] unregister_netdevice_many_notify+0xf9a/0x26f0 [ 415.775460][ T31] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 415.782206][ T31] ? unregister_netdevice_queue+0x22e/0x3f0 [ 415.788118][ T31] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 415.794343][ T31] ? batadv_meshif_destroy_vlan+0xdf/0x160 [ 415.800191][ T31] default_device_exit_batch+0x853/0xaf0 [ 415.805846][ T31] ? __pfx_default_device_exit_batch+0x10/0x10 [ 415.811994][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 415.819361][ T31] ? __pfx___might_resched+0x10/0x10 [ 415.824635][ T31] ? __pfx_cfg802154_pernet_exit+0x10/0x10 [ 415.830509][ T31] ? __pfx_default_device_exit_batch+0x10/0x10 [ 415.836645][ T31] ops_exit_list+0x128/0x180 [ 415.841279][ T31] cleanup_net+0x5c1/0xb30 [ 415.845689][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 415.850650][ T31] ? rcu_is_watching+0x12/0xc0 [ 415.855409][ T31] process_one_work+0x9cc/0x1b70 [ 415.860550][ T31] ? __pfx_process_one_work+0x10/0x10 [ 415.865923][ T31] ? assign_work+0x1a0/0x250 [ 415.870506][ T31] worker_thread+0x6c8/0xf10 [ 415.875075][ T31] ? __kthread_parkme+0x19e/0x250 [ 415.880080][ T31] ? __pfx_worker_thread+0x10/0x10 [ 415.885235][ T31] kthread+0x3c2/0x780 [ 415.889288][ T31] ? __pfx_kthread+0x10/0x10 [ 415.894113][ T31] ? __pfx_kthread+0x10/0x10 [ 415.898691][ T31] ? __pfx_kthread+0x10/0x10 [ 415.903360][ T31] ? __pfx_kthread+0x10/0x10 [ 415.907940][ T31] ? rcu_is_watching+0x12/0xc0 [ 415.912729][ T31] ? __pfx_kthread+0x10/0x10 [ 415.917306][ T31] ret_from_fork+0x45/0x80 [ 415.921694][ T31] ? __pfx_kthread+0x10/0x10 [ 415.926334][ T31] ret_from_fork_asm+0x1a/0x30 [ 415.931087][ T31] [ 415.934181][ T31] INFO: task dhcpcd:5491 blocked for more than 144 seconds. [ 415.941447][ T31] Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 [ 415.951422][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 415.960095][ T31] task:dhcpcd state:D stack:23144 pid:5491 tgid:5491 ppid:5490 task_flags:0x400140 flags:0x00000002 [ 415.972025][ T31] Call Trace: [ 415.975280][ T31] [ 415.978285][ T31] __schedule+0x116f/0x5de0 [ 415.982771][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 415.987788][ T31] ? __pfx___schedule+0x10/0x10 [ 415.992634][ T31] ? find_held_lock+0x2b/0x80 [ 415.997293][ T31] ? schedule+0x2d7/0x3a0 [ 416.001617][ T31] schedule+0xe7/0x3a0 [ 416.005660][ T31] schedule_preempt_disabled+0x13/0x30 [ 416.011278][ T31] __mutex_lock+0x6c7/0xb90 [ 416.015760][ T31] ? cred_has_capability.isra.0+0x193/0x2f0 [ 416.021683][ T31] ? devinet_ioctl+0x26d/0x1f50 [ 416.026529][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 416.031651][ T31] ? bpf_lsm_capable+0x9/0x10 [ 416.036308][ T31] ? security_capable+0x7e/0x260 [ 416.041261][ T31] ? devinet_ioctl+0x26d/0x1f50 [ 416.046102][ T31] devinet_ioctl+0x26d/0x1f50 [ 416.050763][ T31] ? __pfx_devinet_ioctl+0x10/0x10 [ 416.056015][ T31] ? _copy_from_user+0x59/0xd0 [ 416.060767][ T31] inet_ioctl+0x3a7/0x3f0 [ 416.065123][ T31] ? __pfx_inet_ioctl+0x10/0x10 [ 416.069965][ T31] ? tomoyo_path_number_perm+0x18d/0x580 [ 416.075661][ T31] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 416.081557][ T31] sock_do_ioctl+0x115/0x280 [ 416.086183][ T31] ? __pfx_sock_do_ioctl+0x10/0x10 [ 416.091300][ T31] ? ioctl_has_perm.constprop.0.isra.0+0x2f4/0x450 [ 416.097896][ T31] ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450 [ 416.104401][ T31] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 416.111257][ T31] sock_ioctl+0x227/0x6b0 [ 416.115647][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 416.120496][ T31] ? hook_file_ioctl_common+0x145/0x410 [ 416.126033][ T31] ? selinux_file_ioctl+0x180/0x270 [ 416.131475][ T31] ? selinux_file_ioctl+0xb4/0x270 [ 416.136571][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 416.141464][ T31] __x64_sys_ioctl+0x190/0x200 [ 416.146209][ T31] do_syscall_64+0xcd/0x260 [ 416.150708][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.156576][ T31] RIP: 0033:0x7ffb0313ad49 [ 416.161024][ T31] RSP: 002b:00007ffdb89d7fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 416.169435][ T31] RAX: ffffffffffffffda RBX: 00007ffb0306c6c0 RCX: 00007ffb0313ad49 [ 416.177392][ T31] RDX: 00007ffdb89e81c8 RSI: 0000000000008914 RDI: 0000000000000016 [ 416.185452][ T31] RBP: 00007ffdb89f8388 R08: 00007ffdb89e8188 R09: 00007ffdb89e8138 [ 416.193475][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 416.201521][ T31] R13: 00007ffdb89e81c8 R14: 0000000000000028 R15: 0000000000008914 [ 416.209510][ T31] [ 416.212633][ T31] INFO: task kworker/1:6:5907 blocked for more than 144 seconds. [ 416.220329][ T31] Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 [ 416.227982][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 416.236737][ T31] task:kworker/1:6 state:D stack:21400 pid:5907 tgid:5907 ppid:2 task_flags:0x4288060 flags:0x00004000 [ 416.248921][ T31] Workqueue: md_misc mddev_delayed_delete [ 416.254668][ T31] Call Trace: [ 416.257942][ T31] [ 416.260864][ T31] __schedule+0x116f/0x5de0 [ 416.265432][ T31] ? find_held_lock+0x2b/0x80 [ 416.270108][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 416.275950][ T31] ? __pfx___schedule+0x10/0x10 [ 416.280786][ T31] ? find_held_lock+0x2b/0x80 [ 416.285438][ T31] ? schedule+0x2d7/0x3a0 [ 416.289772][ T31] schedule+0xe7/0x3a0 [ 416.293819][ T31] schedule_timeout+0x257/0x290 [ 416.298692][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 416.304042][ T31] ? mark_held_locks+0x49/0x80 [ 416.308845][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 416.314035][ T31] __wait_for_common+0x2fc/0x4e0 [ 416.319019][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 416.324383][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 416.329973][ T31] ? devtmpfs_submit_req+0x94/0x100 [ 416.335155][ T31] devtmpfs_submit_req+0xa8/0x100 [ 416.340237][ T31] devtmpfs_delete_node+0xf6/0x160 [ 416.345343][ T31] ? __pfx_devtmpfs_delete_node+0x10/0x10 [ 416.351066][ T31] ? __call_rcu_common.constprop.0+0x3e5/0x9f0 [ 416.357194][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 416.362598][ T31] ? kernfs_put+0x4e/0x60 [ 416.366909][ T31] ? sysfs_remove_group+0xc6/0x180 [ 416.372051][ T31] device_del+0x734/0x9f0 [ 416.376388][ T31] ? __pfx_device_del+0x10/0x10 [ 416.381218][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 416.386441][ T31] ? _raw_spin_unlock_irq+0x2e/0x50 [ 416.391624][ T31] del_gendisk+0x486/0xc40 [ 416.396032][ T31] ? __pfx_del_gendisk+0x10/0x10 [ 416.400943][ T31] ? kernfs_put.part.0+0x18b/0x630 [ 416.406133][ T31] md_kobj_release+0xb2/0x100 [ 416.410803][ T31] kobject_put+0x1e4/0x5a0 [ 416.415257][ T31] process_one_work+0x9cc/0x1b70 [ 416.420204][ T31] ? __pfx_disk_events_workfn+0x10/0x10 [ 416.425802][ T31] ? __pfx_process_one_work+0x10/0x10 [ 416.431170][ T31] ? assign_work+0x1a0/0x250 [ 416.435740][ T31] worker_thread+0x6c8/0xf10 [ 416.440338][ T31] ? __kthread_parkme+0x19e/0x250 [ 416.445349][ T31] ? __pfx_worker_thread+0x10/0x10 [ 416.450535][ T31] kthread+0x3c2/0x780 [ 416.454578][ T31] ? __pfx_kthread+0x10/0x10 [ 416.459187][ T31] ? __pfx_kthread+0x10/0x10 [ 416.463763][ T31] ? __pfx_kthread+0x10/0x10 [ 416.468381][ T31] ? __pfx_kthread+0x10/0x10 [ 416.472944][ T31] ? rcu_is_watching+0x12/0xc0 [ 416.477688][ T31] ? __pfx_kthread+0x10/0x10 [ 416.482427][ T31] ret_from_fork+0x45/0x80 [ 416.486819][ T31] ? __pfx_kthread+0x10/0x10 [ 416.491456][ T31] ret_from_fork_asm+0x1a/0x30 [ 416.496221][ T31] [ 416.499234][ T31] INFO: task kworker/1:7:5921 blocked for more than 144 seconds. [ 416.507058][ T31] Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 [ 416.514733][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 416.523409][ T31] task:kworker/1:7 state:D stack:21048 pid:5921 tgid:5921 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 416.535423][ T31] Workqueue: usb_hub_wq hub_event [ 416.540425][ T31] Call Trace: [ 416.543728][ T31] [ 416.546658][ T31] __schedule+0x116f/0x5de0 [ 416.551146][ T31] ? number+0x9aa/0xc70 [ 416.555370][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 416.560300][ T31] ? __pfx___schedule+0x10/0x10 [ 416.565272][ T31] ? find_held_lock+0x2b/0x80 [ 416.569926][ T31] ? schedule+0x2d7/0x3a0 [ 416.574241][ T31] schedule+0xe7/0x3a0 [ 416.578336][ T31] schedule_timeout+0x257/0x290 [ 416.583160][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 416.588541][ T31] ? mark_held_locks+0x49/0x80 [ 416.593275][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 416.598717][ T31] __wait_for_common+0x2fc/0x4e0 [ 416.603651][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 416.609038][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 416.614476][ T31] ? devtmpfs_submit_req+0x94/0x100 [ 416.619743][ T31] devtmpfs_submit_req+0xa8/0x100 [ 416.624764][ T31] devtmpfs_create_node+0x18a/0x230 [ 416.629998][ T31] ? __pfx_devtmpfs_create_node+0x10/0x10 [ 416.635713][ T31] ? up_write+0x1b2/0x520 [ 416.640103][ T31] ? kernfs_create_link+0x1bd/0x240 [ 416.645305][ T31] ? kernfs_put+0x35/0x60 [ 416.649637][ T31] ? sysfs_do_create_link_sd+0xbb/0x140 [ 416.655194][ T31] device_add+0x10bd/0x1a70 [ 416.659672][ T31] ? __pfx_device_add+0x10/0x10 [ 416.664547][ T31] ? add_device_randomness+0xb7/0xf0 [ 416.669807][ T31] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 416.675705][ T31] usb_new_device+0xd07/0x1a20 [ 416.680452][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 416.685557][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 416.690737][ T31] ? mark_held_locks+0x49/0x80 [ 416.695507][ T31] hub_event+0x2eb7/0x4fa0 [ 416.699915][ T31] ? __pfx_hub_event+0x10/0x10 [ 416.704722][ T31] ? debug_object_deactivate+0x1ec/0x3a0 [ 416.710355][ T31] ? rcu_is_watching+0x12/0xc0 [ 416.715359][ T31] process_one_work+0x9cc/0x1b70 [ 416.720293][ T31] ? __pfx_hcd_resume_work+0x10/0x10 [ 416.725633][ T31] ? __pfx_process_one_work+0x10/0x10 [ 416.731011][ T31] ? assign_work+0x1a0/0x250 [ 416.735621][ T31] worker_thread+0x6c8/0xf10 [ 416.740217][ T31] ? __kthread_parkme+0x19e/0x250 [ 416.745220][ T31] ? __pfx_worker_thread+0x10/0x10 [ 416.750355][ T31] kthread+0x3c2/0x780 [ 416.754398][ T31] ? __pfx_kthread+0x10/0x10 [ 416.759047][ T31] ? __pfx_kthread+0x10/0x10 [ 416.763622][ T31] ? __pfx_kthread+0x10/0x10 [ 416.768268][ T31] ? __pfx_kthread+0x10/0x10 [ 416.772857][ T31] ? rcu_is_watching+0x12/0xc0 [ 416.777602][ T31] ? __pfx_kthread+0x10/0x10 [ 416.782231][ T31] ret_from_fork+0x45/0x80 [ 416.786629][ T31] ? __pfx_kthread+0x10/0x10 [ 416.791255][ T31] ret_from_fork_asm+0x1a/0x30 [ 416.796018][ T31] [ 416.799042][ T31] INFO: task syz-executor:9765 blocked for more than 145 seconds. [ 416.806941][ T31] Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 [ 416.814583][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 416.823267][ T31] task:syz-executor state:D stack:24136 pid:9765 tgid:9765 ppid:1 task_flags:0x400140 flags:0x00004004 [ 416.835372][ T31] Call Trace: [ 416.838645][ T31] [ 416.841563][ T31] __schedule+0x116f/0x5de0 [ 416.846085][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 416.851002][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 416.855968][ T31] ? __pfx___schedule+0x10/0x10 [ 416.860811][ T31] ? find_held_lock+0x2b/0x80 [ 416.865517][ T31] ? schedule+0x2d7/0x3a0 [ 416.869841][ T31] schedule+0xe7/0x3a0 [ 416.873892][ T31] schedule_preempt_disabled+0x13/0x30 [ 416.879377][ T31] __mutex_lock+0x6c7/0xb90 [ 416.883861][ T31] ? rtnl_newlink+0x600/0x2000 [ 416.888634][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 416.893636][ T31] ? cap_capable+0xb3/0x250 [ 416.898174][ T31] ? ns_capable+0xd7/0x110 [ 416.902570][ T31] ? rtnl_newlink+0x600/0x2000 [ 416.907360][ T31] rtnl_newlink+0x600/0x2000 [ 416.911964][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 416.917001][ T31] ? find_held_lock+0x2b/0x80 [ 416.921872][ T31] ? avc_has_perm_noaudit+0x117/0x3b0 [ 416.927225][ T31] ? avc_has_perm_noaudit+0x149/0x3b0 [ 416.934478][ T31] ? find_held_lock+0x2b/0x80 [ 416.939283][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 416.944421][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 416.949739][ T31] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 416.954855][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 416.959873][ T31] rtnetlink_rcv_msg+0x95b/0xe90 [ 416.964971][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 416.970431][ T31] ? __pfx_avc_has_perm+0x10/0x10 [ 416.975551][ T31] netlink_rcv_skb+0x16a/0x440 [ 416.980314][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 416.985780][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 416.991400][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 416.996679][ T31] netlink_unicast+0x53a/0x7f0 [ 417.001424][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 417.006727][ T31] netlink_sendmsg+0x8d1/0xdd0 [ 417.011496][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 417.016838][ T31] __sys_sendto+0x495/0x510 [ 417.021341][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 417.026504][ T31] ? __pfx_fput_close_sync+0x10/0x10 [ 417.031801][ T31] __x64_sys_sendto+0xe0/0x1c0 [ 417.036605][ T31] ? do_syscall_64+0x91/0x260 [ 417.041275][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 417.046477][ T31] do_syscall_64+0xcd/0x260 [ 417.050977][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.056875][ T31] RIP: 0033:0x7fd2a2d8fffc [ 417.061285][ T31] RSP: 002b:00007ffd832c1720 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 417.069723][ T31] RAX: ffffffffffffffda RBX: 00007fd2a3ae4620 RCX: 00007fd2a2d8fffc [ 417.077718][ T31] RDX: 000000000000004c RSI: 00007fd2a3ae4670 RDI: 0000000000000003 [ 417.085698][ T31] RBP: 0000000000000000 R08: 00007ffd832c1774 R09: 000000000000000c [ 417.093712][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 417.101735][ T31] R13: 0000000000000000 R14: 00007fd2a3ae4670 R15: 0000000000000000 [ 417.109741][ T31] [ 417.112772][ T31] INFO: task syz-executor:9769 blocked for more than 145 seconds. [ 417.120564][ T31] Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 [ 417.128163][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 417.136815][ T31] task:syz-executor state:D stack:24312 pid:9769 tgid:9769 ppid:1 task_flags:0x400140 flags:0x00000004 [ 417.148809][ T31] Call Trace: [ 417.152087][ T31] [ 417.155048][ T31] __schedule+0x116f/0x5de0 [ 417.159564][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 417.164513][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 417.169445][ T31] ? __pfx___schedule+0x10/0x10 [ 417.174326][ T31] ? find_held_lock+0x2b/0x80 [ 417.179000][ T31] ? schedule+0x2d7/0x3a0 [ 417.183308][ T31] schedule+0xe7/0x3a0 [ 417.187774][ T31] schedule_preempt_disabled+0x13/0x30 [ 417.193234][ T31] __mutex_lock+0x6c7/0xb90 [ 417.197769][ T31] ? rtnl_newlink+0x600/0x2000 [ 417.202529][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 417.207568][ T31] ? cap_capable+0xb3/0x250 [ 417.212066][ T31] ? ns_capable+0xd7/0x110 [ 417.216474][ T31] ? rtnl_newlink+0x600/0x2000 [ 417.221243][ T31] rtnl_newlink+0x600/0x2000 [ 417.225819][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 417.230838][ T31] ? find_held_lock+0x2b/0x80 [ 417.235493][ T31] ? avc_has_perm_noaudit+0x117/0x3b0 [ 417.240859][ T31] ? avc_has_perm_noaudit+0x149/0x3b0 [ 417.246216][ T31] ? find_held_lock+0x2b/0x80 [ 417.250880][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 417.255886][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 417.260927][ T31] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 417.266043][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 417.271163][ T31] rtnetlink_rcv_msg+0x95b/0xe90 [ 417.276081][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 417.281544][ T31] ? __pfx_avc_has_perm+0x10/0x10 [ 417.286563][ T31] netlink_rcv_skb+0x16a/0x440 [ 417.291323][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 417.296798][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 417.302095][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 417.307392][ T31] netlink_unicast+0x53a/0x7f0 [ 417.312144][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 417.317475][ T31] netlink_sendmsg+0x8d1/0xdd0 [ 417.322230][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 417.327518][ T31] __sys_sendto+0x495/0x510 [ 417.332012][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 417.337031][ T31] ? __pfx_task_mm_cid_work+0x10/0x10 [ 417.342384][ T31] ? xfd_validate_state+0x5d/0x180 [ 417.347499][ T31] ? rcu_is_watching+0x12/0xc0 [ 417.352257][ T31] __x64_sys_sendto+0xe0/0x1c0 [ 417.357069][ T31] ? do_syscall_64+0x91/0x260 [ 417.361741][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 417.366947][ T31] do_syscall_64+0xcd/0x260 [ 417.371447][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.377341][ T31] RIP: 0033:0x7f0624d8fffc [ 417.381757][ T31] RSP: 002b:00007ffd14473760 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 417.390200][ T31] RAX: ffffffffffffffda RBX: 00007f0625ae4620 RCX: 00007f0624d8fffc [ 417.398167][ T31] RDX: 0000000000000044 RSI: 00007f0625ae4670 RDI: 0000000000000003 [ 417.406128][ T31] RBP: 0000000000000000 R08: 00007ffd144737b4 R09: 000000000000000c [ 417.414101][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 417.422073][ T31] R13: 0000000000000000 R14: 00007f0625ae4670 R15: 0000000000000000 [ 417.430033][ T31] [ 417.433083][ T31] INFO: task kworker/u8:14:9804 blocked for more than 145 seconds. [ 417.440966][ T31] Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 [ 417.448650][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 417.457325][ T31] task:kworker/u8:14 state:D stack:26952 pid:9804 tgid:9804 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 417.469340][ T31] Workqueue: events_unbound linkwatch_event [ 417.475247][ T31] Call Trace: [ 417.478519][ T31] [ 417.481437][ T31] __schedule+0x116f/0x5de0 [ 417.485956][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 417.490874][ T31] ? __pfx___schedule+0x10/0x10 [ 417.495732][ T31] ? find_held_lock+0x2b/0x80 [ 417.500415][ T31] ? schedule+0x2d7/0x3a0 [ 417.504742][ T31] schedule+0xe7/0x3a0 [ 417.508805][ T31] schedule_preempt_disabled+0x13/0x30 [ 417.514239][ T31] __mutex_lock+0x6c7/0xb90 [ 417.518733][ T31] ? linkwatch_event+0x51/0xc0 [ 417.523479][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 417.528638][ T31] ? __lock_acquire+0xaa4/0x1ba0 [ 417.533576][ T31] ? linkwatch_event+0x51/0xc0 [ 417.538346][ T31] ? rtnl_lock+0x9/0x20 [ 417.542508][ T31] linkwatch_event+0x51/0xc0 [ 417.547091][ T31] ? __pfx_linkwatch_event+0x10/0x10 [ 417.552384][ T31] ? rcu_is_watching+0x12/0xc0 [ 417.557127][ T31] process_one_work+0x9cc/0x1b70 [ 417.562065][ T31] ? __pfx_process_one_work+0x10/0x10 [ 417.567428][ T31] ? assign_work+0x1a0/0x250 [ 417.572071][ T31] worker_thread+0x6c8/0xf10 [ 417.576667][ T31] ? __kthread_parkme+0x19e/0x250 [ 417.581694][ T31] ? __pfx_worker_thread+0x10/0x10 [ 417.586791][ T31] kthread+0x3c2/0x780 [ 417.590858][ T31] ? __pfx_kthread+0x10/0x10 [ 417.595439][ T31] ? __pfx_kthread+0x10/0x10 [ 417.600002][ T31] ? __pfx_kthread+0x10/0x10 [ 417.604579][ T31] ? __pfx_kthread+0x10/0x10 [ 417.609144][ T31] ? rcu_is_watching+0x12/0xc0 [ 417.614010][ T31] ? __pfx_kthread+0x10/0x10 [ 417.618605][ T31] ret_from_fork+0x45/0x80 [ 417.623039][ T31] ? __pfx_kthread+0x10/0x10 [ 417.627619][ T31] ret_from_fork_asm+0x1a/0x30 [ 417.632380][ T31] [ 417.635425][ T31] INFO: task kworker/u8:19:9810 blocked for more than 145 seconds. [ 417.643297][ T31] Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 [ 417.650928][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 417.659592][ T31] task:kworker/u8:19 state:D stack:26952 pid:9810 tgid:9810 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 417.671583][ T31] Workqueue: ipv6_addrconf addrconf_verify_work [ 417.677845][ T31] Call Trace: [ 417.681110][ T31] [ 417.684022][ T31] __schedule+0x116f/0x5de0 [ 417.688537][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 417.693465][ T31] ? __pfx___schedule+0x10/0x10 [ 417.698323][ T31] ? find_held_lock+0x2b/0x80 [ 417.702995][ T31] ? schedule+0x2d7/0x3a0 [ 417.707312][ T31] schedule+0xe7/0x3a0 [ 417.711389][ T31] schedule_preempt_disabled+0x13/0x30 [ 417.716838][ T31] __mutex_lock+0x6c7/0xb90 [ 417.721334][ T31] ? addrconf_verify_work+0x12/0x30 [ 417.726511][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 417.731546][ T31] ? debug_object_deactivate+0x1ec/0x3a0 [ 417.737192][ T31] ? addrconf_verify_work+0x12/0x30 [ 417.742401][ T31] addrconf_verify_work+0x12/0x30 [ 417.747428][ T31] process_one_work+0x9cc/0x1b70 [ 417.752376][ T31] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 417.759055][ T31] ? __pfx_process_one_work+0x10/0x10 [ 417.764432][ T31] ? assign_work+0x1a0/0x250 [ 417.768999][ T31] worker_thread+0x6c8/0xf10 [ 417.773599][ T31] ? __pfx_worker_thread+0x10/0x10 [ 417.778715][ T31] kthread+0x3c2/0x780 [ 417.782767][ T31] ? __pfx_kthread+0x10/0x10 [ 417.787502][ T31] ? __pfx_kthread+0x10/0x10 [ 417.792094][ T31] ? __pfx_kthread+0x10/0x10 [ 417.796689][ T31] ? __pfx_kthread+0x10/0x10 [ 417.801260][ T31] ? rcu_is_watching+0x12/0xc0 [ 417.806026][ T31] ? __pfx_kthread+0x10/0x10 [ 417.810600][ T31] ret_from_fork+0x45/0x80 [ 417.815002][ T31] ? __pfx_kthread+0x10/0x10 [ 417.819584][ T31] ret_from_fork_asm+0x1a/0x30 [ 417.824335][ T31] [ 417.827342][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 417.836338][ T31] INFO: task syz.0.1105:9879 blocked for more than 146 seconds. [ 417.843975][ T31] Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 [ 417.851622][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 417.860286][ T31] task:syz.0.1105 state:D stack:28536 pid:9879 tgid:9876 ppid:5830 task_flags:0x400140 flags:0x00000004 [ 417.872219][ T31] Call Trace: [ 417.875488][ T31] [ 417.878415][ T31] __schedule+0x116f/0x5de0 [ 417.882921][ T31] ? __pfx___schedule+0x10/0x10 [ 417.887764][ T31] ? find_held_lock+0x2b/0x80 [ 417.892434][ T31] ? schedule+0x2d7/0x3a0 [ 417.896751][ T31] schedule+0xe7/0x3a0 [ 417.900831][ T31] schedule_preempt_disabled+0x13/0x30 [ 417.906295][ T31] __mutex_lock+0x6c7/0xb90 [ 417.910811][ T31] ? wext_handle_ioctl+0x20b/0x2a0 [ 417.915956][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 417.920979][ T31] ? dev_load+0x8e/0x240 [ 417.925215][ T31] ? wext_handle_ioctl+0x20b/0x2a0 [ 417.930303][ T31] ? rtnl_lock+0x9/0x20 [ 417.934459][ T31] wext_handle_ioctl+0x20b/0x2a0 [ 417.939392][ T31] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 417.944843][ T31] ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450 [ 417.951344][ T31] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 417.958285][ T31] sock_ioctl+0x3a1/0x6b0 [ 417.962595][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 417.967439][ T31] ? hook_file_ioctl_common+0x145/0x410 [ 417.972964][ T31] ? selinux_file_ioctl+0x180/0x270 [ 417.978164][ T31] ? selinux_file_ioctl+0xb4/0x270 [ 417.983274][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 417.988119][ T31] __x64_sys_ioctl+0x190/0x200 [ 417.992862][ T31] do_syscall_64+0xcd/0x260 [ 417.997391][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.003274][ T31] RIP: 0033:0x7fd75978e169 [ 418.007687][ T31] RSP: 002b:00007fd75a5e5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 418.016094][ T31] RAX: ffffffffffffffda RBX: 00007fd7599b6160 RCX: 00007fd75978e169 [ 418.024075][ T31] RDX: 0000200000000040 RSI: 0000000000008b04 RDI: 0000000000000007 [ 418.032063][ T31] RBP: 00007fd759810a68 R08: 0000000000000000 R09: 0000000000000000 [ 418.040444][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.048418][ T31] R13: 0000000000000000 R14: 00007fd7599b6160 R15: 00007ffde6438698 [ 418.056490][ T31] [ 418.059506][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 418.068702][ T31] INFO: task syz.2.1107:9883 blocked for more than 146 seconds. [ 418.076382][ T31] Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 [ 418.084101][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 418.092761][ T31] task:syz.2.1107 state:D stack:28408 pid:9883 tgid:9882 ppid:5823 task_flags:0x400140 flags:0x00000004 [ 418.104837][ T31] Call Trace: [ 418.108095][ T31] [ 418.111006][ T31] __schedule+0x116f/0x5de0 [ 418.115567][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 418.120496][ T31] ? __pfx___schedule+0x10/0x10 [ 418.125634][ T31] ? find_held_lock+0x2b/0x80 [ 418.130316][ T31] ? schedule+0x2d7/0x3a0 [ 418.134625][ T31] schedule+0xe7/0x3a0 [ 418.138747][ T31] schedule_preempt_disabled+0x13/0x30 [ 418.144211][ T31] __mutex_lock+0x6c7/0xb90 [ 418.148764][ T31] ? rtnetlink_rcv_msg+0x371/0xe90 [ 418.153856][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 418.158963][ T31] ? find_held_lock+0x2b/0x80 [ 418.163647][ T31] ? rtnetlink_rcv_msg+0x371/0xe90 [ 418.168858][ T31] rtnetlink_rcv_msg+0x371/0xe90 [ 418.173810][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 418.179317][ T31] netlink_rcv_skb+0x16a/0x440 [ 418.184076][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 418.189603][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 418.194987][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 418.201853][ T31] netlink_unicast+0x53a/0x7f0 [ 418.206613][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 418.212033][ T31] netlink_sendmsg+0x8d1/0xdd0 [ 418.216797][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 418.222165][ T31] ____sys_sendmsg+0xa95/0xc70 [ 418.226921][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 418.232496][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 418.237786][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 418.243837][ T31] ___sys_sendmsg+0x134/0x1d0 [ 418.248526][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 418.253814][ T31] __sys_sendmsg+0x16d/0x220 [ 418.258384][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 418.263468][ T31] ? __x64_sys_futex+0x1e0/0x4c0 [ 418.268421][ T31] do_syscall_64+0xcd/0x260 [ 418.272905][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.278899][ T31] RIP: 0033:0x7fcff958e169 [ 418.283315][ T31] RSP: 002b:00007fcffa486038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 418.291728][ T31] RAX: ffffffffffffffda RBX: 00007fcff97b5fa0 RCX: 00007fcff958e169 [ 418.300363][ T31] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 000000000000000a [ 418.308390][ T31] RBP: 00007fcff9610a68 R08: 0000000000000000 R09: 0000000000000000 [ 418.316348][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.324358][ T31] R13: 0000000000000000 R14: 00007fcff97b5fa0 R15: 00007fff9ea95328 [ 418.332360][ T31] [ 418.335379][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 418.344543][ T31] INFO: task syz.3.1109:9888 blocked for more than 146 seconds. [ 418.352228][ T31] Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 [ 418.359831][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 418.368670][ T31] task:syz.3.1109 state:D stack:26776 pid:9888 tgid:9887 ppid:5828 task_flags:0x400140 flags:0x00000004 [ 418.380578][ T31] Call Trace: [ 418.383919][ T31] [ 418.386844][ T31] __schedule+0x116f/0x5de0 [ 418.391335][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 418.396276][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 418.401190][ T31] ? __pfx___schedule+0x10/0x10 [ 418.406130][ T31] ? find_held_lock+0x2b/0x80 [ 418.410801][ T31] ? schedule+0x2d7/0x3a0 [ 418.415162][ T31] schedule+0xe7/0x3a0 [ 418.419225][ T31] schedule_preempt_disabled+0x13/0x30 [ 418.424744][ T31] __mutex_lock+0x6c7/0xb90 [ 418.429260][ T31] ? rtnl_newlink+0x600/0x2000 [ 418.434003][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 418.439042][ T31] ? cap_capable+0xb3/0x250 [ 418.443526][ T31] ? ns_capable+0xd7/0x110 [ 418.447979][ T31] ? netlink_ns_capable+0xfa/0x130 [ 418.453073][ T31] ? rtnl_newlink+0x600/0x2000 [ 418.457991][ T31] rtnl_newlink+0x600/0x2000 [ 418.462582][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 418.467676][ T31] ? find_held_lock+0x2b/0x80 [ 418.472360][ T31] ? avc_has_perm_noaudit+0x117/0x3b0 [ 418.477746][ T31] ? avc_has_perm_noaudit+0x149/0x3b0 [ 418.483233][ T31] ? find_held_lock+0x2b/0x80 [ 418.487907][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 418.493815][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 418.498845][ T31] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 418.503970][ T31] ? __pfx_rtnl_newlink+0x10/0x10 [ 418.508995][ T31] rtnetlink_rcv_msg+0x95b/0xe90 [ 418.513997][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 418.519456][ T31] netlink_rcv_skb+0x16a/0x440 [ 418.524220][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 418.529658][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 418.535181][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 418.540463][ T31] netlink_unicast+0x53a/0x7f0 [ 418.545223][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 418.550488][ T31] netlink_sendmsg+0x8d1/0xdd0 [ 418.555325][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 418.560612][ T31] ____sys_sendmsg+0xa95/0xc70 [ 418.565439][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 418.570905][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 418.576235][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 418.582053][ T31] ___sys_sendmsg+0x134/0x1d0 [ 418.586765][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 418.591970][ T31] __sys_sendmsg+0x16d/0x220 [ 418.596627][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 418.601737][ T31] ? __x64_sys_futex+0x1e0/0x4c0 [ 418.606738][ T31] ? rcu_is_watching+0x12/0xc0 [ 418.611513][ T31] do_syscall_64+0xcd/0x260 [ 418.616020][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.621961][ T31] RIP: 0033:0x7f05b078e169 [ 418.626352][ T31] RSP: 002b:00007f05b1558038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 418.634766][ T31] RAX: ffffffffffffffda RBX: 00007f05b09b5fa0 RCX: 00007f05b078e169 [ 418.642872][ T31] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 418.650835][ T31] RBP: 00007f05b0810a68 R08: 0000000000000000 R09: 0000000000000000 [ 418.658783][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.666818][ T31] R13: 0000000000000000 R14: 00007f05b09b5fa0 R15: 00007ffeb27911b8 [ 418.674815][ T31] [ 418.677808][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 418.686853][ T31] INFO: task syz.3.1109:9889 blocked for more than 146 seconds. [ 418.694472][ T31] Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 [ 418.702087][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 418.710804][ T31] task:syz.3.1109 state:D stack:28408 pid:9889 tgid:9887 ppid:5828 task_flags:0x400140 flags:0x00000004 [ 418.722704][ T31] Call Trace: [ 418.726077][ T31] [ 418.728999][ T31] __schedule+0x116f/0x5de0 [ 418.733493][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 418.738449][ T31] ? __pfx___schedule+0x10/0x10 [ 418.743295][ T31] ? find_held_lock+0x2b/0x80 [ 418.748005][ T31] ? schedule+0x2d7/0x3a0 [ 418.752329][ T31] schedule+0xe7/0x3a0 [ 418.756418][ T31] schedule_preempt_disabled+0x13/0x30 [ 418.761881][ T31] __mutex_lock+0x6c7/0xb90 [ 418.766394][ T31] ? rtnetlink_rcv_msg+0x371/0xe90 [ 418.771553][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 418.776567][ T31] ? find_held_lock+0x2b/0x80 [ 418.781269][ T31] ? rtnetlink_rcv_msg+0x371/0xe90 [ 418.786378][ T31] rtnetlink_rcv_msg+0x371/0xe90 [ 418.791343][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 418.796787][ T31] netlink_rcv_skb+0x16a/0x440 [ 418.801548][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 418.806986][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 418.812410][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 418.817704][ T31] netlink_unicast+0x53a/0x7f0 [ 418.822555][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 418.827844][ T31] netlink_sendmsg+0x8d1/0xdd0 [ 418.832654][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 418.837940][ T31] ____sys_sendmsg+0xa95/0xc70 [ 418.842728][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 418.848184][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 418.853545][ T31] ? find_held_lock+0x2b/0x80 [ 418.858227][ T31] ? do_pte_missing+0x87c/0x3fb0 [ 418.863179][ T31] ___sys_sendmsg+0x134/0x1d0 [ 418.867850][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 418.873055][ T31] __sys_sendmsg+0x16d/0x220 [ 418.877689][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 418.882779][ T31] ? find_held_lock+0x2b/0x80 [ 418.887478][ T31] ? do_user_addr_fault+0x843/0x1370 [ 418.892771][ T31] do_syscall_64+0xcd/0x260 [ 418.897353][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.903238][ T31] RIP: 0033:0x7f05b078e169 [ 418.907642][ T31] RSP: 002b:00007f05b1537038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 418.916043][ T31] RAX: ffffffffffffffda RBX: 00007f05b09b6080 RCX: 00007f05b078e169 [ 418.924044][ T31] RDX: 0000000004000800 RSI: 00002000000001c0 RDI: 0000000000000005 [ 418.932026][ T31] RBP: 00007f05b0810a68 R08: 0000000000000000 R09: 0000000000000000 [ 418.940031][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.947994][ T31] R13: 0000000000000001 R14: 00007f05b09b6080 R15: 00007ffeb27911b8 [ 418.956001][ T31] [ 418.959022][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 418.968087][ T31] INFO: task syz.3.1109:9890 blocked for more than 147 seconds. [ 418.975714][ T31] Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 [ 418.983401][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 418.992074][ T31] task:syz.3.1109 state:D stack:28024 pid:9890 tgid:9887 ppid:5828 task_flags:0x400140 flags:0x00000004 [ 419.004040][ T31] Call Trace: [ 419.007294][ T31] [ 419.010203][ T31] __schedule+0x116f/0x5de0 [ 419.014709][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 419.019625][ T31] ? __pfx___schedule+0x10/0x10 [ 419.024544][ T31] ? find_held_lock+0x2b/0x80 [ 419.029215][ T31] ? schedule+0x2d7/0x3a0 [ 419.033540][ T31] schedule+0xe7/0x3a0 [ 419.037620][ T31] schedule_preempt_disabled+0x13/0x30 [ 419.043077][ T31] __mutex_lock+0x6c7/0xb90 [ 419.047631][ T31] ? rtnetlink_rcv_msg+0x371/0xe90 [ 419.052725][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 419.057747][ T31] ? find_held_lock+0x2b/0x80 [ 419.062404][ T31] ? rtnetlink_rcv_msg+0x371/0xe90 [ 419.067613][ T31] rtnetlink_rcv_msg+0x371/0xe90 [ 419.072551][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 419.078062][ T31] netlink_rcv_skb+0x16a/0x440 [ 419.082831][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 419.088399][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 419.093690][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 419.098985][ T31] netlink_unicast+0x53a/0x7f0 [ 419.103746][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 419.109152][ T31] netlink_sendmsg+0x8d1/0xdd0 [ 419.113928][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.119213][ T31] ____sys_sendmsg+0xa95/0xc70 [ 419.124001][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 419.129457][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 419.134813][ T31] ? find_held_lock+0x2b/0x80 [ 419.139479][ T31] ? do_pte_missing+0x87c/0x3fb0 [ 419.144432][ T31] ___sys_sendmsg+0x134/0x1d0 [ 419.149087][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 419.154657][ T31] __sys_sendmsg+0x16d/0x220 [ 419.159347][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 419.164468][ T31] ? find_held_lock+0x2b/0x80 [ 419.169157][ T31] ? do_user_addr_fault+0x843/0x1370 [ 419.174511][ T31] do_syscall_64+0xcd/0x260 [ 419.179022][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.184937][ T31] RIP: 0033:0x7f05b078e169 [ 419.189333][ T31] RSP: 002b:00007f05b1516038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 419.197779][ T31] RAX: ffffffffffffffda RBX: 00007f05b09b6160 RCX: 00007f05b078e169 [ 419.205754][ T31] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 419.213712][ T31] RBP: 00007f05b0810a68 R08: 0000000000000000 R09: 0000000000000000 [ 419.221716][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 419.229681][ T31] R13: 0000000000000001 R14: 00007f05b09b6160 R15: 00007ffeb27911b8 [ 419.237734][ T31] [ 419.240754][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 419.249810][ T31] INFO: task syz.3.1109:9891 blocked for more than 147 seconds. [ 419.257423][ T31] Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 [ 419.265092][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 419.273763][ T31] task:syz.3.1109 state:D stack:26456 pid:9891 tgid:9887 ppid:5828 task_flags:0x400140 flags:0x00000004 [ 419.285691][ T31] Call Trace: [ 419.288946][ T31] [ 419.291888][ T31] __schedule+0x116f/0x5de0 [ 419.296395][ T31] ? _printk+0xc7/0x100 [ 419.300537][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 419.305517][ T31] ? __pfx___schedule+0x10/0x10 [ 419.310349][ T31] ? find_held_lock+0x2b/0x80 [ 419.315050][ T31] ? schedule+0x2d7/0x3a0 [ 419.319374][ T31] schedule+0xe7/0x3a0 [ 419.323522][ T31] schedule_preempt_disabled+0x13/0x30 [ 419.328992][ T31] __mutex_lock+0x6c7/0xb90 [ 419.333509][ T31] ? rtnl_dellink+0x277/0xa80 [ 419.338209][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 419.343246][ T31] ? __nla_parse+0x40/0x60 [ 419.347711][ T31] ? rtnl_dellink+0x277/0xa80 [ 419.352368][ T31] rtnl_dellink+0x277/0xa80 [ 419.356872][ T31] ? kasan_save_stack+0x33/0x60 [ 419.361695][ T31] ? kasan_save_track+0x14/0x30 [ 419.366589][ T31] ? kasan_save_free_info+0x3b/0x60 [ 419.371797][ T31] ? __kasan_slab_free+0x51/0x70 [ 419.376748][ T31] ? __pfx_rtnl_dellink+0x10/0x10 [ 419.381767][ T31] ? nlmon_xmit+0xa5/0xe0 [ 419.386077][ T31] ? dev_hard_start_xmit+0x93/0x740 [ 419.391318][ T31] ? __dev_queue_xmit+0x7eb/0x43e0 [ 419.396405][ T31] ? netlink_deliver_tap+0xa87/0xd30 [ 419.401684][ T31] ? netlink_unicast+0x5df/0x7f0 [ 419.406624][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 419.411972][ T31] ? find_held_lock+0x2b/0x80 [ 419.416663][ T31] ? __pfx_rtnl_dellink+0x10/0x10 [ 419.421684][ T31] ? __pfx_rtnl_dellink+0x10/0x10 [ 419.426687][ T31] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 419.431837][ T31] ? __pfx_rtnl_dellink+0x10/0x10 [ 419.436839][ T31] rtnetlink_rcv_msg+0x95b/0xe90 [ 419.441778][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 419.447222][ T31] netlink_rcv_skb+0x16a/0x440 [ 419.452060][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 419.457527][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 419.462841][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 419.468126][ T31] netlink_unicast+0x53a/0x7f0 [ 419.472951][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 419.478240][ T31] netlink_sendmsg+0x8d1/0xdd0 [ 419.483020][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.488319][ T31] ____sys_sendmsg+0xa95/0xc70 [ 419.493107][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 419.498672][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 419.503968][ T31] ? find_held_lock+0x2b/0x80 [ 419.508648][ T31] ? do_pte_missing+0x87c/0x3fb0 [ 419.513583][ T31] ___sys_sendmsg+0x134/0x1d0 [ 419.518296][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 419.523489][ T31] __sys_sendmsg+0x16d/0x220 [ 419.528172][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 419.533260][ T31] ? find_held_lock+0x2b/0x80 [ 419.538005][ T31] ? do_user_addr_fault+0x843/0x1370 [ 419.543285][ T31] do_syscall_64+0xcd/0x260 [ 419.547802][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.553669][ T31] RIP: 0033:0x7f05b078e169 [ 419.558132][ T31] RSP: 002b:00007f05ae1f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 419.566535][ T31] RAX: ffffffffffffffda RBX: 00007f05b09b6240 RCX: 00007f05b078e169 [ 419.574580][ T31] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 419.582640][ T31] RBP: 00007f05b0810a68 R08: 0000000000000000 R09: 0000000000000000 [ 419.590633][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 419.598601][ T31] R13: 0000000000000001 R14: 00007f05b09b6240 R15: 00007ffeb27911b8 [ 419.606617][ T31] [ 419.609613][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 419.618656][ T31] [ 419.618656][ T31] Showing all locks held in the system: [ 419.626434][ T31] 3 locks held by kworker/1:0/24: [ 419.631452][ T31] #0: ffff888144aedd48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 419.642269][ T31] #1: ffffc900001e7d18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 419.653525][ T31] #2: ffff888145745198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 419.662392][ T31] 2 locks held by kdevtmpfs/26: [ 419.667326][ T31] #0: ffff88801c6d8950 (&type->i_mutex_dir_key/1){+.+.}-{4:4}, at: __kern_path_locked+0x132/0x2a0 [ 419.678138][ T31] #1: ffffffff8eef4368 (major_names_lock){+.+.}-{4:4}, at: blk_probe_dev+0x25/0x1a0 [ 419.687726][ T31] 1 lock held by khungtaskd/31: [ 419.692550][ T31] #0: ffffffff8e3bf5c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 419.702375][ T31] 4 locks held by kworker/u8:4/76: [ 419.707539][ T31] #0: ffff88801c2f3948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 419.717902][ T31] #1: ffffc900015a7d18 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 419.727811][ T31] #2: ffffffff90114fd0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xc9/0xb30 [ 419.737161][ T31] #3: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0x8b/0xaf0 [ 419.747198][ T31] 1 lock held by dhcpcd/5491: [ 419.752055][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x26d/0x1f50 [ 419.761246][ T31] 2 locks held by getty/5580: [ 419.765906][ T31] #0: ffff888035c520a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 419.775726][ T31] #1: ffffc900033462f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 419.785860][ T31] 3 locks held by kworker/0:6/5877: [ 419.791045][ T31] #0: ffff88801b479d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 419.802930][ T31] #1: ffffc900044e7d18 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 419.813366][ T31] #2: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x83/0x1170 [ 419.823087][ T31] 3 locks held by kworker/1:3/5878: [ 419.828283][ T31] #0: ffff88801b478d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 419.838826][ T31] #1: ffffc900044f7d18 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 419.849186][ T31] #2: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 419.859615][ T31] 2 locks held by kworker/1:6/5907: [ 419.864799][ T31] #0: ffff888144aee948 ((wq_completion)md_misc){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 419.875328][ T31] #1: ffffc90004977d18 ((work_completion)(&mddev->del_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 419.886966][ T31] 3 locks held by kworker/1:7/5921: [ 419.892174][ T31] #0: ffff888144aedd48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 419.903065][ T31] #1: ffffc900049e7d18 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 419.914327][ T31] #2: ffff888029595198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 419.923278][ T31] 2 locks held by syz-executor/9765: [ 419.928545][ T31] #0: ffffffff8f679140 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 419.938117][ T31] #1: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x600/0x2000 [ 419.947204][ T31] 2 locks held by syz-executor/9769: [ 419.952459][ T31] #0: ffffffff90881320 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 419.962023][ T31] #1: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x600/0x2000 [ 419.971114][ T31] 3 locks held by kworker/u8:14/9804: [ 419.976489][ T31] #0: ffff88801b481148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 419.987674][ T31] #1: ffffc90003d5fd18 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 419.998029][ T31] #2: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 420.007147][ T31] 3 locks held by kworker/u8:19/9810: [ 420.012503][ T31] #0: ffff888031754948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 420.023566][ T31] #1: ffffc90003b57d18 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 420.036691][ T31] #2: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x12/0x30 [ 420.046203][ T31] 1 lock held by syz.0.1105/9879: [ 420.051305][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: wext_handle_ioctl+0x20b/0x2a0 [ 420.060725][ T31] 1 lock held by syz.2.1107/9883: [ 420.065728][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x371/0xe90 [ 420.075168][ T31] 2 locks held by syz.3.1109/9888: [ 420.080250][ T31] #0: ffffffff8f4ec920 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 420.089907][ T31] #1: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x600/0x2000 [ 420.099040][ T31] 1 lock held by syz.3.1109/9889: [ 420.104067][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x371/0xe90 [ 420.113454][ T31] 1 lock held by syz.3.1109/9890: [ 420.118506][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x371/0xe90 [ 420.127902][ T31] 1 lock held by syz.3.1109/9891: [ 420.132895][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x277/0xa80 [ 420.141889][ T31] 1 lock held by syz-executor/9893: [ 420.147073][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 420.156546][ T31] 1 lock held by syz-executor/9897: [ 420.161733][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 420.171116][ T31] 1 lock held by syz-executor/9900: [ 420.176292][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 420.185821][ T31] 1 lock held by syz-executor/9904: [ 420.191027][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 420.200484][ T31] 1 lock held by syz-executor/9907: [ 420.205661][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 420.215070][ T31] 1 lock held by syz-executor/9911: [ 420.220258][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 420.229695][ T31] 1 lock held by syz-executor/9915: [ 420.234889][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 420.244342][ T31] 1 lock held by syz-executor/9918: [ 420.249524][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 420.258918][ T31] 1 lock held by syz-executor/9922: [ 420.264571][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 420.274122][ T31] 1 lock held by syz-executor/9925: [ 420.279313][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 420.288798][ T31] 1 lock held by syz-executor/9930: [ 420.294001][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 420.303435][ T31] 1 lock held by syz-executor/9934: [ 420.308668][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 420.318085][ T31] 1 lock held by syz-executor/9937: [ 420.323264][ T31] #0: ffffffff9012ae68 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 420.332721][ T31] [ 420.335050][ T31] ============================================= [ 420.335050][ T31] [ 420.343467][ T31] NMI backtrace for cpu 1 [ 420.343479][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) [ 420.343495][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 420.343503][ T31] Call Trace: [ 420.343508][ T31] [ 420.343513][ T31] dump_stack_lvl+0x116/0x1f0 [ 420.343536][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 420.343550][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 420.343565][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 420.343580][ T31] watchdog+0xf70/0x12c0 [ 420.343597][ T31] ? __pfx_watchdog+0x10/0x10 [ 420.343609][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 420.343627][ T31] ? __kthread_parkme+0x19e/0x250 [ 420.343647][ T31] ? __pfx_watchdog+0x10/0x10 [ 420.343660][ T31] kthread+0x3c2/0x780 [ 420.343673][ T31] ? __pfx_kthread+0x10/0x10 [ 420.343685][ T31] ? __pfx_kthread+0x10/0x10 [ 420.343696][ T31] ? __pfx_kthread+0x10/0x10 [ 420.343708][ T31] ? __pfx_kthread+0x10/0x10 [ 420.343720][ T31] ? rcu_is_watching+0x12/0xc0 [ 420.343736][ T31] ? __pfx_kthread+0x10/0x10 [ 420.343749][ T31] ret_from_fork+0x45/0x80 [ 420.343762][ T31] ? __pfx_kthread+0x10/0x10 [ 420.343775][ T31] ret_from_fork_asm+0x1a/0x30 [ 420.343803][ T31] [ 420.343809][ T31] Sending NMI from CPU 1 to CPUs 0: [ 420.474898][ C0] NMI backtrace for cpu 0 [ 420.474915][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) [ 420.474931][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 420.474938][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 420.474959][ C0] Code: 35 5d 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 4a 17 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 420.474971][ C0] RSP: 0018:ffffffff8e007e10 EFLAGS: 000002c6 [ 420.474981][ C0] RAX: 00000000009065bd RBX: 0000000000000000 RCX: ffffffff8b72a419 [ 420.474990][ C0] RDX: 0000000000000000 RSI: ffffffff8dbef846 RDI: ffffffff8bf46540 [ 420.474998][ C0] RBP: fffffbfff1c12ee8 R08: 0000000000000001 R09: ffffed10170865bd [ 420.475006][ C0] R10: ffff8880b8432deb R11: 0000000000000000 R12: 0000000000000000 [ 420.475013][ C0] R13: ffffffff8e097740 R14: ffffffff90864910 R15: 0000000000000000 [ 420.475021][ C0] FS: 0000000000000000(0000) GS:ffff8881249b2000(0000) knlGS:0000000000000000 [ 420.475033][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 420.475041][ C0] CR2: 00007ffe6c6dffb8 CR3: 000000000e180000 CR4: 00000000003526f0 [ 420.475050][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 420.475057][ C0] DR3: 3a810b1eb6134bdc DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 420.475065][ C0] Call Trace: [ 420.475069][ C0] [ 420.475074][ C0] default_idle+0x13/0x20 [ 420.475091][ C0] default_idle_call+0x6d/0xb0 [ 420.475108][ C0] do_idle+0x391/0x510 [ 420.475126][ C0] ? __pfx_do_idle+0x10/0x10 [ 420.475140][ C0] ? trace_sched_exit_tp+0x31/0x130 [ 420.475159][ C0] ? do_idle+0x13/0x510 [ 420.475175][ C0] cpu_startup_entry+0x4f/0x60 [ 420.475190][ C0] rest_init+0x16b/0x2b0 [ 420.475201][ C0] ? acpi_subsystem_init+0x133/0x180 [ 420.475216][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 420.475236][ C0] start_kernel+0x3e9/0x4d0 [ 420.475253][ C0] x86_64_start_reservations+0x18/0x30 [ 420.475270][ C0] x86_64_start_kernel+0xb0/0xc0 [ 420.475287][ C0] common_startup_64+0x13e/0x148 [ 420.475309][ C0] [ 420.475909][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 420.694347][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) [ 420.706131][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 420.716167][ T31] Call Trace: [ 420.719427][ T31] [ 420.722340][ T31] dump_stack_lvl+0x3d/0x1f0 [ 420.726920][ T31] panic+0x71c/0x800 [ 420.730797][ T31] ? __pfx_panic+0x10/0x10 [ 420.735194][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 420.740551][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 420.746527][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 420.751880][ T31] ? watchdog+0xdda/0x12c0 [ 420.756293][ T31] ? watchdog+0xdcd/0x12c0 [ 420.760692][ T31] watchdog+0xdeb/0x12c0 [ 420.764918][ T31] ? __pfx_watchdog+0x10/0x10 [ 420.769573][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 420.774757][ T31] ? __kthread_parkme+0x19e/0x250 [ 420.779769][ T31] ? __pfx_watchdog+0x10/0x10 [ 420.784424][ T31] kthread+0x3c2/0x780 [ 420.788475][ T31] ? __pfx_kthread+0x10/0x10 [ 420.793046][ T31] ? __pfx_kthread+0x10/0x10 [ 420.797627][ T31] ? __pfx_kthread+0x10/0x10 [ 420.802198][ T31] ? __pfx_kthread+0x10/0x10 [ 420.806766][ T31] ? rcu_is_watching+0x12/0xc0 [ 420.811516][ T31] ? __pfx_kthread+0x10/0x10 [ 420.816098][ T31] ret_from_fork+0x45/0x80 [ 420.820495][ T31] ? __pfx_kthread+0x10/0x10 [ 420.825064][ T31] ret_from_fork_asm+0x1a/0x30 [ 420.829827][ T31] [ 420.833017][ T31] Kernel Offset: disabled [ 420.837318][ T31] Rebooting in 86400 seconds..